last executing test programs: 9m13.490296175s ago: executing program 3 (id=1288): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$ndb(0x0, 0x0, 0x800) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$isdn(0x22, 0x3, 0x25) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="cf04000000000000000012ffffee08000300", @ANYRES32=r7, @ANYBLOB="0400130006001a01020000000600b500850100000a000600080211000001"], 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004) 9m12.371044803s ago: executing program 3 (id=1290): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000500)=""/205, 0xcd}], 0x1, 0x47, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000030000008000100ac1414"], 0x24}}, 0x0) 9m7.269392372s ago: executing program 3 (id=1300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$ndb(0x0, 0x0, 0x800) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$isdn(0x22, 0x3, 0x25) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="cf04000000000000000012ffffee08000300", @ANYRES32=r7, @ANYBLOB="0400130006001a01020000000600b500850100000a000600080211000001"], 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004) 9m6.204176665s ago: executing program 3 (id=1302): r0 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1a, 0x1, 0x1, "000000000039361e97000000001b0200", 0x43564548}) 9m6.102353823s ago: executing program 3 (id=1303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) 9m6.007509151s ago: executing program 3 (id=1305): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="0054b30000000000000000000000000c00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) getpid() munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000240)) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x4f27, 0x3, 0x10200, 0x8004, 0x2, 0xcc7, 0x8, 0x7, 0x4000000b, 0x6, 0xffffffff, 0x28c, 0x1, 0x7, 0x5, 0x102, 0x2, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e59, 0xb, 0xe69, 0x3c, 0x8, 0x2, 0x7, 0xfffffff8]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) 8m50.068646268s ago: executing program 32 (id=1305): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="0054b30000000000000000000000000c00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) getpid() munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000240)) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x4f27, 0x3, 0x10200, 0x8004, 0x2, 0xcc7, 0x8, 0x7, 0x4000000b, 0x6, 0xffffffff, 0x28c, 0x1, 0x7, 0x5, 0x102, 0x2, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e59, 0xb, 0xe69, 0x3c, 0x8, 0x2, 0x7, 0xfffffff8]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) 8m36.192236204s ago: executing program 4 (id=1341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$ndb(0x0, 0x0, 0x800) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$isdn(0x22, 0x3, 0x25) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="cf04000000000000000012ffffee08000300", @ANYRES32=r7, @ANYBLOB="0400130006001a01020000000600b500850100000a000600080211000001"], 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004) 8m35.08303388s ago: executing program 4 (id=1382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m33.291637651s ago: executing program 4 (id=1388): r0 = socket$alg(0x26, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_setup(0x8, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x8, r0, 0x0, 0x0, 0x1}]) 8m31.786355978s ago: executing program 4 (id=1395): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 8m16.581065888s ago: executing program 33 (id=1395): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 13.654306137s ago: executing program 5 (id=2251): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x3000001b}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x4}, 0x5}) r4 = socket(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xb, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r10, &(0x7f0000000180)={0x293, 0x7d, 0x1, {{0x500, 0x152, 0x0, 0x400, {0x0, 0x0, 0x4}, 0x10000, 0xfffffffd, 0x0, 0x0, 0x1f, '\x04nodev{cvfo|%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xe1\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18\x02\x00\x00\x00\x00\x00\x00\x00_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0xb6, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\xea_\xcb\xac\xb5\x15\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9b7\x00\xb0\xbd\xd2\xf3\xf1\x1d\x9b\x06?w\xfe\b\xc8/)\xacT\x9d\xfe\x18\x9d\xe1\xc5\xf2fh\xb7\x8e\xe0Ucb\x96!\xda\xff\xca\x00\xa4\xd8\xee\xb1\xa5\xd7\xfe:\v\n\xcb\xf5\x9cU\x84m\xc1B\xa3|WVj\xec\x92J\xf4\xaf\x9e7Y\xd7\xa6\x92?\x1a@\xbf|\xf2\xdf\x15|y/\x1f\x88\xfe\x0f\x19S\x1b '}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x293) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000004c0)="800000800000210ee7decd7a00ffffa888a8", 0x12, 0x40054, &(0x7f00000001c0)={0x11, 0x16, r11, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 12.408453894s ago: executing program 5 (id=2255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$ndb(0x0, 0x0, 0x800) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$isdn(0x22, 0x3, 0x25) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="cf0400000000000000", @ANYRES32=r7, @ANYBLOB="0400130006001a01020000000600b500850100000a000600080211000001"], 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004) 11.313052989s ago: executing program 5 (id=2257): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) symlink(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121202, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0xffffffff, 0x5, 0xd, 0x1, 0x7, 0x4, 0xd}, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f00000008c0)) 10.934321279s ago: executing program 0 (id=2259): openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0xc80, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x5e41, &(0x7f00000003c0)={0x0, 0x3e59, 0x800, 0x3, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) 8.442346173s ago: executing program 0 (id=2263): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001d80)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a971c3e26de72edc9ec3db403d8b2e970b9dcea448ddbb5a116ce6f67d99a77aa50bce7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0xfe, 0xc22, &(0x7f00000002c0)="$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") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0xa4, "287a6a9f248ea68e8087ce5cd9a39df793b3664dc70bc5761a3b979bff9bdcff9ba3306e91d351c7230be7ffc4fd5fb7fb5a89b7203f5b45d25f8fa33e7ab8fdffb3e54e9c61b5d36b0ee2f1b453f1974b545a252b7f2a6252131d3e6d8629845ce7ae7ccc391ddf480da92585dd384177a39c91e33f874d0f53fa099d970d0fdbebb058ae6890e3244e629d6e71282c191272d0a74bfaa94b8b16d969aa17af67e34a91"}, &(0x7f0000000080)=0xac) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x6}, 0x8) r2 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1b"]) pwrite64(r2, &(0x7f0000000f40)="3413c3ad95eddbad3d2f", 0xa, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) lseek(r2, 0x0, 0x4) sendfile(r2, r2, &(0x7f00000001c0)=0x9, 0x7fd) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 8.254181997s ago: executing program 1 (id=2264): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x70}}, 0x400c004) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x20002) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) 7.205368599s ago: executing program 1 (id=2266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 7.203735739s ago: executing program 2 (id=2267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201500000000010d90481a000000000000109022400010000000009040100010300000009210000000122080009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0xa, "18e4"}, @main=@item_4={0x3, 0x0, 0x8, "069011aa"}]}}, 0x0}, 0xfffffffffffffffc) symlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x1, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x404c041) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x80000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 6.16234771s ago: executing program 1 (id=2268): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000009410b80000001b009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804011, 0x0, 0x1, 0x0, &(0x7f0000000d40)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x200000089}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa18088, &(0x7f0000000140)=ANY=[], 0x21, 0x1517, &(0x7f00000019c0)="$eJzs3AuYTlX7MPD7XmttxjTxNMlhWGvdmycNlkOSHJLkkCTJK0lOCaFJkoTEOEsakiTHSXIYQnKYxqRxPh9yTpKkSZKQkLC+S3993rf30Pf+/32f63vn/l3Xvqz72c+99r2fez/2s/dzPfNdj1F1mtWt2YSI4H8E/+ufZACIAYBhAJAPAAIAqBhfMf7y+jwSk/9nG2F/rofTrnUF7Fri/uds3P+cjfufs3H/czbuf87G/c/ZuP85G/efsZxs2+zCN/CScxe+/5+T8fn/P0h2mUlfbShzU89/I4X7n7Nx/3M27n/Oxv3P2bj/ORv3P2fj/uds3H/GcrL//r1j/u7gP2G51scfY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLGc4Zy/SgHAb+NrXRdjjDHGGGOMMcb+PD73ta6AMcYYY4wxxhhj//chCJCACJALckMM5IFYuA7i4HrIC/kgAjdAPNwI+eEmKAAFoRAUhgQoAkVBgwELBCEUg+IQhZuhBNwCiVASSkFpcFAGykI5KA+3QgW4DSrC7VAJ7oDKUAWqQjW4E6rDXVAD7oaacA/UgtpQB+rCvVAP7oP6cD80gAegITwIjeAhaAx/gSbwMDSFR6AZPArN4TFoAS2hFbSGNv+t/BehD7wEfaEfJEN/GAADYRAMhiEwFIbByzAcXoER8CqkwEgYBa/BaHgdxsAbMBbehHHwFoyHCTARJsFkmAKp8DZMhXdgGrwL02EGzIRZkAazYQ68B3NhHsyH92EBfAALYREshiWQDh9CBiyFTPgIlsHHkAXLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBp/AdtgBO2EX7IY9sBc+hX3wGeyHz+EAfPFv5p/9XX5PBAQUKFChwlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBQNGiQkVFeOpBJYAhMxEUthKXTosCyWxfJ4K1bAClgRK2IlrISVsQpWwWpYDatjdayBNbAm1sRaWAvrYB28F+/F+7A+1scG2AAbYkNshI2wMTbGJtgEm2JTbIbNsDk2xxbYAlthK2yDbbAttsV22A47YAfsiB2xM3bGJEzCLtgFu2JX7IbdsDt2xx7YA3tiL+yFL+KL+BK+hP2wluiPA3AADsJBOASH4lB8GYfjK/gKvoopOBJH4Wv4Gr6OY/AMjsU3cRyOw+piAk7ESUhiCqZiKk7FqTgNp+F0nIEzcBam4Wycg3NwLs7Defg+LsAP8ANchItwCaZjOmbgUszETFyGZzELl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBU/wU9wB+7AXbgL91x+rfFT/Aw/wxQ8gAfwIB7EQ3gID+NhzMZsPIJH8CgexWN4DI/jcTyBJ/EUnsTTeBrP4Fk8h+fwPJ7HC/h8wjdN95RcnwLiMiWUyCVyiRgRI2JFrIgTcSKvyCsiIiLiRbzIL/KLAqKAKCQKiQSRIIqKosIII0iEopgoJqIiKkqIEiJRJIpSopRwwomyoqwoL8qLCqKCqChuF5XEHaKyqCLau2qimqguOrga4m5RU9QUtURtUUfUFXVFPVFP1Bf1RQPRQDQUDUUj8ZBoLPrjEHxYXO5MMzESm4tR2EK0FK1Ea/E6Pi7aijHYTrQXHcST4k0ci51FW5cknhZdxETsKp4Vk/A50V1MwR7iBdFT9BK9xYuij2jn+op+Yjr2FwPELBwkBoshYqiYi7XF5Y7VEa+KFDFSjBKviSX4uvjtGB8n3hLjxQQxUUwSk8UUkSreFlPFO2KaeFdMFzPETDFLpInZYo54T8wV88R88b5YID4QC8UisVgsEeniQ5EhlopM8ZFYJj4WWWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im3iE7Fd7BA7xS6xW+wRe8WnYp/4TOwXn4sD4gtxUHwpDomvxGHxtcgW34gj4ltxVHwnjonvxXHxgzghTopT4kdxWvwkzoiz4pz4WZwXv4gL4qK4JLwAiVJIKZUMZC6ZW8bIPDJWXifj5PUyr8wnI/IGGS9vlPnlTbKALCgLycIyQRaRRaWWRlpJMpTFZHEZlTfLEvIWmShLylKytHSyjCwry8ny8lZZQd4mK8rbZSV5h6wsq8iqspq8U1aXd8ka8m5ZU94ja8naso6sK++V9eR9sr68XzaQD8iG8kHZSD4kG8u/yCbyYdlUPiKbyUdlc/mYbCFbylaytWwjH5dt5ROynWwvO8gnZUfZSXaWT8kk+bTsIp+RXeWzspt8TnaXz8se8gXZU/aSveVFeUl62Vf2k8myvxwgB8pBcrAcIofKYfJlOVy+IkfIV2VKDADI1+Ro+bocI9+QY+Wbcpx8S46XE+REOUlOllNkqnxbTpXvyGnyXTldzpAz5SyZJmfLIVdmmv9/kP/OP8gfIVPkSLlVbpOfyO1yh9wpd8ndco/cK/fKfXKf3C/3ywPygDwoD8pD8pA8LA/LbJktj8gj8qg8Ko/JY/K4PC5PyJPyZ/mjPC1/kmfkWXlW/izPy/PywpXXABQqoaRSKlC5VG4Vo/KoWHWdilPXq7wqn4qoG1S8ulHlVzepAqqgKqQKqwRVRBVVWhllFalQFVPFVVTdjFfeIqqUKq2cKqPKqnL/Tr4qoW5Riark3+T/UX1tVBvVVrVV7VQ71UF1UB1VR9VZdVZJKkl1UV1UV9VVdVPdVHfVXfVQPVRP1VP1Vr1VH9VH9VV9VbJKVgPUQDVIDVZD1FA1rD+o4Wq4GqFGqBSVokapUWq0Gq3GqDFqrBqrxqlxarwaryaqiWqymqxSVaqaqqaqaWqamq6mq5lqpkpTaWqOmqPmqrlqvpqvFqgFaqFaqBarxSpdpasMlaEyVaZappapLLVcLVcr1Uq1Wq1Wa9VatV6tVxvVRrVZbVZZapvaprar7Wqn2ql2q91qr9qr9ql9ar/arw6oA+qgOqgOqUPqsDqsslW2OqKOqKPqqDqmjqnj6rg6oU6oU+qUOq1OqzPqjDqnzqnz6ry6oC6oS+qSggACEYhABSrIFeQKYoKYIDaIDeKCuCBvkDeIBJEgPogP8gc3BQWCgkGhoHCQEBQJigY6MIENKAiDYkHxIBrcHJQIbgkSg5JBqaB04IIyQdmgXFA+uDWoENwWVAxuDyoFdwSVgypB1aBacGdQPbgrqBHcHdQM7glqBbWDOkHd4N6gXnBfUD+4P2gQPBA0DB4MGgUPBY2DvwRNgoeDpsEjQbPg0aB58FjQImgZtApaB23+rPkVBE0D788UfML11f10su6vB+iBepAerIfooXqYflkP16/oEfpVnaJH6lH6NT1av67H6Df0WP2mHqff0uP1BD1RT9KT9RSdqt/WU/U7epp+V0/XM/RMPUun6dl6jn5Pz9Xz9Hz9vl6gP9AL9SK9WC/R6fpDnaGX6kz9kV6mP9ZZerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbfoTvV3v0Dv1Lr1b79F79ad6n/5M79ef6wP6C31Qf6kP6a/0Yf21ztbf6CP6W31Uf6eP6e/1cf2DPqFP6lP6R31a/6TP6LP6nP5Zn9e/6Av6or6k/eUP95dP70YZZXKZXCbGxJhYE2viTJzJa/KaiImYeBNv8pv8poApYAqZQibBJJiipqi5jAyZYqaYiZqoKWFKmESTaEqZUsYZZ8qasqa8KW8qmAqmoqloKplKprKpbKqaquZOc6e5y9xl7jZ3m3vMPaa2qW3qmrqmnqln6pv6poFpYBqahqaRaWQam8amiWlimpqmpplpZpqb5qaFaWFamVamjWlj2pq2pp1pZzqYDqaj6Wg6m84mySSZLqaL6Wq6mm6mm+luupsepofpaXqa3qa36WP6mL6mr0k2yWaAGWAGmUFmiBlihplhZrgZbkaYESbFpJhRZpQZbUabMWaMGWveNOPMW2a8mWAmmklmspliUk2qmWqmmmlmmpluppuZZqZJM2lmjplj5pq5Zr6ZbxaYBWahWWgWm8Um3aSbDJNhMk2mWWaWmSyTZVaYFWaVWWXWmDVmnVlnNpgNZpPZZLaYLWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W8OmAPmoDnoEcAcNodNtsk2R8wRc9QcNcfMMXPcHDcnzAlzypwyp81pc8acMefMOXPe/GIumIvmkvEmxuaxsfY6G2evt3ltPvv7uJAtbBNsEVvUalvAFvyb2FhrE21JW+q3S0xbziZePpfa0tbZMrasLWcr2yq2qq1m77TV7V22xu/jfGDvs/Xt/baBfcDWtffaen8VN7QP2kb2UdvYPmab2Ja2qW1tm9lHbXP7mG1hW9pWtrXtaDvZzvYpm2Sftl3sM38XZ9ildp1dbzfYjXaf/cyesz/bo/Y7e97+YvvafnaYfdkOt6/YEfZVm2JH/l08zr5lx9sJdqKdZCfbKX8Xz7SzbJqdbefY9+xcO+/v4nT7oV1gM+1Cu8gutkt+jS/XlGk/ssvsxzbLLrcr7Eq7yq62a+za/13rSrvZbrFb7V77qd1ud9iddpfdbff8Gl/ej/32c3vAfmGP2G/tIfuVPWyP2Wz7za/x5f07Zr+3x+0P9oQ9aU/ZH+1p+5M9Y89e3n9/ed9/tBftJestEJIgSYoCykW5KYbyUCxdR3F0PeWlfBShGyiebqT8dBMVoIJUiApTAhWhoqTJkCWikIpRcYrSzVSCbqFEKkmlqDQ5KkNlqRyVp1upAt1GFel2qkR3UGWqQlWpGt1J1ekuqkF3U026h2pRbapDdeleqkf3UX26nxrQA9SQHqRG9BA1pr9QE3qYmtIj1Iwepeb0GLWgltSKWlMbepza0hPUjtpTB3qSOlIn6kxPURI9TV3oGepKz1I3eo660/PUg16gntSLetOL1Ideor7Uj5KpPw2ggTSIBtMQGkrD6GUaTq/QCHqVUmgkjaLXaDS9TmPoDRpLb9I4eovG0wSaSJNoMk2hVHqbptI7NI3epek0g2bSLEqj2TSH3qO5NI/m0/u0gD6ghbSIFtMSSqcPKYOWUiZ9RMvoY8qi5bSCVtIqWk1raC2to/W0gTbSJtpMW2grbaNPaDvtoJ20i3bTHtpLn9I+ynPlDfcFHaQv6RB9RYfpa8qmb+gIfUtH6Ts6Rt/TcfqBTtBJOkU/0mn6ic7QWTpHP9N5+oUu0EW6RJ4gxFCEMlRhEOYKc4cxYZ4wNrwujAuvD/OG+cJIeEMYH94Y5g9vCguEBcNCYeEwISwSFg11aEIbUhiGxcLiYTS8OSwR3hImhiXDUmHp0IVlwrJhubB8eGtYIbwtrBjeHlYK7wgrh1XCRx+oFt4ZVg/vCmuEd4c1w3vCWmHtsE5YN7w3rBfeF9YP7w8bhA+EFcIHw0bhQyFc+b1K0/CRsFn4aNg8fCxsEbYMW4Wtwzbh42Hb8ImwXdg+7BA+GXYMO4Wdw6fCpPDpsEv4zB+uTw77hwPCgeHA0Pv75eLokmh69MNoRnRpNDP6UXRZ9ONoVnR5dEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a9T7urnBoRNOOuUCl8vldjEuj4t117k4d73L6/K5iLvBxbsbXX53kyvgCrpCrrBLcEVcUaedcdaRC10xV9xF3c2uhLvFJbqSrpQr7Zwr48q61q6Na+PauidcO9fedXBPuiddJ9fJPeWeck+7Lu4Z19U967q551x397x73r3gerperrd70fVxL7m+rp9LdslugBvgBrlBbogb4oa5YW64G+5GuBEuxaW4UW6UG+1GuzFujBvrxrpxbpwb78a7iW6im+wmu1SX6qa6qW6am+YCAJjpZro0l+bmuDlurpvr5rv5bkHiArfQLXSL3WKX7tJdhstwmS7TLXPLXJbLcivcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXPb3Xa30+10u91ut9ftdfvcPrff7XcH3AF30B10h9whd9h97bLdN+6I+9Yddd+5Y+57d9z94E64k+6U+9Gddj+5M+6sO+d+dufdL+6Cu+guOe9SI29HpkbeiUyLvBuZHpkRmRmZFUmLzI7MibwXmRuZF5kfeT+yIPJBZGFkUWRxZEkkPfJhJCOyNJIZ+SiyLPJxJCuyPLIisjKyKrJagS+yPfTFfHEf9Tf7Ev4Wn+hL+lK+tHe+jM/ty/ny/lZfwd/mK/rbfSV/h6/sq/iq/jHfwrf0rXxr38Y/7tv6J3w739538E/6jr6T7+yf8kn+ad/FP+O7+md9N/+c7+6f9z38C76n7+V7+xd9H/+S7+v7+WTf3w/wA/0gP9gP8UP9MP+yH+5f8SP8qz7Fj/Sj/Gt+tH/dj/Fv+LH+TT/Ov+XH+wl+op/kJ/spPtW/7af6d/w0/66f7mf4mX6WT/Oz/Rz/np/r5/n5/n2/wH/gF/pFfrFf4tP9hz7DL/WZ/iO/zH/ss/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8J3673+F3+l1+t9/j9/pP/T7/md/vP/cH/Bf+oP/SH/Jf+cP+a5/tv/FHsr71R/13/pj/3h/3P/gT/qQ/5X/0p/1P/ow/68/5n/15/4u/4C/6S//mb9Zq/xm3zhljjDHG/j808A/W9/8HjykAEFfGv3jvr99ROPuv10sA2FTgv8aDRULHCAA83a/Hw78ttWolJydfeW6WhKD4IgCI/G4DV+Ll0AE6QRK0h/L/sL7Botd5+hfzZ4yhydHbAWL/KicGrsZX5//yn8z/+JPjMiqF5+L/ef3RRQCJxa/mXL4K/y1eDh1+/eqwPVT4J/MXbPuv6s+SkOerVIB2f5UTBwDt8vy+/rLwBDwDSX/zzAb/cJuMMcYYY4wxxnKewaJqtz+4/vz1+jxBXc3JDVfjP7o+Z4wxxhhjjDHG2LX3XK/eTz2elNS+Gw94wIMcNuj0L55zrf9nYowxxhhjjP3Zrn7ov/pYnmtZEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9v/hLY9d6HxljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLFr7X8FAAD//8HaM+M=") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./bus\x00', 0x200800, &(0x7f0000000000)={[], [{@flag='lazytime'}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [], 0x80, "7464fbe08eb369"}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000e5ff00f2170e65e3f50327e422000000000000000200800000001100", 0x39}, 0x60) close(0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 5.062073916s ago: executing program 0 (id=2269): r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_io_uring_setup(0xbd8, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@delalloc}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffc}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x30000009, 0xa5f, 0x8}, @private=0xa010100, @loopback, 0xff000000, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) 3.865455069s ago: executing program 0 (id=2270): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) (fail_nth: 4) 3.33690235s ago: executing program 0 (id=2271): r0 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") (async) truncate(&(0x7f0000000200)='./file2\x00', 0x63fc) (async) socket$kcm(0x10, 0x3, 0x10) ioperm(0x1, 0x3, 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) (async) mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) write$dsp(r2, &(0x7f0000000040)="81c0a4f7b10cc28993", 0x9) (async) truncate(&(0x7f0000000140)='./file2\x00', 0x6400) 3.195715671s ago: executing program 1 (id=2272): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_delroute={0x70, 0x19, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x80, 0x0, 0xf, 0xfd, 0x1, 0x1a7, 0x9, 0x1200}, [@RTA_EXPIRES={0x8, 0x17, 0x2}, @RTA_EXPIRES={0x8, 0x17, 0x100}, @RTA_IIF={0x8}, @RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @RTA_PRIORITY={0x8, 0x6, 0x80000000}, @RTA_PREF={0x5, 0x14, 0x5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_MARK={0x8, 0x10, 0xfffffffe}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x80) mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000080)=0x46, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x4f4, 0x19, 0x1, 0x0, 0x0, {0x1b, 0xd601, 0x9}, [@nested={0x50, 0x11, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed3103bc77d35b296674f1fe35663c0d236fd88d7ba"}]}, @nested={0x490, 0x6, 0x0, 0x1, [@nested={0x48c, 0x75, 0x0, 0x1, [@nested={0x488, 0x105, 0x0, 0x1, [@nested={0x481, 