last executing test programs: 9m12.112128038s ago: executing program 2 (id=238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 9m11.938392519s ago: executing program 2 (id=240): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x10000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f00000000c0)=""/248, 0xf8, 0x20, 0x0, 0x0) 9m10.079278831s ago: executing program 2 (id=242): modify_ldt$write(0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ca000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) flistxattr(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) 9m6.519974703s ago: executing program 2 (id=247): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9m6.041440079s ago: executing program 2 (id=250): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x10000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f00000000c0)=""/248, 0xf8, 0x20, 0x0, 0x0) 9m4.510801647s ago: executing program 2 (id=252): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805) r2 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) r4 = epoll_create1(0x80000) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000180), 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, r5, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000140)={0xe000001b}) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) chdir(&(0x7f0000000000)='./file0\x00') write$cgroup_int(r0, &(0x7f0000000180)=0xfe5f, 0x12) 8m48.981722079s ago: executing program 32 (id=252): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805) r2 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) r4 = epoll_create1(0x80000) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000180), 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, r5, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000140)={0xe000001b}) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) chdir(&(0x7f0000000000)='./file0\x00') write$cgroup_int(r0, &(0x7f0000000180)=0xfe5f, 0x12) 7m21.453697606s ago: executing program 4 (id=350): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805) r2 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) r4 = epoll_create1(0x80000) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000180), 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000040)={0x4, r5, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140)={0xe000001b}) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) chdir(&(0x7f0000000000)='./file0\x00') write$cgroup_int(r0, &(0x7f0000000180)=0xfe5f, 0x12) 7m17.551516002s ago: executing program 4 (id=354): pipe(0x0) socket(0x4, 0x2, 0x400002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x2ea, 0x0) r1 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_create(0x11ffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) r3 = syz_clone3(0x0, 0x0) tgkill(r3, r3, 0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x7, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0xa931) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) keyctl$setperm(0x5, r4, 0x180400) 7m15.279165909s ago: executing program 4 (id=359): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m14.572418087s ago: executing program 4 (id=361): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x48043) r2 = dup(r0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000140)=0x80000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e62, 0xeffffff2, @empty, 0x7f}}, 0x10001fc, 0x6, 0xffff1896, 0x1f4, 0x26, 0xffffffb9, 0x1a}, 0x9c) 7m11.434148044s ago: executing program 4 (id=365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) 7m8.730176186s ago: executing program 4 (id=369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) recvmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000400)=""/67, 0x43}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/59, 0x3b}], 0x3}, 0x5d}], 0x1, 0x10082, 0x0) 6m53.520258094s ago: executing program 33 (id=369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) recvmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000400)=""/67, 0x43}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/59, 0x3b}], 0x3}, 0x5d}], 0x1, 0x10082, 0x0) 6.018369701s ago: executing program 0 (id=1298): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x29, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 5.919628623s ago: executing program 0 (id=1299): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="010028bd7900fbdbdf2505000000200001800d0001"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (fail_nth: 1) 5.451970969s ago: executing program 0 (id=1300): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x800002, 0x14c0348, 0x7ff, 0x1, 0xfffffbf1, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 5.449385689s ago: executing program 5 (id=1301): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="010028bd7900fbdbdf2505000000200001800d0001"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 4.971058645s ago: executing program 5 (id=1303): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.567922361s ago: executing program 0 (id=1306): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14fffffcff0204be04020506050e02040943000800040000000400ef000d0068d0bf050700", 0x30, 0x4004, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3}) close_range(r6, r4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.467602865s ago: executing program 0 (id=1309): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x80, 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8442, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000000)="cbcc02", 0x3, 0xc00) 3.402485956s ago: executing program 3 (id=1310): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.292145397s ago: executing program 5 (id=1311): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x32442, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x9, 0x207, 0x5, 0x691}, 0x10) sendto$packet(r2, &(0x7f0000000880)="19d3", 0x2, 0x4, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcd}, 0x1c) write(r2, &(0x7f0000000000)="ed", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xd0, "94660f00000000000058000000000004a200000080fc4eb15500", 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 3.208520928s ago: executing program 1 (id=1312): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000400000000000000000000000850000009b000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff0882762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x7, 0x80001) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000100)={0x4b, [0x3, 0x10, 0xfffffffc], [{0x8, 0xc}, {0x7, 0xc, 0x1, 0x0, 0x1, 0x1}, {0x3, 0xff, 0x1, 0x1}, {0x5, 0x9, 0x1, 0x1, 0x1}, {0x9, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x40, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1, 0xfffffffb, 0x1, 0x1, 0x1}, {0x7, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x995, 0x5, 0x0, 0x1, 0x1}, {0x3, 0x6eed5003, 0x1, 0x1}], 0x7}) 3.002099081s ago: executing program 1 (id=1313): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe880000000000000000000000000001000000000000000000000000000000004e2407944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000040)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6, 0x3}, {0x4000}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2.860151953s ago: executing program 5 (id=1314): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x800002, 0x14c0348, 0x7ff, 0x1, 0xfffffbf1, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 2.825316793s ago: executing program 3 (id=1315): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.779673244s ago: executing program 1 (id=1316): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.428033959s ago: executing program 1 (id=1317): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14fffffcff0204be04020506050e02040943000800040000000400ef000d0068d0bf050700", 0x30, 0x4004, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3}) close_range(r6, r4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.450167291s ago: executing program 3 (id=1318): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x29, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.405924282s ago: executing program 5 (id=1319): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.356054902s ago: executing program 3 (id=1320): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.296291544s ago: executing program 1 (id=1321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@discard_size={'discard', 0x3d, 0x6}}, {@discard}, {}, {@quota}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x80449d, 0x0, 0xfe, 0x0, &(0x7f0000000240)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) shutdown(r0, 0x1) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x2, {0xffffffff, 0x9, 0x9, 0xfffffffffffffffb, 0x6b2c86eb, 0x1, 0x5d1, 0x1, 0xd}}, 0x43) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1.006261117s ago: executing program 3 (id=1322): syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f00000001c0)={[{@user_xattr}, {@abort}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@norecovery}, {@quota}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}, {@test_dummy_encryption_v1, 0x32}]}, 0x1, 0x519, &(0x7f0000000b00)="$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") lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00') 644.138162ms ago: executing program 3 (id=1323): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 549.774393ms ago: executing program 0 (id=1324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 204.843708ms ago: executing program 5 (id=1325): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) 0s ago: executing program 1 (id=1326): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000840), &(0x7f0000000140)='./file0\x00', 0x2000000, &(0x7f0000001680)=ANY=[@ANYBLOB='codepage=iso8859-2,iocharset=default,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c008b1b7e1447e0e4a2b51ef3fa706f346ff1ad27d705714e14ad1eedf4bdc9b633cbb5e7e4ec4501004203bcdf6e085cdef4fad42c38b30ac586c0b83b4ecf0e63dd74069544e97b2df39fba32b0798b4e239cb15b208fbcc861d1d10fa47392d0129ecc276f358499856c9bcbf096294194a8152d8a658c832c39a2ef894567e2715ede536beb7d284b6266377eaab131e249a57dc708a1c168c993e57d67c7b3c4f22ece4ca07672f8ba37ff0cc7b9cd651895d0b0ad5641fbcd7aec4418bad435d5842ff5f655b1c6faec3604bbbffdeef04710000000ad94d2d39a"], 0x5, 0x2e9, &(0x7f0000006440)="$eJzs3T1v00Acx/HfOUmbPqiEFoTUBVQogqWiwIBgCEJZ2ZkQ0KRSRVREWyRgoSBGxAtg5y3wIlhAvAGYmBgYuxnd5ew6je000DiN+H6kBPtyd/6f/HR/S9QC8N+60/j+8dpP+zFSSSVJN6VAUlUqSzqtM9VnmzsbO+1WM6+jkmthP0adlqanztpmK62pbedaeDW7VtZssizJ9PaMvxSG4e0fow4CI+fO/hSBNOnPQ/d7teC4hmVXOjvqGIqW3MFmT3t6rrkRhgMAOAb8/T/wt4nfoS0yCgJp2d/2x+f+f2uxb5W9QgIpzPV2T1GY2yBx/3ezu9DY/XvC/bSf77lEy/4eRFniYYKpHFifUOfI6ppgmn5ZpYslmFrfKGtl7bWagd6o7iWqnXLfzc6hG+kT7VJKbpoju7eK7k53RuNmlAdFIa1vtFuTdiERfxTBwmBb/Hfms/lq7puaPqgZz//KobG7ye2p2oE9FVRs/Feye5xxrWwt+YHV6/Wgq8pJt5FFvwWvzyir6RlJss/oAcFuHEFenG7b8+p+rNAZ3WqfVgtprWrxWm+ri/7fRKuSPxJW1p60cx+lDEc0RPPe3DNL+qVPaiTm/4GNb1mJMzPvUm9cTX9kdMYzkV6z7GrWeu4c+6fLuTgCb3LgsUHKelqW4Z0e6Ybmtl+8fFxqt1tbduFhysLT2S3jSypvpdQ6w18oKaeOdvdLQutVGB6253CYwV8+0g7t9SMusadPWmV7lsUlQdG7aewWoovSgM0bX5R3QI7PQhhmjn0o1ygcM9sm2ulutaypUUeEgtl5l+nkf24m72d1LkGxX7WceXp+kqmuHlfjDK57KjjvvqcHyuBmsjO4xBavZuSMLuc6f0m6kCg0yt1ifi4ydkxD3/SA5/8AAAAAAAAAAAAAAAAAAADjpoj/aTDqMQIAAAAAAAAAAAAAAAAAAAAAMO6y3v87kff+37S/Ee/e/1sr5P2/AI7GnwAAAP//y4B3mQ==") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x50009405, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002780), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000027c0)={0x8, @output={0x1000, 0x0, {0x3, 0x4}, 0xf, 0x8001}}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000500)="3f2fc37f8dea21905a0328cfac54ec76fc2426925b1c82cbc367904918a9fc262bfc174ed09f84631cfeeaec781e90a5d3111d0c94f3c318fa709eb5b4cc78311c7d3b1002ff8fadcbb009e3a1a1ba6a1baf6b1be786ae3203c6ec24ee7619cf0d6918f74102259bd27a3592c1c22ab5a8caa7b959c740d580b8e3a7e6c7c4d1771940dd8a97029ba04149ab610cb9c36cd7d77b19f856a3f59b04d9af05766b70e1e87d8ede9c2f49ba5f014c91e7474c97fcd5b9dbda3d2c1429ae4377f2d6900ee5c4", 0xc4, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@deltaction={0x160, 0x31, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbmod\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x973a}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5740}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}]}, @TCA_ACT_TAB={0x50}, @TCA_ACT_TAB={0x28, 0x1, [{0x2, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000530400042bbd7000fcdbdf25348f797747cd31bd8e6dddeffeb5144ea58a7c9cba751551655d34edd523cb3904910acf5f7355df9b7782f3cdf09dc41fc81766e3469efb8e970102143f2e9bba87219cd98a54028709140267c57cd671928f10f963c81ebf6c24351b3396952a49c6f781f4d79677f19bcd9ee7675718ef6d0d85dd1695aaa5c36abca4c0c27eede99e880f1d4ed46d5fe877b2610ec86070016caa2388091c40e6d1001c9df1f32d8c3759dc9bbdf087e4a5fa45643bcb5084238f15f13dd6bd7f295c3f677ca613e2a8257ff007bee6ebfcf61d4152253919f769763919d62f05013590d705b8e6b1b7efc1122396cf0ed187cf502b5481d0aac88b60c3b74c14ea1158639da33a59f2031eb3250de0d25bef001c51ebe19aebf1ec65846ac0518c4fd8a9526a698dec5fc06b58d36a617441f47c289e5ad4590d45856b1667f07a196b79f2d3dd533d160069a25fe15811350c8265a0e6ed7a04376e2893816bd2574c61964206e1d97e7c955f6e3b827abaf59b9e794db96e2f3d8f36e989669f0ea7186679b6d1d322db1f599bcb4cee73c67d2130638f718e7239fc9a"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x9080) kernel console output (not intermixed with test programs): b 2-1: config 0 interface 0 has no altsetting 0 [ 518.272092][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 518.287780][ T5839] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 518.303899][ T8] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 518.346236][ T8] usb 2-1: Product: syz [ 518.369050][ T8] usb 2-1: Manufacturer: syz [ 518.387648][ T8] usb 2-1: SerialNumber: syz [ 518.405808][ T8] usb 2-1: config 0 descriptor?? [ 518.428463][ T8699] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 518.455832][ T8] usb 2-1: selecting invalid altsetting 0 [ 518.467640][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 518.478970][ T5839] usb 4-1: unable to get BOS descriptor or descriptor too short [ 518.490075][ T5839] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 518.498427][ T5839] usb 4-1: can't read configurations, error -71 [ 520.467770][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 520.669597][ T8] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 520.687603][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 520.688311][ T5839] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 520.701907][ T8] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 520.701967][ T8] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 520.701988][ T8] usb 6-1: Product: syz [ 520.702003][ T8] usb 6-1: Manufacturer: syz [ 520.702017][ T8] usb 6-1: SerialNumber: syz [ 520.739853][ T8] usb 6-1: config 0 descriptor?? [ 520.745840][ T8737] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 520.764193][ T8] usb 6-1: selecting invalid altsetting 0 [ 520.930401][ T5839] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 521.055649][ T5818] usb 2-1: USB disconnect, device number 17 [ 521.068823][ T5839] usb 1-1: config 0 interface 0 has no altsetting 0 [ 521.081962][ T5839] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 521.097423][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 521.113760][ T5839] usb 1-1: Product: syz [ 521.118882][ T5839] usb 1-1: Manufacturer: syz [ 521.123548][ T5839] usb 1-1: SerialNumber: syz [ 521.225286][ T5839] usb 1-1: config 0 descriptor?? [ 521.291724][ T5839] usb 1-1: selecting invalid altsetting 0 [ 521.738081][ T5818] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 522.035832][ T5818] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 522.169538][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 522.185310][ T5818] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 522.203013][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 522.217323][ T5818] usb 2-1: Product: syz [ 522.224920][ T5818] usb 2-1: Manufacturer: syz [ 522.235864][ T5818] usb 2-1: SerialNumber: syz [ 522.471503][ T5818] usb 2-1: config 0 descriptor?? [ 