last executing test programs: 10.380635015s ago: executing program 4 (id=626): setresuid(0xee00, 0x0, 0xee01) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 9.937700864s ago: executing program 4 (id=627): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x8b) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000400)={0x0, 0xe703, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="379521000000000003e77200000008000300", @ANYRES32=r3], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f00000001c0)={0x4, 0x0, 0x1e, "1029ea9ba1183c90a99f327d855312da1da2ccd742347535cfc117305da6588ec175eac7fbce524c86cdc67026903bfac4b1c42e57b69c230607c78e", 0xc, "5e21c2d844f81a12dab10efc89e5e8f5627654343857f39293a38fd90e8c9f5c54ab9211b0c699dcbdee4068abbce73b5cd95cc9e35014a3a8adf0b2", 0x10}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r7, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x1, 0x1}, {}, @control={0x0, 0x4}}, {0x0, 0x0, 0xff, 0x0, @tick, {}, {}, @queue={0x0, {0x1, 0x40}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7b7f}, {}, {0x0, 0x8}, @control}, {}], 0x70) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a0"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x1}, 0x7, 0x0, &(0x7f0000000040)={{0x7}}, 0x0, 0x0}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r10, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0xf7, @loopback, 0x7}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111a900000000008510000002000000850000002a00000095000000000000009500a50500000000cbe629289cb1431ca81a0030c0"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_open_dev$vim2m(0x0, 0x7, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x20, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 8.398367728s ago: executing program 4 (id=636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000a80)={0x2, 0x4e20, @local}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={r7, 0x8}, &(0x7f0000000040)=0x8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x824012, &(0x7f0000000b40)={[{@creator={'creator', 0x3d, '\x00\x00\a\x00'}}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp850'}}, {@gid={'gid', 0x3d, 0xee01}}, {@part={'part', 0x3d, 0x4}}, {@force}, {}, {@nobarrier}]}, 0xff, 0x6bb, &(0x7f0000001bc0)="$eJzs3U+IHFkdB/BvdTo96QjZ2d1sNoqQYQOLbjCZSbMmgrBRRHIIEvSy1yGZbIZ0sstkVrKLmI66Cp48yR48rEg87ElEhPUkrmdB8OIp94A3DzmoI1Vd3dMz05nM5M/0JPv5QE296lf13q9+qVfVXd2hAnxmnX0ze3spcvbYuRvl8p3bne6d252rg3KSqSSNpNmfpWgnxafJmfSnfL58sW6uuF8/r9/9pGh++HGnv9Ssp2r9xmbbbTB2zV6yb7iwJ8lMv/ifLTTYGN9eNVXtXFht7yEVw7jLhB0dJA4mbWWD3mrluKGx1tbHLbBr3exfNzeYTvanf3Ut3wekPjs8+MwweZuem3o7FwcAAAA8KWM/y4967l7u5UYO7Ew4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gwo+s8MLOqpMSjPpBg8/7818kz91oTDfUQfXKpm331u0oEAAAAAAAAAwCM5ci/3ciMHBssrRfWd/yvVwsHq7+fybq5nIUs5nhuZz3KWs5S5JNMjDbVuzC8vL81t3PKXKbdcWVm5WW95cuyWJ9fG1Vsf6IZfGjzlPz0AAAAAAAAAgMfrRzm7+v0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsBkWypz+rpoOD8nQazST7krSKmeHqrYkG+xj8edIBAAAAwJPXrucHiv/1CytF9Zn/UPW5f1/ezbUsZzHL6WYhF6t7Af1P/Y2/9zrdO7c7V8tpY8Pf+Ne24qhaTP/ew/ieZ6s1XhpucTbfzvdyLDM5n6Us5vuZz3IWMpNvVaX5FJmu715M37ndziDWjfGeWbN0fn1sR0bKZXyHq0jauZTFKrbjudAahN6o1zs80tsfW8m6Hm+V2SneqG0xRxfreblHv6jnu8N0ted7hxmZrXNfZuP50bxvzP02j5P1Pc2lMbwHdXC1l3JxfU8PlfP99bzM9U+fbM63eSttmImiSDe9n5dLg6Pv0OY5T778j7+cv9y4duXypevHds9h9JDWHxOdkUy8vKVMdMtM9B4hE/seJf7Hp1Vno38W3d7Z8pVq2wNZzHfydi5mIacym7mczmy+lpPp5ORIXl/aPK/VWGtsb6wd/VJdKK9JPxu5Nu2YqftVlHl9fiSvo2e66apu9JXVLL2whSwVrYzP0j/HhtL8Ql0o+/jxyBVn8tZnYm4kEy9unolf/3clyfXutStLl+ff2WJ/r9bzcth+sPbc/JvHskPbV+9ueby8UP5jpX/ZGD06yroXB3Xr8tWqv3Fp1o2tqWulGs/9ugeN1LKlQ7fGtdSve3lsL52q7vBI3Zp3OXk73eG7kNqOD1IAtmD/a/tb7bvtv7U/av+kfbl9bt83p05PfbGVvX9t/mnP7xq/bXy9eC0f5Yc5MOlIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgWXD9vfevzHe7C0u7sJDGY27w1tiqQSr6r7TGrHMkuyAbT0dharMj6vfpP67pPpu3JhFzO/eNZ2cLae5AX1MZU3Vu+Eo7aQzjSXJl7APumjt4fgKenBPLV985cf2997+yeHX+rYW3Fq6dPH3qjVOdr87dPHFpsbsw2/9br2zgwzNl9W3ApCMBAAAAAAAAAAAAtmon/nvDmG6L3gT2FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg6nX0ze3spMjd7fLZcvnO70y2nQXl1zWaSRpLiB0nxaXIm/SnTI80V9+vn9buf/OrVDz/urLbVHKzfWLfdH/69srLNvejVU2aS7KnnDza1pfYujLTX22ZgfcVwD8uEHR0kDibt/wEAAP//6BAEqg==") setxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x31) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x14, 