0xce, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r3}, @generic="9db6859cccae2434ff2e8f93db2df78257b0170f04b50b3be1e4c913ca056fe917b18f5222ac3d3541f98865f03144d0b08bebc32edca5884fdd79091323071734155332e8388f50ece0c5f03a29b281c639e10effac78129089df5ef6cfc31b315f5d873171723ff22203aab3e5053649597853a74ba2af1ee6beec35caed1a3ac803501167580d1c3d3c71cbe7b7d46bf41688a56358a6e631a860ce019d10f0b3d70c28acb57ccb7b8f82b6", @nested={0x4, 0x28}, @nested={0x3c2, 0x34, 0x0, 0x1, [@generic="875a535a602a0708e468e0bbb6eb6f35b70f485e7e5349b53cf76e2916ad96524d2ad25564f3f93735a43cfd7152c3c93d3d04b509d10b0e7ecdb22f1462c24cdfb7c2e0b76eab54e610e907d770396f44a58dd8e0d3276727a5a5583caa42bdba0bb19ea709440e1e45a04cb8bb3dcc34714471a8591b6c4a04b62bd3897a43fd8fd3f0997415f83f14074524a22cae4d1d5f3c7652f7a89d9cdace9e0c0399a890e680235ba88918f1fa931d256555206062fcb9d39a4ad7aa6eef0b", @generic="7a431e14b1f1a68e36dc03a34062e7d7769c15282b2256f7d8eedf6b6ad2c5e36130414d2dbd0d2f23b2bbe5f302f91393e8acdd6c271ed82350db17bc5949e057", @nested={0x1d2, 0x12, 0x0, 0x1, [@generic="26fbb57e3f5fb84630e1c49543ef1fbe86333dcdfb762fe24265c35df5ce569c797696b0ce54a8391e066774a88cf586caecbdafe658f8ea8e3b773df9ab2ccc273d7a27ce51b01966e208c4ba5eb04bb1ceb901d1b29c19f92e7c0d13eee520ecf75f62db3456ebe9d65f0a4bf416fc84a87f8d8630497f4577b0220f92a41197111225b0e85693d024bcd10c04db8bab5d", @nested={0xc7, 0x13f, 0x0, 0x1, [@generic="68e7f93fc6de107acc5ac8ee03e0846c62fb433254d8f028ea077bdf8fe318a33f2f2c0a80275944970398675a08f47e9cab992351bab1159e507e3196dc82df688095591a515cb3fd6ced8debb74bf8f4ac00050c55c2941c5da505c18e6dc5dc2045677a02e909d14de7d1cfa4db43f977e74eba94d8769d692d8f0359f94ffe56cb2e830eeac5c862f11f14f325a7b188366363eed9ce58c4e31dc5159b0c39953c", @typed={0x13, 0x121, 0x0, 0x0, @str='/dev/cpu/#/msr\x00'}, @nested={0x4, 0x10}, @typed={0x6, 0xd7, 0x0, 0x0, @str='@\x00'}]}, @nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, @nested={0x61, 0x23, 0x0, 0x1, [@generic="a3101ac241d2f9d4744e824bf2ad421d0a91fdda9d8b353d3730d3440997cda30db28f7ae1c9f561693bb375c9be3d", @typed={0x8, 0x115, 0x0, 0x0, @fd=r3}, @generic="3f3bdb1be6c3503e7c8e65f3d3595c30d03de5c7ee87c535a5d30d997f31dd32fe931067643f"]}]}, @generic="78f55b0282bd1c354cad9fa516b81f6b460e45f6d3eb9613c21d58a0db0f45f9131027b5a1d81747c5c1a0334f1ae8c2531bcdc6c0f28833a4526eecb59b728c81860a356ddcdb7b01301f3bb6f9ee4b0e747322bbdfe034f0b97cbce1902c10a00dff7f5dfa2b3af2db509e163a25bc16d7c2d7978b51b54d7d5ab04bddb92ea59b0a50debc376f2240c41778bf2d45df4aded28657e49e4a6b7a954f46ff0548e4f35d6ecb0ef2a0b2d545001f64ebdbbf2a1e7fe2fa8a83959f1264292ff36e2dad58a6a577667175efef6bfcf40f36eee256e46808bd502837087fe948accee31148e0f6716faee06887"]}]}]}]}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x104, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x25200}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6f2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x4810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 3.187370282s ago: executing program 2 (id=2273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) ioctl$TUNSETOWNER(r0, 0x894c, r2) 3.158368564s ago: executing program 0 (id=2274): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) 2.820014881s ago: executing program 2 (id=2275): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$ndb(0x0, 0x0, 0x800) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$isdn(0x22, 0x3, 0x25) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="cf0400000000000000", @ANYRES32=r7, @ANYBLOB="0400130006001a01020000000600b500850100000a000600080211000001"], 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004) 2.206244108s ago: executing program 5 (id=2276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 1.758735033s ago: executing program 1 (id=2277): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x15, 0x5, 0x1, 0x9, 0x8, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xcf53, 0x304b, 0x7fffffff, 0x748, r2, 0x7, '\x00', r4, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0xb}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r7 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4864}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) prlimit64(0x0, 0x2, 0x0, 0x0) 1.521269892s ago: executing program 2 (id=2278): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (fail_nth: 4) 775.47736ms ago: executing program 5 (id=2279): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x31) (fail_nth: 4) 238.080652ms ago: executing program 2 (id=2280): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x1, 0x8, 0x4, 0x4}, 0x20) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, &(0x7f0000000080)={0x0, 0xfff, 0x9}) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x44040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x3, 0x3, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}], 0x0, 0x400, 0x0, 0x0, 0x0, 0x6, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='f2fs_truncate_data_blocks_range\x00', 0xffffffffffffffff, 0x0, 0xa}, 0x18) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x4, 0x10, 0x7ffc0002}]}) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) connect(0xffffffffffffffff, &(0x7f0000000280)=@hci={0x1f, 0x1}, 0x80) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x37}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40880) 237.257152ms ago: executing program 5 (id=2281): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000340)='./file3\x00', 0x2004002, &(0x7f00000000c0)={[{@type={'type', 0x3d, "74b0750f"}}, {@creator={'creator', 0x3d, "a66d5992"}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}]}, 0x4, 0x33e, &(0x7f0000001f80)="$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") stat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000002000)=ANY=[@ANYBLOB='dmask=00000000000000000001672,umask=00000000010000000000004,namecase=1,namecase=1,fmask=00000000000000000000010,discard,keep_last_dots,iocharset=cp857,utf8,sys_tz\x00'], 0x1, 0x1528, &(0x7f00000037c0)="$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") llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000100)={0x9, 0xc18f, 0x8, 0x6, 0x15, "04c8a8e3e39151f5"}) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000140)=0x10) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendto$inet(r3, &(0x7f0000000200)="2055710f", 0x4, 0xb, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) getsockname$packet(r5, 0x0, &(0x7f0000000200)) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x31) r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0x0, 0x30) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x109142, 0x84) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000000c0)={{r6}, 0x8}) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000240)={0x749, 0x9}) 24.661368ms ago: executing program 1 (id=2282): getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) syz_mount_image$fuse(&(0x7f0000000540), &(0x7f0000000000)='./bus\x00', 0x322020, &(0x7f0000000580)=ANY=[], 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x6a5, 0x81) fcntl$setstatus(r5, 0x4, 0x2000) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r3, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) 0s ago: executing program 2 (id=2283): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000300)="dc", 0x1) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x6, 0xe, 0x0, 0x33}, @mpls={[], @llc={@llc={0x80, 0x42, 'M'}}}}, 0x11) kernel console output (not intermixed with test programs): ] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1023.727793][T13495] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.1915: Directory hole found for htree leaf block 0 [ 1023.744427][ T8880] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1023.986059][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.064051][ T8880] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1024.072505][ T8880] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1024.133906][ T8880] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.209043][ T8880] usb 6-1: config 220 has no interface number 2 [ 1024.262567][ T8880] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1024.330837][ T8880] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1024.524076][ T8880] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1024.531273][ T8880] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1024.661605][ T8880] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1024.693362][ T8880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.705106][ T8880] usb 6-1: Product: syz [ 1024.709448][ T8880] usb 6-1: Manufacturer: syz [ 1024.736081][ T8880] usb 6-1: SerialNumber: syz [ 1025.512655][ T8880] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1025.545322][ T8880] usb 6-1: No valid video chain found. [ 1025.584218][ T8880] usb 6-1: selecting invalid altsetting 0 [ 1025.811701][ T8880] usb 6-1: selecting invalid altsetting 0 [ 1025.826844][ T8880] usbtest: probe of 6-1:220.1 failed with error -22 [ 1025.854521][ T8880] usb 6-1: USB disconnect, device number 26 [ 1025.971857][T13516] loop1: detected capacity change from 0 to 128 [ 1026.703470][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.914519][T13522] 9pnet_fd: Insufficient options for proto=fd [ 1027.358258][T13527] loop2: detected capacity change from 0 to 128 [ 1028.055524][ T8880] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1028.344276][ T8880] usb 6-1: Using ep0 maxpacket: 8 [ 1028.351040][ T8880] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1028.362623][ T8880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1028.372843][ T8880] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1028.382759][ T8880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1028.392707][ T8880] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.406456][ T8880] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1028.415626][ T8880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.436781][ T8880] usbtmc: probe of 6-1:16.0 failed with error -22 [ 1029.641685][T13547] FAULT_INJECTION: forcing a failure. [ 1029.641685][T13547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1029.655717][T13547] CPU: 0 PID: 13547 Comm: syz.0.1928 Not tainted syzkaller #0 [ 1029.663199][T13547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1029.673259][T13547] Call Trace: [ 1029.676549][T13547] [ 1029.679487][T13547] dump_stack_lvl+0x16c/0x230 [ 1029.684193][T13547] ? show_regs_print_info+0x20/0x20 [ 1029.689418][T13547] ? load_image+0x3b0/0x3b0 [ 1029.693933][T13547] ? __lock_acquire+0x7c80/0x7c80 [ 1029.698987][T13547] ? mark_lock+0x94/0x320 [ 1029.703346][T13547] should_fail_ex+0x39d/0x4d0 [ 1029.708039][T13547] prepare_alloc_pages+0x1e2/0x5f0 [ 1029.713174][T13547] __alloc_pages+0x127/0x460 [ 1029.717779][T13547] ? zone_statistics+0x170/0x170 [ 1029.722735][T13547] ? do_wp_page+0x826/0x3630 [ 1029.727338][T13547] ? do_wp_page+0x1024/0x3630 [ 1029.732030][T13547] __folio_alloc+0x10/0x20 [ 1029.736470][T13547] vma_alloc_folio+0x47a/0x8f0 [ 1029.741261][T13547] do_wp_page+0x128e/0x3630 [ 1029.745792][T13547] ? folio_put+0xd0/0xd0 [ 1029.750048][T13547] ? do_raw_spin_lock+0x121/0x2c0 [ 1029.755108][T13547] ? __rwlock_init+0x150/0x150 [ 1029.759895][T13547] ? handle_mm_fault+0xd1/0x4920 [ 1029.764845][T13547] handle_mm_fault+0x12d4/0x4920 [ 1029.769799][T13547] ? handle_mm_fault+0xd1/0x4920 [ 1029.774755][T13547] ? numa_migrate_prep+0x350/0x350 [ 1029.779884][T13547] ? lock_mm_and_find_vma+0x9c/0x300 [ 1029.785194][T13547] do_user_addr_fault+0x738/0x12e0 [ 1029.790354][T13547] exc_page_fault+0x67/0x110 [ 1029.794970][T13547] asm_exc_page_fault+0x26/0x30 [ 1029.799822][T13547] RIP: 0010:__put_user_nocheck_4+0x7/0x10 [ 1029.805545][T13547] Code: 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 [ 1029.825154][T13547] RSP: 0018:ffffc900042178d8 EFLAGS: 00050202 [ 1029.831227][T13547] RAX: 0000000040000000 RBX: 0000000040000000 RCX: 00002000000088b0 [ 1029.839204][T13547] RDX: ffff88802a075a00 RSI: 0000000044000102 RDI: 00000000ffffffff [ 1029.847181][T13547] RBP: ffffc90004217a70 R08: ffffffff8e4a212f R09: 1ffffffff1c94425 [ 1029.855161][T13547] R10: dffffc0000000000 R11: fffffbfff1c94426 R12: 0000000000000000 [ 1029.863135][T13547] R13: 0000000000000000 R14: 0000000044000102 R15: 0000200000008880 [ 1029.871124][T13547] ____sys_recvmsg+0x388/0x5b0 [ 1029.875921][T13547] ? __sys_recvmsg_sock+0x50/0x50 [ 1029.880962][T13547] ? import_iovec+0x73/0xa0 [ 1029.885477][T13547] ___sys_recvmsg+0x1b6/0x510 [ 1029.890165][T13547] ? __sys_recvmsg+0x270/0x270 [ 1029.894947][T13547] ? __fget_files+0x44a/0x4d0 [ 1029.899637][T13547] ? __fdget+0x180/0x210 [ 1029.903884][T13547] ? do_recvmmsg+0x17a/0x7d0 [ 1029.908480][T13547] do_recvmmsg+0x360/0x7d0 [ 1029.912901][T13547] ? file_end_write+0x159/0x250 [ 1029.917754][T13547] ? __sys_recvmmsg+0x280/0x280 [ 1029.922618][T13547] ? vfs_write+0x586/0x940 [ 1029.927073][T13547] ? mutex_unlock+0x10/0x10 [ 1029.931582][T13547] ? __fget_files+0x44a/0x4d0 [ 1029.936276][T13547] __x64_sys_recvmmsg+0x191/0x240 [ 1029.941311][T13547] ? do_recvmmsg+0x7d0/0x7d0 [ 1029.945917][T13547] ? lockdep_hardirqs_on+0x98/0x150 [ 1029.951143][T13547] do_syscall_64+0x55/0xb0 [ 1029.955560][T13547] ? clear_bhb_loop+0x40/0x90 [ 1029.960244][T13547] ? clear_bhb_loop+0x40/0x90 [ 1029.964932][T13547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.970833][T13547] RIP: 0033:0x7f0ebb58f749 [ 1029.975249][T13547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.994868][T13547] RSP: 002b:00007f0ebc3b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1030.003308][T13547] RAX: ffffffffffffffda RBX: 00007f0ebb7e5fa0 RCX: 00007f0ebb58f749 [ 1030.011284][T13547] RDX: 000000000000045b RSI: 0000200000008880 RDI: 0000000000000003 [ 1030.019256][T13547] RBP: 00007f0ebc3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.027232][T13547] R10: 0000000044000102 R11: 0000000000000246 R12: 0000000000000001 [ 1030.035207][T13547] R13: 00007f0ebb7e6038 R14: 00007f0ebb7e5fa0 R15: 00007ffd06b27ad8 [ 1030.043197][T13547] [ 1030.057511][T13546] loop2: detected capacity change from 0 to 128 [ 1030.341224][T13546] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 1031.203845][ T5854] usb 6-1: USB disconnect, device number 27 [ 1031.999902][ T5776] sysv_free_block: trying to free block not in datazone [ 1033.796300][ T5776] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1033.940693][T13572] FAULT_INJECTION: forcing a failure. [ 1033.940693][T13572] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.963711][T13572] CPU: 0 PID: 13572 Comm: syz.1.1937 Not tainted syzkaller #0 [ 1033.971228][T13572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1033.981312][T13572] Call Trace: [ 1033.984877][T13572] [ 1033.987833][T13572] dump_stack_lvl+0x16c/0x230 [ 1033.992556][T13572] ? show_regs_print_info+0x20/0x20 [ 1033.997795][T13572] ? load_image+0x3b0/0x3b0 [ 1034.002339][T13572] ? __might_sleep+0xe0/0xe0 [ 1034.006965][T13572] ? __lock_acquire+0x7c80/0x7c80 [ 1034.012032][T13572] ? prepend_path+0x4b/0x960 [ 1034.016650][T13572] should_fail_ex+0x39d/0x4d0 [ 1034.021365][T13572] should_failslab+0x9/0x20 [ 1034.025909][T13572] slab_pre_alloc_hook+0x59/0x310 [ 1034.030990][T13572] ? __asan_memcpy+0x40/0x70 [ 1034.035613][T13572] ? tomoyo_encode+0x28b/0x540 [ 1034.040417][T13572] ? tomoyo_encode+0x28b/0x540 [ 1034.045231][T13572] __kmem_cache_alloc_node+0x53/0x260 [ 1034.050654][T13572] ? prepend_path+0x4b/0x960 [ 1034.055270][T13572] ? tomoyo_encode+0x28b/0x540 [ 1034.060056][T13572] __kmalloc+0xa4/0x240 [ 1034.064232][T13572] tomoyo_encode+0x28b/0x540 [ 1034.068840][T13572] tomoyo_realpath_from_path+0x592/0x5d0 [ 1034.074496][T13572] tomoyo_path_number_perm+0x1ea/0x590 [ 1034.079971][T13572] ? tomoyo_path_number_perm+0x1ba/0x590 [ 1034.085616][T13572] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1034.091095][T13572] ? ksys_write+0x1c1/0x250 [ 1034.095640][T13572] ? __fget_files+0x28/0x4d0 [ 1034.100263][T13572] security_file_ioctl+0x70/0xa0 [ 1034.105223][T13572] __se_sys_ioctl+0x48/0x170 [ 1034.109830][T13572] do_syscall_64+0x55/0xb0 [ 1034.114254][T13572] ? clear_bhb_loop+0x40/0x90 [ 1034.118935][T13572] ? clear_bhb_loop+0x40/0x90 [ 1034.123624][T13572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1034.129528][T13572] RIP: 0033:0x7f592418f749 [ 1034.133952][T13572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.153577][T13572] RSP: 002b:00007f5925114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1034.162004][T13572] RAX: ffffffffffffffda RBX: 00007f59243e5fa0 RCX: 00007f592418f749 [ 1034.169985][T13572] RDX: 00000000ffffffff RSI: 00000000400454cc RDI: 0000000000000003 [ 1034.177966][T13572] RBP: 00007f5925114090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.185943][T13572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.193922][T13572] R13: 00007f59243e6038 R14: 00007f59243e5fa0 R15: 00007ffcecf11588 [ 1034.201923][T13572] [ 1034.211546][T13572] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1034.252500][T13574] netlink: 'syz.2.1935': attribute type 7 has an invalid length. [ 1034.260718][T13574] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1935'. [ 1035.186839][T13587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1939'. [ 1036.452947][T13596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1943'. [ 1036.514086][T13596] FAULT_INJECTION: forcing a failure. [ 1036.514086][T13596] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.567762][T13596] CPU: 0 PID: 13596 Comm: syz.0.1943 Not tainted syzkaller #0 [ 1036.575285][T13596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1036.585379][T13596] Call Trace: [ 1036.588697][T13596] [ 1036.591657][T13596] dump_stack_lvl+0x16c/0x230 [ 1036.596388][T13596] ? show_regs_print_info+0x20/0x20 [ 1036.601629][T13596] ? load_image+0x3b0/0x3b0 [ 1036.606170][T13596] ? __might_sleep+0xe0/0xe0 [ 1036.610791][T13596] ? __lock_acquire+0x7c80/0x7c80 [ 1036.615868][T13596] should_fail_ex+0x39d/0x4d0 [ 1036.620592][T13596] should_failslab+0x9/0x20 [ 1036.625128][T13596] slab_pre_alloc_hook+0x59/0x310 [ 1036.630189][T13596] kmem_cache_alloc_node+0x60/0x330 [ 1036.635422][T13596] ? __alloc_skb+0x108/0x2c0 [ 1036.640043][T13596] __alloc_skb+0x108/0x2c0 [ 1036.644502][T13596] netlink_sendmsg+0x65b/0xbe0 [ 1036.649320][T13596] ? netlink_getsockopt+0x580/0x580 [ 1036.654556][T13596] ? aa_sock_msg_perm+0x94/0x150 [ 1036.659561][T13596] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1036.664891][T13596] ? security_socket_sendmsg+0x80/0xa0 [ 1036.670395][T13596] __sys_sendto+0x46a/0x620 [ 1036.674934][T13596] ? file_end_write+0x159/0x250 [ 1036.679821][T13596] ? __ia32_sys_getpeername+0x90/0x90 [ 1036.685226][T13596] ? __fget_files+0x44a/0x4d0 [ 1036.689940][T13596] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1036.695950][T13596] ? lock_chain_count+0x20/0x20 [ 1036.700847][T13596] __x64_sys_sendto+0xde/0xf0 [ 1036.705567][T13596] do_syscall_64+0x55/0xb0 [ 1036.710040][T13596] ? clear_bhb_loop+0x40/0x90 [ 1036.715029][T13596] ? clear_bhb_loop+0x40/0x90 [ 1036.719747][T13596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1036.725675][T13596] RIP: 0033:0x7f0ebb5915dc [ 1036.730132][T13596] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1036.749771][T13596] RSP: 002b:00007f0ebc3b5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1036.758215][T13596] RAX: ffffffffffffffda RBX: 00007f0ebc3b5fc0 RCX: 00007f0ebb5915dc [ 1036.766213][T13596] RDX: 0000000000000028 RSI: 00007f0ebc3b6010 RDI: 0000000000000004 [ 1036.774208][T13596] RBP: 0000000000000000 R08: 00007f0ebc3b5f14 R09: 000000000000000c [ 1036.782203][T13596] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1036.790197][T13596] R13: 00007f0ebc3b5f68 R14: 00007f0ebc3b6010 R15: 0000000000000000 [ 1036.798207][T13596] [ 1036.830095][T13598] FAULT_INJECTION: forcing a failure. [ 1036.830095][T13598] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.848775][T13598] CPU: 0 PID: 13598 Comm: syz.2.1944 Not tainted syzkaller #0 [ 1036.856365][T13598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1036.866448][T13598] Call Trace: [ 1036.869753][T13598] [ 1036.872709][T13598] dump_stack_lvl+0x16c/0x230 [ 1036.877430][T13598] ? show_regs_print_info+0x20/0x20 [ 1036.882669][T13598] ? load_image+0x3b0/0x3b0 [ 1036.887222][T13598] ? __might_sleep+0xe0/0xe0 [ 1036.891846][T13598] ? __lock_acquire+0x7c80/0x7c80 [ 1036.896902][T13598] ? prepend_path+0x4b/0x960 [ 1036.901524][T13598] should_fail_ex+0x39d/0x4d0 [ 1036.906259][T13598] should_failslab+0x9/0x20 [ 1036.910798][T13598] slab_pre_alloc_hook+0x59/0x310 [ 1036.915857][T13598] ? __asan_memcpy+0x40/0x70 [ 1036.920478][T13598] ? tomoyo_encode+0x28b/0x540 [ 1036.925277][T13598] ? tomoyo_encode+0x28b/0x540 [ 1036.930092][T13598] __kmem_cache_alloc_node+0x53/0x260 [ 1036.935510][T13598] ? prepend_path+0x4b/0x960 [ 1036.940129][T13598] ? tomoyo_encode+0x28b/0x540 [ 1036.944930][T13598] __kmalloc+0xa4/0x240 [ 1036.949126][T13598] tomoyo_encode+0x28b/0x540 [ 1036.953762][T13598] tomoyo_realpath_from_path+0x592/0x5d0 [ 1036.959441][T13598] tomoyo_path_number_perm+0x1ea/0x590 [ 1036.964942][T13598] ? tomoyo_path_number_perm+0x1ba/0x590 [ 1036.970611][T13598] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1036.976108][T13598] ? ksys_write+0x1c1/0x250 [ 1036.980685][T13598] ? __fget_files+0x28/0x4d0 [ 1036.985323][T13598] security_file_ioctl+0x70/0xa0 [ 1036.990301][T13598] __se_sys_ioctl+0x48/0x170 [ 1036.994926][T13598] do_syscall_64+0x55/0xb0 [ 1036.999371][T13598] ? clear_bhb_loop+0x40/0x90 [ 1037.004074][T13598] ? clear_bhb_loop+0x40/0x90 [ 1037.008785][T13598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1037.014712][T13598] RIP: 0033:0x7fcf5738f749 [ 1037.019154][T13598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.038790][T13598] RSP: 002b:00007fcf58241038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1037.047240][T13598] RAX: ffffffffffffffda RBX: 00007fcf575e5fa0 RCX: 00007fcf5738f749 [ 1037.055242][T13598] RDX: 0000200000000000 RSI: 0000000040046109 RDI: 0000000000000003 [ 1037.063243][T13598] RBP: 00007fcf58241090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.071241][T13598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.079327][T13598] R13: 00007fcf575e6038 R14: 00007fcf575e5fa0 R15: 00007ffd4bcbf7f8 [ 1037.087349][T13598] [ 1037.094418][ T5854] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1037.390738][T13598] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1037.414729][ T5854] usb 2-1: Using ep0 maxpacket: 8 [ 1037.423193][ T5854] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1037.434907][ T5854] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1038.643376][ T5854] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1038.698734][ T5854] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1038.734057][ T5854] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1038.777117][ T5854] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1038.824341][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.901682][ T5854] usbtmc: probe of 2-1:16.0 failed with error -22 [ 1039.034365][T10104] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1040.067757][T10104] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1040.076145][T10104] usb 3-1: config 0 has no interface number 0 [ 1040.082956][T10104] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1040.093195][T10104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.104019][T10104] usb 3-1: config 0 descriptor?? [ 1040.124294][T10104] usb 3-1: selecting invalid altsetting 1 [ 1040.130230][T10104] dvb_ttusb_budget: ttusb_init_controller: error [ 1040.167103][T10104] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1040.421951][T13606] loop2: detected capacity change from 0 to 128 [ 1040.467752][T10104] DVB: Unable to find symbol cx22700_attach() [ 1041.295487][T10104] DVB: Unable to find symbol tda10046_attach() [ 1041.343536][T10104] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1041.399385][T10104] usb 3-1: USB disconnect, device number 39 [ 1041.528996][T10069] usb 2-1: USB disconnect, device number 34 [ 1042.528715][T13637] netlink: 'syz.5.1954': attribute type 1 has an invalid length. [ 1042.715018][T13637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1043.141515][T13639] veth3: entered promiscuous mode [ 1044.683167][T13643] loop2: detected capacity change from 0 to 32768 [ 1044.798840][T13643] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1046.080198][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1960'. [ 1046.105952][T13643] XFS (loop2): Ending clean mount [ 1046.144159][T13643] XFS (loop2): Quotacheck needed: Please wait. [ 1046.301313][T13643] XFS (loop2): Quotacheck: Done. [ 1046.309909][T13675] FAULT_INJECTION: forcing a failure. [ 1046.309909][T13675] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.323333][T13675] CPU: 0 PID: 13675 Comm: syz.5.1961 Not tainted syzkaller #0 [ 1046.330852][T13675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1046.340952][T13675] Call Trace: [ 1046.344273][T13675] [ 1046.347227][T13675] dump_stack_lvl+0x16c/0x230 [ 1046.351928][T13675] ? show_regs_print_info+0x20/0x20 [ 1046.357146][T13675] ? load_image+0x3b0/0x3b0 [ 1046.361663][T13675] ? __might_sleep+0xe0/0xe0 [ 1046.366276][T13675] ? __lock_acquire+0x7c80/0x7c80 [ 1046.371314][T13675] ? prepend_path+0x4b/0x960 [ 1046.375927][T13675] should_fail_ex+0x39d/0x4d0 [ 1046.380656][T13675] should_failslab+0x9/0x20 [ 1046.385190][T13675] slab_pre_alloc_hook+0x59/0x310 [ 1046.390235][T13675] ? __asan_memcpy+0x40/0x70 [ 1046.394838][T13675] ? tomoyo_encode+0x28b/0x540 [ 1046.399632][T13675] ? tomoyo_encode+0x28b/0x540 [ 1046.404410][T13675] __kmem_cache_alloc_node+0x53/0x260 [ 1046.409796][T13675] ? prepend_path+0x4b/0x960 [ 1046.414394][T13675] ? tomoyo_encode+0x28b/0x540 [ 1046.419173][T13675] __kmalloc+0xa4/0x240 [ 1046.423348][T13675] tomoyo_encode+0x28b/0x540 [ 1046.427983][T13675] tomoyo_realpath_from_path+0x592/0x5d0 [ 1046.433666][T13675] tomoyo_path_number_perm+0x1ea/0x590 [ 1046.439139][T13675] ? tomoyo_path_number_perm+0x1ba/0x590 [ 1046.444836][T13675] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1046.450319][T13675] ? ksys_write+0x1c1/0x250 [ 1046.454859][T13675] ? __fget_files+0x28/0x4d0 [ 1046.459496][T13675] security_file_ioctl+0x70/0xa0 [ 1046.464451][T13675] __se_sys_ioctl+0x48/0x170 [ 1046.469055][T13675] do_syscall_64+0x55/0xb0 [ 1046.473473][T13675] ? clear_bhb_loop+0x40/0x90 [ 1046.478259][T13675] ? clear_bhb_loop+0x40/0x90 [ 1046.482966][T13675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1046.488898][T13675] RIP: 0033:0x7f2cdbb8f749 [ 1046.493339][T13675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.513043][T13675] RSP: 002b:00007f2cdcac3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1046.521464][T13675] RAX: ffffffffffffffda RBX: 00007f2cdbde6090 RCX: 00007f2cdbb8f749 [ 1046.529461][T13675] RDX: 0000200000000140 RSI: 00000000c08c5336 RDI: 0000000000000004 [ 1046.537463][T13675] RBP: 00007f2cdcac3090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.545442][T13675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.553425][T13675] R13: 00007f2cdbde6128 R14: 00007f2cdbde6090 R15: 00007ffe86874048 [ 1046.561451][T13675] [ 1046.580827][ T5776] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1046.615297][T13675] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1048.120392][T13685] FAULT_INJECTION: forcing a failure. [ 1048.120392][T13685] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.133454][T10069] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1048.154550][T13685] CPU: 0 PID: 13685 Comm: syz.2.1962 Not tainted syzkaller #0 [ 1048.162086][T13685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1048.172148][T13685] Call Trace: [ 1048.175430][T13685] [ 1048.178361][T13685] dump_stack_lvl+0x16c/0x230 [ 1048.183048][T13685] ? show_regs_print_info+0x20/0x20 [ 1048.188251][T13685] ? load_image+0x3b0/0x3b0 [ 1048.192759][T13685] ? __might_sleep+0xe0/0xe0 [ 1048.197701][T13685] ? __lock_acquire+0x7c80/0x7c80 [ 1048.202727][T13685] ? prepend_path+0x4b/0x960 [ 1048.207336][T13685] should_fail_ex+0x39d/0x4d0 [ 1048.212039][T13685] should_failslab+0x9/0x20 [ 1048.216563][T13685] slab_pre_alloc_hook+0x59/0x310 [ 1048.221651][T13685] ? __asan_memcpy+0x40/0x70 [ 1048.226287][T13685] ? tomoyo_encode+0x28b/0x540 [ 1048.231082][T13685] ? tomoyo_encode+0x28b/0x540 [ 1048.235856][T13685] __kmem_cache_alloc_node+0x53/0x260 [ 1048.241233][T13685] ? prepend_path+0x4b/0x960 [ 1048.245824][T13685] ? tomoyo_encode+0x28b/0x540 [ 1048.250592][T13685] __kmalloc+0xa4/0x240 [ 1048.254776][T13685] tomoyo_encode+0x28b/0x540 [ 1048.259397][T13685] tomoyo_realpath_from_path+0x592/0x5d0 [ 1048.265068][T13685] tomoyo_path_number_perm+0x1ea/0x590 [ 1048.270540][T13685] ? tomoyo_path_number_perm+0x1ba/0x590 [ 1048.276209][T13685] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1048.281672][T13685] ? ksys_write+0x1c1/0x250 [ 1048.286195][T13685] ? __fget_files+0x28/0x4d0 [ 1048.290791][T13685] security_file_ioctl+0x70/0xa0 [ 1048.295738][T13685] __se_sys_ioctl+0x48/0x170 [ 1048.300329][T13685] do_syscall_64+0x55/0xb0 [ 1048.304738][T13685] ? clear_bhb_loop+0x40/0x90 [ 1048.309412][T13685] ? clear_bhb_loop+0x40/0x90 [ 1048.314096][T13685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1048.320007][T13685] RIP: 0033:0x7fcf5738f749 [ 1048.324422][T13685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.344048][T13685] RSP: 002b:00007fcf58241038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1048.352462][T13685] RAX: ffffffffffffffda RBX: 00007fcf575e5fa0 RCX: 00007fcf5738f749 [ 1048.360522][T13685] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 1048.368499][T13685] RBP: 00007fcf58241090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.376485][T13685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.384459][T13685] R13: 00007fcf575e6038 R14: 00007fcf575e5fa0 R15: 00007ffd4bcbf7f8 [ 1048.392447][T13685] [ 1048.411458][T13685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1048.594391][T10069] usb 2-1: Using ep0 maxpacket: 8 [ 1048.604158][T10069] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1048.621978][T10069] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1048.640160][T10069] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1048.650375][T10069] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1048.664228][T10069] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1048.682598][T10069] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1048.691889][T10069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.712441][T10069] usbtmc: probe of 2-1:16.0 failed with error -22 [ 1051.174797][T10104] usb 2-1: USB disconnect, device number 35 [ 1052.395035][T13713] FAULT_INJECTION: forcing a failure. [ 1052.395035][T13713] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.407929][T13713] CPU: 0 PID: 13713 Comm: syz.1.1973 Not tainted syzkaller #0 [ 1052.415415][T13713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1052.425580][T13713] Call Trace: [ 1052.428897][T13713] [ 1052.431845][T13713] dump_stack_lvl+0x16c/0x230 [ 1052.436556][T13713] ? show_regs_print_info+0x20/0x20 [ 1052.441788][T13713] ? load_image+0x3b0/0x3b0 [ 1052.446330][T13713] ? __might_sleep+0xe0/0xe0 [ 1052.451027][T13713] ? __lock_acquire+0x7c80/0x7c80 [ 1052.456086][T13713] ? prepend_path+0x4b/0x960 [ 1052.460709][T13713] should_fail_ex+0x39d/0x4d0 [ 1052.465418][T13713] should_failslab+0x9/0x20 [ 1052.469952][T13713] slab_pre_alloc_hook+0x59/0x310 [ 1052.475009][T13713] ? __asan_memcpy+0x40/0x70 [ 1052.479633][T13713] ? tomoyo_encode+0x28b/0x540 [ 1052.484452][T13713] ? tomoyo_encode+0x28b/0x540 [ 1052.489249][T13713] __kmem_cache_alloc_node+0x53/0x260 [ 1052.494648][T13713] ? prepend_path+0x4b/0x960 [ 1052.499272][T13713] ? tomoyo_encode+0x28b/0x540 [ 1052.504088][T13713] __kmalloc+0xa4/0x240 [ 1052.508278][T13713] tomoyo_encode+0x28b/0x540 [ 1052.512999][T13713] tomoyo_realpath_from_path+0x592/0x5d0 [ 1052.518693][T13713] tomoyo_path_number_perm+0x1ea/0x590 [ 1052.524205][T13713] ? tomoyo_path_number_perm+0x1ba/0x590 [ 1052.529869][T13713] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1052.535361][T13713] ? ksys_write+0x1c1/0x250 [ 1052.539929][T13713] ? __fget_files+0x28/0x4d0 [ 1052.544559][T13713] security_file_ioctl+0x70/0xa0 [ 1052.549536][T13713] __se_sys_ioctl+0x48/0x170 [ 1052.554174][T13713] do_syscall_64+0x55/0xb0 [ 1052.558619][T13713] ? clear_bhb_loop+0x40/0x90 [ 1052.563326][T13713] ? clear_bhb_loop+0x40/0x90 [ 1052.568020][T13713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1052.573920][T13713] RIP: 0033:0x7f592418f749 [ 1052.578347][T13713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.597970][T13713] RSP: 002b:00007f5925114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1052.606397][T13713] RAX: ffffffffffffffda RBX: 00007f59243e5fa0 RCX: 00007f592418f749 [ 1052.614469][T13713] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 1052.622456][T13713] RBP: 00007f5925114090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.630445][T13713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.638417][T13713] R13: 00007f59243e6038 R14: 00007f59243e5fa0 R15: 00007ffcecf11588 [ 1052.646408][T13713] [ 1053.208138][T13713] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1053.521705][T13721] FAULT_INJECTION: forcing a failure. [ 1053.521705][T13721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.567352][T13721] CPU: 0 PID: 13721 Comm: syz.2.1978 Not tainted syzkaller #0 [ 1053.574877][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1053.584967][T13721] Call Trace: [ 1053.588273][T13721] [ 1053.591228][T13721] dump_stack_lvl+0x16c/0x230 [ 1053.595955][T13721] ? show_regs_print_info+0x20/0x20 [ 1053.601208][T13721] ? load_image+0x3b0/0x3b0 [ 1053.605758][T13721] ? __lock_acquire+0x7c80/0x7c80 [ 1053.609590][T13723] loop1: detected capacity change from 0 to 512 [ 1053.610797][T13721] ? __kasan_slab_alloc+0x6c/0x80 [ 1053.618500][T13723] EXT4-fs: Ignoring removed nobh option [ 1053.622045][T13721] should_fail_ex+0x39d/0x4d0 [ 1053.632297][T13721] strncpy_from_user+0x36/0x2e0 [ 1053.637166][T13721] getname_flags+0xf6/0x500 [ 1053.641703][T13721] __x64_sys_renameat2+0xb0/0xe0 [ 1053.646697][T13721] do_syscall_64+0x55/0xb0 [ 1053.651124][T13721] ? clear_bhb_loop+0x40/0x90 [ 1053.655818][T13721] ? clear_bhb_loop+0x40/0x90 [ 1053.660513][T13721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.666439][T13721] RIP: 0033:0x7fcf5738f749 [ 1053.670871][T13721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1053.690487][T13721] RSP: 002b:00007fcf58241038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1053.698909][T13721] RAX: ffffffffffffffda RBX: 00007fcf575e5fa0 RCX: 00007fcf5738f749 [ 1053.706906][T13721] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 1053.714884][T13721] RBP: 00007fcf58241090 R08: 0000000000000002 R09: 0000000000000000 [ 1053.722862][T13721] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1053.730833][T13721] R13: 00007fcf575e6038 R14: 00007fcf575e5fa0 R15: 00007ffd4bcbf7f8 [ 1053.738831][T13721] [ 1053.867014][T13723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1053.879502][T13723] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1053.934253][T13723] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1054.596531][T13735] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1980'. [ 1054.606857][T10067] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1054.623601][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.631681][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.826419][T10067] usb 6-1: Using ep0 maxpacket: 8 [ 1056.071650][ T5854] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1056.284178][ T5854] usb 1-1: Using