522.478855][ T8741] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 522.495183][ T5818] usb 2-1: selecting invalid altsetting 0 [ 523.530481][ T5762] usb 6-1: USB disconnect, device number 4 [ 525.442146][ T5818] usb 2-1: USB disconnect, device number 18 [ 525.498432][ T9] usb 1-1: USB disconnect, device number 13 [ 525.897644][ T2131] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 526.097651][ T2131] usb 4-1: Using ep0 maxpacket: 8 [ 526.142364][ T2131] usb 4-1: unable to get BOS descriptor or descriptor too short [ 526.161854][ T2131] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 526.208683][ T2131] usb 4-1: can't read configurations, error -71 [ 531.395206][ T8794] IPVS: nq: FWM 3 0x00000003 - no destination available [ 531.529511][ T8797] IPVS: nq: FWM 3 0x00000003 - no destination available [ 534.228426][ T5778] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 534.537662][ T5778] usb 4-1: Using ep0 maxpacket: 8 [ 534.792982][ T5778] usb 4-1: unable to get BOS descriptor or descriptor too short [ 534.878953][ T5778] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 534.886758][ T5778] usb 4-1: can't read configurations, error -71 [ 535.779510][ T5762] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 537.387627][ T5778] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 537.489955][ T5762] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 537.512779][ T5762] usb 1-1: config 0 interface 0 has no altsetting 0 [ 537.543728][ T5762] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 537.570496][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 537.592533][ T5762] usb 1-1: Product: syz [ 537.604588][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.638'. [ 537.613852][ T5762] usb 1-1: Manufacturer: syz [ 537.619159][ T5762] usb 1-1: SerialNumber: syz [ 537.625894][ T5778] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 537.663098][ T5762] usb 1-1: config 0 descriptor?? [ 537.672906][ T5778] usb 4-1: config 0 interface 0 has no altsetting 0 [ 537.693782][ T8835] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 537.712286][ T5762] usb 1-1: selecting invalid altsetting 0 [ 537.729383][ T5778] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 537.745403][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 537.774329][ T5778] usb 4-1: Product: syz [ 537.786665][ T5778] usb 4-1: Manufacturer: syz [ 537.802244][ T5778] usb 4-1: SerialNumber: syz [ 537.838958][ T5778] usb 4-1: config 0 descriptor?? [ 537.878166][ T8837] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 537.902796][ T5778] usb 4-1: selecting invalid altsetting 0 [ 540.063378][ T5778] usb 1-1: USB disconnect, device number 14 [ 542.064170][ T5762] usb 4-1: USB disconnect, device number 20 [ 544.468058][ T5762] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 544.637635][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 544.677676][ T5762] usb 4-1: Using ep0 maxpacket: 8 [ 544.695813][ T5762] usb 4-1: unable to get BOS descriptor or descriptor too short [ 544.720973][ T5762] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 544.737916][ T5762] usb 4-1: can't read configurations, error -71 [ 544.837914][ T8] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 544.857999][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 544.880186][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 544.897848][ T8] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 544.906087][ T8] usb 1-1: Product: syz [ 544.924406][ T8] usb 1-1: Manufacturer: syz [ 544.947099][ T8] usb 1-1: SerialNumber: syz [ 544.960088][ T8] usb 1-1: config 0 descriptor?? [ 544.965858][ T8883] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 544.992250][ T8885] fuse: Bad value for 'group_id' [ 545.002993][ T8] usb 1-1: selecting invalid altsetting 0 [ 546.387744][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 547.287231][ T8904] vivid-000: kernel_thread() failed [ 547.363618][ T8] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 547.459116][ T5762] usb 1-1: USB disconnect, device number 15 [ 547.510922][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 547.743119][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 547.977139][ T8] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 548.046300][ T8] usb 2-1: Product: syz [ 548.087660][ T8] usb 2-1: Manufacturer: syz [ 548.092339][ T8] usb 2-1: SerialNumber: syz [ 548.136852][ T8] usb 2-1: config 0 descriptor?? [ 548.148740][ T8896] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 548.171165][ T8] usb 2-1: selecting invalid altsetting 0 [ 548.390823][ T8918] fuse: Bad value for 'group_id' [ 548.868062][ T2131] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 548.898413][ T5818] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 549.108069][ T2131] usb 6-1: Using ep0 maxpacket: 8 [ 549.176702][ T5818] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 549.254464][ T2131] usb 6-1: unable to get BOS descriptor or descriptor too short [ 549.365959][ T5818] usb 1-1: config 0 interface 0 has no altsetting 0 [ 549.431743][ T2131] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 549.531794][ T2131] usb 6-1: can't read configurations, error -71 [ 549.543198][ T5818] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 549.554150][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 549.563249][ T5818] usb 1-1: Product: syz [ 549.567874][ T5818] usb 1-1: Manufacturer: syz [ 549.572606][ T5818] usb 1-1: SerialNumber: syz [ 549.591670][ T5818] usb 1-1: config 0 descriptor?? [ 549.604978][ T8922] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 549.620123][ T5818] usb 1-1: selecting invalid altsetting 0 [ 550.933571][ T5762] usb 2-1: USB disconnect, device number 19 [ 552.402487][ T8] usb 1-1: USB disconnect, device number 16 [ 553.488176][ T8945] vivid-000: kernel_thread() failed [ 554.159856][ T8958] fuse: Bad value for 'group_id' [ 555.297871][ T5762] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 555.786570][ T5762] usb 6-1: Using ep0 maxpacket: 8 [ 558.158582][ T5762] usb 6-1: unable to get BOS descriptor or descriptor too short [ 558.176046][ T5762] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 558.205982][ T5762] usb 6-1: can't read configurations, error -71 [ 562.127653][ T5778] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 562.210180][ T8999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.680'. [ 563.099646][ T5778] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 563.123632][ T5778] usb 6-1: config 0 interface 0 has no altsetting 0 [ 563.144296][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.152372][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.164335][ T5778] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 563.188716][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 563.200678][ T5778] usb 6-1: Product: syz [ 563.204920][ T5778] usb 6-1: Manufacturer: syz [ 563.215389][ T5778] usb 6-1: SerialNumber: syz [ 563.225111][ T5778] usb 6-1: config 0 descriptor?? [ 563.244584][ T8993] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 563.267140][ T5778] usb 6-1: selecting invalid altsetting 0 [ 565.068426][ T27] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 565.415936][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 565.432496][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 565.451411][ T27] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 565.471056][ T27] usb 1-1: can't read configurations, error -71 [ 565.537752][ T5778] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 565.720771][ T5778] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 565.731180][ T5778] usb 4-1: config 0 interface 0 has no altsetting 0 [ 565.740737][ T5778] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 565.750159][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 565.758879][ T5778] usb 4-1: Product: syz [ 565.763097][ T5778] usb 4-1: Manufacturer: syz [ 565.768306][ T5778] usb 4-1: SerialNumber: syz [ 565.775792][ T5778] usb 4-1: config 0 descriptor?? [ 565.786553][ T9015] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 565.795287][ T5839] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 565.806784][ T5778] usb 4-1: selecting invalid altsetting 0 [ 565.993972][ T5839] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 566.022605][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 566.040462][ T5839] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 566.057006][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 566.065730][ T5839] usb 2-1: Product: syz [ 566.076134][ T5839] usb 2-1: Manufacturer: syz [ 566.082900][ T5839] usb 2-1: SerialNumber: syz [ 566.095916][ T5839] usb 2-1: config 0 descriptor?? [ 566.104975][ T9022] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 566.123494][ T5839] usb 2-1: selecting invalid altsetting 0 [ 567.295734][ T5818] usb 6-1: USB disconnect, device number 9 [ 567.951239][ T5818] usb 4-1: USB disconnect, device number 23 [ 568.595429][ T788] usb 2-1: USB disconnect, device number 20 [ 570.925076][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 579.977773][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'. [ 591.693658][ T9209] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.738'. [ 594.600261][ T9222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 594.898051][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 595.097784][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 595.119378][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 595.139274][ T8] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 595.146939][ T8] usb 4-1: can't read configurations, error -71 [ 597.424180][ T9238] fuse: Unknown parameter 'grou00000000000000000000' [ 600.259601][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.754'. [ 600.579854][ T9273] fuse: Unknown parameter 'grou00000000000000000000' [ 600.597830][ T5762] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 600.838082][ T5762] usb 4-1: Using ep0 maxpacket: 8 [ 600.869666][ T5762] usb 4-1: unable to get BOS descriptor or descriptor too short [ 600.890281][ T5762] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 600.924276][ T5762] usb 4-1: can't read configurations, error -71 [ 603.755495][ T9299] fuse: Unknown parameter 'grou00000000000000000000' [ 604.248028][ T9308] netlink: 28 bytes leftover after parsing attributes in process `syz.5.768'. [ 606.132287][ T5762] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 606.259046][ T9321] fuse: Unknown parameter 'group_i00000000000000000000' [ 606.328643][ T5762] usb 6-1: Using ep0 maxpacket: 8 [ 606.345630][ T5762] usb 6-1: unable to get BOS descriptor or descriptor too short [ 606.356839][ T5762] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 606.382247][ T5762] usb 6-1: can't read configurations, error -71 [ 609.801346][ T9353] fuse: Unknown parameter 'group_i00000000000000000000' [ 610.136173][ T9360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.786'. [ 611.957605][ T5818] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 612.177903][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 612.204816][ T5818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 612.248144][ T5818] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 612.255818][ T5818] usb 4-1: can't read configurations, error -71 [ 613.034879][ T9382] fuse: Unknown parameter 'group_i00000000000000000000' [ 613.151589][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 615.086341][ T2131] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 615.306619][ T2131] usb 2-1: Using ep0 maxpacket: 8 [ 615.337947][ T2131] usb 2-1: unable to get BOS descriptor or descriptor too short [ 615.354145][ T2131] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 615.369263][ T2131] usb 2-1: can't read configurations, error -71 [ 615.522303][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'. [ 615.531380][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'. [ 616.540014][ T9410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.801'. [ 616.579413][ T9414] fuse: Unknown parameter 'group_id00000000000000000000' [ 616.837654][ T5820] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 617.064534][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 617.125347][ T5820] usb 4-1: unable to get BOS descriptor or descriptor too short [ 617.136384][ T5820] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 617.166816][ T5820] usb 4-1: can't read configurations, error -71 [ 617.175216][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.799'. [ 619.077765][ T5818] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 619.287608][ T5818] usb 6-1: Using ep0 maxpacket: 8 [ 619.321001][ T5818] usb 6-1: unable to get BOS descriptor or descriptor too short [ 619.342507][ T5818] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 619.378558][ T5818] usb 6-1: can't read configurations, error -71 [ 619.826702][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'. [ 621.837663][ T5820] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 623.271165][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 623.721174][ T5820] usb 2-1: device descriptor read/all, error -71 [ 623.901822][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 623.910890][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 624.732619][ T9466] vivid-000: kernel_thread() failed [ 624.798482][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.805670][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.938999][ T9470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.817'. [ 625.347724][ T5820] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 625.438498][ T9480] fuse: Unknown parameter 'group_id00000000000000000000' [ 625.527552][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 625.549498][ T5820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 625.569455][ T5820] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 625.589875][ T5820] usb 2-1: can't read configurations, error -71 [ 625.604686][ T5820] usb usb2-port1: attempt power cycle [ 627.264624][ T9494] loop0: detected capacity change from 0 to 4096 [ 627.287262][ T9494] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 627.337321][ T9494] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 627.682126][ T9506] fuse: Unknown parameter 'group_id00000000000000000000' [ 628.012032][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.829'. [ 628.155414][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.830'. [ 628.164762][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.830'. [ 628.364642][ T5820] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 628.657779][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 628.745028][ T5820] usb 1-1: unable to get BOS descriptor or descriptor too short [ 628.843924][ T5820] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 628.913425][ T5820] usb 1-1: can't read configurations, error -71 [ 629.602729][ T9536] fuse: Bad value for 'user_id' [ 632.283748][ T9574] fuse: Bad value for 'user_id' [ 635.034492][ T9613] fuse: Bad value for 'user_id' [ 637.104356][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 637.113589][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 640.802669][ T9652] fuse: Bad value for 'fd' [ 650.446419][ T9737] fuse: Bad value for 'fd' [ 652.325365][ T9744] loop0: detected capacity change from 0 to 32768 [ 652.375064][ T9744] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 652.626306][ T9011] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 652.765939][ T9771] fuse: Bad value for 'fd' [ 659.532316][ T9831] tipc: Started in network mode [ 659.537305][ T9831] tipc: Node identity 4, cluster identity 4711 [ 659.577732][ T9831] tipc: Node number set to 4 [ 659.715096][ T9836] tipc: Started in network mode [ 659.747842][ T9836] tipc: Node identity 4, cluster identity 4711 [ 659.754098][ T9836] tipc: Node number set to 4 [ 660.391033][ T9841] fuse: Bad value for 'fd' [ 669.106941][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.938'. [ 670.075330][ T9903] fuse: Invalid rootmode [ 672.070948][ T9928] FAULT_INJECTION: forcing a failure. [ 672.070948][ T9928] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 672.084161][ T9928] CPU: 0 PID: 9928 Comm: syz.1.944 Not tainted syzkaller #0 [ 672.091501][ T9928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 672.101598][ T9928] Call Trace: [ 672.104960][ T9928] [ 672.107906][ T9928] dump_stack_lvl+0x18c/0x250 [ 672.112621][ T9928] ? show_regs_print_info+0x20/0x20 [ 672.117869][ T9928] ? load_image+0x420/0x420 [ 672.122435][ T9928] ? __might_fault+0xaa/0x120 [ 672.127160][ T9928] ? __lock_acquire+0x7d40/0x7d40 [ 672.132237][ T9928] should_fail_ex+0x39d/0x4d0 [ 672.136965][ T9928] _copy_from_user+0x2f/0xe0 [ 672.141626][ T9928] __sys_bpf+0x23e/0x890 [ 672.145893][ T9928] ? bpf_link_show_fdinfo+0x390/0x390 [ 672.151299][ T9928] ? lock_chain_count+0x20/0x20 [ 672.156178][ T9928] __x64_sys_bpf+0x7c/0x90 [ 672.160615][ T9928] do_syscall_64+0x55/0xa0 [ 672.165052][ T9928] ? clear_bhb_loop+0x40/0x90 [ 672.169751][ T9928] ? clear_bhb_loop+0x40/0x90 [ 672.174475][ T9928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.180389][ T9928] RIP: 0033:0x7f58e499cdd9 [ 672.184866][ T9928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.204514][ T9928] RSP: 002b:00007f58e585b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 672.212975][ T9928] RAX: ffffffffffffffda RBX: 00007f58e4c16090 RCX: 00007f58e499cdd9 [ 672.220965][ T9928] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 672.228997][ T9928] RBP: 00007f58e585b090 R08: 0000000000000000 R09: 0000000000000000 [ 672.236981][ T9928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.244968][ T9928] R13: 00007f58e4c16128 R14: 00007f58e4c16090 R15: 00007fff82bb8f68 [ 672.252965][ T9928] [ 675.021823][ T9945] fuse: Invalid rootmode [ 675.422260][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.949'. [ 676.471543][ T9956] loop5: detected capacity change from 0 to 4096 [ 676.540544][ T9956] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 676.597149][ T9956] ntfs3: loop5: Failed to load $Secure (-22). [ 676.604159][ T9956] ntfs3: loop5: Failed to initialize $Secure (-22). [ 678.471486][ T9984] fuse: Invalid rootmode [ 680.514431][T10001] loop3: detected capacity change from 0 to 32768 [ 680.622072][T10001] ======================================================= [ 680.622072][T10001] WARNING: The mand mount option has been deprecated and [ 680.622072][T10001] and is ignored by this kernel. Remove the mand [ 680.622072][T10001] option from the mount to silence this warning. [ 680.622072][T10001] ======================================================= [ 680.733328][T10010] FAULT_INJECTION: forcing a failure. [ 680.733328][T10010] name failslab, interval 1, probability 0, space 0, times 1 [ 680.752939][T10010] CPU: 0 PID: 10010 Comm: syz.0.969 Not tainted syzkaller #0 [ 680.760414][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.770537][T10010] Call Trace: [ 680.773860][T10010] [ 680.776834][T10010] dump_stack_lvl+0x18c/0x250 [ 680.781681][T10010] ? show_regs_print_info+0x20/0x20 [ 680.786952][T10010] ? load_image+0x420/0x420 [ 680.791521][T10010] ? __might_sleep+0xe0/0xe0 [ 680.796173][T10010] ? __lock_acquire+0x7d40/0x7d40 [ 680.801256][T10010] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 680.806945][T10010] should_fail_ex+0x39d/0x4d0 [ 680.811695][T10010] should_failslab+0x9/0x20 [ 680.816268][T10010] slab_pre_alloc_hook+0x59/0x310 [ 680.821372][T10010] ? __se_sys_memfd_create+0x25a/0x660 [ 680.826884][T10010] ? __se_sys_memfd_create+0x25a/0x660 [ 680.832395][T10010] __kmem_cache_alloc_node+0x53/0x250 [ 680.837826][T10010] ? __se_sys_memfd_create+0x25a/0x660 [ 680.843335][T10010] __kmalloc+0xa4/0x230 [ 680.847580][T10010] __se_sys_memfd_create+0x25a/0x660 [ 680.852965][T10010] do_syscall_64+0x55/0xa0 [ 680.857439][T10010] ? clear_bhb_loop+0x40/0x90 [ 680.862179][T10010] ? clear_bhb_loop+0x40/0x90 [ 680.866920][T10010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.872869][T10010] RIP: 0033:0x7fc22379cdd9 [ 680.877333][T10010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.896994][T10010] RSP: 002b:00007fc2245dbe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 680.905470][T10010] RAX: ffffffffffffffda RBX: 000000000001f7b7 RCX: 00007fc22379cdd9 [ 680.913495][T10010] RDX: 00007fc2245dbee0 RSI: 0000000000000000 RDI: 00007fc223832f49 [ 680.921523][T10010] RBP: 000020000003ef40 R08: 00000000ffffffff R09: 0000000000000000 [ 680.929558][T10010] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 680.937588][T10010] R13: 00007fc2245dbee0 R14: 00007fc2245dbea0 R15: 00002000000000c0 [ 680.945631][T10010] [ 680.948828][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.045318][T10001] JBD2: Ignoring recovery information on journal [ 681.322399][T10001] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 681.443254][T10018] fuse: Bad value for 'rootmode' [ 682.295277][T10041] FAULT_INJECTION: forcing a failure. [ 682.295277][T10041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.337022][T10041] CPU: 0 PID: 10041 Comm: syz.0.978 Not tainted syzkaller #0 [ 682.344498][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 682.354604][T10041] Call Trace: [ 682.357933][T10041] [ 682.360920][T10041] dump_stack_lvl+0x18c/0x250 [ 682.365668][T10041] ? show_regs_print_info+0x20/0x20 [ 682.370927][T10041] ? load_image+0x420/0x420 [ 682.375504][T10041] ? __might_fault+0xaa/0x120 [ 682.380235][T10041] ? __lock_acquire+0x7d40/0x7d40 [ 682.385322][T10041] should_fail_ex+0x39d/0x4d0 [ 682.390067][T10041] _copy_from_user+0x2f/0xe0 [ 682.394716][T10041] do_sock_getsockopt+0x188/0x450 [ 682.399811][T10041] ? __ia32_sys_setsockopt+0x200/0x200 [ 682.405312][T10041] ? warn_bogus_irq_restore+0x20/0x30 [ 682.410728][T10041] __x64_sys_getsockopt+0x1d6/0x280 [ 682.415952][T10041] ? warn_bogus_irq_restore+0x20/0x30 [ 682.421365][T10041] ? warn_bogus_irq_restore+0x20/0x30 [ 682.426773][T10041] do_syscall_64+0x55/0xa0 [ 682.431213][T10041] ? clear_bhb_loop+0x40/0x90 [ 682.435919][T10041] ? clear_bhb_loop+0x40/0x90 [ 682.440632][T10041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.446555][T10041] RIP: 0033:0x7fc22379cdd9 [ 682.451005][T10041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.470727][T10041] RSP: 002b:00007fc2245dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 682.479168][T10041] RAX: ffffffffffffffda RBX: 00007fc223a15fa0 RCX: 00007fc22379cdd9 [ 682.487180][T10041] RDX: 0000000000000002 RSI: 0000000000000118 RDI: 0000000000000004 [ 682.495190][T10041] RBP: 00007fc2245dc090 R08: 00002000000003c0 R09: 0000000000000000 [ 682.503195][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.511187][T10041] R13: 00007fc223a16038 R14: 00007fc223a15fa0 R15: 00007ffe8d173278 [ 682.519196][T10041] [ 682.522385][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.841746][T10049] fuse: Bad value for 'rootmode' [ 683.111510][T10001] syz.3.967 (10001) used greatest stack depth: 18768 bytes left [ 683.254027][ T28] audit: type=1326 audit(2000000318.730:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.983" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc22379cdd9 code=0x0 [ 683.296305][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 684.570171][T10082] fuse: Bad value for 'rootmode' [ 684.634717][T10086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.992'. [ 684.788095][T10090] FAULT_INJECTION: forcing a failure. [ 684.788095][T10090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.821051][T10090] CPU: 1 PID: 10090 Comm: syz.5.994 Not tainted syzkaller #0 [ 684.828505][T10090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.838635][T10090] Call Trace: [ 684.841962][T10090] [ 684.844935][T10090] dump_stack_lvl+0x18c/0x250 [ 684.849681][T10090] ? show_regs_print_info+0x20/0x20 [ 684.854946][T10090] ? load_image+0x420/0x420 [ 684.859513][T10090] ? __might_fault+0xaa/0x120 [ 684.864380][T10090] ? __lock_acquire+0x7d40/0x7d40 [ 684.869469][T10090] should_fail_ex+0x39d/0x4d0 [ 684.874209][T10090] _copy_from_user+0x2f/0xe0 [ 684.878851][T10090] ___sys_sendmsg+0x1c7/0x360 [ 684.883592][T10090] ? get_pid_task+0x20/0x1e0 [ 684.888252][T10090] ? __sys_sendmsg+0x2a0/0x2a0 [ 684.893094][T10090] ? __lock_acquire+0x7d40/0x7d40 [ 684.898196][T10090] __se_sys_sendmsg+0x1c2/0x2b0 [ 684.903098][T10090] ? __x64_sys_sendmsg+0x80/0x80 [ 684.908098][T10090] ? lockdep_hardirqs_on+0x98/0x150 [ 684.913359][T10090] do_syscall_64+0x55/0xa0 [ 684.917838][T10090] ? clear_bhb_loop+0x40/0x90 [ 684.922573][T10090] ? clear_bhb_loop+0x40/0x90 [ 684.927304][T10090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 684.933237][T10090] RIP: 0033:0x7f5ce099cdd9 [ 684.937681][T10090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.957328][T10090] RSP: 002b:00007f5ce1899028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.965788][T10090] RAX: ffffffffffffffda RBX: 00007f5ce0c15fa0 RCX: 00007f5ce099cdd9 [ 684.973815][T10090] RDX: 0000000000000811 RSI: 0000200000000340 RDI: 0000000000000003 [ 684.981822][T10090] RBP: 00007f5ce1899090 R08: 0000000000000000 R09: 0000000000000000 [ 684.989824][T10090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.997823][T10090] R13: 00007f5ce0c16038 R14: 00007f5ce0c15fa0 R15: 00007fff17375bd8 [ 685.005841][T10090] [ 686.023639][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.030123][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.576649][T10103] FAULT_INJECTION: forcing a failure. [ 686.576649][T10103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.597559][T10103] CPU: 0 PID: 10103 Comm: syz.1.998 Not tainted syzkaller #0 [ 686.605012][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 686.615102][T10103] Call Trace: [ 686.618411][T10103] [ 686.621369][T10103] dump_stack_lvl+0x18c/0x250 [ 686.626084][T10103] ? show_regs_print_info+0x20/0x20 [ 686.631320][T10103] ? load_image+0x420/0x420 [ 686.635861][T10103] ? __might_fault+0xaa/0x120 [ 686.640570][T10103] ? __lock_acquire+0x7d40/0x7d40 [ 686.645631][T10103] should_fail_ex+0x39d/0x4d0 [ 686.650348][T10103] _copy_from_user+0x2f/0xe0 [ 686.654977][T10103] ___sys_sendmsg+0x1c7/0x360 [ 686.659696][T10103] ? get_pid_task+0x20/0x1e0 [ 686.664333][T10103] ? __sys_sendmsg+0x2a0/0x2a0 [ 686.669146][T10103] ? __lock_acquire+0x7d40/0x7d40 [ 686.674224][T10103] __se_sys_sendmsg+0x1c2/0x2b0 [ 686.679109][T10103] ? __x64_sys_sendmsg+0x80/0x80 [ 686.684085][T10103] ? lockdep_hardirqs_on+0x98/0x150 [ 686.689325][T10103] do_syscall_64+0x55/0xa0 [ 686.693767][T10103] ? clear_bhb_loop+0x40/0x90 [ 686.698474][T10103] ? clear_bhb_loop+0x40/0x90 [ 686.703187][T10103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 686.709113][T10103] RIP: 0033:0x7f58e499cdd9 [ 686.713552][T10103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.733186][T10103] RSP: 002b:00007f58e587c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.741633][T10103] RAX: ffffffffffffffda RBX: 00007f58e4c15fa0 RCX: 00007f58e499cdd9 [ 686.749635][T10103] RDX: 0000000000004000 RSI: 0000200000000500 RDI: 0000000000000005 [ 686.757642][T10103] RBP: 00007f58e587c090 R08: 0000000000000000 R09: 0000000000000000 [ 686.765645][T10103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.773654][T10103] R13: 00007f58e4c16038 R14: 00007f58e4c15fa0 R15: 00007fff82bb8f68 [ 686.781675][T10103] [ 686.784740][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.947544][ T5818] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 687.044394][T10113] fuse: Unknown parameter 'use00000000000000000000' [ 687.131104][ T5818] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 687.147682][ T5818] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 687.169389][ T5818] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 687.187577][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.251679][T10101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 687.270545][ T5818] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 687.302667][T10115] loop1: detected capacity change from 0 to 4096 [ 687.340050][T10117] FAULT_INJECTION: forcing a failure. [ 687.340050][T10117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.354915][T10115] ntfs: (device loop1): parse_options(): Unrecognized mount option 000000000000000000000x0000000000000000. [ 687.397122][T10117] CPU: 0 PID: 10117 Comm: syz.5.1004 Not tainted syzkaller #0 [ 687.404676][T10117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 687.414779][T10117] Call Trace: [ 687.418114][T10117] [ 687.421089][T10117] dump_stack_lvl+0x18c/0x250 [ 687.425836][T10117] ? show_regs_print_info+0x20/0x20 [ 687.431113][T10117] ? load_image+0x420/0x420 [ 687.435679][T10117] ? __might_fault+0xaa/0x120 [ 687.440405][T10117] ? __lock_acquire+0x7d40/0x7d40 [ 687.445490][T10117] should_fail_ex+0x39d/0x4d0 [ 687.450243][T10117] _copy_from_user+0x2f/0xe0 [ 687.454891][T10117] ___sys_sendmsg+0x1c7/0x360 [ 687.459620][T10117] ? get_pid_task+0x20/0x1e0 [ 687.464271][T10117] ? __sys_sendmsg+0x2a0/0x2a0 [ 687.469106][T10117] ? __lock_acquire+0x7d40/0x7d40 [ 687.474209][T10117] __se_sys_sendmsg+0x1c2/0x2b0 [ 687.479117][T10117] ? __x64_sys_sendmsg+0x80/0x80 [ 687.484125][T10117] ? lockdep_hardirqs_on+0x98/0x150 [ 687.489380][T10117] do_syscall_64+0x55/0xa0 [ 687.493848][T10117] ? clear_bhb_loop+0x40/0x90 [ 687.498581][T10117] ? clear_bhb_loop+0x40/0x90 [ 687.503317][T10117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 687.509264][T10117] RIP: 0033:0x7f5ce099cdd9 [ 687.513724][T10117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.533385][T10117] RSP: 002b:00007f5ce1899028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.541859][T10117] RAX: ffffffffffffffda RBX: 00007f5ce0c15fa0 RCX: 00007f5ce099cdd9 [ 687.549927][T10117] RDX: 000000000400c090 RSI: 0000200000000040 RDI: 0000000000000003 [ 687.557951][T10117] RBP: 00007f5ce1899090 R08: 0000000000000000 R09: 0000000000000000 [ 687.565971][T10117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.573985][T10117] R13: 00007f5ce0c16038 R14: 00007f5ce0c15fa0 R15: 00007fff17375bd8 [ 687.582021][T10117] [ 687.585162][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.713119][ T5762] usb 1-1: USB disconnect, device number 21 [ 687.977866][ T8] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 688.182837][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 688.195064][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 688.211603][ T8] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 688.227531][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.247715][ T8] usb 2-1: config 0 has no interface number 0 [ 688.254102][ T8] usb 2-1: config 0 interface 205 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 688.272029][ T8] usb 2-1: config 0 interface 205 altsetting 5 endpoint 0xB has invalid wMaxPacketSize 0 [ 688.282580][ T8] usb 2-1: config 0 interface 205 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 688.302010][ T8] usb 2-1: config 0 interface 205 has no altsetting 0 [ 688.332898][ T8] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice= c.af [ 688.368985][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.379436][ T8] usb 2-1: Product: syz [ 688.383777][ T8] usb 2-1: Manufacturer: syz [ 688.406875][ T8] usb 2-1: SerialNumber: syz [ 688.425039][ T8] usb 2-1: config 0 descriptor?? [ 688.679435][ T8] ath6kl: Failed to submit usb control message: -71 [ 688.724593][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 688.779462][ T8] ath6kl: Unable to send get target info: -71 [ 688.821603][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'. [ 688.843999][ T8] ath6kl: Failed to init ath6kl core: -71 [ 688.867302][ T8] ath6kl_usb: probe of 2-1:0.205 failed with error -71 [ 688.938394][T10122] loop5: detected capacity change from 0 to 32768 [ 689.000986][ T8] usb 2-1: USB disconnect, device number 26 [ 689.038130][T10122] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 689.197798][ T5820] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 689.258302][T10122] XFS (loop5): Ending clean mount [ 689.306824][T10144] loop1: detected capacity change from 0 to 4096 [ 689.325930][T10144] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 689.344099][T10122] XFS (loop5): Quotacheck needed: Please wait. [ 689.364779][T10144] EXT4-fs (loop1): Test dummy encryption