0x0, 0x303, 0x3, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 8.337956412s ago: executing program 1 (id=637): setresuid(0xee00, 0x0, 0xee01) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8.083241369s ago: executing program 1 (id=638): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x8b) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f00000001c0)={0x4, 0x0, 0x1e, "1029ea9ba1183c90a99f327d855312da1da2ccd742347535cfc117305da6588ec175eac7fbce524c86cdc67026903bfac4b1c42e57b69c230607c78e", 0xc, "5e21c2d844f81a12dab10efc89e5e8f5627654343857f39293a38fd90e8c9f5c54ab9211b0c699dcbdee4068abbce73b5cd95cc9e35014a3a8adf0b2", 0x10}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r5, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x1, 0x1}, {}, @control={0x0, 0x4}}, {0x0, 0x0, 0xff, 0x0, @tick, {}, {}, @queue={0x0, {0x1, 0x40}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7b7f}, {}, {0x0, 0x8}, @control}, {}], 0x70) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x1}, 0x7, 0x0, &(0x7f0000000040)={{0x7}}, 0x0, 0x0}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x9}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r8, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0xf7, @loopback, 0x7}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111a900000000008510000002000000850000002a00000095000000000000009500a50500000000cbe629289cb1431ca81a0030c0"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_open_dev$vim2m(0x0, 0x7, 0x2) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x20, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 7.851821764s ago: executing program 3 (id=640): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x6, 0xffff, 0x4, 0x7f, "c415cac90c000000000000003ffa00", 0x8, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x17, 0x2000005, 0x2, 0x6, 0x801, 0xffffffffffffffff, 0xffffffff}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1d, 0x1, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) ioctl$VT_RELDISP(r0, 0x5605) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.632944199s ago: executing program 3 (id=641): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r5, 0x0, 0x0}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000000640)={0x0, r8, 0x1, 0x0, 0x1000000000000}) close_range(r7, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 6.483878686s ago: executing program 1 (id=642): bpf$MAP_CREATE(0x0, &(0x7f0000005940)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007292a633735d175b81760a901c0ca86edb8d19efb30e0f98fcbfd1dd279ba49e09e3d3d0eae4c98629f0aa19c8f41377297d543e793284d4b80cf62957b08017eec8935bb2bdcd"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {0x0}, {&(0x7f0000001400)="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", 0x5fb}], 0x3, &(0x7f0000002400)}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="3000000013000100000000000000b700080000000900000008000000ffffffff08001300", @ANYRES32, @ANYBLOB='\b\x001'], 0x30}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) recvmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000000540)=@tipc=@id, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000680)=""/159, 0x9f}, {&(0x7f0000000780)=""/65, 0x41}, {&(0x7f0000000800)=""/206, 0xce}, {&(0x7f0000000900)=""/175, 0xaf}, {&(0x7f0000000a40)=""/202, 0xca}, {&(0x7f0000000b40)=""/210, 0xd2}, {&(0x7f0000000c40)=""/227, 0xe3}, {&(0x7f0000000d40)=""/70, 