ep0 maxpacket: 16 [ 1056.291368][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.323007][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.339262][T10067] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1056.362849][T10067] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1056.372963][T10067] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1056.375608][ T5854] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1056.383560][T10067] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.414380][T10067] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1056.423552][T10067] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.444014][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.469045][ T5854] usb 1-1: config 0 descriptor?? [ 1056.653457][T13742] loop2: detected capacity change from 0 to 32768 [ 1056.661518][T13742] (syz.2.1983,13742,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "00000000000000000003" or missing value [ 1056.709892][T10067] usb 6-1: usb_control_msg returned -32 [ 1056.726288][T13742] (syz.2.1983,13742,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1056.744631][T10067] usbtmc 6-1:16.0: can't read capabilities [ 1056.828149][T13744] loop1: detected capacity change from 0 to 40427 [ 1056.843199][T13744] F2FS-fs (loop1): invalid crc value [ 1056.847550][T13742] xt_hashlimit: max too large, truncated to 1048576 [ 1056.869973][T13744] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1056.928071][T13744] F2FS-fs (loop1): Start checkpoint disabled! [ 1056.940400][T13744] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1057.365959][T10069] usb 6-1: USB disconnect, device number 28 [ 1057.522204][ T48] kworker/u4:3: attempt to access beyond end of device [ 1057.522204][ T48] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1057.536898][ T48] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1057.543907][ T48] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1058.829080][T13762] loop5: detected capacity change from 0 to 256 [ 1058.888774][T13762] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x111e4bd0) [ 1058.924028][T13762] exFAT-fs (loop5): invalid boot region [ 1058.929961][T13762] exFAT-fs (loop5): failed to recognize exfat type [ 1058.937595][T13765] loop1: detected capacity change from 0 to 16 [ 1058.945220][T13765] erofs: Unknown parameter '' [ 1059.342455][ T5854] usbhid 1-1:0.0: can't add hid device: -71 [ 1059.371132][ T5854] usbhid: probe of 1-1:0.0 failed with error -71 [ 1059.402403][ T5854] usb 1-1: USB disconnect, device number 39 [ 1059.992890][T13777] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1991'. [ 1062.625274][T13787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'. [ 1063.808665][T10067] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1063.908852][T13797] loop1: detected capacity change from 0 to 128 [ 1063.911956][T13800] loop0: detected capacity change from 0 to 8 [ 1063.945063][T13800] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1063.950221][T11885] udevd[11885]: incorrect cramfs checksum on /dev/loop0 [ 1063.992659][T11885] udevd[11885]: incorrect cramfs checksum on /dev/loop0 [ 1064.035152][T10067] usb 3-1: Using ep0 maxpacket: 8 [ 1064.046093][T10067] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1064.067781][T10067] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1064.101761][T10067] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1064.166430][T10067] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1064.232892][T10067] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1064.284071][T13806] loop0: detected capacity change from 0 to 256 [ 1064.291157][T10067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.335658][T13802] loop5: detected capacity change from 0 to 40427 [ 1064.347240][T13806] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 1064.360483][T13802] F2FS-fs (loop5): invalid crc value [ 1064.431458][T13802] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1064.494054][T13802] F2FS-fs (loop5): Start checkpoint disabled! [ 1064.512703][T13802] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1064.529466][T11885] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1064.645599][T13812] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2001'. [ 1066.782294][T10067] usb 3-1: usb_control_msg returned -32 [ 1066.897801][T10067] usbtmc 3-1:16.0: can't read capabilities [ 1067.954510][ T8880] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1068.106007][T10069] usb 3-1: USB disconnect, device number 40 [ 1070.472574][T10899] kworker/u4:16: attempt to access beyond end of device [ 1070.472574][T10899] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1070.486803][T10899] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1070.494670][T10899] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1072.701398][T13843] FAULT_INJECTION: forcing a failure. [ 1072.701398][T13843] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.715653][T13843] CPU: 1 PID: 13843 Comm: syz.5.2005 Not tainted syzkaller #0 [ 1072.723149][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1072.733233][T13843] Call Trace: [ 1072.736542][T13843] [ 1072.739503][T13843] dump_stack_lvl+0x16c/0x230 [ 1072.744304][T13843] ? show_regs_print_info+0x20/0x20 [ 1072.749564][T13843] ? load_image+0x3b0/0x3b0 [ 1072.754112][T13843] ? __might_sleep+0xe0/0xe0 [ 1072.758744][T13843] ? __lock_acquire+0x7c80/0x7c80 [ 1072.763809][T13843] ? prepend_path+0x4b/0x960 [ 1072.768438][T13843] should_fail_ex+0x39d/0x4d0 [ 1072.773163][T13843] should_failslab+0x9/0x20 [ 1072.777710][T13843] slab_pre_alloc_hook+0x59/0x310 [ 1072.782777][T13843] ? __asan_memcpy+0x40/0x70 [ 1072.787403][T13843] ? tomoyo_encode+0x28b/0x540 [ 1072.792210][T13843] ? tomoyo_encode+0x28b/0x540 [ 1072.797014][T13843] __kmem_cache_alloc_node+0x53/0x260 [ 1072.802426][T13843] ? prepend_path+0x4b/0x960 [ 1072.807045][T13843] ? tomoyo_encode+0x28b/0x540 [ 1072.811847][T13843] __kmalloc+0xa4/0x240 [ 1072.816045][T13843] tomoyo_encode+0x28b/0x540 [ 1072.820685][T13843] tomoyo_realpath_from_path+0x592/0x5d0 [ 1072.826372][T13843] tomoyo_path_number_perm+0x1ea/0x590 [ 1072.831872][T13843] ? tomoyo_path_number_perm+0x1ba/0x590 [ 1072.837546][T13843] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1072.843046][T13843] ? ksys_write+0x1c1/0x250 [ 1072.847637][T13843] ? __fget_files+0x28/0x4d0 [ 1072.852278][T13843] security_file_ioctl+0x70/0xa0 [ 1072.857289][T13843] __se_sys_ioctl+0x48/0x170 [ 1072.861925][T13843] do_syscall_64+0x55/0xb0 [ 1072.866390][T13843] ? clear_bhb_loop+0x40/0x90 [ 1072.871100][T13843] ? clear_bhb_loop+0x40/0x90 [ 1072.875819][T13843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1072.881748][T13843] RIP: 0033:0x7f2cdbb8f749 [ 1072.886196][T13843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.905916][T13843] RSP: 002b:00007f2cdcaa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1072.914362][T13843] RAX: ffffffffffffffda RBX: 00007f2cdbde6180 RCX: 00007f2cdbb8f749 [ 1072.922362][T13843] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000007 [ 1072.930359][T13843] RBP: 00007f2cdcaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.938356][T13843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.946542][T13843] R13: 00007f2cdbde6218 R14: 00007f2cdbde6180 R15: 00007ffe86874048 [ 1072.954564][T13843] [ 1072.958868][T13843] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1075.064493][T13853] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2011'. [ 1075.351309][T13861] netlink: 'syz.0.2013': attribute type 4 has an invalid length. [ 1075.535989][T10069] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1075.734791][T10069] usb 6-1: Using ep0 maxpacket: 8 [ 1075.750428][T10069] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1075.778365][T10069] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1075.812080][T10069] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1075.843282][T10069] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1075.870221][T10069] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1075.921595][T10069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.627420][T10069] usb 6-1: usb_control_msg returned -32 [ 1076.639802][T10069] usbtmc 6-1:16.0: can't read capabilities [ 1077.020433][T10104] usb 6-1: USB disconnect, device number 30 [ 1077.051329][T13882] loop2: detected capacity change from 0 to 128 [ 1077.585763][T13882] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1077.615941][T13882] ext4 filesystem being mounted at /512/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.681310][T13882] syz.2.2020 (pid 13882) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1078.657385][T13897] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2022'. [ 1079.726550][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1079.816023][T13901] loop5: detected capacity change from 0 to 32768 [ 1079.835213][T13901] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2023 (13901) [ 1079.896475][T13901] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1079.916184][T13901] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1079.995233][T13904] loop1: detected capacity change from 0 to 4096 [ 1080.009284][T13904] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1080.037061][T13901] BTRFS info (device loop5): turning on sync discard [ 1080.043787][T13901] BTRFS info (device loop5): disabling free space tree [ 1080.053554][T13901] BTRFS info (device loop5): setting nodatasum [ 1080.062834][T13904] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1080.078171][T13901] BTRFS info (device loop5): turning on async discard [ 1080.087483][T13904] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1080.100563][T13901] BTRFS info (device loop5): turning off barriers [ 1080.110607][T13901] BTRFS info (device loop5): disabling tree log [ 1080.118413][T13904] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1080.132174][T13901] BTRFS info (device loop5): enabling ssd optimizations [ 1080.139966][T13901] BTRFS info (device loop5): force clearing of disk cache [ 1080.155155][T13904] ntfs: volume version 3.1. [ 1080.163222][T13901] BTRFS info (device loop5): enabling auto defrag [ 1080.194143][T13901] BTRFS info (device loop5): force zlib compression, level 3 [ 1080.221628][T13901] BTRFS info (device loop5): max_inline at 4096 [ 1080.471070][T13907] loop2: detected capacity change from 0 to 512 [ 1080.525010][T13907] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1080.538987][T13907] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1080.548104][T13907] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1080.566300][T13907] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1080.574420][T13907] System zones: 0-2, 18-18, 34-35 [ 1080.581110][T13907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1080.601575][T13907] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1080.612351][T13907] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1080.625099][T13907] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1080.652855][T13907] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2025: bg 0: block 353: padding at end of block bitmap is not set [ 1080.672368][ T27] audit: type=1800 audit(2000000621.990:30): pid=13907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2025" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1081.289479][T10896] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1081.394892][ T5772] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1081.430949][T13901] BTRFS info (device loop5): rebuilding free space tree [ 1081.445651][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.547085][T13901] BTRFS info (device loop5): disabling free space tree [ 1081.560160][T13901] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1081.580698][T13901] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1081.854612][T10105] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1082.054564][T10105] usb 1-1: Using ep0 maxpacket: 8 [ 1082.075215][T10105] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1082.091257][T10105] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1082.484430][T10105] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1082.494934][T10105] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1082.523903][T10105] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1082.549237][T10105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.815322][T10105] usb 1-1: usb_control_msg returned -32 [ 1082.820965][T10105] usbtmc 1-1:16.0: can't read capabilities [ 1083.111675][T10105] usb 1-1: USB disconnect, device number 40 [ 1083.432895][T10857] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1084.524531][T13954] loop1: detected capacity change from 0 to 32768 [ 1084.627800][T13954] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1084.941421][T13954] XFS (loop1): Starting recovery (logdev: internal) [ 1085.024223][T13954] XFS (loop1): Ending recovery (logdev: internal) [ 1085.155312][T13973] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2032'. [ 1085.744766][ T8592] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1085.755319][ T8592] Bluetooth: hci5: Injecting HCI hardware error event [ 1085.763367][ T8592] Bluetooth: hci5: hardware error 0x00 [ 1085.780770][ T5772] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1087.471714][T13997] loop2: detected capacity change from 0 to 32768 [ 1087.764711][T13997] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1087.774994][T13997] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1087.784372][T13997] BTRFS info (device loop2): force zlib compression, level 3 [ 1087.791789][T13997] BTRFS info (device loop2): force clearing of disk cache [ 1087.799829][T13997] BTRFS info (device loop2): setting nodatasum [ 1087.806218][T13997] BTRFS info (device loop2): use zlib compression, level 3 [ 1087.813458][T13997] BTRFS info (device loop2): enabling disk space caching [ 1087.820783][T13997] BTRFS info (device loop2): disk space caching is enabled [ 1087.934975][ T8592] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1088.034488][T13997] BTRFS info (device loop2): enabling ssd optimizations [ 1088.041532][T13997] BTRFS info (device loop2): auto enabling async discard [ 1088.051590][T13997] BTRFS info (device loop2): rebuilding free space tree [ 1088.078028][T13997] BTRFS info (device loop2): disabling free space tree [ 1088.085041][T13997] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1088.094798][T13997] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1088.504649][T14023] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2041'. [ 1088.740267][T14020] loop5: detected capacity change from 0 to 512 [ 1088.828222][T10067] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1088.889634][T14020] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2044: inode has both inline data and extents flags [ 1088.970491][T14020] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2044: couldn't read orphan inode 15 (err -117) [ 1088.988901][ T5776] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1089.017089][T14020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.066842][T10067] usb 2-1: Using ep0 maxpacket: 8 [ 1089.090925][T10067] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1089.163331][T10067] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1089.204561][T10067] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1089.242365][T10067] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1089.273278][T10067] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1089.287420][T10067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.457547][T10857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.593049][T10067] usb 2-1: usb_control_msg returned -32 [ 1089.609237][T10067] usbtmc 2-1:16.0: can't read capabilities [ 1090.005543][T10105] usb 2-1: USB disconnect, device number 36 [ 1091.204007][T14044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2049'. [ 1095.162845][T14056] loop2: detected capacity change from 0 to 32768 [ 1095.852646][T14056] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1095.966832][T14056] XFS (loop2): Ending clean mount [ 1095.990900][T14056] XFS (loop2): Quotacheck needed: Please wait. [ 1096.379735][T14056] XFS (loop2): Quotacheck: Done. [ 1096.614740][T10105] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1096.759685][ T5776] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1096.815195][T10105] usb 1-1: Using ep0 maxpacket: 8 [ 1096.843710][T10105] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1096.856215][T10105] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1096.866602][T10105] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1096.877491][T10105] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.902120][T10105] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1096.933287][T10105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.186945][T10105] usb 1-1: usb_control_msg returned -32 [ 1097.192602][T10105] usbtmc 1-1:16.0: can't read capabilities [ 1097.306687][T14082] loop2: detected capacity change from 0 to 512 [ 1097.327606][T14082] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1097.560208][T14082] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1097.590336][ T8880] usb 1-1: USB disconnect, device number 41 [ 1097.662082][T14082] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2059: bg 0: block 248: padding at end of block bitmap is not set [ 1097.968527][T14082] Quota error (device loop2): write_blk: dquota write failed [ 1098.166269][T14082] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1098.204789][T14082] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2059: Failed to acquire dquot type 1 [ 1098.271512][T14082] EXT4-fs (loop2): 1 truncate cleaned up [ 