mode enabled [ 689.423068][T10144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.443526][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 689.482658][ T5820] usb 1-1: unable to get BOS descriptor or descriptor too short [ 689.524622][ T5820] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 689.534259][ T5820] usb 1-1: can't read configurations, error -71 [ 689.652437][T10122] XFS (loop5): Quotacheck: Done. [ 689.750125][ T28] audit: type=1804 audit(2000000325.230:8): pid=10122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1005" name="/newroot/141/file0/file1" dev="loop5" ino=9286 res=1 errno=0 [ 689.771950][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.941898][ T7448] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 690.164233][T10144] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 690.317050][T10154] loop0: detected capacity change from 0 to 764 [ 690.404533][ T9011] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 690.588145][T10159] fuse: Unknown parameter 'use00000000000000000000' [ 690.699714][T10144] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 690.980681][ T28] audit: type=1800 audit(2000000326.370:9): pid=10144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1009" name="file0" dev="loop1" ino=20 res=0 errno=0 [ 691.001133][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.486565][T10169] loop3: detected capacity change from 0 to 512 [ 691.507263][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.517186][T10169] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 691.547606][T10169] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 691.580772][T10169] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 691.595353][T10169] EXT4-fs (loop3): 1 truncate cleaned up [ 691.609710][T10169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.854643][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.611117][T10180] bond1: entered promiscuous mode [ 692.616586][T10180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.788356][T10188] loop3: detected capacity change from 0 to 512 [ 692.876765][T10188] EXT4-fs (loop3): 1 truncate cleaned up [ 692.911815][T10188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.967539][ T28] audit: type=1800 audit(2000000328.450:10): pid=10188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1019" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 692.993906][T10193] fuse: Unknown parameter 'use00000000000000000000' [ 693.896240][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.274879][T10234] fuse: Unknown parameter 'user_i00000000000000000000' [ 696.464771][T10237] overlayfs: failed to resolve './file2': -2 [ 697.464431][T10245] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1035'. [ 697.616800][T10250] loop3: detected capacity change from 0 to 512 [ 697.778565][ T5818] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 698.001072][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 698.019252][ T5818] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 698.040417][ T5818] usb 6-1: New USB device found, idVendor=47d2, idProduct=0011, bcdDevice= 0.40 [ 698.057689][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.086165][ T5818] usb 6-1: Product: syz [ 698.096296][ T5818] usb 6-1: Manufacturer: syz [ 698.116533][ T5818] usb 6-1: SerialNumber: syz [ 698.132038][ T5818] usb 6-1: config 0 descriptor?? [ 698.447856][ T8938] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 698.637727][ T8938] usb 2-1: Using ep0 maxpacket: 8 [ 698.645517][ T8938] usb 2-1: unable to get BOS descriptor or descriptor too short [ 698.653461][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 698.672109][ T8938] usb 2-1: config 1 has no interfaces? [ 698.684478][ T8938] usb 2-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 2.cc [ 698.698648][ T8938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.717003][ T8938] usb 2-1: Product: syz [ 698.722744][ T8938] usb 2-1: Manufacturer: 㒤型졑枵㕕蓇横ﮇ荌綰Λ餧䓬錧䩼쫶☟㔢ጌꎹ䀘ꕴ䀼툨㣤諎뱅抃渪탩 [ 698.755915][ T8938] usb 2-1: SerialNumber: syz [ 698.839519][ T8] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 698.859334][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 698.877668][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 698.897654][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 698.916657][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 698.936405][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 698.957483][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 698.976049][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.008933][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.031604][ T8938] usb 2-1: USB disconnect, device number 27 [ 699.039010][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 699.062746][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.083469][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.114980][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 699.137102][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.154239][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.175933][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 699.197051][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.206691][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.227524][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 699.246447][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.266301][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.287848][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 699.308960][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.327667][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.357476][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 699.372959][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 699.387969][ T8] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 699.406761][ T8] usb 1-1: Product: syz [ 699.419769][ T8] usb 1-1: Manufacturer: syz [ 699.432341][ T8] usb 1-1: SerialNumber: syz [ 699.448398][ T8] usb 1-1: config 0 descriptor?? [ 699.495207][ T8] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 699.830394][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 699.831772][ T9450] usb 1-1: USB disconnect, device number 24 [ 699.846565][T10260] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 699.892997][ T9450] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 700.574337][T10276] FAULT_INJECTION: forcing a failure. [ 700.574337][T10276] name failslab, interval 1, probability 0, space 0, times 0 [ 700.657372][T10276] CPU: 1 PID: 10276 Comm: syz.1.1042 Not tainted syzkaller #0 [ 700.664955][T10276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 700.675066][T10276] Call Trace: [ 700.678402][T10276] [ 700.681377][T10276] dump_stack_lvl+0x18c/0x250 [ 700.686118][T10276] ? show_regs_print_info+0x20/0x20 [ 700.691382][T10276] ? load_image+0x420/0x420 [ 700.695955][T10276] ? __lock_acquire+0x7d40/0x7d40 [ 700.701053][T10276] should_fail_ex+0x39d/0x4d0 [ 700.705810][T10276] should_failslab+0x9/0x20 [ 700.710370][T10276] slab_pre_alloc_hook+0x59/0x310 [ 700.715452][T10276] ? rcu_is_watching+0x15/0xb0 [ 700.720271][T10276] ? kvmalloc_node+0x70/0x180 [ 700.725003][T10276] ? kvmalloc_node+0x70/0x180 [ 700.729738][T10276] __kmem_cache_alloc_node+0x53/0x250 [ 700.735189][T10276] ? kvmalloc_node+0x70/0x180 [ 700.739921][T10276] __kmalloc_node+0xa4/0x230 [ 700.744594][T10276] ? seq_read_iter+0xb1/0xd50 [ 700.749333][T10276] kvmalloc_node+0x70/0x180 [ 700.753912][T10276] traverse+0xdd/0x560 [ 700.758079][T10276] ? __lock_acquire+0x7d40/0x7d40 [ 700.763172][T10276] seq_read_iter+0xc4f/0xd50 [ 700.767828][T10276] ? aa_file_perm+0x3e3/0xee0 [ 700.772587][T10276] seq_read+0x175/0x220 [ 700.776806][T10276] ? seq_open+0x140/0x140 [ 700.781200][T10276] ? common_file_perm+0x198/0x1f0 [ 700.786294][T10276] ? fsnotify_perm+0x271/0x5e0 [ 700.791128][T10276] do_iter_read+0x4fa/0xc90 [ 700.795705][T10276] ? seq_open+0x140/0x140 [ 700.800153][T10276] ? vfs_iter_read+0xa0/0xa0 [ 700.804824][T10276] ? __import_iovec+0x5f2/0x850 [ 700.809741][T10276] ? import_iovec+0x73/0xa0 [ 700.814306][T10276] do_preadv+0x236/0x390 [ 700.818615][T10276] ? do_writev+0x480/0x480 [ 700.823085][T10276] ? __fget_files+0x28/0x4b0 [ 700.827757][T10276] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 700.833810][T10276] ? lock_chain_count+0x20/0x20 [ 700.838729][T10276] ? lockdep_hardirqs_on+0x98/0x150 [ 700.844000][T10276] do_syscall_64+0x55/0xa0 [ 700.848469][T10276] ? clear_bhb_loop+0x40/0x90 [ 700.853200][T10276] ? clear_bhb_loop+0x40/0x90 [ 700.857941][T10276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.863889][T10276] RIP: 0033:0x7f58e499cdd9 [ 700.868355][T10276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.888020][T10276] RSP: 002b:00007f58e585b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 700.896579][T10276] RAX: ffffffffffffffda RBX: 00007f58e4c16090 RCX: 00007f58e499cdd9 [ 700.904607][T10276] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 700.912636][T10276] RBP: 00007f58e585b090 R08: 0000000000000004 R09: 0000000000000000 [ 700.920658][T10276] R10: 0000000000005fae R11: 0000000000000246 R12: 0000000000000001 [ 700.928717][T10276] R13: 00007f58e4c16128 R14: 00007f58e4c16090 R15: 00007fff82bb8f68 [ 700.936779][T10276] [ 701.042223][T10278] fuse: Unknown parameter 'user_i00000000000000000000' [ 701.068041][ T5818] usb 6-1: USB disconnect, device number 14 [ 701.587606][ T5778] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 701.723157][ T28] audit: type=1326 audit(2000000337.210:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.5.1048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ce099cdd9 code=0x0 [ 701.777572][ T5778] usb 4-1: Using ep0 maxpacket: 8 [ 701.785116][ T5778] usb 4-1: config 2 has an invalid interface number: 101 but max is 0 [ 701.793490][ T5778] usb 4-1: config 2 has no interface number 0 [ 701.800094][ T5778] usb 4-1: config 2 interface 101 has no altsetting 0 [ 701.816712][ T5778] usb 4-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=53.2a [ 701.845747][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.859676][ T5778] usb 4-1: Product: syz [ 701.864046][ T5778] usb 4-1: Manufacturer: syz [ 701.870148][ T5778] usb 4-1: SerialNumber: syz [ 701.884153][T10282] loop1: detected capacity change from 0 to 32768 [ 701.970926][T10282] JBD2: Ignoring recovery information on journal [ 702.052158][T10282] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 702.130106][T10287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.166432][T10287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.199947][ T5778] ipw 4-1:2.101: IPWireless converter converter detected [ 702.246649][ T5778] usb 4-1: USB disconnect, device number 32 [ 702.262374][ T5778] ipw 4-1:2.101: device disconnected [ 705.037299][T10311] fuse: Unknown parameter 'user_i00000000000000000000' [ 705.081154][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 705.318749][T10313] FAULT_INJECTION: forcing a failure. [ 705.318749][T10313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.332447][T10313] CPU: 0 PID: 10313 Comm: syz.3.1055 Not tainted syzkaller #0 [ 705.340055][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 705.350168][T10313] Call Trace: [ 705.353487][T10313] [ 705.356464][T10313] dump_stack_lvl+0x18c/0x250 [ 705.361208][T10313] ? show_regs_print_info+0x20/0x20 [ 705.366470][T10313] ? load_image+0x420/0x420 [ 705.371042][T10313] ? __lock_acquire+0x7d40/0x7d40 [ 705.376127][T10313] ? snprintf+0xe9/0x140 [ 705.380438][T10313] should_fail_ex+0x39d/0x4d0 [ 705.385188][T10313] _copy_to_user+0x2f/0xa0 [ 705.389665][T10313] simple_read_from_buffer+0xe7/0x150 [ 705.395106][T10313] proc_fail_nth_read+0x1e8/0x260 [ 705.400203][T10313] ? proc_fault_inject_write+0x360/0x360 [ 705.405900][T10313] ? fsnotify_perm+0x271/0x5e0 [ 705.410707][T10313] ? proc_fault_inject_write+0x360/0x360 [ 705.416382][T10313] vfs_read+0x28b/0x970 [ 705.420591][T10313] ? kernel_read+0x1e0/0x1e0 [ 705.425220][T10313] ? __fget_files+0x28/0x4b0 [ 705.429847][T10313] ? __fget_files+0x28/0x4b0 [ 705.434471][T10313] ? __fget_files+0x43d/0x4b0 [ 705.439189][T10313] ? __fdget_pos+0x2a3/0x330 [ 705.443821][T10313] ? ksys_read+0x75/0x260 [ 705.448188][T10313] ksys_read+0x150/0x260 [ 705.452473][T10313] ? vfs_write+0x990/0x990 [ 705.456932][T10313] ? lockdep_hardirqs_on+0x98/0x150 [ 705.462168][T10313] do_syscall_64+0x55/0xa0 [ 705.466614][T10313] ? clear_bhb_loop+0x40/0x90 [ 705.471322][T10313] ? clear_bhb_loop+0x40/0x90 [ 705.476037][T10313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.481961][T10313] RIP: 0033:0x7ff95cb5d60e [ 705.486411][T10313] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 705.506058][T10313] RSP: 002b:00007ff95da9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 705.514512][T10313] RAX: ffffffffffffffda RBX: 00007ff95da9e6c0 RCX: 00007ff95cb5d60e [ 705.522513][T10313] RDX: 000000000000000f RSI: 00007ff95da9e0a0 RDI: 0000000000000004 [ 705.530515][T10313] RBP: 00007ff95da9e090 R08: 0000000000000000 R09: 0000000000000000 [ 705.538529][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.546536][T10313] R13: 00007ff95ce16038 R14: 00007ff95ce15fa0 R15: 00007fff13ab6678 [ 705.554553][T10313] [ 705.557699][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.067412][T10328] FAULT_INJECTION: forcing a failure. [ 706.067412][T10328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.118707][T10328] CPU: 0 PID: 10328 Comm: syz.1.1060 Not tainted syzkaller #0 [ 706.126264][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.136375][T10328] Call Trace: [ 706.139714][T10328] [ 706.142693][T10328] dump_stack_lvl+0x18c/0x250 [ 706.147529][T10328] ? show_regs_print_info+0x20/0x20 [ 706.152800][T10328] ? load_image+0x420/0x420 [ 706.157361][T10328] ? __might_fault+0xaa/0x120 [ 706.162093][T10328] ? __lock_acquire+0x7d40/0x7d40 [ 706.167174][T10328] should_fail_ex+0x39d/0x4d0 [ 706.171917][T10328] _copy_from_user+0x2f/0xe0 [ 706.176568][T10328] raw_setsockopt+0x53c/0xfd0 [ 706.181311][T10328] ? aa_af_perm+0x330/0x330 [ 706.185889][T10328] ? raw_sock_no_ioctlcmd+0x10/0x10 [ 706.191156][T10328] ? __fget_files+0x28/0x4b0 [ 706.195809][T10328] ? __fget_files+0x28/0x4b0 [ 706.200457][T10328] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 706.206075][T10328] ? security_socket_setsockopt+0x7e/0xa0 [ 706.211855][T10328] ? raw_sock_no_ioctlcmd+0x10/0x10 [ 706.217122][T10328] do_sock_setsockopt+0x175/0x1a0 [ 706.222197][T10328] ? __fdget+0x180/0x210 [ 706.226520][T10328] __x64_sys_setsockopt+0x182/0x200 [ 706.231769][T10328] do_syscall_64+0x55/0xa0 [ 706.236214][T10328] ? clear_bhb_loop+0x40/0x90 [ 706.241010][T10328] ? clear_bhb_loop+0x40/0x90 [ 706.245721][T10328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.251647][T10328] RIP: 0033:0x7f58e499cdd9 [ 706.256090][T10328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.275725][T10328] RSP: 002b:00007f58e587c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 706.284278][T10328] RAX: ffffffffffffffda RBX: 00007f58e4c15fa0 RCX: 00007f58e499cdd9 [ 706.292310][T10328] RDX: 0000000000000007 RSI: 0000000000000065 RDI: 0000000000000003 [ 706.300325][T10328] RBP: 00007f58e587c090 R08: 0000000000000004 R09: 0000000000000000 [ 706.308342][T10328] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 706.316360][T10328] R13: 00007f58e4c16038 R14: 00007f58e4c15fa0 R15: 00007fff82bb8f68 [ 706.324389][T10328] [ 706.327537][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.531594][T10330] FAULT_INJECTION: forcing a failure. [ 706.531594][T10330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.624251][T10330] CPU: 0 PID: 10330 Comm: syz.1.1061 Not tainted syzkaller #0 [ 706.631816][T10330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.641931][T10330] Call Trace: [ 706.645257][T10330] [ 706.648251][T10330] dump_stack_lvl+0x18c/0x250 [ 706.652997][T10330] ? show_regs_print_info+0x20/0x20 [ 706.658268][T10330] ? load_image+0x420/0x420 [ 706.662837][T10330] ? __might_fault+0xaa/0x120 [ 706.667571][T10330] ? __lock_acquire+0x7d40/0x7d40 [ 706.672654][T10330] should_fail_ex+0x39d/0x4d0 [ 706.677408][T10330] _copy_from_user+0x2f/0xe0 [ 706.682066][T10330] ___sys_sendmsg+0x1c7/0x360 [ 706.686801][T10330] ? get_pid_task+0x20/0x1e0 [ 706.691439][T10330] ? __sys_sendmsg+0x2a0/0x2a0 [ 706.696254][T10330] ? __lock_acquire+0x7d40/0x7d40 [ 706.701339][T10330] __se_sys_sendmsg+0x1c2/0x2b0 [ 706.706231][T10330] ? __x64_sys_sendmsg+0x80/0x80 [ 706.711218][T10330] ? lockdep_hardirqs_on+0x98/0x150 [ 706.716460][T10330] do_syscall_64+0x55/0xa0 [ 706.720902][T10330] ? clear_bhb_loop+0x40/0x90 [ 706.725634][T10330] ? clear_bhb_loop+0x40/0x90 [ 706.730363][T10330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 706.736303][T10330] RIP: 0033:0x7f58e499cdd9 [ 706.740755][T10330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.760394][T10330] RSP: 002b:00007f58e587c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.768845][T10330] RAX: ffffffffffffffda RBX: 00007f58e4c15fa0 RCX: 00007f58e499cdd9 [ 706.776848][T10330] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 706.784858][T10330] RBP: 00007f58e587c090 R08: 0000000000000000 R09: 0000000000000000 [ 706.792861][T10330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.800867][T10330] R13: 00007f58e4c16038 R14: 00007f58e4c15fa0 R15: 00007fff82bb8f68 [ 706.808886][T10330] [ 706.812044][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.081336][T10335] fuse: Bad value for 'fd' [ 707.086494][T10335] capability: warning: `syz.5.1053' uses deprecated v2 capabilities in a way that may be insecure [ 707.212830][T10326] loop3: detected capacity change from 0 to 32768 [ 707.261961][T10326] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 707.398337][T10350] fuse: Unknown parameter 'user_id00000000000000000000' [ 707.493494][ T28] audit: type=1326 audit(2000000342.980:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.5.1067" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ce099cdd9 code=0x0 [ 707.517014][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.547178][T10354] IPVS: nq: FWM 3 0x00000003 - no destination available [ 707.574030][T10326] XFS (loop3): Ending clean mount [ 707.608932][T10326] XFS (loop3): Quotacheck needed: Please wait. [ 707.687025][T10326] XFS (loop3): Quotacheck: Done. [ 707.767348][ T28] audit: type=1804 audit(2000000343.250:13): pid=10326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1059" name="/newroot/264/file0/file1" dev="loop3" ino=9286 res=1 errno=0 [ 707.832067][ T5774] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 707.846033][T10361] loop0: detected capacity change from 0 to 512 [ 708.078735][ T5820] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 708.268087][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 708.282671][ T5820] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 708.305390][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.318789][ T5820] usb 1-1: Product: syz [ 708.323039][ T5820] usb 1-1: Manufacturer: syz [ 708.341492][ T5820] usb 1-1: SerialNumber: syz [ 708.367748][ T5820] usb 1-1: config 0 descriptor?? [ 708.376153][ T5820] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 708.429393][T10372] FAULT_INJECTION: forcing a failure. [ 708.429393][T10372] name failslab, interval 1, probability 0, space 0, times 0 [ 708.448641][T10372] CPU: 1 PID: 10372 Comm: syz.5.1073 Not tainted syzkaller #0 [ 708.456177][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 708.466273][T10372] Call Trace: [ 708.469598][T10372] [ 708.472559][T10372] dump_stack_lvl+0x18c/0x250 [ 708.477351][T10372] ? show_regs_print_info+0x20/0x20 [ 708.482595][T10372] ? load_image+0x420/0x420 [ 708.487148][T10372] ? __might_sleep+0xe0/0xe0 [ 708.491774][T10372] ? __lock_acquire+0x7d40/0x7d40 [ 708.496846][T10372] should_fail_ex+0x39d/0x4d0 [ 708.501575][T10372] should_failslab+0x9/0x20 [ 708.506119][T10372] slab_pre_alloc_hook+0x59/0x310 [ 708.511239][T10372] ? __lock_acquire+0x1347/0x7d40 [ 708.516330][T10372] kmem_cache_alloc_node+0x60/0x320 [ 708.521577][T10372] ? __alloc_skb+0x103/0x2c0 [ 708.526203][T10372] __alloc_skb+0x103/0x2c0 [ 708.530664][T10372] tcp_stream_alloc_skb+0x3d/0x330 [ 708.535819][T10372] tcp_sendmsg_locked+0xea4/0x4bd0 [ 708.540986][T10372] ? verify_lock_unused+0x140/0x140 [ 708.546229][T10372] ? verify_lock_unused+0x140/0x140 [ 708.551497][T10372] ? tcp_set_state+0x680/0x680 [ 708.556317][T10372] tcp_sendmsg+0x2f/0x50 [ 708.560606][T10372] __sys_sendto+0x4a9/0x6b0 [ 708.565154][T10372] ? __ia32_sys_getpeername+0x90/0x90 [ 708.570632][T10372] ? __fget_files+0x43d/0x4b0 [ 708.575366][T10372] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 708.581388][T10372] ? lock_chain_count+0x20/0x20 [ 708.586391][T10372] __x64_sys_sendto+0xde/0xf0 [ 708.591126][T10372] do_syscall_64+0x55/0xa0 [ 708.595589][T10372] ? clear_bhb_loop+0x40/0x90 [ 708.600307][T10372] ? clear_bhb_loop+0x40/0x90 [ 708.605021][T10372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.610956][T10372] RIP: 0033:0x7f5ce099cdd9 [ 708.615430][T10372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.635068][T10372] RSP: 002b:00007f5ce1899028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 708.643533][T10372] RAX: ffffffffffffffda RBX: 00007f5ce0c15fa0 RCX: 00007f5ce099cdd9 [ 708.651539][T10372] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000003 [ 708.659544][T10372] RBP: 00007f5ce1899090 R08: 0000000000000000 R09: 0000000000000000 [ 708.667565][T10372] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 708.675573][T10372] R13: 00007f5ce0c16038 R14: 00007f5ce0c15fa0 R15: 00007fff17375bd8 [ 708.683597][T10372] [ 708.686814][ T5762] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 708.694617][T10362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.703712][T10362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.712974][T10362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.721827][T10362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.731027][T10362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.739974][T10362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.749161][T10362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.758129][T10362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.768347][T10362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.777973][T10362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.853470][ T5820] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 708.865536][ T5820] visor: probe of 1-1:0.0 failed with error -71 [ 708.878239][ T5820] usb 1-1: USB disconnect, device number 25 [ 708.891117][ T5762] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 708.922790][ T5762] usb 2-1: config 0 interface 0 has no altsetting 0 [ 708.986386][ T5762] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 709.004294][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 709.027104][ T5762] usb 2-1: Product: syz [ 709.036163][ T5762] usb 2-1: Manufacturer: syz [ 709.055712][ T5762] usb 2-1: SerialNumber: syz [ 709.067972][ T5762] usb 2-1: config 0 descriptor?? [ 709.088337][T10367] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 709.101174][T10379] warning: `syz.0.1074' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 709.123327][ T5762] usb 2-1: selecting invalid altsetting 0 [ 710.138407][ T8938] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 710.350833][T10389] fuse: Unknown parameter 'user_id00000000000000000000' [ 710.436848][ T8938] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 710.462918][ T8938] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.995247][ T8938] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 711.012105][ T8938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.050796][ T8938] hub 1-1:4.0: USB hub found [ 711.703046][ T8938] hub 1-1:4.0: 9 ports detected [ 711.773217][ T8938] usb 1-1: selecting invalid altsetting 1 [ 711.829199][ T8938] hub 1-1:4.0: Using single TT (err -22) [ 711.852969][ T8938] hub 1-1:4.0: insufficient power available to use all downstream ports [ 711.904104][ T8938] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 711.911395][ T8938] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 712.782010][ T5820] usb 2-1: USB disconnect, device number 28 [ 712.828363][ T8938] usb 1-1: USB disconnect, device number 26 [ 713.978412][T10423] fuse: Unknown parameter 'user_id00000000000000000000' [ 713.996864][T10419] loop5: detected capacity change from 0 to 128 [ 714.270525][ T28] audit: type=1326 audit(2000000349.760:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10430 comm="syz.0.1090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22379cdd9 code=0x7ffc0000 [ 714.273525][T10431] FAULT_INJECTION: forcing a failure. [ 714.273525][T10431] name failslab, interval 1, probability 0, space 0, times 0 [ 714.388426][T10431] CPU: 0 PID: 10431 Comm: syz.0.1090 Not tainted syzkaller #0 [ 714.396074][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 714.406174][T10431] Call Trace: [ 714.409494][T10431] [ 714.412466][T10431] dump_stack_lvl+0x18c/0x250 [ 714.417216][T10431] ? show_regs_print_info+0x20/0x20 [ 714.422473][T10431] ? load_image+0x420/0x420 [ 714.427040][T10431] ? __might_sleep+0xe0/0xe0 [ 714.431704][T10431] ? __lock_acquire+0x7d40/0x7d40 [ 714.436791][T10431] should_fail_ex+0x39d/0x4d0 [ 714.441521][T10431] should_failslab+0x9/0x20 [ 714.446086][T10431] slab_pre_alloc_hook+0x59/0x310 [ 714.451165][T10431] kmem_cache_alloc+0x5a/0x2d0 [ 714.455979][T10431] ? audit_log_start+0x137/0x860 [ 714.460982][T10431] audit_log_start+0x137/0x860 [ 714.465810][T10431] ? audit_serial+0x30/0x30 [ 714.470373][T10431] ? migrate_enable+0x2c9/0x3d0 [ 714.475281][T10431] ? migrate_disable+0x180/0x180 [ 714.480294][T10431] audit_seccomp+0x63/0x180 [ 714.484843][T10431] __seccomp_filter+0xad0/0x1c90 [ 714.489835][T10431] ? file_end_write+0x159/0x250 [ 714.494730][T10431] ? vfs_write+0x7dd/0x990 [ 714.499193][T10431] ? __secure_computing+0x2f0/0x2f0 [ 714.504445][T10431] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 714.510122][T10431] ? __fget_files+0x28/0x4b0 [ 714.514761][T10431] ? mutex_unlock+0x10/0x10 [ 714.519307][T10431] ? __fget_files+0x43d/0x4b0 [ 714.524053][T10431] ? lock_chain_count+0x20/0x20 [ 714.528956][T10431] ? __secure_computing+0x111/0x2f0 [ 714.534207][T10431] syscall_trace_enter+0xa7/0x150 [ 714.539308][T10431] do_syscall_64+0x28/0xa0 [ 714.543771][T10431] ? clear_bhb_loop+0x40/0x90 [ 714.548497][T10431] ? clear_bhb_loop+0x40/0x90 [ 714.553230][T10431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.559173][T10431] RIP: 0033:0x7fc22379cdd9 [ 714.563631][T10431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.583293][T10431] RSP: 002b:00007fc2245dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 714.591759][T10431] RAX: ffffffffffffffda RBX: 00007fc223a15fa0 RCX: 00007fc22379cdd9 [ 714.599777][T10431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 714.607797][T10431] RBP: 00007fc2245dc090 R08: 0000000000000000 R09: 0000000000000000 [ 714.615807][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.623822][T10431] R13: 00007fc223a16038 R14: 00007fc223a15fa0 R15: 00007ffe8d173278 [ 714.631850][T10431] [ 714.806629][ T28] audit: type=1326 audit(2000000349.760:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10430 comm="syz.0.1090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22379cdd9 code=0x7ffc0000 [ 715.100165][ T28] audit: type=1326 audit(2000000349.760:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10430 comm="syz.0.1090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc22375d60e code=0x7ffc0000 [ 715.197584][ T28] audit: type=1326 audit(2000000349.760:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10430 comm="syz.0.1090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc22375d60e code=0x7ffc0000 [ 715.267782][ T28] audit: type=1326 audit(2000000350.740:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.5.1091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce099cdd9 code=0x7ffc0000 [ 715.307534][T10431] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 715.338270][T10431] audit: out of memory in audit_log_start [ 715.365316][T10435] program syz.5.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 715.404331][ T28] audit: type=1326 audit(2000000350.740:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.5.1091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce099cdd9 code=0x7ffc0000 [ 715.487596][ T28] audit: type=1326 audit(2000000350.780:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.5.1091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ce099cdd9 code=0x7ffc0000 [ 715.589794][ T28] audit: type=1326 audit(2000000350.780:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.5.1091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce099cdd9 code=0x7ffc0000 [ 717.869791][T10460] fuse: Bad value for 'fd' [ 717.878992][T10461] FAULT_INJECTION: forcing a failure. [ 717.878992][T10461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.894204][T10461] CPU: 0 PID: 10461 Comm: syz.1.1097 Not tainted syzkaller #0 [ 717.901871][T10461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 717.912006][T10461] Call Trace: [ 717.915330][T10461] [ 717.918315][T10461] dump_stack_lvl+0x18c/0x250 [ 717.923065][T10461] ? show_regs_print_info+0x20/0x20 [ 717.928332][T10461] ? load_image+0x420/0x420 [ 717.932915][T10461] ? __might_fault+0xaa/0x120 [ 717.937627][T10461] ? __lock_acquire+0x7d40/0x7d40 [ 717.942694][T10461] should_fail_ex+0x39d/0x4d0 [ 717.947429][T10461] _copy_from_user+0x2f/0xe0 [ 717.952064][T10461] __sys_bpf+0x23e/0x890 [ 717.956364][T10461] ? bpf_link_show_fdinfo+0x390/0x390 [ 717.961807][T10461] ? lock_chain_count+0x20/0x20 [ 717.966705][T10461] __x64_sys_bpf+0x7c/0x90 [ 717.971160][T10461] do_syscall_64+0x55/0xa0 [ 717.975614][T10461] ? clear_bhb_loop+0x40/0x90 [ 717.980332][T10461] ? clear_bhb_loop+0x40/0x90 [ 717.985054][T10461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 717.990990][T10461] RIP: 0033:0x7f58e499cdd9 [ 717.995475][T10461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.015125][T10461] RSP: 002b:00007f58e583a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 718.023570][T10461] RAX: ffffffffffffffda RBX: 00007f58e4c16180 RCX: 00007f58e499cdd9 [ 718.031567][T10461] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000008 [ 718.039587][T10461] RBP: 00007f58e583a090 R08: 0000000000000000 R09: 0000000000000000 [ 718.047593][T10461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.055601][T10461] R13: 00007f58e4c16218 R14: 00007f58e4c16180 R15: 00007fff82bb8f68 [ 718.063622][T10461] [ 719.810338][T10475] loop0: detected capacity change from 0 to 128 [ 720.310931][T10484] IPVS: nq: FWM 3 0x00000003 - no destination available [ 721.824979][T10496] loop1: detected capacity change from 0 to 512 [ 721.888545][T10496] EXT4-fs: Ignoring removed nobh option [ 721.978207][T10501] fuse: Bad value for 'fd' [ 721.990112][T10496] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1108: iget: bad i_size value: 38620345925642 [ 722.012571][T10496] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1108: couldn't read orphan inode 15 (err -117) [ 722.095154][T10496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.733502][T10498] loop5: detected capacity change from 0 to 32768 [ 722.831396][T10498] JBD2: Ignoring recovery information on journal [ 722.923238][T10498] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 723.317897][ T7448] ocfs2: Unmounting device (7,5) on (node local) [ 723.735487][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.229466][T10536] fuse: Bad value for 'fd' [ 724.280470][T10525] loop3: detected capacity change from 0 to 32768 [ 724.327788][T10525] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1115 (10525) [ 724.450170][T10525] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 724.477600][T10525] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 724.486328][T10525] BTRFS info (device loop3): turning on async discard [ 724.547653][T10525] BTRFS info (device loop3): metadata ratio 0 [ 724.553824][T10525] BTRFS info (device loop3): setting nodatasum [ 724.615712][T10525] BTRFS info (device loop3): using free space tree [ 724.814197][T10525] BTRFS info (device loop3): enabling ssd optimizations [ 