0x46}], 0x8, &(0x7f0000000e80)=""/22, 0x16}, 0x4}, {{&(0x7f0000000ec0)=@nfc, 0x80, &(0x7f0000002c80)=[{&(0x7f0000000f40)=""/222, 0xde}, {&(0x7f0000001040)=""/158, 0x9e}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000001100)=""/83, 0x53}, {&(0x7f0000001180)=""/191, 0xbf}, {&(0x7f0000001240)=""/156, 0x9c}, {&(0x7f0000002a00)=""/225, 0xe1}, {&(0x7f0000002b00)=""/223, 0xdf}, {&(0x7f0000001300)=""/119, 0x77}, {&(0x7f0000002c00)=""/117, 0x75}], 0xa, &(0x7f0000002d40)=""/138, 0x8a}, 0x9d1}, {{&(0x7f0000002e00)=@llc, 0x80, &(0x7f00000043c0)=[{&(0x7f0000002e80)=""/93, 0x5d}, {&(0x7f0000002f00)=""/171, 0xab}, {&(0x7f0000002fc0)=""/127, 0x7f}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/80, 0x50}, {&(0x7f00000040c0)=""/186, 0xba}, {&(0x7f0000004180)=""/205, 0xcd}, {&(0x7f0000004280)=""/113, 0x71}, {&(0x7f0000004300)}, {&(0x7f0000004340)=""/127, 0x7f}], 0xa}, 0x3ff}, {{&(0x7f0000004480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000004580)=[{&(0x7f0000004500)=""/53, 0x35}, {&(0x7f0000004540)=""/26, 0x1a}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f00000045c0)}, {&(0x7f0000004600)=""/206, 0xce}, {&(0x7f0000004700)=""/136, 0x88}], 0x3, &(0x7f0000004800)}, 0x6}, {{&(0x7f0000004840)=@alg, 0x80, &(0x7f0000004d00)=[{&(0x7f00000048c0)=""/61, 0x3d}, {&(0x7f0000004900)=""/34, 0x22}, {&(0x7f0000004940)=""/94, 0x5e}, {&(0x7f00000049c0)=""/216, 0xd8}, {&(0x7f0000004ac0)=""/23, 0x17}, {&(0x7f0000004b00)=""/190, 0xbe}, {&(0x7f0000004bc0)=""/212, 0xd4}, {&(0x7f0000004cc0)=""/57, 0x39}], 0x8, &(0x7f0000004d80)=""/169, 0xa9}, 0x2}, {{&(0x7f0000004e40)=@qipcrtr, 0x80, &(0x7f0000005100)=[{&(0x7f0000004ec0)=""/184, 0xb8}, {&(0x7f0000004f80)=""/58, 0x3a}, {&(0x7f0000004fc0)=""/7, 0x7}, {&(0x7f0000005000)=""/195, 0xc3}], 0x4, &(0x7f0000005140)=""/210, 0xd2}, 0x2}, {{&(0x7f0000005240)=@caif=@dbg, 0x80, &(0x7f00000055c0)=[{&(0x7f00000052c0)=""/251, 0xfb}, {&(0x7f00000053c0)=""/120, 0x78}, {&(0x7f0000005440)=""/105, 0x69}, {&(0x7f00000054c0)=""/213, 0xd5}], 0x4, &(0x7f0000005600)=""/202, 0xca}, 0x7fffffff}], 0x8, 0x41, &(0x7f0000005900)={0x77359400}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10104a8, 0x0, 0x81, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000640)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) chdir(&(0x7f0000000140)='./bus\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.142400349s ago: executing program 3 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000100)=0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$alg(0x26, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 6.091877442s ago: executing program 0 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) process_vm_readv(r0, &(0x7f0000019280)=[{&(0x7f0000019200)=""/85, 0x55}], 0x1, &(0x7f0000019380)=[{&(0x7f00000192c0)=""/159, 0x9f}], 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x3}, 0x8) fallocate(r4, 0x40, 0x100000000, 0x9c7) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='qnx4\x00', 0x4a000, &(0x7f0000000240)='$:%\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6", 0x6}], 0x1, &(0x7f0000000700)=ANY=[@ANYRESOCT], 0x30}, 0x0) r8 = dup(0xffffffffffffffff) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 5.935221863s ago: executing program 1 (id=645): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', '.'}, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x4c}}, 0x0) fdatasync(r0) 5.137992787s ago: executing program 0 (id=646): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x8b) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000400)={0x0, 0xe703, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="379521000000000003e77200000008000300", @ANYRES32=r3], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f00000001c0)={0x4, 0x0, 0x1e, "1029ea9ba1183c90a99f327d855312da1da2ccd742347535cfc117305da6588ec175eac7fbce524c86cdc67026903bfac4b1c42e57b69c230607c78e", 0xc, "5e21c2d844f81a12dab10efc89e5e8f5627654343857f39293a38fd90e8c9f5c54ab9211b0c699dcbdee4068abbce73b5cd95cc9e35014a3a8adf0b2", 0x10}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r7, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x1, 0x1}, {}, @control={0x0, 0x4}}, {0x0, 0x0, 0xff, 0x0, @tick, {}, {}, @queue={0x0, {0x1, 0x40}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7b7f}, {}, {0x0, 0x8}, @control}, {}], 0x70) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x1}, 0x7, 0x0, &(0x7f0000000040)={{0x7}}, 0x0, 0x0}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r10, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0xf7, @loopback, 0x7}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111a900000000008510000002000000850000002a00000095000000000000009500a50500000000cbe629289cb1431ca81a0030c0"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_open_dev$vim2m(0x0, 0x7, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x20, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 5.047660382s ago: executing program 3 (id=648): setresuid(0xee00, 0x0, 0xee01) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4.978475907s ago: executing program 2 (id=649): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_usb_connect(0x5, 0x4a, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001600000060ec97000fc83c00fe8000000000"], 0xffe) 4.79102303s ago: executing program 3 (id=650): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x400e802, 0x6, 0xfffffff4, 0xfff}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x400d0) r6 = fanotify_init(0x8, 0x1) fanotify_mark(r6, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280050019006d"], 0x3c}}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') preadv(r9, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1, 0xfffffffe, 0x5) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) openat(0xffffffffffffff9c, 0x0, 0x40, 0x4) r10 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r10, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000000180)={0x2, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0x2, 0x2, 0x2, [0x0, 0xfffffffffffffffb]}}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) 3.807619465s ago: executing program 3 (id=651): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f003}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000140)) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048851}, 0x44081) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000480)={0x42, 0x2, 0x4, "55ac07d4c7e2d18700000000000000e6a800", 0x47314356}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x10}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1e, 0xffff}}, @TCA_U32_HASH={0x8, 0x2, 0xdf}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x20048086) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x6, 0x80}, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf8000000, 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffe, 0xffef}, {0xffff}, {0x7, 0x300}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x1c802, &(0x7f0000008d80)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="eab7801665ed44d31483647c66d1464f85c079b97bdb3eef00a41e66a76021b2dfc7a4f4f51caa1b4a19896a80ac593860f849b6c14282030a3cc6d80df8c259735ecada683b21c9020f69e0f51d58e43a9bc19a93e6977f1b8fc9b77aa3f0ad97d2019b3a160bf7373fb249580cfcca4f72f6984ae9f49e51529f464e41d4c36b006f8a68429e82fc9628735a2bedb1dd2c0c13232a2f6cb630e3d5f5bde3fa561ee8db4dafcabe40eae19f30d2f8da5e3491a552f164823d57f602d53ba2b08f4766ff"], 0x52, 0x5ff5, &(0x7f0000000c80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000340)=0x20000000005, 0xaea, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 3.759012169s ago: executing program 0 (id=652): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000400)={0x0, 