1098.300356][T14082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1098.361197][T14082] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1098.388017][T14082] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1098.411940][T14091] loop5: detected capacity change from 0 to 256 [ 1098.428794][T14082] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2059: Failed to acquire dquot type 1 [ 1098.479107][T11985] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1098.744585][T10105] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1098.936673][T10105] usb 3-1: Using ep0 maxpacket: 8 [ 1098.938525][T14100] loop1: detected capacity change from 0 to 256 [ 1098.949027][T14100] exfat: Deprecated parameter 'namecase' [ 1098.954922][T14100] exfat: Deprecated parameter 'utf8' [ 1098.971704][T10105] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1098.994516][T14100] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1099.022292][T10105] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1099.059427][T10105] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1099.107106][T10105] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1099.150850][T10105] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1099.374209][T10105] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.967261][T14082] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.2059: deleted inode referenced: 12 [ 1099.988173][T14108] loop1: detected capacity change from 0 to 4096 [ 1100.105471][T14108] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1100.133749][T14092] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.2059: deleted inode referenced: 12 [ 1100.140467][T10105] usb 3-1: GET_CAPABILITIES returned 0 [ 1100.153395][T10105] usbtmc 3-1:16.0: can't read capabilities [ 1100.277087][T10105] usb 3-1: USB disconnect, device number 41 [ 1100.336895][T14117] loop5: detected capacity change from 0 to 16 [ 1100.355764][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1100.389642][T10904] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 1100.403197][T14117] erofs: (device loop5): mounted with root inode @ nid 36. [ 1100.422077][T10904] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u4:18: Failed to release dquot type 1 [ 1102.744774][T10105] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1103.859599][T14136] loop2: detected capacity change from 0 to 131072 [ 1103.868768][T14136] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1103.877564][T14136] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1103.890217][T14136] F2FS-fs (loop2): invalid crc value [ 1103.910165][T14136] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1103.968997][T14136] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1103.976846][T14136] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1104.008312][T14139] loop1: detected capacity change from 0 to 40427 [ 1104.026407][T14139] F2FS-fs (loop1): Invalid log blocks per segment (83886089) [ 1104.034892][T14139] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1104.054437][T10105] usb 6-1: Using ep0 maxpacket: 8 [ 1104.104713][T10105] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1104.135245][T14139] F2FS-fs (loop1): invalid crc value [ 1104.159215][T10105] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1104.214176][T10105] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1104.242435][T14139] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1104.277711][T10105] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1104.863857][T14139] F2FS-fs (loop1): Start checkpoint disabled! [ 1105.016971][T14139] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1105.074277][T14139] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1105.334844][T14154] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1105.507297][T10105] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1105.517129][T10105] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.742908][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2075'. [ 1106.634289][T10105] usb 6-1: can't set config #16, error -71 [ 1106.644372][T10105] usb 6-1: USB disconnect, device number 31 [ 1107.312625][T10899] kworker/u4:16: attempt to access beyond end of device [ 1107.312625][T10899] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1107.341938][T10899] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1107.351112][T10899] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1107.364614][T10899] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1107.728383][T14166] syzkaller0: entered promiscuous mode [ 1107.733914][T14166] syzkaller0: entered allmulticast mode [ 1108.458811][T14175] syzkaller0: entered promiscuous mode [ 1108.465273][T14175] syzkaller0: entered allmulticast mode [ 1108.694593][ T8880] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1109.408558][T14187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2084'. [ 1109.423123][ T8880] usb 2-1: device descriptor read/64, error -71 [ 1109.504877][T10067] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1109.787225][ T8880] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1109.815608][T10067] usb 6-1: Using ep0 maxpacket: 8 [ 1109.853184][T10067] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1109.892630][T10067] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1109.929765][T10067] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1109.943861][T10067] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1109.959653][T14192] sctp: [Deprecated]: syz.2.2086 (pid 14192) Use of int in max_burst socket option deprecated. [ 1109.959653][T14192] Use struct sctp_assoc_value instead [ 1109.984577][ T8880] usb 2-1: device descriptor read/64, error -71 [ 1110.006472][T10067] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1110.062741][T10067] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.064830][T14194] loop0: detected capacity change from 0 to 1024 [ 1110.117816][ T8880] usb usb2-port1: attempt power cycle [ 1110.312522][T10067] usb 6-1: GET_CAPABILITIES returned 0 [ 1110.337723][T10067] usbtmc 6-1:16.0: can't read capabilities [ 1110.414332][T14194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.523450][T10105] usb 6-1: USB disconnect, device number 32 [ 1110.665517][ T8880] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1110.704735][ T8880] usb 2-1: device descriptor read/8, error -71 [ 1110.988577][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.014498][ T8880] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1111.105746][ T8880] usb 2-1: device descriptor read/8, error -71 [ 1111.254498][ T8880] usb usb2-port1: unable to enumerate USB device [ 1112.060568][T10105] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1112.466381][T10105] usb 2-1: Using ep0 maxpacket: 16 [ 1112.501891][T10105] usb 2-1: config 17 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1112.537481][T10105] usb 2-1: config 17 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1112.594946][T10105] usb 2-1: config 17 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1112.599794][T14211] loop5: detected capacity change from 0 to 32768 [ 1112.832536][T14211] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1112.841312][T10105] usb 2-1: config 17 interface 0 has no altsetting 0 [ 1112.909378][T10105] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.39 [ 1112.918873][T10105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.927620][T10105] usb 2-1: Product: syz [ 1112.932222][T10105] usb 2-1: Manufacturer: syz [ 1112.937698][T10105] usb 2-1: SerialNumber: syz [ 1113.228016][T10105] usblp 2-1:17.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1113.248405][T14211] XFS (loop5): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x30. [ 1114.038418][T14211] XFS (loop5): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:16). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1114.074036][T14211] XFS (loop5): log mount/recovery failed: error -22 [ 1114.116187][T14211] XFS (loop5): log mount failed [ 1114.465953][T14240] loop1: detected capacity change from 0 to 512 [ 1114.479731][T14240] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1114.534688][T14240] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1114.631340][T14240] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 1114.799665][T14240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1114.945254][T14246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 1115.900482][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.907811][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.091469][T14254] loop2: detected capacity change from 0 to 1024 [ 1116.155427][T14254] hfsplus: unable to find HFS+ superblock [ 1116.617691][T14215] 9pnet_fd: p9_fd_create_tcp (14215): problem connecting socket to 127.0.0.1 [ 1116.889852][T10105] usb 2-1: USB disconnect, device number 41 [ 1116.899113][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.909406][T10105] usblp0: removed [ 1117.057264][T14260] FAULT_INJECTION: forcing a failure. [ 1117.057264][T14260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.070455][T14260] CPU: 0 PID: 14260 Comm: syz.1.2100 Not tainted syzkaller #0 [ 1117.077917][T14260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1117.087983][T14260] Call Trace: [ 1117.091260][T14260] [ 1117.094189][T14260] dump_stack_lvl+0x16c/0x230 [ 1117.098974][T14260] ? show_regs_print_info+0x20/0x20 [ 1117.104173][T14260] ? load_image+0x3b0/0x3b0 [ 1117.108709][T14260] ? __might_fault+0xaa/0x120 [ 1117.113389][T14260] ? __lock_acquire+0x7c80/0x7c80 [ 1117.118428][T14260] should_fail_ex+0x39d/0x4d0 [ 1117.123135][T14260] _copy_from_user+0x2f/0xe0 [ 1117.127730][T14260] ___sys_recvmsg+0x12f/0x510 [ 1117.132432][T14260] ? __sys_recvmsg+0x270/0x270 [ 1117.137212][T14260] ? __lock_acquire+0x7c80/0x7c80 [ 1117.142242][T14260] ? __might_fault+0xc6/0x120 [ 1117.146921][T14260] ? __might_fault+0xaa/0x120 [ 1117.151600][T14260] do_recvmmsg+0x360/0x7d0 [ 1117.156023][T14260] ? file_end_write+0x159/0x250 [ 1117.160878][T14260] ? __sys_recvmmsg+0x280/0x280 [ 1117.165727][T14260] ? vfs_write+0x586/0x940 [ 1117.170152][T14260] ? mutex_unlock+0x10/0x10 [ 1117.174668][T14260] ? __fget_files+0x44a/0x4d0 [ 1117.179387][T14260] __x64_sys_recvmmsg+0x191/0x240 [ 1117.184435][T14260] ? do_recvmmsg+0x7d0/0x7d0 [ 1117.189047][T14260] ? lockdep_hardirqs_on+0x98/0x150 [ 1117.194282][T14260] do_syscall_64+0x55/0xb0 [ 1117.198702][T14260] ? clear_bhb_loop+0x40/0x90 [ 1117.203383][T14260] ? clear_bhb_loop+0x40/0x90 [ 1117.208067][T14260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1117.213980][T14260] RIP: 0033:0x7f592418f749 [ 1117.218422][T14260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.238041][T14260] RSP: 002b:00007f5925114038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1117.246459][T14260] RAX: ffffffffffffffda RBX: 00007f59243e5fa0 RCX: 00007f592418f749 [ 1117.254433][T14260] RDX: 000000000000045b RSI: 0000200000008880 RDI: 0000000000000003 [ 1117.262404][T14260] RBP: 00007f5925114090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.270372][T14260] R10: 0000000044000102 R11: 0000000000000246 R12: 0000000000000001 [ 1117.278344][T14260] R13: 00007f59243e6038 R14: 00007f59243e5fa0 R15: 00007ffcecf11588 [ 1117.286498][T14260] [ 1117.289524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1117.301630][T10067] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1117.364451][ T5854] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1117.654517][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 1117.666833][ T5854] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1117.681902][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.700289][ T5854] usb 3-1: Product: syz [ 1117.722493][ T5854] usb 3-1: Manufacturer: syz [ 1117.742045][ T5854] usb 3-1: SerialNumber: syz [ 1117.795906][ T5854] usb 3-1: config 0 descriptor?? [ 1117.828166][ T5854] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1117.974262][T10067] usb 6-1: Using ep0 maxpacket: 8 [ 1117.995383][T10067] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1118.014409][T10067] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1118.024670][T10067] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1118.034714][T10067] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.063933][T10067] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1118.088195][T10067] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.160907][T14265] kcapi: manufacturer command 52776558133248 unknown. [ 1118.328374][T10067] usb 6-1: GET_CAPABILITIES returned 0 [ 1118.344436][T10067] usbtmc 6-1:16.0: can't read capabilities [ 1118.404213][ T5854] usb 3-1: clie_3_5_startup: get interface number bad return length: 0 [ 1118.412979][ T5854] visor: probe of 3-1:0.0 failed with error -5 [ 1118.582775][ T5854] usb 6-1: USB disconnect, device number 33 [ 1119.800837][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2104'. [ 1120.693685][T10067] usb 3-1: USB disconnect, device number 42 [ 1120.717076][T14287] loop5: detected capacity change from 0 to 512 [ 1120.755408][T14287] EXT4-fs: Ignoring removed orlov option [ 1120.806137][T14287] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1120.863175][T14287] EXT4-fs warning (device loop5): ext4_xattr_inode_get:549: inode #11: comm syz.5.2108: ea_inode file size=4 entry size=6 [ 1120.905845][T14287] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1120.921902][T14291] FAULT_INJECTION: forcing a failure. [ 1120.921902][T14291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.942325][T14287] EXT4-fs error (device loop5): ext4_do_update_inode:5244: inode #15: comm syz.5.2108: corrupted inode contents [ 1120.973672][T14291] CPU: 1 PID: 14291 Comm: syz.2.2109 Not tainted syzkaller #0 [ 1120.981187][T14291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.989071][T14287] EXT4-fs error (device loop5): ext4_dirty_inode:6120: inode #15: comm syz.5.2108: mark_inode_dirty error [ 1120.991249][T14291] Call Trace: [ 1120.991292][T14291] [ 1120.991302][T14291] dump_stack_lvl+0x16c/0x230 [ 1121.013523][T14291] ? show_regs_print_info+0x20/0x20 [ 1121.017564][T14287] EXT4-fs error (device loop5): ext4_do_update_inode:5244: inode #15: comm syz.5.2108: corrupted inode contents [ 1121.018745][T14291] ? load_image+0x3b0/0x3b0 [ 1121.018780][T14291] ? __lock_acquire+0x7c80/0x7c80 [ 1121.040126][T14291] ? snprintf+0xdb/0x120 [ 1121.044384][T14291] should_fail_ex+0x39d/0x4d0 [ 1121.049086][T14291] _copy_to_user+0x2f/0xa0 [ 1121.053515][T14291] simple_read_from_buffer+0xe7/0x150 [ 1121.058938][T14291] proc_fail_nth_read+0x1e3/0x250 [ 1121.064151][T14291] ? proc_fault_inject_write+0x340/0x340 [ 1121.069970][T14291] ? fsnotify_perm+0x271/0x5e0 [ 1121.074744][T14291] ? proc_fault_inject_write+0x340/0x340 [ 1121.080384][T14291] vfs_read+0x27e/0x920 [ 1121.084557][T14291] ? kernel_read+0x1e0/0x1e0 [ 1121.089150][T14291] ? __fget_files+0x28/0x4d0 [ 1121.093767][T14291] ? __fget_files+0x44a/0x4d0 [ 1121.098463][T14291] ? __fdget_pos+0x2a3/0x330 [ 1121.103149][T14291] ? ksys_read+0x75/0x250 [ 1121.107493][T14291] ksys_read+0x147/0x250 [ 1121.111745][T14291] ? vfs_write+0x940/0x940 [ 1121.116172][T14291] ? lockdep_hardirqs_on+0x98/0x150 [ 1121.121376][T14291] do_syscall_64+0x55/0xb0 [ 1121.125796][T14291] ? clear_bhb_loop+0x40/0x90 [ 1121.130487][T14291] ? clear_bhb_loop+0x40/0x90 [ 1121.135172][T14291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1121.141069][T14291] RIP: 0033:0x7fcf5738e15c [ 1121.145593][T14291] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1121.165208][T14291] RSP: 002b:00007fcf58241030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1121.173634][T14291] RAX: ffffffffffffffda RBX: 00007fcf575e5fa0 RCX: 00007fcf5738e15c [ 1121.181616][T14291] RDX: 000000000000000f RSI: 00007fcf582410a0 RDI: 0000000000000005 [ 1121.189598][T14291] RBP: 00007fcf58241090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.197576][T14291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.205559][T14291] R13: 00007fcf575e6038 R14: 00007fcf575e5fa0 R15: 00007ffd4bcbf7f8 [ 1121.213547][T14291] [ 1121.218036][T14293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2110'. [ 1121.240648][T14287] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3017: inode #15: comm syz.5.2108: mark_inode_dirty error [ 1121.253983][T14287] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3020: inode #15: comm syz.5.2108: mark inode dirty (error -117) [ 1121.291050][T14287] EXT4-fs warning (device loop5): ext4_evict_inode:272: xattr delete (err -117) [ 1121.314995][T14287] EXT4-fs (loop5): 1 orphan inode deleted [ 1121.331413][T14287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1123.183924][T10857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.677609][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'. [ 1124.618709][T14314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2117'. [ 1124.675253][T14316] FAULT_INJECTION: forcing a failure. [ 1124.675253][T14316] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.723474][T14316] CPU: 1 PID: 14316 Comm: syz.0.2117 Not tainted syzkaller #0 [ 1124.730991][T14316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1124.741090][T14316] Call Trace: [ 1124.744396][T14316] [ 1124.747347][T14316] dump_stack_lvl+0x16c/0x230 [ 1124.752061][T14316] ? show_regs_print_info+0x20/0x20 [ 1124.757292][T14316] ? load_image+0x3b0/0x3b0 [ 1124.761832][T14316] ? __might_sleep+0xe0/0xe0 [ 1124.766452][T14316] ? __lock_acquire+0x7c80/0x7c80 [ 1124.771508][T14316] should_fail_ex+0x39d/0x4d0 [ 1124.776218][T14316] should_failslab+0x9/0x20 [ 1124.780748][T14316] slab_pre_alloc_hook+0x59/0x310 [ 1124.785811][T14316] kmem_cache_alloc_node+0x60/0x330 [ 1124.791047][T14316] ? __alloc_skb+0x108/0x2c0 [ 1124.795671][T14316] __alloc_skb+0x108/0x2c0 [ 1124.800118][T14316] netlink_sendmsg+0x65b/0xbe0 [ 1124.804919][T14316] ? netlink_getsockopt+0x580/0x580 [ 