725.030885][T10559] FAULT_INJECTION: forcing a failure. [ 725.030885][T10559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.055080][T10534] loop1: detected capacity change from 0 to 32768 [ 725.126400][T10534] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1118 (10534) [ 725.131609][T10559] CPU: 0 PID: 10559 Comm: syz.3.1115 Not tainted syzkaller #0 [ 725.144771][T10559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 725.154887][T10559] Call Trace: [ 725.158294][T10559] [ 725.161279][T10559] dump_stack_lvl+0x18c/0x250 [ 725.166029][T10559] ? show_regs_print_info+0x20/0x20 [ 725.171289][T10559] ? load_image+0x420/0x420 [ 725.175848][T10559] ? __lock_acquire+0x7d40/0x7d40 [ 725.180929][T10559] ? snprintf+0xe9/0x140 [ 725.185233][T10559] should_fail_ex+0x39d/0x4d0 [ 725.189976][T10559] _copy_to_user+0x2f/0xa0 [ 725.194449][T10559] simple_read_from_buffer+0xe7/0x150 [ 725.199892][T10559] proc_fail_nth_read+0x1e8/0x260 [ 725.204986][T10559] ? proc_fault_inject_write+0x360/0x360 [ 725.210687][T10559] ? fsnotify_perm+0x271/0x5e0 [ 725.215606][T10559] ? proc_fault_inject_write+0x360/0x360 [ 725.221314][T10559] vfs_read+0x28b/0x970 [ 725.225565][T10559] ? kernel_read+0x1e0/0x1e0 [ 725.230308][T10559] ? __fget_files+0x28/0x4b0 [ 725.235042][T10559] ? __fget_files+0x28/0x4b0 [ 725.239697][T10559] ? __fget_files+0x43d/0x4b0 [ 725.244441][T10559] ? __fdget_pos+0x2a3/0x330 [ 725.249180][T10559] ? ksys_read+0x75/0x260 [ 725.253581][T10559] ksys_read+0x150/0x260 [ 725.257890][T10559] ? vfs_write+0x990/0x990 [ 725.262368][T10559] ? lockdep_hardirqs_on+0x98/0x150 [ 725.267625][T10559] do_syscall_64+0x55/0xa0 [ 725.272098][T10559] ? clear_bhb_loop+0x40/0x90 [ 725.276840][T10559] ? clear_bhb_loop+0x40/0x90 [ 725.281599][T10559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.287654][T10559] RIP: 0033:0x7ff95cb5d60e [ 725.292115][T10559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 725.311864][T10559] RSP: 002b:00007ff95da7cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 725.320421][T10559] RAX: ffffffffffffffda RBX: 00007ff95da7d6c0 RCX: 00007ff95cb5d60e [ 725.328448][T10559] RDX: 000000000000000f RSI: 00007ff95da7d0a0 RDI: 0000000000000005 [ 725.336471][T10559] RBP: 00007ff95da7d090 R08: 0000000000000000 R09: 0000000000000000 [ 725.344493][T10559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.352516][T10559] R13: 00007ff95ce16128 R14: 00007ff95ce16090 R15: 00007fff13ab6678 [ 725.360547][T10559] [ 725.682915][ T5774] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 725.694225][ T9016] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (9016) [ 726.117657][ T5762] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 726.327521][ T5762] usb 6-1: Using ep0 maxpacket: 8 [ 726.335935][T10576] fuse: Unknown parameter '00000000000000000000003' [ 726.346416][ T5762] usb 6-1: unable to get BOS descriptor or descriptor too short [ 726.393833][ T5762] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 726.439154][ T5762] usb 6-1: can't read configurations, error -71 [ 727.282473][T10581] loop3: detected capacity change from 0 to 32768 [ 727.333288][T10581] JBD2: Ignoring recovery information on journal [ 727.632136][T10596] netlink: 'syz.5.1133': attribute type 8 has an invalid length. [ 727.704935][T10581] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 728.449211][T10601] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1128'. [ 729.163036][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 729.887661][ T5818] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 730.927552][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 730.958746][ T5818] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 730.977976][ T5818] usb 4-1: config 0 has no interface number 0 [ 730.984165][ T5818] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 731.006485][ T5818] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 731.016536][ T5818] usb 4-1: config 0 interface 85 has no altsetting 0 [ 731.026458][ T5818] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 731.037673][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.045753][ T5818] usb 4-1: Product: syz [ 731.050059][ T5818] usb 4-1: Manufacturer: syz [ 731.054703][ T5818] usb 4-1: SerialNumber: syz [ 731.070604][ T5818] usb 4-1: config 0 descriptor?? [ 731.097881][T10615] fuse: Unknown parameter '00000000000000000000003' [ 731.553643][T10609] loop3: detected capacity change from 0 to 512 [ 731.597706][T10609] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 731.672054][T10609] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1136: invalid indirect mapped block 6684672 (level 2) [ 731.735324][T10609] EXT4-fs (loop3): 1 truncate cleaned up [ 731.768953][T10609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.943702][T10609] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.1136: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 732.140010][T10609] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 732.495287][T10628] FAULT_INJECTION: forcing a failure. [ 732.495287][T10628] name failslab, interval 1, probability 0, space 0, times 0 [ 732.495380][T10628] CPU: 1 PID: 10628 Comm: syz.5.1142 Not tainted syzkaller #0 [ 732.495401][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 732.495413][T10628] Call Trace: [ 732.495422][T10628] [ 732.495431][T10628] dump_stack_lvl+0x18c/0x250 [ 732.495476][T10628] ? show_regs_print_info+0x20/0x20 [ 732.495508][T10628] ? load_image+0x420/0x420 [ 732.495540][T10628] ? __might_sleep+0xe0/0xe0 [ 732.495567][T10628] ? __lock_acquire+0x7d40/0x7d40 [ 732.495596][T10628] should_fail_ex+0x39d/0x4d0 [ 732.495633][T10628] should_failslab+0x9/0x20 [ 732.495663][T10628] slab_pre_alloc_hook+0x59/0x310 [ 732.495695][T10628] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 732.495719][T10628] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 732.495741][T10628] __kmem_cache_alloc_node+0x53/0x250 [ 732.495777][T10628] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 732.495800][T10628] __kmalloc+0xa4/0x230 [ 732.495832][T10628] tomoyo_realpath_from_path+0xe3/0x5d0 [ 732.495869][T10628] tomoyo_path_number_perm+0x248/0x620 [ 732.495903][T10628] ? tomoyo_path_number_perm+0x217/0x620 [ 732.495935][T10628] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 732.495970][T10628] ? ksys_write+0x1c4/0x260 [ 732.496034][T10628] ? __fget_files+0x28/0x4b0 [ 732.496068][T10628] ? __fget_files+0x28/0x4b0 [ 732.496109][T10628] security_file_ioctl+0x70/0xa0 [ 732.496145][T10628] __se_sys_ioctl+0x48/0x170 [ 732.496175][T10628] do_syscall_64+0x55/0xa0 [ 732.496192][T10628] ? clear_bhb_loop+0x40/0x90 [ 732.496217][T10628] ? clear_bhb_loop+0x40/0x90 [ 732.496245][T10628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.496271][T10628] RIP: 0033:0x7f5ce099cdd9 [ 732.496289][T10628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.496308][T10628] RSP: 002b:00007f5ce1899028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.496331][T10628] RAX: ffffffffffffffda RBX: 00007f5ce0c15fa0 RCX: 00007f5ce099cdd9 [ 732.496347][T10628] RDX: 0000200000000100 RSI: 0000000040345410 RDI: 0000000000000003 [ 732.496361][T10628] RBP: 00007f5ce1899090 R08: 0000000000000000 R09: 0000000000000000 [ 732.496374][T10628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.496387][T10628] R13: 00007f5ce0c16038 R14: 00007f5ce0c15fa0 R15: 00007fff17375bd8 [ 732.496420][T10628] [ 732.496459][T10628] ERROR: Out of memory at tomoyo_realpath_from_path. [ 732.567558][ T5839] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 732.747654][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 732.793335][ T5839] usb 2-1: unable to get BOS descriptor or descriptor too short [ 732.797009][ T5839] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 732.797045][ T5839] usb 2-1: can't read configurations, error -71 [ 736.358947][ T5818] appletouch 4-1:0.85: Failed to request geyser raw mode [ 736.366327][ T5818] appletouch: probe of 4-1:0.85 failed with error -5 [ 736.430214][ T8938] usb 4-1: USB disconnect, device number 33 [ 736.488406][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.524969][T10642] fuse: Unknown parameter '00000000000000000000003' [ 737.254367][T10650] fuse: Bad value for 'fd' [ 744.174239][T10698] loop0: detected capacity change from 0 to 128 [ 744.713617][T10696] loop3: detected capacity change from 0 to 1024 [ 747.461458][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.467973][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.154339][T10737] loop0: detected capacity change from 0 to 32768 [ 750.204375][T10737] JBD2: Ignoring recovery information on journal [ 750.299248][T10737] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 751.708958][T10753] loop1: detected capacity change from 0 to 128 [ 751.811788][ T5772] ocfs2: Unmounting device (7,0) on (node local) [ 752.189293][T10761] FAULT_INJECTION: forcing a failure. [ 752.189293][T10761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.235948][T10761] CPU: 1 PID: 10761 Comm: syz.5.1172 Not tainted syzkaller #0 [ 752.243505][T10761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 752.253604][T10761] Call Trace: [ 752.256914][T10761] [ 752.259862][T10761] dump_stack_lvl+0x18c/0x250 [ 752.264618][T10761] ? show_regs_print_info+0x20/0x20 [ 752.269846][T10761] ? load_image+0x420/0x420 [ 752.274375][T10761] ? __might_fault+0xaa/0x120 [ 752.279071][T10761] ? __lock_acquire+0x7d40/0x7d40 [ 752.284124][T10761] should_fail_ex+0x39d/0x4d0 [ 752.288841][T10761] _copy_from_user+0x2f/0xe0 [ 752.293496][T10761] ___sys_sendmsg+0x1c7/0x360 [ 752.298212][T10761] ? __sys_sendmsg+0x2a0/0x2a0 [ 752.303023][T10761] __sys_sendmmsg+0x2ca/0x510 [ 752.307721][T10761] ? __ia32_sys_sendmsg+0x90/0x90 [ 752.312756][T10761] ? mutex_unlock+0x10/0x10 [ 752.317267][T10761] ? __fget_files+0x43d/0x4b0 [ 752.321970][T10761] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 752.327970][T10761] ? lock_chain_count+0x20/0x20 [ 752.332842][T10761] __x64_sys_sendmmsg+0xa0/0xb0 [ 752.337721][T10761] do_syscall_64+0x55/0xa0 [ 752.342183][T10761] ? clear_bhb_loop+0x40/0x90 [ 752.346880][T10761] ? clear_bhb_loop+0x40/0x90 [ 752.351578][T10761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 752.357500][T10761] RIP: 0033:0x7f5ce099cdd9 [ 752.361937][T10761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.381558][T10761] RSP: 002b:00007f5ce1899028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 752.389999][T10761] RAX: ffffffffffffffda RBX: 00007f5ce0c15fa0 RCX: 00007f5ce099cdd9 [ 752.398007][T10761] RDX: 0000000000000001 RSI: 0000200000001300 RDI: 0000000000000003 [ 752.405995][T10761] RBP: 00007f5ce1899090 R08: 0000000000000000 R09: 0000000000000000 [ 752.413991][T10761] R10: 000000000004c144 R11: 0000000000000246 R12: 0000000000000001 [ 752.421974][T10761] R13: 00007f5ce0c16038 R14: 00007f5ce0c15fa0 R15: 00007fff17375bd8 [ 752.429971][T10761] [ 752.767622][ T5839] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 752.977686][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 753.003769][ T5839] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 753.021917][ T5839] usb 1-1: config 0 has no interface number 0 [ 753.062654][ T5839] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 753.093458][ T5839] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 753.123754][ T5839] usb 1-1: config 0 interface 85 has no altsetting 0 [ 753.145883][ T5839] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 753.156550][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.174138][ T5839] usb 1-1: Product: syz [ 753.184101][ T5839] usb 1-1: Manufacturer: syz [ 753.208194][ T5839] usb 1-1: SerialNumber: syz [ 753.238789][ T5839] usb 1-1: config 0 descriptor?? [ 753.693971][T10765] loop0: detected capacity change from 0 to 512 [ 753.732753][T10765] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 753.801283][T10765] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1171: invalid indirect mapped block 6684672 (level 2) [ 753.837665][T10765] EXT4-fs (loop0): 1 truncate cleaned up [ 753.847137][T10765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 753.970772][T10765] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.1171: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 753.997731][T10765] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 754.065004][T10773] loop3: detected capacity change from 0 to 32768 [ 754.112035][T10773] JBD2: Ignoring recovery information on journal [ 754.290896][T10773] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 755.690830][ T5839] appletouch 1-1:0.85: Failed to request geyser raw mode [ 755.709483][ T5839] appletouch: probe of 1-1:0.85 failed with error -5 [ 755.750406][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.762698][ T5839] usb 1-1: USB disconnect, device number 27 [ 757.040811][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 758.361767][T10818] fuse: Unknown parameter 'fd00000000000000000000003' [ 762.161400][T10842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1193'. [ 762.628658][T10856] FAULT_INJECTION: forcing a failure. [ 762.628658][T10856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.667670][T10856] CPU: 1 PID: 10856 Comm: syz.1.1200 Not tainted syzkaller #0 [ 762.675220][T10856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 762.685322][T10856] Call Trace: [ 762.688643][T10856] [ 762.691616][T10856] dump_stack_lvl+0x18c/0x250 [ 762.696354][T10856] ? show_regs_print_info+0x20/0x20 [ 762.701608][T10856] ? load_image+0x420/0x420 [ 762.706171][T10856] ? __might_fault+0xaa/0x120 [ 762.710904][T10856] ? __lock_acquire+0x7d40/0x7d40 [ 762.715990][T10856] should_fail_ex+0x39d/0x4d0 [ 762.720751][T10856] _copy_from_user+0x2f/0xe0 [ 762.725416][T10856] ___sys_sendmsg+0x1c7/0x360 [ 762.730152][T10856] ? get_pid_task+0x20/0x1e0 [ 762.734807][T10856] ? __sys_sendmsg+0x2a0/0x2a0 [ 762.739658][T10856] ? __lock_acquire+0x7d40/0x7d40 [ 762.744773][T10856] __se_sys_sendmsg+0x1c2/0x2b0 [ 762.749697][T10856] ? __x64_sys_sendmsg+0x80/0x80 [ 762.754706][T10856] ? lockdep_hardirqs_on+0x98/0x150 [ 762.759978][T10856] do_syscall_64+0x55/0xa0 [ 762.764446][T10856] ? clear_bhb_loop+0x40/0x90 [ 762.769174][T10856] ? clear_bhb_loop+0x40/0x90 [ 762.773908][T10856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 762.779858][T10856] RIP: 0033:0x7f58e499cdd9 [ 762.784325][T10856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.803989][T10856] RSP: 002b:00007f58e587c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.812467][T10856] RAX: ffffffffffffffda RBX: 00007f58e4c15fa0 RCX: 00007f58e499cdd9 [ 762.820494][T10856] RDX: 0000000004004050 RSI: 00002000000001c0 RDI: 0000000000000003 [ 762.828524][T10856] RBP: 00007f58e587c090 R08: 0000000000000000 R09: 0000000000000000 [ 762.836538][T10856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.844561][T10856] R13: 00007f58e4c16038 R14: 00007f58e4c15fa0 R15: 00007fff82bb8f68 [ 762.852614][T10856] [ 762.877593][ T8938] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 763.098511][ T8938] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 763.138295][ T8938] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 763.304436][ T8938] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.420886][ T8938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.527226][ T8938] usb 4-1: Product: 㘵鎕뤛굴훗¿뒐햔辖뉵നࠉಇꢣ䁼⻹㺎ẍꅲ춪ﵥ栁⭏㯄ᮂ꼯な㬩鍔뷽꒮ඪ䎸㣂꘣ଲ蚎㊫⪍솋똄஛ᄟ໻ [ 763.557110][T10862] FAULT_INJECTION: forcing a failure. [ 763.557110][T10862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.681638][T10862] CPU: 0 PID: 10862 Comm: syz.1.1203 Not tainted syzkaller #0 [ 763.689192][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 763.699293][T10862] Call Trace: [ 763.702610][T10862] [ 763.705579][T10862] dump_stack_lvl+0x18c/0x250 [ 763.710323][T10862] ? show_regs_print_info+0x20/0x20 [ 763.715577][T10862] ? load_image+0x420/0x420 [ 763.720142][T10862] ? __lock_acquire+0x7d40/0x7d40 [ 763.725214][T10862] ? snprintf+0xe9/0x140 [ 763.729518][T10862] should_fail_ex+0x39d/0x4d0 [ 763.734258][T10862] _copy_to_user+0x2f/0xa0 [ 763.738725][T10862] simple_read_from_buffer+0xe7/0x150 [ 763.744160][T10862] proc_fail_nth_read+0x1e8/0x260 [ 763.749249][T10862] ? proc_fault_inject_write+0x360/0x360 [ 763.754947][T10862] ? fsnotify_perm+0x271/0x5e0 [ 763.759775][T10862] ? proc_fault_inject_write+0x360/0x360 [ 763.765478][T10862] vfs_read+0x28b/0x970 [ 763.769695][T10862] ? kernel_read+0x1e0/0x1e0 [ 763.774341][T10862] ? __fget_files+0x28/0x4b0 [ 763.778980][T10862] ? __fget_files+0x28/0x4b0 [ 763.783617][T10862] ? __fget_files+0x43d/0x4b0 [ 763.788353][T10862] ? __fdget_pos+0x2a3/0x330 [ 763.792996][T10862] ? ksys_read+0x75/0x260 [ 763.797385][T10862] ksys_read+0x150/0x260 [ 763.801683][T10862] ? vfs_write+0x990/0x990 [ 763.806155][T10862] ? lockdep_hardirqs_on+0x98/0x150 [ 763.811422][T10862] do_syscall_64+0x55/0xa0 [ 763.815876][T10862] ? clear_bhb_loop+0x40/0x90 [ 763.820605][T10862] ? clear_bhb_loop+0x40/0x90 [ 763.825364][T10862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.831313][T10862] RIP: 0033:0x7f58e495d60e [ 763.835773][T10862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 763.855427][T10862] RSP: 002b:00007f58e587bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 763.863898][T10862] RAX: ffffffffffffffda RBX: 00007f58e587c6c0 RCX: 00007f58e495d60e [ 763.871933][T10862] RDX: 000000000000000f RSI: 00007f58e587c0a0 RDI: 0000000000000005 [ 763.879962][T10862] RBP: 00007f58e587c090 R08: 0000000000000000 R09: 0000000000000000 [ 763.887975][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.895993][T10862] R13: 00007f58e4c16038 R14: 00007f58e4c15fa0 R15: 00007fff82bb8f68 [ 763.904042][T10862] [ 763.937510][ T8938] usb 4-1: Manufacturer: Т [ 763.942114][ T8938] usb 4-1: SerialNumber: ȋ [ 764.265399][ T8938] cdc_ncm 4-1:1.0: bind() failure [ 764.276829][ T8938] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 764.293477][ T8938] cdc_ncm 4-1:1.1: bind() failure [ 764.322428][ T8938] usb 4-1: USB disconnect, device number 34 [ 765.009211][T10876] FAULT_INJECTION: forcing a failure. [ 765.009211][T10876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.022538][T10876] CPU: 0 PID: 10876 Comm: syz.1.1207 Not tainted syzkaller #0 [ 765.030028][T10876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 765.040110][T10876] Call Trace: [ 765.043404][T10876] [ 765.046349][T10876] dump_stack_lvl+0x18c/0x250 [ 765.051052][T10876] ? show_regs_print_info+0x20/0x20 [ 765.056269][T10876] ? load_image+0x420/0x420 [ 765.060787][T10876] ? __lock_acquire+0x7d40/0x7d40 [ 765.065853][T10876] should_fail_ex+0x39d/0x4d0 [ 765.070570][T10876] _copy_to_user+0x2f/0xa0 [ 765.075001][T10876] simple_read_from_buffer+0xe7/0x150 [ 765.080398][T10876] proc_fail_nth_read+0x1e8/0x260 [ 765.085457][T10876] ? proc_fault_inject_write+0x360/0x360 [ 765.091105][T10876] ? fsnotify_perm+0x271/0x5e0 [ 765.095894][T10876] ? proc_fault_inject_write+0x360/0x360 [ 765.101544][T10876] vfs_read+0x28b/0x970 [ 765.105718][T10876] ? kernel_read+0x1e0/0x1e0 [ 765.110325][T10876] ? __fget_files+0x28/0x4b0 [ 765.114927][T10876] ? __fget_files+0x28/0x4b0 [ 765.119530][T10876] ? __fget_files+0x43d/0x4b0 [ 765.124224][T10876] ? __fdget_pos+0x2a3/0x330 [ 765.128827][T10876] ? ksys_read+0x75/0x260 [ 765.133182][T10876] ksys_read+0x150/0x260 [ 765.137468][T10876] ? vfs_write+0x990/0x990 [ 765.141908][T10876] ? lockdep_hardirqs_on+0x98/0x150 [ 765.147122][T10876] do_syscall_64+0x55/0xa0 [ 765.151548][T10876] ? clear_bhb_loop+0x40/0x90 [ 765.156232][T10876] ? clear_bhb_loop+0x40/0x90 [ 765.160918][T10876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.166849][T10876] RIP: 0033:0x7f58e495d60e [ 765.171276][T10876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 765.190901][T10876] RSP: 002b:00007f58e585afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 765.199334][T10876] RAX: ffffffffffffffda RBX: 00007f58e585b6c0 RCX: 00007f58e495d60e [ 765.207316][T10876] RDX: 000000000000000f RSI: 00007f58e585b0a0 RDI: 0000000000000006 [ 765.215300][T10876] RBP: 00007f58e585b090 R08: 0000000000000000 R09: 0000000000000000 [ 765.223284][T10876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.231265][T10876] R13: 00007f58e4c16128 R14: 00007f58e4c16090 R15: 00007fff82bb8f68 [ 765.239262][T10876] [ 766.207504][ T5762] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 766.608942][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 766.636220][ T5762] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 766.667693][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.688610][ T5762] usb 1-1: config 0 descriptor?? [ 766.697946][T10868] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 766.921308][ T5762] usbhid 1-1:0.0: can't add hid device: -71 [ 766.937716][ T5762] usbhid: probe of 1-1:0.0 failed with error -71 [ 766.956873][ T5762] usb 1-1: USB disconnect, device number 28 [ 767.061323][T10885] loop3: detected capacity change from 0 to 8192 [ 767.120924][T10885] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 767.144521][T10885] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 767.156190][T10885] REISERFS (device loop3): using ordered data mode [ 767.164589][T10885] reiserfs: using flush barriers [ 767.181119][T10885] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 767.217377][T10885] REISERFS (device loop3): checking transaction log (loop3) [ 767.279489][T10885] REISERFS (device loop3): Using r5 hash to sort names [ 767.310978][T10885] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 767.627702][T10885] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "@" [ 767.845749][T10894] loop0: detected capacity change from 0 to 256 [ 767.869474][T10894] exfat: Deprecated parameter 'namecase' [ 767.895696][T10894] exfat: Deprecated parameter 'namecase' [ 767.906235][T10894] exfat: Deprecated parameter 'namecase' [ 768.024719][T10894] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 768.132846][T10889] loop5: detected capacity change from 0 to 32768 [ 768.241982][T10889] JBD2: Ignoring recovery information on journal [ 768.299800][T10889] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 768.673908][T10906] FAULT_INJECTION: forcing a failure. [ 768.673908][T10906] name failslab, interval 1, probability 0, space 0, times 0 [ 768.717555][T10906] CPU: 1 PID: 10906 Comm: syz.0.1216 Not tainted syzkaller #0 [ 768.725125][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 768.735236][T10906] Call Trace: [ 768.738564][T10906] [ 768.741530][T10906] dump_stack_lvl+0x18c/0x250 [ 768.746272][T10906] ? show_regs_print_info+0x20/0x20 [ 768.751530][T10906] ? load_image+0x420/0x420 [ 768.756093][T10906] ? __might_sleep+0xe0/0xe0 [ 768.760746][T10906] ? __lock_acquire+0x7d40/0x7d40 [ 768.765831][T10906] should_fail_ex+0x39d/0x4d0 [ 768.770609][T10906] should_failslab+0x9/0x20 [ 768.775179][T10906] slab_pre_alloc_hook+0x59/0x310 [ 768.780269][T10906] ? kvmalloc_node+0x70/0x180 [ 768.785016][T10906] ? kvmalloc_node+0x70/0x180 [ 768.789754][T10906] __kmem_cache_alloc_node+0x53/0x250 [ 768.795190][T10906] ? kvmalloc_node+0x70/0x180 [ 768.799918][T10906] __kmalloc_node+0xa4/0x230 [ 768.804573][T10906] kvmalloc_node+0x70/0x180 [ 768.809129][T10906] file_tty_write+0x2e6/0x980 [ 768.813874][T10906] vfs_write+0x46c/0x990 [ 768.818187][T10906] ? file_end_write+0x250/0x250 [ 768.823096][T10906] ? __fget_files+0x43d/0x4b0 [ 768.827837][T10906] ? __fdget_pos+0x1d8/0x330 [ 768.832473][T10906] ? ksys_write+0x75/0x260 [ 768.836954][T10906] ksys_write+0x150/0x260 [ 768.841355][T10906] ? __ia32_sys_read+0x90/0x90 [ 768.846193][T10906] ? lockdep_hardirqs_on+0x98/0x150 [ 768.851453][T10906] do_syscall_64+0x55/0xa0 [ 768.855913][T10906] ? clear_bhb_loop+0x40/0x90 [ 768.860641][T10906] ? clear_bhb_loop+0x40/0x90 [ 768.865370][T10906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.871312][T10906] RIP: 0033:0x7fc22379cdd9 [ 768.875769][T10906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.895430][T10906] RSP: 002b:00007fc2245dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 768.903904][T10906] RAX: ffffffffffffffda RBX: 00007fc223a15fa0 RCX: 00007fc22379cdd9 [ 768.911923][T10906] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000004 [ 768.919947][T10906] RBP: 00007fc2245dc090 R08: 0000000000000000 R09: 0000000000000000 [ 768.927973][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.935995][T10906] R13: 00007fc223a16038 R14: 00007fc223a15fa0 R15: 00007ffe8d173278 [ 768.944043][T10906] [ 769.123898][T10909] loop3: detected capacity change from 0 to 4096 [ 769.235891][T10909] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 770.501723][T10923] FAULT_INJECTION: forcing a failure. [ 770.501723][T10923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.524613][T10921] loop1: detected capacity change from 0 to 1024 [ 770.547513][T10923] CPU: 0 PID: 10923 Comm: syz.3.1222 Not tainted syzkaller #0 [ 770.555059][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 770.565174][T10923] Call Trace: [ 770.568507][T10923] [ 770.571497][T10923] dump_stack_lvl+0x18c/0x250 [ 770.576254][T10923] ? show_regs_print_info+0x20/0x20 [ 770.581530][T10923] ? load_image+0x420/0x420 [ 770.586107][T10923] ? __might_fault+0xaa/0x120 [ 770.590846][T10923] ? __lock_acquire+0x7d40/0x7d40 [ 770.595956][T10923] should_fail_ex+0x39d/0x4d0 [ 770.600714][T10923] _copy_from_user+0x2f/0xe0 [ 770.605368][T10923] ___sys_sendmsg+0x1c7/0x360 [ 770.610096][T10923] ? get_pid_task+0x20/0x1e0 [ 770.614751][T10923] ? __sys_sendmsg+0x2a0/0x2a0 [ 770.619592][T10923] ? __lock_acquire+0x7d40/0x7d40 [ 770.624701][T10923] __se_sys_sendmsg+0x1c2/0x2b0 [ 770.629616][T10923] ? __x64_sys_sendmsg+0x80/0x80 [ 770.634622][T10923] ? lockdep_hardirqs_on+0x98/0x150 [ 770.639879][T10923] do_syscall_64+0x55/0xa0 [ 770.644340][T10923] ? clear_bhb_loop+0x40/0x90 [ 770.649074][T10923] ? clear_bhb_loop+0x40/0x90 [ 770.653810][T10923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 770.659755][T10923] RIP: 0033:0x7ff95cb9cdd9 [ 770.664225][T10923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.683905][T10923] RSP: 002b:00007ff95da9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.692378][T10923] RAX: ffffffffffffffda RBX: 00007ff95ce15fa0 RCX: 00007ff95cb9cdd9 [ 770.700399][T10923] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 770.708414][T10923] RBP: 00007ff95da9e090 R08: 0000000000000000 R09: 0000000000000000 [ 770.716439][T10923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.724464][T10923] R13: 00007ff95ce16038 R14: 00007ff95ce15fa0 R15: 00007fff13ab6678 [ 770.732499][T10923] [ 770.863175][ T7448] ocfs2: Unmounting device (7,5) on (node local) [ 771.171612][T10925] loop0: detected capacity change from 0 to 128 [ 771.215471][T10932] loop1: detected capacity change from 0 to 256 [ 771.223367][T10932] exfat: Deprecated parameter 'namecase' [ 771.237678][T10932] exfat: Deprecated parameter 'namecase' [ 771.271186][T10932] exfat: Deprecated parameter 'namecase' [ 771.305282][T10932] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 772.855915][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 772.855931][ T28] audit: type=1326 audit(2000000408.340:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.5.1232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ce099cdd9 code=0x0 [ 773.042860][T10957] FAULT_INJECTION: forcing a failure. [ 773.042860][T10957] name failslab, interval 1, probability 0, space 0, times 0 [ 773.064773][T10957] CPU: 1 PID: 10957 Comm: syz.0.1233 Not tainted syzkaller #0 [ 773.072317][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 773.082431][T10957] Call Trace: [ 773.085773][T10957] [ 773.088756][T10957] dump_stack_lvl+0x18c/0x250 [ 773.093500][T10957] ? show_regs_print_info+0x20/0x20 [ 773.099117][T10957] ? load_image+0x420/0x420 [ 773.103703][T10957] ? __might_sleep+0xe0/0xe0 [ 773.108346][T10957] ? __lock_acquire+0x7d40/0x7d40 [ 773.113424][T10957] should_fail_ex+0x39d/0x4d0 [ 773.118191][T10957] should_failslab+0x9/0x20 [ 773.122767][T10957] slab_pre_alloc_hook+0x59/0x310 [ 773.127850][T10957] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 773.133624][T10957] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 773.139405][T10957] __kmem_cache_alloc_node+0x53/0x250 [ 773.144834][T10957] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 773.150613][T10957] __kmalloc+0xa4/0x230 [ 773.154835][T10957] tomoyo_realpath_from_path+0xe3/0x5d0 [ 773.160448][T10957] tomoyo_path_number_perm+0x248/0x620 [ 773.165971][T10957] ? tomoyo_path_number_perm+0x217/0x620 [ 773.171682][T10957] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 773.177211][T10957] ? ksys_write+0x1c4/0x260 [ 773.181823][T10957] ? __fget_files+0x28/0x4b0 [ 773.186474][T10957] ? __fget_files+0x28/0x4b0 [ 773.191136][T10957] security_file_ioctl+0x70/0xa0 [ 773.196133][T10957] __se_sys_ioctl+0x48/0x170 [ 773.200784][T10957] do_syscall_64+0x55/0xa0 [ 773.205243][T10957] ? clear_bhb_loop+0x40/0x90 [ 773.209970][T10957] ? clear_bhb_loop+0x40/0x90 [ 773.214722][T10957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 773.220673][T10957] RIP: 0033:0x7fc22379cdd9 [ 773.225135][T10957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.244792][T10957] RSP: 002b:00007fc2245dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.253286][T10957] RAX: ffffffffffffffda RBX: 00007fc223a15fa0 RCX: 00007fc22379cdd9 [ 773.261305][T10957] RDX: 0000200000000080 RSI: 00000000000007ab RDI: 0000000000000003 [ 773.269326][T10957] RBP: 00007fc2245dc090 R08: 0000000000000000 R09: 0000000000000000 [ 773.277368][T10957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.285390][T10957] R13: 00007fc223a16038 R14: 00007fc223a15fa0 R15: 00007ffe8d173278 [ 773.293438][T10957] [ 773.337599][T10957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 774.654992][T10971] loop0: detected capacity change from 0 to 128 [ 775.183237][T10977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1240'. [ 775.539784][ T5818] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 776.617603][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 776.679583][ T5818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 776.706195][ T5818] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 776.716182][ T5818] usb 4-1: can't read configurations, error -71 [ 778.861305][T11008] loop1: detected capacity change from 0 to 128 [ 782.338114][ T5778] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 783.360010][ T5778] usb 2-1: unable to get BOS descriptor or descriptor too short [ 783.397630][ T5778] usb 2-1: no configurations [ 783.402314][ T5778] usb 2-1: can't read configurations, error -22 [ 783.977634][ T5820] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 784.385476][T11058] loop0: detected capacity change from 0 to 128 [ 784.424238][ T5820] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 784.552695][ T5820] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 784.622817][ T5820] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 784.655488][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.681059][ T5820] usb 6-1: Product: 㘵鎕뤛굴훗¿뒐햔辖뉵നࠉಇꢣ䁼⻹㺎ẍꅲ춪ﵥ栁⭏㯄ᮂ꼯な㬩鍔뷽꒮ඪ䎸㣂꘣ଲ蚎㊫⪍솋똄஛ᄟ໻ [ 784.705584][ T5820] usb 6-1: Manufacturer: Т [ 784.716698][ T5820] usb 6-1: SerialNumber: ȋ [ 784.985916][ T5820] cdc_ncm 6-1:1.0: bind() failure [ 785.005496][ T5820] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 785.019646][ T5820] cdc_ncm 6-1:1.1: bind() failure [ 785.038363][ T5820] usb 6-1: USB disconnect, device number 17 [ 785.182692][T11072] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 787.107575][ T788] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 787.357607][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 787.405975][ T788] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 787.483222][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.509904][T11088] loop5: detected capacity change from 0 to 4096 [ 787.586180][T11093] loop1: detected capacity change from 0 to 128 [ 787.624387][T11088] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 787.687563][ T788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.761988][ T788] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 787.801483][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.859707][ T788] usb 1-1: config 0 descriptor?? [ 787.904123][ T788] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input34 [ 788.184149][ T5778] usb 1-1: USB disconnect, device