0xe703, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="379521000000000003e77200000008000300", @ANYRES32=r3], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f00000001c0)={0x4, 0x0, 0x1e, "1029ea9ba1183c90a99f327d855312da1da2ccd742347535cfc117305da6588ec175eac7fbce524c86cdc67026903bfac4b1c42e57b69c230607c78e", 0xc, "5e21c2d844f81a12dab10efc89e5e8f5627654343857f39293a38fd90e8c9f5c54ab9211b0c699dcbdee4068abbce73b5cd95cc9e35014a3a8adf0b2", 0x10}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r7, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x1, 0x1}, {}, @control={0x0, 0x4}}, {0x0, 0x0, 0xff, 0x0, @tick, {}, {}, @queue={0x0, {0x1, 0x40}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7b7f}, {}, {0x0, 0x8}, @control}, {}], 0x70) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x1}, 0x7, 0x0, &(0x7f0000000040)={{0x7}}, 0x0, 0x0}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x9}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r10, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0xf7, @loopback, 0x7}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111a900000000008510000002000000850000002a00000095000000000000009500a50500000000cbe629289cb1431ca81a0030c0"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_open_dev$vim2m(0x0, 0x7, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x20, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 3.42840002s ago: executing program 2 (id=653): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r5, 0x0, 0x0}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000000640)={0x0, r8, 0x1, 0x0, 0x1000000000000}) close_range(r7, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 2.767967395s ago: executing program 4 (id=654): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416940807034d2f87e5890c6aab845013f2325f1a39014403178da1880b251812a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126f4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffffffffcb6, &(0x7f0000000000), &(0x7f0000000880)="4310aace1ca3595b44f06133bfeefc8b6978626f96e29bb86a1efec7626ba161a6a29948171839999d52464bcac4b62831eb064bbc97bf42d0e88588558101dcbf98e4140395b2017d35b9b4ab3eaee60a7ab23800cde2d1b9bf1d88924dec6e19d834bc3093a34bd87af0a2d089f0b30c50059d87178d3e92af192125dd14b79e66135c5cec80638f5b8d1de406b8ff8171f004aa1bbb42e23f72fac3f61df5f4d9d8e314137d6f7839daa635a8d5e5c586d884d71df30b3a75ce94f8ffffffff0000000065e20882cefc31752404bbca85078189ffd2febf0d7fe1250f0d58769527ffafcafcf6244dfd580f5b2c5b22f3e57def50929a14590b585702dcb2bb404025b6850c22c064ac27a249c8f21199253881fc5cd8cfed8a64232df0a54a41cae8edea76f4d7298c0ea8e9559e81e19fd57d80b1705b0a62adc7fc86a806c1cbc16e6695e3c6695106ee28a3f24959e5efa4", 0x6}, 0x2c) bind$netrom(0xffffffffffffffff, 0x0, 0x0) 2.202364713s ago: executing program 2 (id=655): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x6, 0xffff, 0x4, 0x7f, "c415cac90c000000000000003ffa00", 0x8, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x17, 0x2000005, 0x2, 0x6, 0x801, 0xffffffffffffffff, 0xffffffff}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1d, 0x1, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) ioctl$VT_RELDISP(r0, 0x5605) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.714022935s ago: executing program 0 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) process_vm_readv(r0, &(0x7f0000019280)=[{&(0x7f0000019200)=""/85, 0x55}], 0x1, &(0x7f0000019380)=[{&(0x7f00000192c0)=""/159, 0x9f}], 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x3}, 0x8) fallocate(r4, 0x40, 0x100000000, 0x9c7) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='qnx4\x00', 0x4a000, &(0x7f0000000240)='$:%\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6", 0x6}], 0x1, &(0x7f0000000700)=ANY=[@ANYRESOCT], 0x30}, 0x0) r8 = dup(0xffffffffffffffff) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 1.536641518s ago: executing program 1 (id=657): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000cc0)=ANY=[], 0x4, 0x5d9, &(0x7f00000010c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8949, &(0x7f0000000200)={'vlan1\x00', @random="0106002010ff"}) getdents(r1, &(0x7f00000001c0)=""/179, 0x6b) unlink(&(0x7f0000001a80)='./file1\x00') 1.423446235s ago: executing program 4 (id=658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x6, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x10000, 0x1, 0x406, 0x4, 0x7fffffff, 0xe}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffffab8f, 0x0, 0x9, 0x4, 0x1}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0180fe4ec6"}) 1.422872475s ago: executing program 2 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000100)=0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$alg(0x26, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 541.587894ms ago: executing program 0 (id=660): setresuid(0xee00, 0x0, 0xee01) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 276.007152ms ago: executing program 2 (id=661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, 0x0) 275.562812ms ago: executing program 1 (id=662): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x8b) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000400)={0x0, 0xe703, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="379521000000000003e77200000008000300", @ANYRES32=r3], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f00000001c0)={0x4, 0x0, 0x1e, "1029ea9ba1183c90a99f327d855312da1da2ccd742347535cfc117305da6588ec175eac7fbce524c86cdc67026903bfac4b1c42e57b69c230607c78e", 0xc, "5e21c2d844f81a12dab10efc89e5e8f5627654343857f39293a38fd90e8c9f5c54ab9211b0c699dcbdee4068abbce73b5cd95cc9e35014a3a8adf0b2", 0x10}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r7, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x1, 0x1}, {}, @control={0x0, 0x4}}, {0x0, 0x0, 0xff, 0x0, @tick, {}, {}, @queue={0x0, {0x1, 0x40}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7b7f}, {}, {0x0, 0x8}, @control}, {}], 0x70) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a0"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x1}, 0x7, 0x0, &(0x7f0000000040)={{0x7}}, 0x0, 0x0}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r10, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0xf7, @loopback, 0x7}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111a900000000008510000002000000850000002a00000095000000000000009500a50500000000cbe629289cb1431ca81a0030c0"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_open_dev$vim2m(0x0, 0x7, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x20, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 201.255617ms ago: executing program 0 (id=663): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}, {0xf, 0x5, 0xea}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000007c0), 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x3000000}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201610117592920570509201ec70102030109022400010200100009045807028ab538000905060200020d0006090582020002"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400400c0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@rand_addr, 0x0}, &(0x7f0000000180)=0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x0, 0x1, 0x104, 0x1ff}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x5, 0x4, 0x7, 0x1000, 0xffffffffffffffff, 0x1b6f, '\x00', r3, r4, 0x5, 0x2, 0x5, 0x5}, 0x50) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) 69.144795ms ago: executing program 2 (id=664): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000a80)={0x2, 0x4e20, @local}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={r7, 0x8}, &(0x7f0000000040)=0x8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x824012, &(0x7f0000000b40)={[{@creator={'creator', 