1124.810159][T14316] ? aa_sock_msg_perm+0x94/0x150 [ 1124.815122][T14316] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1124.820429][T14316] ? security_socket_sendmsg+0x80/0xa0 [ 1124.825928][T14316] __sys_sendto+0x46a/0x620 [ 1124.830471][T14316] ? __ia32_sys_getpeername+0x90/0x90 [ 1124.835885][T14316] ? __lock_acquire+0x7c80/0x7c80 [ 1124.840952][T14316] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1124.846969][T14316] ? lock_chain_count+0x20/0x20 [ 1124.851845][T14316] ? lock_chain_count+0x20/0x20 [ 1124.856727][T14316] __x64_sys_sendto+0xde/0xf0 [ 1124.861426][T14316] do_syscall_64+0x55/0xb0 [ 1124.865859][T14316] ? clear_bhb_loop+0x40/0x90 [ 1124.870561][T14316] ? clear_bhb_loop+0x40/0x90 [ 1124.875261][T14316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1124.881175][T14316] RIP: 0033:0x7f0ebb5915dc [ 1124.885608][T14316] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1124.905243][T14316] RSP: 002b:00007f0ebc394ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1124.913683][T14316] RAX: ffffffffffffffda RBX: 00007f0ebc394fc0 RCX: 00007f0ebb5915dc [ 1124.921678][T14316] RDX: 0000000000000028 RSI: 00007f0ebc395010 RDI: 0000000000000004 [ 1124.929668][T14316] RBP: 0000000000000000 R08: 00007f0ebc394f14 R09: 000000000000000c [ 1124.937664][T14316] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1124.945655][T14316] R13: 00007f0ebc394f68 R14: 00007f0ebc395010 R15: 0000000000000000 [ 1124.953661][T14316] [ 1124.978013][T14318] FAULT_INJECTION: forcing a failure. [ 1124.978013][T14318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.991299][T14318] CPU: 1 PID: 14318 Comm: syz.1.2118 Not tainted syzkaller #0 [ 1124.998780][T14318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1125.008857][T14318] Call Trace: [ 1125.012150][T14318] [ 1125.015101][T14318] dump_stack_lvl+0x16c/0x230 [ 1125.019818][T14318] ? show_regs_print_info+0x20/0x20 [ 1125.025049][T14318] ? load_image+0x3b0/0x3b0 [ 1125.029579][T14318] ? __might_fault+0xaa/0x120 [ 1125.034271][T14318] ? __lock_acquire+0x7c80/0x7c80 [ 1125.039321][T14318] should_fail_ex+0x39d/0x4d0 [ 1125.044035][T14318] _copy_from_user+0x2f/0xe0 [ 1125.048657][T14318] cec_ioctl+0x343/0x2ea0 [ 1125.053020][T14318] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1125.059036][T14318] ? cec_poll+0x290/0x290 [ 1125.063392][T14318] ? do_vfs_ioctl+0xd31/0x1bb0 [ 1125.068196][T14318] ? __ia32_compat_sys_ioctl+0x7f0/0x7f0 [ 1125.074040][T14318] ? tomoyo_path_number_perm+0x1ba/0x590 [ 1125.079710][T14318] ? __lock_acquire+0x7c80/0x7c80 [ 1125.084757][T14318] ? slab_free_freelist_hook+0x130/0x1b0 [ 1125.090430][T14318] ? tomoyo_path_number_perm+0x477/0x590 [ 1125.096185][T14318] ? __kmem_cache_free+0xba/0x1f0 [ 1125.101252][T14318] ? tomoyo_path_number_perm+0x4dc/0x590 [ 1125.106924][T14318] ? tomoyo_path_number_perm+0x1ba/0x590 [ 1125.112596][T14318] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1125.118098][T14318] ? __fget_files+0x28/0x4d0 [ 1125.122728][T14318] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1125.127670][T14318] ? security_file_ioctl+0x80/0xa0 [ 1125.132796][T14318] ? cec_poll+0x290/0x290 [ 1125.137128][T14318] __se_sys_ioctl+0xfd/0x170 [ 1125.141732][T14318] do_syscall_64+0x55/0xb0 [ 1125.146161][T14318] ? clear_bhb_loop+0x40/0x90 [ 1125.150846][T14318] ? clear_bhb_loop+0x40/0x90 [ 1125.155536][T14318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1125.161439][T14318] RIP: 0033:0x7f592418f749 [ 1125.165859][T14318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.185473][T14318] RSP: 002b:00007f5925114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1125.194009][T14318] RAX: ffffffffffffffda RBX: 00007f59243e5fa0 RCX: 00007f592418f749 [ 1125.202071][T14318] RDX: 0000200000000000 RSI: 0000000040046109 RDI: 0000000000000003 [ 1125.210044][T14318] RBP: 00007f5925114090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.218043][T14318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.226019][T14318] R13: 00007f59243e6038 R14: 00007f59243e5fa0 R15: 00007ffcecf11588 [ 1125.234010][T14318] [ 1125.242394][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2119'. [ 1125.363542][T14320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1126.507027][T14344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'. [ 1130.503134][T10100] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1130.930617][T14365] FAULT_INJECTION: forcing a failure. [ 1130.930617][T14365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1130.974324][T14365] CPU: 0 PID: 14365 Comm: syz.0.2131 Not tainted syzkaller #0 [ 1130.981856][T14365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1130.991950][T14365] Call Trace: [ 1130.995279][T14365] [ 1130.998245][T14365] dump_stack_lvl+0x16c/0x230 [ 1131.002974][T14365] ? show_regs_print_info+0x20/0x20 [ 1131.008210][T14365] ? load_image+0x3b0/0x3b0 [ 1131.012765][T14365] ? __might_fault+0xaa/0x120 [ 1131.017478][T14365] ? __lock_acquire+0x7c80/0x7c80 [ 1131.022543][T14365] should_fail_ex+0x39d/0x4d0 [ 1131.027276][T14365] _copy_from_user+0x2f/0xe0 [ 1131.031904][T14365] video_usercopy+0x34c/0x1330 [ 1131.036711][T14365] ? video_ioctl2+0x30/0x30 [ 1131.041260][T14365] ? v4l_printk_ioctl+0x160/0x160 [ 1131.046345][T14365] v4l2_ioctl+0x18a/0x1e0 [ 1131.050716][T14365] ? v4l2_poll+0x2b0/0x2b0 [ 1131.055170][T14365] __se_sys_ioctl+0xfd/0x170 [ 1131.059810][T14365] do_syscall_64+0x55/0xb0 [ 1131.064274][T14365] ? clear_bhb_loop+0x40/0x90 [ 1131.068993][T14365] ? clear_bhb_loop+0x40/0x90 [ 1131.073882][T14365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1131.079813][T14365] RIP: 0033:0x7f0ebb58f749 [ 1131.084267][T14365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1131.104337][T14365] RSP: 002b:00007f0ebc3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1131.112793][T14365] RAX: ffffffffffffffda RBX: 00007f0ebb7e5fa0 RCX: 00007f0ebb58f749 [ 1131.120889][T14365] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 1131.128903][T14365] RBP: 00007f0ebc3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.136903][T14365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.144885][T14365] R13: 00007f0ebb7e6038 R14: 00007f0ebb7e5fa0 R15: 00007ffd06b27ad8 [ 1131.152883][T14365] [ 1133.048620][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2136'. [ 1135.504177][ T5854] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1136.874203][ T5854] usb 2-1: Using ep0 maxpacket: 8 [ 1136.912356][ T5854] usb 2-1: device descriptor read/all, error -71 [ 1137.208676][T14402] sctp: [Deprecated]: syz.0.2143 (pid 14402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1137.208676][T14402] Use struct sctp_sack_info instead [ 1137.245943][T14405] FAULT_INJECTION: forcing a failure. [ 1137.245943][T14405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.263136][T14405] CPU: 0 PID: 14405 Comm: syz.1.2142 Not tainted syzkaller #0 [ 1137.270651][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1137.280740][T14405] Call Trace: [ 1137.284044][T14405] [ 1137.287002][T14405] dump_stack_lvl+0x16c/0x230 [ 1137.291733][T14405] ? show_regs_print_info+0x20/0x20 [ 1137.296980][T14405] ? load_image+0x3b0/0x3b0 [ 1137.301546][T14405] ? __might_fault+0xaa/0x120 [ 1137.306270][T14405] ? __lock_acquire+0x7c80/0x7c80 [ 1137.311339][T14405] should_fail_ex+0x39d/0x4d0 [ 1137.316072][T14405] _copy_from_user+0x2f/0xe0 [ 1137.320708][T14405] snd_seq_ioctl+0x1df/0x3f0 [ 1137.325344][T14405] ? snd_seq_poll+0x1f0/0x1f0 [ 1137.330085][T14405] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1137.335056][T14405] ? security_file_ioctl+0x80/0xa0 [ 1137.340207][T14405] ? snd_seq_poll+0x1f0/0x1f0 [ 1137.344915][T14405] __se_sys_ioctl+0xfd/0x170 [ 1137.349552][T14405] do_syscall_64+0x55/0xb0 [ 1137.354018][T14405] ? clear_bhb_loop+0x40/0x90 [ 1137.358731][T14405] ? clear_bhb_loop+0x40/0x90 [ 1137.363427][T14405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1137.369335][T14405] RIP: 0033:0x7f592418f749 [ 1137.373771][T14405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1137.393402][T14405] RSP: 002b:00007f59250f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1137.401833][T14405] RAX: ffffffffffffffda RBX: 00007f59243e6090 RCX: 00007f592418f749 [ 1137.409817][T14405] RDX: 0000200000000140 RSI: 00000000c08c5336 RDI: 0000000000000004 [ 1137.417796][T14405] RBP: 00007f59250f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.425772][T14405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.433752][T14405] R13: 00007f59243e6128 R14: 00007f59243e6090 R15: 00007ffcecf11588 [ 1137.441749][T14405] [ 1138.763916][T14413] loop0: detected capacity change from 0 to 128 [ 1138.797273][T14413] vxfs: unable to read olt [ 1138.901017][T14415] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2146'. [ 1138.941550][T14413] binder: 14412:14413 ioctl c0306201 200000000840 returned -14 [ 1138.969427][T14413] binder: 14412:14413 ioctl c0306201 2000000004c0 returned -14 [ 1139.000676][T14413] binder: 14412:14413 ioctl c0306201 2000000001c0 returned -14 [ 1139.322978][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2147'. [ 1140.594452][T10104] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1140.945972][T10104] usb 3-1: Using ep0 maxpacket: 8 [ 1140.984565][T10104] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1141.041496][T10104] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1141.059625][T10104] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1141.080853][T10104] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1141.098963][T10104] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1141.108517][T10104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.343704][T10104] usb 3-1: GET_CAPABILITIES returned 0 [ 1141.353313][T10104] usbtmc 3-1:16.0: can't read capabilities [ 1141.577603][ T5854] usb 3-1: USB disconnect, device number 43 [ 1142.245188][T14430] FAULT_INJECTION: forcing a failure. [ 1142.245188][T14430] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.252003][T14429] loop2: detected capacity change from 0 to 256 [ 1142.262832][T14430] CPU: 0 PID: 14430 Comm: syz.0.2150 Not tainted syzkaller #0 [ 1142.271646][T14430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1142.281738][T14430] Call Trace: [ 1142.285048][T14430] [ 1142.286450][T14429] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x0004abd0, checksum : 0x1119abd0) [ 1142.287991][T14430] dump_stack_lvl+0x16c/0x230 [ 1142.302943][T14430] ? show_regs_print_info+0x20/0x20 [ 1142.306682][T14429] exFAT-fs (loop2): invalid boot region [ 1142.308173][T14430] ? load_image+0x3b0/0x3b0 [ 1142.313721][T14429] exFAT-fs (loop2): failed to recognize exfat type [ 1142.318221][T14430] ? __lock_acquire+0x7c80/0x7c80 [ 1142.318250][T14430] should_fail_ex+0x39d/0x4d0 [ 1142.318281][T14430] should_failslab+0x9/0x20 [ 1142.318305][T14430] slab_pre_alloc_hook+0x59/0x310 [ 1142.318330][T14430] ? __check_object_size+0x506/0xa30 [ 1142.318360][T14430] kmem_cache_alloc+0x5a/0x2e0 [ 1142.318383][T14430] ? getname_flags+0xbb/0x500 [ 1142.318412][T14430] getname_flags+0xbb/0x500 [ 1142.318441][T14430] __x64_sys_renameat2+0xbf/0xe0 [ 1142.368309][T14430] do_syscall_64+0x55/0xb0 [ 1142.372740][T14430] ? clear_bhb_loop+0x40/0x90 [ 1142.377429][T14430] ? clear_bhb_loop+0x40/0x90 [ 1142.382126][T14430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.388028][T14430] RIP: 0033:0x7f0ebb58f749 [ 1142.392456][T14430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.412072][T14430] RSP: 002b:00007f0ebc3b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1142.420501][T14430] RAX: ffffffffffffffda RBX: 00007f0ebb7e5fa0 RCX: 00007f0ebb58f749 [ 1142.428486][T14430] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 1142.436466][T14430] RBP: 00007f0ebc3b7090 R08: 0000000000000002 R09: 0000000000000000 [ 1142.444444][T14430] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1142.452423][T14430] R13: 00007f0ebb7e6038 R14: 00007f0ebb7e5fa0 R15: 00007ffd06b27ad8 [ 1142.460416][T14430] [ 1144.170004][T14429] loop2: detected capacity change from 0 to 32768 [ 1144.198628][T14429] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2151 (14429) [ 1144.604443][T14451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 1145.511632][T14429] BTRFS error (device loop2): open_ctree failed: -4 [ 1145.625025][T14361] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (14361) [ 1147.044230][T10066] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1147.174444][ T5854] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1147.258519][T10066] usb 3-1: Using ep0 maxpacket: 32 [ 1147.285315][T10066] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 1147.304119][T10066] usb 3-1: config 0 has no interface number 0 [ 1147.310402][T10066] usb 3-1: config 0 interface 230 has no altsetting 0 [ 1147.329127][T10066] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1147.342854][T10066] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.351971][T10066] usb 3-1: Product: syz [ 1147.375308][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 1147.389741][ T5854] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1147.415008][ T5854] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1147.437243][ T5854] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1147.454689][ T5854] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1147.477799][ T5854] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1147.489802][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.564171][T10066] usb 3-1: Manufacturer: syz [ 1147.569428][T10066] usb 3-1: SerialNumber: syz [ 1147.579504][T10066] usb 3-1: config 0 descriptor?? [ 1147.587536][T10066] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 1147.602594][T10066] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1147.745887][ T5854] usb 1-1: GET_CAPABILITIES returned 0 [ 1147.752915][ T5854] usbtmc 1-1:16.0: can't read capabilities [ 1148.214688][ T5854] usb 1-1: USB disconnect, device number 44 [ 1148.348260][T10100] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1148.546732][T10100] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.562158][T10100] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.572451][T10100] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1148.591115][T10100] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1148.602385][T10100] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.618112][T10100] usb 6-1: config 0 descriptor?? [ 1148.839096][T14483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2167'. [ 1149.367407][T14484] loop2: detected capacity change from 0 to 256 [ 1149.378530][T10100] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 1149.395736][T14485] netlink: 'syz.5.2162': attribute type 6 has an invalid length. [ 1149.447436][T14485] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2162'. [ 1149.455988][T10100] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1149.499153][T14484] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1149.554575][T10100] usb 6-1: USB disconnect, device number 34 [ 1149.613609][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2169'. [ 1149.687737][T14488] fido_id[14488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1149.773512][T14494] loop1: detected capacity change from 0 to 8 [ 1149.780966][T14494] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1149.793312][T14491] loop0: detected capacity change from 0 to 8192 [ 1149.810509][T14456] udevd[14456]: incorrect cramfs checksum on /dev/loop1 [ 1149.812652][T14494] cramfs: Error -3 while decompressing! [ 1149.827533][T14494] cramfs: ffffffff96fc9388(26)->ffff8880750f6000(4096) [ 1149.835338][T14494] cramfs: Error -3 while decompressing! [ 1149.841149][T14494] cramfs: ffffffff96fc93a2(26)->ffff8880750f7000(4096) [ 1149.851263][T14456] udevd[14456]: incorrect cramfs checksum on /dev/loop1 [ 1149.856323][T14494] cramfs: Error -3 while decompressing! [ 1149.871595][T14494] cramfs: ffffffff96fc93bc(16)->ffff88804fb10000(4096) [ 1149.878743][T14494] cramfs: Error -3 while decompressing! [ 1149.884797][T14494] cramfs: ffffffff96fc9388(26)->ffff8880750f6000(4096) [ 1149.891954][ T27] audit: type=1800 audit(2000000691.230:31): pid=14494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2170" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 1151.858774][T10066] ums-usbat: probe of 3-1:0.230 failed with error -5 [ 1151.995808][T10068] usb 3-1: USB disconnect, device number 44 [ 1152.727337][T14521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2177'. [ 1153.454358][ T8880] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1154.353791][T14514] loop5: detected capacity change from 0 to 40427 [ 1154.402112][T14514] F2FS-fs (loop5): invalid crc value [ 1154.470395][T14514] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1154.564795][ T8880] usb 3-1: Using ep0 maxpacket: 8 [ 1154.588140][ T8880] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1154.617876][ T8880] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1154.628407][T14514] F2FS-fs (loop5): Start checkpoint disabled! [ 1154.635496][ T8880] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1154.645834][ T8880] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1154.659231][ T8880] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1154.669476][ T8880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.784664][T14514] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1154.846011][T10104] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1154.959163][T14533] FAULT_INJECTION: forcing a failure. [ 1154.959163][T14533] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.973513][T14533] CPU: 1 PID: 14533 Comm: syz.1.2180 Not tainted syzkaller #0 [ 1154.981010][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1154.991089][T14533] Call Trace: [ 1154.994397][T14533] [ 1154.997348][T14533] dump_stack_lvl+0x16c/0x230 [ 1155.002079][T14533] ? show_regs_print_info+0x20/0x20 [ 