number 29 [ 788.216311][ T5124] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 789.156115][T11116] FAULT_INJECTION: forcing a failure. [ 789.156115][T11116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.169761][T11116] CPU: 0 PID: 11116 Comm: syz.5.1280 Not tainted syzkaller #0 [ 789.177266][T11116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 789.187357][T11116] Call Trace: [ 789.190668][T11116] [ 789.193632][T11116] dump_stack_lvl+0x18c/0x250 [ 789.198367][T11116] ? show_regs_print_info+0x20/0x20 [ 789.203622][T11116] ? load_image+0x420/0x420 [ 789.208179][T11116] ? __might_fault+0xaa/0x120 [ 789.212894][T11116] ? __lock_acquire+0x7d40/0x7d40 [ 789.217963][T11116] should_fail_ex+0x39d/0x4d0 [ 789.222693][T11116] _copy_from_user+0x2f/0xe0 [ 789.227323][T11116] __se_sys_semctl+0x2f6/0x3e0 [ 789.232127][T11116] ? __x64_sys_semctl+0xb0/0xb0 [ 789.237040][T11116] ? syscall_enter_from_user_mode+0x2e/0x80 [ 789.242981][T11116] do_syscall_64+0x55/0xa0 [ 789.247436][T11116] ? clear_bhb_loop+0x40/0x90 [ 789.252157][T11116] ? clear_bhb_loop+0x40/0x90 [ 789.256880][T11116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.262821][T11116] RIP: 0033:0x7f5ce099cdd9 [ 789.267274][T11116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.287006][T11116] RSP: 002b:00007f5ce1857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 789.295472][T11116] RAX: ffffffffffffffda RBX: 00007f5ce0c16180 RCX: 00007f5ce099cdd9 [ 789.303480][T11116] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 789.311484][T11116] RBP: 00007f5ce1857090 R08: 0000000000000000 R09: 0000000000000000 [ 789.319485][T11116] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 789.327494][T11116] R13: 00007f5ce0c16218 R14: 00007f5ce0c16180 R15: 00007fff17375bd8 [ 789.335523][T11116] [ 790.077124][T11123] loop0: detected capacity change from 0 to 128 [ 791.318156][T11134] FAULT_INJECTION: forcing a failure. [ 791.318156][T11134] name failslab, interval 1, probability 0, space 0, times 0 [ 791.353031][T11134] CPU: 1 PID: 11134 Comm: syz.3.1287 Not tainted syzkaller #0 [ 791.360570][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 791.370670][T11134] Call Trace: [ 791.374000][T11134] [ 791.376970][T11134] dump_stack_lvl+0x18c/0x250 [ 791.381716][T11134] ? show_regs_print_info+0x20/0x20 [ 791.387014][T11134] ? load_image+0x420/0x420 [ 791.391571][T11134] ? __might_sleep+0xe0/0xe0 [ 791.396218][T11134] ? __lock_acquire+0x7d40/0x7d40 [ 791.401305][T11134] should_fail_ex+0x39d/0x4d0 [ 791.406043][T11134] should_failslab+0x9/0x20 [ 791.410608][T11134] slab_pre_alloc_hook+0x59/0x310 [ 791.415692][T11134] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 791.421464][T11134] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 791.427235][T11134] __kmem_cache_alloc_node+0x53/0x250 [ 791.432675][T11134] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 791.438440][T11134] __kmalloc+0xa4/0x230 [ 791.442656][T11134] tomoyo_realpath_from_path+0xe3/0x5d0 [ 791.448265][T11134] tomoyo_path_number_perm+0x248/0x620 [ 791.453775][T11134] ? tomoyo_path_number_perm+0x217/0x620 [ 791.459453][T11134] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 791.464950][T11134] ? ksys_write+0x1c4/0x260 [ 791.469516][T11134] ? __fget_files+0x28/0x4b0 [ 791.474139][T11134] ? __fget_files+0x28/0x4b0 [ 791.478790][T11134] security_file_ioctl+0x70/0xa0 [ 791.483780][T11134] __se_sys_ioctl+0x48/0x170 [ 791.488409][T11134] do_syscall_64+0x55/0xa0 [ 791.492849][T11134] ? clear_bhb_loop+0x40/0x90 [ 791.497564][T11134] ? clear_bhb_loop+0x40/0x90 [ 791.502282][T11134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.508214][T11134] RIP: 0033:0x7ff95cb9cdd9 [ 791.512659][T11134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.532299][T11134] RSP: 002b:00007ff95da9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 791.540760][T11134] RAX: ffffffffffffffda RBX: 00007ff95ce15fa0 RCX: 00007ff95cb9cdd9 [ 791.548768][T11134] RDX: 0000000000000000 RSI: 0000000000005760 RDI: 0000000000000003 [ 791.556764][T11134] RBP: 00007ff95da9e090 R08: 0000000000000000 R09: 0000000000000000 [ 791.564770][T11134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.572770][T11134] R13: 00007ff95ce16038 R14: 00007ff95ce15fa0 R15: 00007fff13ab6678 [ 791.581310][T11134] [ 791.584471][ C1] vkms_vblank_simulate: vblank timer overrun [ 791.593704][T11134] ERROR: Out of memory at tomoyo_realpath_from_path. [ 791.626446][T11120] loop5: detected capacity change from 0 to 32768 [ 791.708670][T11120] JBD2: Ignoring recovery information on journal [ 791.870117][T11120] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 792.073559][T11147] FAULT_INJECTION: forcing a failure. [ 792.073559][T11147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.107982][T11147] CPU: 0 PID: 11147 Comm: syz.3.1290 Not tainted syzkaller #0 [ 792.115549][T11147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 792.125651][T11147] Call Trace: [ 792.128963][T11147] [ 792.131923][T11147] dump_stack_lvl+0x18c/0x250 [ 792.136644][T11147] ? show_regs_print_info+0x20/0x20 [ 792.141883][T11147] ? load_image+0x420/0x420 [ 792.146424][T11147] ? __might_fault+0xaa/0x120 [ 792.151130][T11147] ? __lock_acquire+0x7d40/0x7d40 [ 792.156199][T11147] should_fail_ex+0x39d/0x4d0 [ 792.160928][T11147] _copy_from_user+0x2f/0xe0 [ 792.165558][T11147] __sys_connect+0x171/0x470 [ 792.170193][T11147] ? __sys_connect_file+0x180/0x180 [ 792.175442][T11147] __x64_sys_connect+0x7a/0x90 [ 792.180263][T11147] do_syscall_64+0x55/0xa0 [ 792.184708][T11147] ? clear_bhb_loop+0x40/0x90 [ 792.189415][T11147] ? clear_bhb_loop+0x40/0x90 [ 792.194130][T11147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.200051][T11147] RIP: 0033:0x7ff95cb9cdd9 [ 792.204501][T11147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.224140][T11147] RSP: 002b:00007ff95da9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 792.232588][T11147] RAX: ffffffffffffffda RBX: 00007ff95ce15fa0 RCX: 00007ff95cb9cdd9 [ 792.240593][T11147] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 792.248586][T11147] RBP: 00007ff95da9e090 R08: 0000000000000000 R09: 0000000000000000 [ 792.256578][T11147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.264578][T11147] R13: 00007ff95ce16038 R14: 00007ff95ce15fa0 R15: 00007fff13ab6678 [ 792.272589][T11147] [ 792.358519][T11151] FAULT_INJECTION: forcing a failure. [ 792.358519][T11151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.417487][T11151] CPU: 1 PID: 11151 Comm: syz.1.1292 Not tainted syzkaller #0 [ 792.425036][T11151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 792.435150][T11151] Call Trace: [ 792.438478][T11151] [ 792.441454][T11151] dump_stack_lvl+0x18c/0x250 [ 792.446211][T11151] ? show_regs_print_info+0x20/0x20 [ 792.451480][T11151] ? load_image+0x420/0x420 [ 792.456047][T11151] ? __lock_acquire+0x7d40/0x7d40 [ 792.461142][T11151] ? snprintf+0xe9/0x140 [ 792.465445][T11151] should_fail_ex+0x39d/0x4d0 [ 792.470190][T11151] _copy_to_user+0x2f/0xa0 [ 792.474668][T11151] simple_read_from_buffer+0xe7/0x150 [ 792.480102][T11151] proc_fail_nth_read+0x1e8/0x260 [ 792.485189][T11151] ? proc_fault_inject_write+0x360/0x360 [ 792.490866][T11151] ? fsnotify_perm+0x271/0x5e0 [ 792.495671][T11151] ? proc_fault_inject_write+0x360/0x360 [ 792.501337][T11151] vfs_read+0x28b/0x970 [ 792.505534][T11151] ? kernel_read+0x1e0/0x1e0 [ 792.510164][T11151] ? fd_install+0x60/0x4e0 [ 792.514621][T11151] ? __lock_acquire+0x7d40/0x7d40 [ 792.519671][T11151] ? rcu_read_lock_sched_held+0x8a/0x110 [ 792.525331][T11151] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 792.531520][T11151] ? __fdget_pos+0x2ba/0x330 [ 792.536161][T11151] ksys_read+0x150/0x260 [ 792.540448][T11151] ? vfs_write+0x990/0x990 [ 792.544899][T11151] ? lockdep_hardirqs_on+0x98/0x150 [ 792.550147][T11151] do_syscall_64+0x55/0xa0 [ 792.554605][T11151] ? clear_bhb_loop+0x40/0x90 [ 792.559313][T11151] ? clear_bhb_loop+0x40/0x90 [ 792.564026][T11151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.569958][T11151] RIP: 0033:0x7f58e495d60e [ 792.574415][T11151] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 792.594231][T11151] RSP: 002b:00007f58e587bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 792.602686][T11151] RAX: ffffffffffffffda RBX: 00007f58e587c6c0 RCX: 00007f58e495d60e [ 792.610700][T11151] RDX: 000000000000000f RSI: 00007f58e587c0a0 RDI: 0000000000000004 [ 792.618709][T11151] RBP: 00007f58e587c090 R08: 0000000000000000 R09: 0000000000000000 [ 792.626716][T11151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.634724][T11151] R13: 00007f58e4c16038 R14: 00007f58e4c15fa0 R15: 00007fff82bb8f68 [ 792.642765][T11151] [ 792.645935][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.841599][T11157] loop1: detected capacity change from 0 to 128 [ 793.549374][T11162] loop1: detected capacity change from 0 to 512 [ 793.872861][T11162] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 793.941566][T11162] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 793.997831][T11162] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #13: comm syz.1.1296: iget: bad i_size value: 12154757448730 [ 794.000953][T11171] FAULT_INJECTION: forcing a failure. [ 794.000953][T11171] name failslab, interval 1, probability 0, space 0, times 0 [ 794.047657][T11171] CPU: 1 PID: 11171 Comm: syz.0.1299 Not tainted syzkaller #0 [ 794.055283][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.065394][T11171] Call Trace: [ 794.068715][T11171] [ 794.071689][T11171] dump_stack_lvl+0x18c/0x250 [ 794.076426][T11171] ? show_regs_print_info+0x20/0x20 [ 794.081696][T11171] ? load_image+0x420/0x420 [ 794.086251][T11171] ? __might_sleep+0xe0/0xe0 [ 794.090889][T11171] ? __lock_acquire+0x7d40/0x7d40 [ 794.096041][T11171] should_fail_ex+0x39d/0x4d0 [ 794.100760][T11171] should_failslab+0x9/0x20 [ 794.105305][T11171] slab_pre_alloc_hook+0x59/0x310 [ 794.110369][T11171] ? sock_kmalloc+0x96/0xf0 [ 794.114909][T11171] ? sock_kmalloc+0x96/0xf0 [ 794.119450][T11171] __kmem_cache_alloc_node+0x53/0x250 [ 794.124874][T11171] ? sock_kmalloc+0x96/0xf0 [ 794.129412][T11171] __kmalloc+0xa4/0x230 [ 794.133602][T11171] sock_kmalloc+0x96/0xf0 [ 794.137972][T11171] alg_setkey+0x54/0x170 [ 794.142243][T11171] ? alg_setsockopt+0x3b0/0x480 [ 794.147121][T11171] alg_setsockopt+0x3c5/0x480 [ 794.151824][T11171] ? alg_accept+0x50/0x50 [ 794.156189][T11171] do_sock_setsockopt+0x175/0x1a0 [ 794.161240][T11171] ? __fdget+0x180/0x210 [ 794.165512][T11171] __x64_sys_setsockopt+0x182/0x200 [ 794.170743][T11171] do_syscall_64+0x55/0xa0 [ 794.175189][T11171] ? clear_bhb_loop+0x40/0x90 [ 794.179898][T11171] ? clear_bhb_loop+0x40/0x90 [ 794.184604][T11171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.190523][T11171] RIP: 0033:0x7fc22379cdd9 [ 794.194973][T11171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.214692][T11171] RSP: 002b:00007fc2245dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 794.223126][T11171] RAX: ffffffffffffffda RBX: 00007fc223a15fa0 RCX: 00007fc22379cdd9 [ 794.231120][T11171] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 794.239117][T11171] RBP: 00007fc2245dc090 R08: 0000000000000020 R09: 0000000000000000 [ 794.247123][T11171] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 794.255121][T11171] R13: 00007fc223a16038 R14: 00007fc223a15fa0 R15: 00007ffe8d173278 [ 794.263130][T11171] [ 794.266206][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.272381][T11162] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1296: couldn't read orphan inode 13 (err -117) [ 794.332558][T11162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.494521][ T7448] ocfs2: Unmounting device (7,5) on (node local) [ 794.997050][T11162] netlink: 'syz.1.1296': attribute type 10 has an invalid length. [ 795.043578][T11162] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 795.152000][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.332746][T11189] loop3: detected capacity change from 0 to 128 [ 796.829583][T11217] 9pnet_fd: Insufficient options for proto=fd [ 797.150493][ T3464] wlan1: Trigger new scan to find an IBSS to join [ 797.205519][T11204] loop0: detected capacity change from 0 to 32768 [ 797.254340][T11204] JBD2: Ignoring recovery information on journal [ 797.367737][T11204] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 799.061186][T11251] loop3: detected capacity change from 0 to 512 [ 799.079335][T11251] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 799.379102][ T5772] ocfs2: Unmounting device (7,0) on (node local) [ 799.439337][T11245] loop1: detected capacity change from 0 to 32768 [ 799.664817][T11245] read_mapping_page failed! [ 799.688364][T11245] ERROR: (device loop1): txCommit: [ 799.688364][T11245] [ 799.729980][T11245] ERROR: (device loop1): remounting filesystem as read-only [ 800.000845][ T113] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 800.009955][ T113] ------------[ cut here ]------------ [ 800.016223][ T113] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 800.022627][ T113] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 800.028832][ T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 800.036067][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 800.046170][ T113] RIP: 0010:txUnlock+0xc87/0xcb0 [ 800.051166][ T113] Code: 9f 4f 73 07 0f 0b e8 f8 94 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba a4 03 00 00 48 c7 c1 20 2e 04 8b e8 79 4f 73 07 <0f> 0b e8 d2 94 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba [ 800.070900][ T113] RSP: 0018:ffffc90002d07d08 EFLAGS: 00010246 [ 800.077003][ T113] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 5e467356a8778f00 [ 800.084997][ T113] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 800.092994][ T113] RBP: ffffc9000285a0d8 R08: ffffc90002d07a07 R09: 1ffff920005a0f40 [ 800.100992][ T113] R10: dffffc0000000000 R11: fffff520005a0f41 R12: ffff88802bc149b0 [ 800.108995][ T113] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805c3afa94 [ 800.116995][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 800.125950][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 800.132558][ T113] CR2: 00007fff82bb7b80 CR3: 000000002d0ee000 CR4: 00000000003526e0 [ 800.140558][ T113] Call Trace: [ 800.143950][ T113] [ 800.146907][ T113] ? lockdep_hardirqs_on+0x98/0x150 [ 800.152139][ T113] jfs_lazycommit+0x56e/0xa70 [ 800.156963][ T113] ? txFreelock+0x5a0/0x5a0 [ 800.161586][ T113] ? do_task_dead+0xd0/0xd0 [ 800.166370][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 800.171340][ T113] kthread+0x2fa/0x390 [ 800.175438][ T113] ? txFreelock+0x5a0/0x5a0 [ 800.179971][ T113] ? kthread_blkcg+0xd0/0xd0 [ 800.184583][ T113] ret_from_fork+0x48/0x80 [ 800.189023][ T113] ? kthread_blkcg+0xd0/0xd0 [ 800.193642][ T113] ret_from_fork_asm+0x11/0x20 [ 800.198450][ T113] [ 800.201495][ T113] Modules linked in: [ 800.205468][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.208615][ T6952] wlan1: Trigger new scan to find an IBSS to join [ 800.251425][ T113] ---[ end trace 0000000000000000 ]--- [ 800.257043][ T113] RIP: 0010:txUnlock+0xc87/0xcb0 [ 800.267690][ T113] Code: 9f 4f 73 07 0f 0b e8 f8 94 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba a4 03 00 00 48 c7 c1 20 2e 04 8b e8 79 4f 73 07 <0f> 0b e8 d2 94 7f fe 48 c7 c7 40 21 04 8b 48 c7 c6 39 1d 04 8b ba [ 800.291397][ T113] RSP: 0018:ffffc90002d07d08 EFLAGS: 00010246 [ 800.352795][ T113] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 5e467356a8778f00 [ 800.364368][ T113] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 800.386226][ T113] RBP: ffffc9000285a0d8 R08: ffffc90002d07a07 R09: 1ffff920005a0f40 [ 800.407496][ T113] R10: dffffc0000000000 R11: fffff520005a0f41 R12: ffff88802bc149b0 [ 800.420301][ T113] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805c3afa94 [ 800.431237][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 800.442122][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 800.450464][ T113] CR2: 00007fc22384f0d1 CR3: 0000000062c66000 CR4: 00000000003506e0 [ 800.464820][ T113] Kernel panic - not syncing: Fatal exception [ 800.471073][ T113] Kernel Offset: disabled [ 800.475407][ T113] Rebooting in 86400 seconds..