1155.007311][T14533] ? load_image+0x3b0/0x3b0 [ 1155.011857][T14533] ? __might_sleep+0xe0/0xe0 [ 1155.016476][T14533] ? __lock_acquire+0x7c80/0x7c80 [ 1155.021535][T14533] should_fail_ex+0x39d/0x4d0 [ 1155.026251][T14533] should_failslab+0x9/0x20 [ 1155.030780][T14533] slab_pre_alloc_hook+0x59/0x310 [ 1155.035843][T14533] ? snd_pcm_oss_change_params_locked+0x173/0x3d30 [ 1155.042375][T14533] __kmem_cache_alloc_node+0x53/0x260 [ 1155.047809][T14533] ? snd_pcm_oss_change_params_locked+0x173/0x3d30 [ 1155.054347][T14533] kmalloc_trace+0x2a/0xe0 [ 1155.058804][T14533] snd_pcm_oss_change_params_locked+0x173/0x3d30 [ 1155.065186][T14533] ? __mutex_trylock_common+0x153/0x250 [ 1155.070772][T14533] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1155.076978][T14533] ? trace_contention_end+0x39/0xe0 [ 1155.082225][T14533] ? __mutex_lock+0x304/0xcc0 [ 1155.086929][T14533] ? trace_contention_end+0x39/0xe0 [ 1155.092252][T14533] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 1155.097395][T14533] ? __mutex_lock+0x304/0xcc0 [ 1155.102096][T14533] ? snd_pcm_oss_get_active_substream+0x198/0x270 [ 1155.108537][T14533] ? mutex_lock_nested+0x20/0x20 [ 1155.113508][T14533] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1155.119160][T14533] ? mutex_unlock+0x10/0x10 [ 1155.123694][T14533] ? __might_fault+0xaa/0x120 [ 1155.128400][T14533] snd_pcm_oss_get_active_substream+0x206/0x270 [ 1155.134681][T14533] snd_pcm_oss_set_rate+0x1bd/0x4e0 [ 1155.139918][T14533] snd_pcm_oss_ioctl+0xc29/0xdd0 [ 1155.144884][T14533] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1155.149869][T14533] ? snd_pcm_oss_poll+0x890/0x890 [ 1155.154929][T14533] __se_sys_ioctl+0xfd/0x170 [ 1155.159543][T14533] do_syscall_64+0x55/0xb0 [ 1155.163975][T14533] ? clear_bhb_loop+0x40/0x90 [ 1155.168681][T14533] ? clear_bhb_loop+0x40/0x90 [ 1155.173387][T14533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1155.179312][T14533] RIP: 0033:0x7f592418f749 [ 1155.183781][T14533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1155.203500][T14533] RSP: 002b:00007f59250d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1155.211946][T14533] RAX: ffffffffffffffda RBX: 00007f59243e6180 RCX: 00007f592418f749 [ 1155.219943][T14533] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000007 [ 1155.227935][T14533] RBP: 00007f59250d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.235943][T14533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.243937][T14533] R13: 00007f59243e6218 R14: 00007f59243e6180 R15: 00007ffcecf11588 [ 1155.251947][T14533] [ 1155.366531][ T8880] usb 3-1: GET_CAPABILITIES returned 0 [ 1155.378547][ T8880] usbtmc 3-1:16.0: can't read capabilities [ 1155.584466][T10104] usb 1-1: Using ep0 maxpacket: 32 [ 1155.592540][T10104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.611470][T10104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.621717][T10104] usb 1-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 1155.631335][T10104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.652906][T10104] usb 1-1: config 0 descriptor?? [ 1155.696653][T10067] usb 3-1: USB disconnect, device number 45 [ 1155.727118][T14536] fuse: Unknown parameter 'êáúÈ—)ìvÈiÐœ»ÀŽÁÕ„ËAv0x0000000000000005' [ 1155.821111][T10914] kworker/u4:23: attempt to access beyond end of device [ 1155.821111][T10914] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1155.841138][T10914] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1155.851574][T10914] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1155.865965][T10914] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1156.214809][T10104] logitech-hidpp-device 0003:046D:C082.0008: hidraw0: USB HID v0.02 Device [HID 046d:c082] on usb-dummy_hcd.0-1/input0 [ 1157.527364][T10105] usb 1-1: USB disconnect, device number 45 [ 1158.195264][T14553] loop1: detected capacity change from 0 to 2048 [ 1158.340235][T14558] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2186'. [ 1158.868133][T14553] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1158.904742][T14553] UDF-fs: Scanning with blocksize 512 failed [ 1159.023210][T14561] loop0: detected capacity change from 0 to 256 [ 1159.160797][T14553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1159.561648][T14566] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2189'. [ 1159.810583][T14572] loop1: detected capacity change from 0 to 4096 [ 1159.872166][T14575] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1159.894404][T10067] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1161.605500][T10067] usb 6-1: Using ep0 maxpacket: 8 [ 1161.961853][T10067] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1161.973251][T10067] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1161.983709][T10067] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1161.994361][T10067] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1162.008052][T10067] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1162.055094][T10067] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.369590][T10067] usb 6-1: GET_CAPABILITIES returned 0 [ 1162.387177][T10067] usbtmc 6-1:16.0: can't read capabilities [ 1162.658536][T10068] usb 6-1: USB disconnect, device number 35 [ 1162.744170][T14601] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2198'. [ 1162.934905][T10067] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1163.241816][T14596] loop2: detected capacity change from 0 to 8192 [ 1163.354583][T14361] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1164.456737][T10067] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.472551][T10067] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.488112][T10067] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1164.495941][T10067] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1164.505376][T10067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.542830][T10067] usb 2-1: config 0 descriptor?? [ 1166.374798][T10067] usbhid 2-1:0.0: can't add hid device: -71 [ 1166.403425][T14618] loop2: detected capacity change from 0 to 64 [ 1166.415655][T10067] usbhid: probe of 2-1:0.0 failed with error -71 [ 1166.437173][T10067] usb 2-1: USB disconnect, device number 44 [ 1167.659777][T14635] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2208'. [ 1168.633034][T14622] loop1: detected capacity change from 0 to 32768 [ 1168.654286][ T5854] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1168.686156][T14622] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1168.855171][ T5854] usb 3-1: Using ep0 maxpacket: 8 [ 1168.875732][T14622] XFS (loop1): Starting recovery (logdev: internal) [ 1168.910216][ T5854] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1168.966931][ T5854] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1169.021218][ T5854] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1169.034400][T14622] XFS (loop1): Ending recovery (logdev: internal) [ 1169.064292][ T5854] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1169.121208][ T5854] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1169.159666][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.213307][ T5772] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1169.403197][ T5854] usb 3-1: GET_CAPABILITIES returned 0 [ 1169.423528][ T5854] usbtmc 3-1:16.0: can't read capabilities [ 1169.636235][ T5854] usb 3-1: USB disconnect, device number 46 [ 1169.915972][T14658] loop1: detected capacity change from 0 to 8 [ 1169.943571][T14361] udevd[14361]: incorrect cramfs checksum on /dev/loop1 [ 1172.348104][T14675] loop2: detected capacity change from 0 to 32768 [ 1172.357388][T14675] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.2216 (14675) [ 1172.432340][T14675] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1172.442918][T14675] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1172.452508][T14675] BTRFS info (device loop2): force zlib compression, level 3 [ 1172.460202][T14675] BTRFS info (device loop2): force clearing of disk cache [ 1172.467652][T14675] BTRFS info (device loop2): setting nodatasum [ 1172.473914][T14675] BTRFS info (device loop2): use zlib compression, level 3 [ 1172.482146][T14675] BTRFS info (device loop2): enabling disk space caching [ 1172.489772][T14675] BTRFS info (device loop2): disk space caching is enabled [ 1172.898977][T14696] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2217'. [ 1173.258178][T14675] BTRFS info (device loop2): enabling ssd optimizations [ 1173.265361][T14675] BTRFS info (device loop2): auto enabling async discard [ 1173.273595][T14675] BTRFS info (device loop2): rebuilding free space tree [ 1173.300406][T14675] BTRFS info (device loop2): disabling free space tree [ 1173.307714][T14675] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1173.317644][T14675] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1173.695359][T14702] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2216'. [ 1174.226663][ T5776] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1175.712385][T14706] loop5: detected capacity change from 0 to 32768 [ 1175.882018][ T27] audit: type=1800 audit(2000000717.220:32): pid=14706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2219" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 1176.094202][T10067] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1176.320163][T10067] usb 2-1: Using ep0 maxpacket: 8 [ 1176.354812][T10067] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1176.384415][T10067] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1176.410147][T10067] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1176.429947][T10067] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1176.453526][T10067] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1176.463314][T10067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.718870][T10067] usb 2-1: GET_CAPABILITIES returned 0 [ 1176.736766][T10067] usbtmc 2-1:16.0: can't read capabilities [ 1177.198554][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.210199][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.447818][T10067] usb 2-1: USB disconnect, device number 45 [ 1177.554448][T10105] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1177.671940][T14725] loop0: detected capacity change from 0 to 736 [ 1177.764160][T10105] usb 3-1: Using ep0 maxpacket: 16 [ 1177.807386][T10105] usb 3-1: config index 0 descriptor too short (expected 18, got 14) [ 1177.829951][T10105] usb 3-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1177.854344][T10105] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1177.965245][T10105] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1178.173517][T10105] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.251081][T10105] usb 3-1: Product: syz [ 1178.307167][T10105] usb 3-1: Manufacturer: syz [ 1178.376116][T10105] usb 3-1: SerialNumber: syz [ 1178.391685][T10105] r8152-cfgselector 3-1: config 0 descriptor?? [ 1178.738041][T10105] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1178.757545][T10906] usb 3-1: config 0 descriptor?? [ 1178.877609][T14734] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2226'. [ 1178.995354][T10067] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1179.276055][T10068] usb 3-1: USB disconnect, device number 47 [ 1179.298137][T10906] usb 3-1: can't set config #0, error -71 [ 1179.458482][T10067] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.509763][T10067] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1179.554328][T10067] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1179.576956][T10067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.586353][T14736] x_tables: duplicate underflow at hook 1 [ 1179.608935][T10067] usb 1-1: config 0 descriptor?? [ 1179.633999][T10067] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1179.653102][T10067] dvb-usb: bulk message failed: -22 (3/0) [ 1179.689761][T10067] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1179.710620][T10067] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1179.727624][T10067] usb 1-1: media controller created [ 1179.745162][T10067] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1179.786613][T10067] dvb-usb: bulk message failed: -22 (6/0) [ 1179.807862][T10067] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1179.927987][T10067] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 1180.015295][T10067] dvb-usb: schedule remote query interval to 150 msecs. [ 1180.086580][T10067] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1180.216216][T14740] loop0: detected capacity change from 0 to 128 [ 1180.246421][T10067] dvb-usb: bulk message failed: -22 (1/0) [ 1180.394566][T10067] dvb-usb: error while querying for an remote control event. [ 1180.903599][T10067] dvb-usb: bulk message failed: -22 (1/0) [ 1180.935724][T10067] dvb-usb: error while querying for an remote control event. [ 1181.284448][T10067] dvb-usb: bulk message failed: -22 (1/0) [ 1181.294829][T10067] dvb-usb: error while querying for an remote control event. [ 1181.316518][T14743] loop2: detected capacity change from 0 to 128 [ 1181.395919][T14743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1181.457337][T10067] dvb-usb: bulk message failed: -22 (1/0) [ 1181.469342][T14743] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1181.508222][T10067] dvb-usb: error while querying for an remote control event. [ 1181.555265][T14743] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1181.575218][T14743] ext4 filesystem being mounted at /558/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1181.724363][T10067] dvb-usb: bulk message failed: -22 (1/0) [ 1181.742105][T10067] dvb-usb: error while querying for an remote control event. [ 1181.822859][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1181.936206][T10067] dvb-usb: bulk message failed: -22 (1/0) [ 1181.953989][T10067] dvb-usb: error while querying for an remote control event. [ 1182.182648][T10067] dvb-usb: bulk message failed: -22 (1/0) [ 1182.189123][T10067] dvb-usb: error while querying for an remote control event. [ 1182.354168][T10067] dvb-usb: bulk message failed: -22 (1/0) [ 1182.371935][T10067] dvb-usb: error while querying for an remote control event. [ 1182.516799][T10067] usb 1-1: USB disconnect, device number 46 [ 1182.586622][T10067] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1183.847266][ T5854] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1184.104429][ T5854] usb 6-1: Using ep0 maxpacket: 8 [ 1184.116089][ T5854] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1184.134325][ T5854] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1184.144910][ T5854] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1184.162507][ T5854] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1184.176147][ T5854] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1184.192207][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.425521][ T5854] usb 6-1: usb_control_msg returned -71 [ 1184.431192][ T5854] usbtmc 6-1:16.0: can't read capabilities [ 1184.474822][ T5854] usb 6-1: USB disconnect, device number 36 [ 1185.342662][T14771] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2236'. [ 1186.073598][T14776] loop0: detected capacity change from 0 to 16 [ 1186.108886][T14776] erofs: (device loop0): mounted with root inode @ nid 36. [ 1186.386609][T14779] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2239'. [ 1186.611258][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2239'. [ 1189.474271][T10068] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1189.675352][T14807] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2246'. [ 1189.714336][T10068] usb 6-1: Using ep0 maxpacket: 8 [ 1189.822277][T10068] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1190.042465][T10068] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1190.224872][T10068] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1190.264345][T10068] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1190.308248][T10068] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1190.378858][T10068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.622342][T10068] usb 6-1: GET_CAPABILITIES returned 0 [ 1190.644464][T10068] usbtmc 6-1:16.0: can't read capabilities [ 1190.983487][T14812] loop1: detected capacity change from 0 to 32768 [ 1191.074222][T14812] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1191.173231][T14812] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1192.946305][T10068] usb 6-1: USB disconnect, device number 37 [ 1193.687521][ T27] audit: type=1326 audit(2000000735.020:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdbb8f749 code=0x7ffc0000 [ 1193.755494][T14824] syzkaller0: entered promiscuous mode [ 1193.761017][T14824] syzkaller0: entered allmulticast mode [ 1193.818506][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 1193.853830][ T27] audit: type=1326 audit(2000000735.020:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdbb8f749 code=0x7ffc0000 [ 1193.886545][ T27] audit: type=1326 audit(2000000735.030:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2cdbb8f749 code=0x7ffc0000 [ 1193.929729][T14827] syzkaller0: entered promiscuous mode [ 1193.940133][T14827] syzkaller0: entered allmulticast mode [ 1193.973182][ T27] audit: type=1326 audit(2000000735.030:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdbb8f749 code=0x7ffc0000 [ 1194.040534][ T27] audit: type=1326 audit(2000000735.030:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f2cdbb8f749 code=0x7ffc0000 [ 1194.097537][ T27] audit: type=1326 audit(2000000735.030:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdbb8f749 code=0x7ffc0000 [ 1194.151249][ T27] audit: type=1326 audit(2000000735.030:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdbb8f749 code=0x7ffc0000 [ 1194.219332][ T27] audit: type=1326 audit(2000000735.030:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2cdbb8f749 code=0x7ffc0000 [ 1194.284213][ T27] audit: type=1326 audit(2000000735.030:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdbb8f749 code=0x7ffc0000 [ 1194.389210][ T27] audit: type=1326 audit(2000000735.030:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14822 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdbb8f749 code=0x7ffc0000 [ 1195.429101][T14845] loop1: detected capacity change from 0 to 164 [ 1195.437745][T14825] loop0: detected capacity change from 0 to 32768 [ 1195.483721][T14845] rock: directory entry would overflow storage [ 1195.483867][T14825] read_mapping_page failed! [ 1195.504123][T14825] diRead: diIAGRead returned -5 [ 1195.519093][T14845] rock: sig=0x5252, size=5, remaining=3 [ 1195.569736][T14845] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1195.633498][T14845] overlay: ./bus is not a directory [ 1196.022591][T14852] loop1: detected capacity change from 0 to 256 [ 1196.147054][T14852] FAT-fs (loop1): Directory bread(block 64) failed [ 1196.164147][T10067] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1196.256959][T14852] FAT-fs (loop1): Directory bread(block 65) failed [ 1196.266008][T14852] FAT-fs (loop1): Directory bread(block 66) failed [ 1196.272795][T14852] FAT-fs (loop1): Directory bread(block 67) failed [ 1196.283000][T14852] FAT-fs (loop1): Directory bread(block 68) failed [ 1196.297503][T14852] FAT-fs (loop1): Directory bread(block 69) failed [ 1196.309556][T14852] FAT-fs (loop1): Directory bread(block 70) failed [ 1196.346663][T14852] FAT-fs (loop1): Directory bread(block 71) failed [ 1196.373366][T14852] FAT-fs (loop1): Directory bread(block 72) failed [ 1196.384170][T10067] usb 1-1: Using ep0 maxpacket: 8 [ 1196.389465][T14852] FAT-fs (loop1): Directory bread(block 73) failed [ 1196.400775][T10067] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1196.569344][T10067] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1196.614293][T10067] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1196.649682][T10067] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1196.701954][T10067] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1196.754009][T10067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.135786][T10067] usb 1-1: GET_CAPABILITIES returned 0 [ 1197.183091][T10067] usbtmc 1-1:16.0: can't read capabilities [ 1197.530764][T14859] loop1: detected capacity change from 0 to 32768 [ 1197.582473][T10067] usb 1-1: USB disconnect, device number 47 [ 1197.641004][T14859] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1197.703988][T14859] XFS (loop1): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x30. [ 1197.787759][T14859] XFS (loop1): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:16). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1197.824150][T14859] XFS (loop1): log mount/recovery failed: error -22 [ 1197.867271][T14859] XFS (loop1): log mount failed [ 1198.351145][T14869] loop0: detected capacity change from 0 to 2048 [ 1198.394216][T14869] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1198.527819][T14869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1199.014951][T10067] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1199.489750][T10067] usb 1-1: Using ep0 maxpacket: 32 [ 1199.525681][T10067] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1199.548543][T10067] usb 1-1: config 0 has no interface number 0 [ 1199.567305][T14879] loop2: detected capacity change from 0 to 128 [ 1199.596146][T10067] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1199.624307][T10067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.667516][T10067] usb 1-1: Product: syz [ 1199.671746][T10067] usb 1-1: Manufacturer: syz [ 1199.694635][T14879] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1199.702989][T10067] usb 1-1: SerialNumber: syz [ 1199.708524][T14879] ext4 filesystem being mounted at /566/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.759452][T10067] usb 1-1: config 0 descriptor?? [ 1200.014872][T10068] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1200.092128][T10067] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1200.347917][T10067] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1200.419799][T10067] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1200.505535][T14885] loop1: detected capacity change from 0 to 256 [ 1200.534376][T10068] usb 3-1: Using ep0 maxpacket: 16 [ 1200.562612][T14885] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1200.582931][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 114 [ 1200.602183][T10068] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1200.624343][T10068] usb 3-1: config 0 has no interface number 0 [ 1200.630650][T10068] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 191, changing to 11 [ 1200.951764][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1200.952133][T10069] usb 1-1: USB disconnect, device number 48 [ 1200.995049][T10069] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1201.030252][T10069] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1201.054996][T10069] quatech2 1-1:0.51: device disconnected [ 1201.154129][T10068] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 50415, setting to 1024 [ 1201.185466][T10068] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1201.204156][T10068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.225161][T10068] usb 3-1: config 0 descriptor?? [ 1201.230900][T14879] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1201.674952][T10068] holtek_mouse 0003:04D9:A081.0009: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.2-1/input1 [ 1201.728909][T14890] loop0: detected capacity change from 0 to 512 [ 1201.798731][T14890] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1201.835005][T14890] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1201.880105][T14890] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 1201.923098][T14890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1202.668795][T14895] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1202.670574][T10068] usb 3-1: USB disconnect, device number 48 [ 1202.775670][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.985129][T14902] FAULT_INJECTION: forcing a failure. [ 1202.985129][T14902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.998727][T14902] CPU: 0 PID: 14902 Comm: syz.0.2270 Not tainted syzkaller #0 [ 1203.006187][T14902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1203.016242][T14902] Call Trace: [ 1203.019517][T14902] [ 1203.022444][T14902] dump_stack_lvl+0x16c/0x230 [ 1203.027133][T14902] ? show_regs_print_info+0x20/0x20 [ 1203.032339][T14902] ? load_image+0x3b0/0x3b0 [ 1203.036846][T14902] ? __might_fault+0xaa/0x120 [ 1203.041527][T14902] ? __lock_acquire+0x7c80/0x7c80 [ 1203.046559][T14902] should_fail_ex+0x39d/0x4d0 [ 1203.051287][T14902] _copy_from_user+0x2f/0xe0 [ 1203.055888][T14902] ___sys_recvmsg+0x12f/0x510 [ 1203.060595][T14902] ? __sys_recvmsg+0x270/0x270 [ 1203.065380][T14902] ? __lock_acquire+0x7c80/0x7c80 [ 1203.070411][T14902] ? __might_fault+0xc6/0x120 [ 1203.075094][T14902] ? __might_fault+0xaa/0x120 [ 1203.079778][T14902] do_recvmmsg+0x360/0x7d0 [ 1203.084205][T14902] ? file_end_write+0x159/0x250 [ 1203.089061][T14902] ? __sys_recvmmsg+0x280/0x280 [ 1203.093914][T14902] ? vfs_write+0x586/0x940 [ 1203.098352][T14902] ? mutex_unlock+0x10/0x10 [ 1203.102855][T14902] ? __fget_files+0x44a/0x4d0 [ 1203.107541][T14902] __x64_sys_recvmmsg+0x191/0x240 [ 1203.112575][T14902] ? do_recvmmsg+0x7d0/0x7d0 [ 1203.117168][T14902] ? lockdep_hardirqs_on+0x98/0x150 [ 1203.122372][T14902] do_syscall_64+0x55/0xb0 [ 1203.126798][T14902] ? clear_bhb_loop+0x40/0x90 [ 1203.131496][T14902] ? clear_bhb_loop+0x40/0x90 [ 1203.136184][T14902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1203.142086][T14902] RIP: 0033:0x7f0ebb58f749 [ 1203.146508][T14902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.166118][T14902] RSP: 002b:00007f0ebc3b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1203.174532][T14902] RAX: ffffffffffffffda RBX: 00007f0ebb7e5fa0 RCX: 00007f0ebb58f749 [ 1203.182501][T14902] RDX: 000000000000045b RSI: 0000200000008880 RDI: 0000000000000003 [ 1203.190467][T14902] RBP: 00007f0ebc3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.198522][T14902] R10: 0000000044000102 R11: 0000000000000246 R12: 0000000000000001 [ 1203.206496][T14902] R13: 00007f0ebb7e6038 R14: 00007f0ebb7e5fa0 R15: 00007ffd06b27ad8 [ 1203.214490][T14902] [ 1203.357604][T14904] loop0: detected capacity change from 0 to 128 [ 1203.432881][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1205.979798][T14933] FAULT_INJECTION: forcing a failure. [ 1205.979798][T14933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.010828][T14934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2278'. [ 1206.040798][T14933] CPU: 0 PID: 14933 Comm: syz.5.2279 Not tainted syzkaller #0 [ 1206.048404][T14933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1206.058491][T14933] Call Trace: [ 1206.061797][T14933] [ 1206.064756][T14933] dump_stack_lvl+0x16c/0x230 [ 1206.069486][T14933] ? show_regs_print_info+0x20/0x20 [ 1206.074728][T14933] ? load_image+0x3b0/0x3b0 [ 1206.079274][T14933] ? __lock_acquire+0x7c80/0x7c80 [ 1206.084331][T14933] ? snprintf+0xdb/0x120 [ 1206.088614][T14933] should_fail_ex+0x39d/0x4d0 [ 1206.093339][T14933] _copy_to_user+0x2f/0xa0 [ 1206.097793][T14933] simple_read_from_buffer+0xe7/0x150 [ 1206.103817][T14933] proc_fail_nth_read+0x1e3/0x250 [ 1206.108890][T14933] ? proc_fault_inject_write+0x340/0x340 [ 1206.114562][T14933] ? fsnotify_perm+0x271/0x5e0 [ 1206.119361][T14933] ? proc_fault_inject_write+0x340/0x340 [ 1206.125023][T14933] vfs_read+0x27e/0x920 [ 1206.129212][T14933] ? kernel_read+0x1e0/0x1e0 [ 1206.133827][T14933] ? __fget_files+0x28/0x4d0 [ 1206.138447][T14933] ? __fget_files+0x44a/0x4d0 [ 1206.143164][T14933] ? __fdget_pos+0x2a3/0x330 [ 1206.147780][T14933] ? ksys_read+0x75/0x250 [ 1206.152135][T14933] ksys_read+0x147/0x250 [ 1206.156410][T14933] ? vfs_write+0x940/0x940 [ 1206.160854][T14933] ? lockdep_hardirqs_on+0x98/0x150 [ 1206.166084][T14933] do_syscall_64+0x55/0xb0 [ 1206.170526][T14933] ? clear_bhb_loop+0x40/0x90 [ 1206.175231][T14933] ? clear_bhb_loop+0x40/0x90 [ 1206.179931][T14933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1206.185850][T14933] RIP: 0033:0x7f2cdbb8e15c [ 1206.190292][T14933] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1206.209920][T14933] RSP: 002b:00007f2cdcae4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1206.218356][T14933] RAX: ffffffffffffffda RBX: 00007f2cdbde5fa0 RCX: 00007f2cdbb8e15c [ 1206.226352][T14933] RDX: 000000000000000f RSI: 00007f2cdcae40a0 RDI: 0000000000000004 [ 1206.234346][T14933] RBP: 00007f2cdcae4090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.242429][T14933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.250424][T14933] R13: 00007f2cdbde6038 R14: 00007f2cdbde5fa0 R15: 00007ffe86874048 [ 1206.258426][T14933] [ 1206.666400][T14943] loop5: detected capacity change from 0 to 64 [ 1206.903958][T14943] ------------[ cut here ]------------ [ 1206.909837][T14943] WARNING: CPU: 0 PID: 14943 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460 [ 1206.919237][T14943] Modules linked in: [ 1206.923168][T14943] CPU: 0 PID: 14943 Comm: syz.5.2281 Not tainted syzkaller #0 [ 1206.930747][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1206.941168][T14943] RIP: 0010:__alloc_pages+0x2de/0x460 [ 1206.946722][T14943] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 fe a1 63 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 1206.966832][T14943] RSP: 0018:ffffc9000b8afa00 EFLAGS: 00010246 [ 1206.973389][T14943] RAX: ffffc9000b8afa00 RBX: 1ffff92001715f44 RCX: 0000000000000000 [ 1206.981727][T14943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b8afa68 [ 1206.990376][T14943] RBP: ffffc9000b8afb00 R08: ffffc9000b8afa67 R09: 0000000000000000 [ 1206.999242][T14943] R10: ffffc9000b8afa40 R11: fffff52001715f4d R12: 0000000000000012 [ 1207.007710][T14943] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 1207.015936][T14943] FS: 00007f2cdcae46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1207.024955][T14943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1207.031581][T14943] CR2: 000000110c3cfff6 CR3: 00000000762a7000 CR4: 00000000003506f0 [ 1207.039725][T14943] Call Trace: [ 1207.043045][T14943] [ 1207.046066][T14943] ? zone_statistics+0x170/0x170 [ 1207.051056][T14943] ? __might_fault+0xaa/0x120 [ 1207.055815][T14943] ? __lock_acquire+0x7c80/0x7c80 [ 1207.060885][T14943] __kmalloc_large_node+0x8c/0x1e0 [ 1207.066128][T14943] ? raw_ioctl+0x19b0/0x3b70 [ 1207.070762][T14943] __kmalloc+0x111/0x240 [ 1207.075093][T14943] raw_ioctl+0x19b0/0x3b70 [ 1207.079542][T14943] ? tomoyo_path_number_perm+0x477/0x590 [ 1207.085260][T14943] ? __kmem_cache_free+0xba/0x1f0 [ 1207.090343][T14943] ? tomoyo_path_number_perm+0x4dc/0x590 [ 1207.096645][T14943] ? tomoyo_path_number_perm+0x1ba/0x590 [ 1207.102327][T14943] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1207.108016][T14943] ? make_qualifier+0x250/0x250 [ 1207.112931][T14943] ? __fget_files+0x28/0x4d0 [ 1207.117714][T14943] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1207.122679][T14943] ? security_file_ioctl+0x80/0xa0 [ 1207.127919][T14943] ? make_qualifier+0x250/0x250 [ 1207.132823][T14943] __se_sys_ioctl+0xfd/0x170 [ 1207.137494][T14943] do_syscall_64+0x55/0xb0 [ 1207.141951][T14943] ? clear_bhb_loop+0x40/0x90 [ 1207.146706][T14943] ? clear_bhb_loop+0x40/0x90 [ 1207.151416][T14943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1207.157386][T14943] RIP: 0033:0x7f2cdbb8f749 [ 1207.161839][T14943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1207.181596][T14943] RSP: 002b:00007f2cdcae4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.190110][T14943] RAX: ffffffffffffffda RBX: 00007f2cdbde5fa0 RCX: 00007f2cdbb8f749 [ 1207.198793][T14943] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 0000000000000004 [ 1207.206967][T14943] RBP: 00007f2cdbc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1207.215036][T14943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.223040][T14943] R13: 00007f2cdbde6038 R14: 00007f2cdbde5fa0 R15: 00007ffe86874048 [ 1207.231125][T14943] [ 1207.234237][T14943] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1207.241585][T14943] CPU: 0 PID: 14943 Comm: syz.5.2281 Not tainted syzkaller #0 [ 1207.249049][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1207.259121][T14943] Call Trace: [ 1207.262401][T14943] [ 1207.265340][T14943] dump_stack_lvl+0x16c/0x230 [ 1207.270069][T14943] ? show_regs_print_info+0x20/0x20 [ 1207.275285][T14943] ? load_image+0x3b0/0x3b0 [ 1207.279825][T14943] panic+0x2c0/0x710 [ 1207.283744][T14943] ? bpf_jit_dump+0xd0/0xd0 [ 1207.288282][T14943] __warn+0x2e0/0x470 [ 1207.292306][T14943] ? __alloc_pages+0x2de/0x460 [ 1207.297106][T14943] ? __alloc_pages+0x2de/0x460 [ 1207.301897][T14943] report_bug+0x2be/0x4f0 [ 1207.306243][T14943] ? __alloc_pages+0x2de/0x460 [ 1207.311032][T14943] ? __alloc_pages+0x2de/0x460 [ 1207.315808][T14943] ? __alloc_pages+0x2e0/0x460 [ 1207.320585][T14943] handle_bug+0xcf/0x120 [ 1207.324828][T14943] exc_invalid_op+0x1a/0x50 [ 1207.329335][T14943] asm_exc_invalid_op+0x1a/0x20 [ 1207.334195][T14943] RIP: 0010:__alloc_pages+0x2de/0x460 [ 1207.339589][T14943] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 fe a1 63 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 1207.359203][T14943] RSP: 0018:ffffc9000b8afa00 EFLAGS: 00010246 [ 1207.365276][T14943] RAX: ffffc9000b8afa00 RBX: 1ffff92001715f44 RCX: 0000000000000000 [ 1207.373251][T14943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b8afa68 [ 1207.381310][T14943] RBP: ffffc9000b8afb00 R08: ffffc9000b8afa67 R09: 0000000000000000 [ 1207.389288][T14943] R10: ffffc9000b8afa40 R11: fffff52001715f4d R12: 0000000000000012 [ 1207.397262][T14943] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 1207.405254][T14943] ? zone_statistics+0x170/0x170 [ 1207.410214][T14943] ? __might_fault+0xaa/0x120 [ 1207.414901][T14943] ? __lock_acquire+0x7c80/0x7c80 [ 1207.419932][T14943] __kmalloc_large_node+0x8c/0x1e0 [ 1207.425056][T14943] ? raw_ioctl+0x19b0/0x3b70 [ 1207.429649][T14943] __kmalloc+0x111/0x240 [ 1207.433904][T14943] raw_ioctl+0x19b0/0x3b70 [ 1207.438339][T14943] ? tomoyo_path_number_perm+0x477/0x590 [ 1207.444005][T14943] ? __kmem_cache_free+0xba/0x1f0 [ 1207.449048][T14943] ? tomoyo_path_number_perm+0x4dc/0x590 [ 1207.454688][T14943] ? tomoyo_path_number_perm+0x1ba/0x590 [ 1207.460330][T14943] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1207.465800][T14943] ? make_qualifier+0x250/0x250 [ 1207.470687][T14943] ? __fget_files+0x28/0x4d0 [ 1207.475293][T14943] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1207.480239][T14943] ? security_file_ioctl+0x80/0xa0 [ 1207.485361][T14943] ? make_qualifier+0x250/0x250 [ 1207.490224][T14943] __se_sys_ioctl+0xfd/0x170 [ 1207.494856][T14943] do_syscall_64+0x55/0xb0 [ 1207.499274][T14943] ? clear_bhb_loop+0x40/0x90 [ 1207.503958][T14943] ? clear_bhb_loop+0x40/0x90 [ 1207.508646][T14943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1207.514547][T14943] RIP: 0033:0x7f2cdbb8f749 [ 1207.518963][T14943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1207.538578][T14943] RSP: 002b:00007f2cdcae4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.547001][T14943] RAX: ffffffffffffffda RBX: 00007f2cdbde5fa0 RCX: 00007f2cdbb8f749 [ 1207.554982][T14943] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 0000000000000004 [ 1207.562957][T14943] RBP: 00007f2cdbc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1207.570928][T14943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.578902][T14943] R13: 00007f2cdbde6038 R14: 00007f2cdbde5fa0 R15: 00007ffe86874048 [ 1207.586889][T14943] [ 1207.590223][T14943] Kernel Offset: disabled [ 1207.594547][T14943] Rebooting in 86400 seconds..