0x3d, '\x00\x00\a\x00'}}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp850'}}, {@gid={'gid', 0x3d, 0xee01}}, {@part={'part', 0x3d, 0x4}}, {@force}, {}, {@nobarrier}]}, 0xff, 0x6bb, &(0x7f0000001bc0)="$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") setxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x31) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x14, 0x0, 0x303, 0x3, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 0s ago: executing program 4 (id=665): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_usb_connect(0x5, 0x4a, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001600000060ec97000fc83c00fe8000000000000000000000000000aaff020000"], 0xffe) kernel console output (not intermixed with test programs): oop4): using ordered data mode [ 94.812284][ T4506] reiserfs: using flush barriers [ 94.827043][ T4457] Trying to free block not in datazone [ 94.833531][ T4457] Trying to free block not in datazone [ 94.839747][ T4457] Trying to free block not in datazone [ 94.845496][ T4457] Trying to free block not in datazone [ 94.851091][ T4457] Trying to free block not in datazone [ 94.856986][ T4457] Trying to free block not in datazone [ 94.862767][ T4457] Trying to free block not in datazone [ 94.868360][ T4457] Trying to free block not in datazone [ 94.875610][ T4457] Trying to free block not in datazone [ 94.881110][ T4457] Trying to free block not in datazone [ 94.887871][ T4457] Trying to free block not in datazone [ 94.893647][ T4457] Trying to free block not in datazone [ 94.899243][ T4457] Trying to free block not in datazone [ 94.905102][ T4457] Trying to free block not in datazone [ 94.910688][ T4457] Trying to free block not in datazone [ 94.918416][ T4457] Trying to free block not in datazone [ 94.938488][ T4506] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 94.957086][ T4457] Trying to free block not in datazone [ 94.977807][ T4457] Trying to free block not in datazone [ 94.982888][ T7] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 94.998747][ T4457] Trying to free block not in datazone [ 95.008869][ T4457] Trying to free block not in datazone [ 95.010176][ T4506] REISERFS (device loop4): checking transaction log (loop4) [ 95.019166][ T4457] Trying to free block not in datazone [ 95.105580][ T4506] REISERFS (device loop4): Using r5 hash to sort names [ 95.125515][ T4520] loop2: detected capacity change from 0 to 2048 [ 95.132537][ T4457] Trying to free block not in datazone [ 95.162475][ T4457] Trying to free block not in datazone [ 95.168460][ T4457] Trying to free block not in datazone [ 95.181533][ T4506] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 95.264981][ T4526] FAULT_INJECTION: forcing a failure. [ 95.264981][ T4526] name failslab, interval 1, probability 0, space 0, times 1 [ 95.277809][ T4526] CPU: 1 PID: 4526 Comm: syz.3.65 Not tainted syzkaller #0 [ 95.285044][ T4526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.295216][ T4526] Call Trace: [ 95.298661][ T4526] [ 95.301721][ T4526] dump_stack_lvl+0x188/0x250 [ 95.306436][ T4526] ? __lock_acquire+0x7d10/0x7d10 [ 95.311623][ T4526] ? show_regs_print_info+0x20/0x20 [ 95.316981][ T4526] ? load_image+0x400/0x400 [ 95.321535][ T4526] should_fail+0x38c/0x4c0 [ 95.325981][ T4526] should_failslab+0x5/0x20 [ 95.330521][ T4526] slab_pre_alloc_hook+0x51/0xc0 [ 95.335496][ T4526] ? dst_alloc+0x101/0x160 [ 95.339939][ T4526] kmem_cache_alloc+0x3d/0x290 [ 95.344761][ T4526] dst_alloc+0x101/0x160 [ 95.349131][ T4526] xfrm_alloc_dst+0x7c/0x150 [ 95.353869][ T4526] xfrm_lookup_with_ifid+0xb9f/0x2000 [ 95.359387][ T4526] ? __xfrm_sk_clone_policy+0x840/0x840 [ 95.364983][ T4526] ? __lock_acquire+0x7d10/0x7d10 [ 95.370060][ T4526] xfrm_lookup_route+0x38/0x1a0 [ 95.374957][ T4526] udp_sendmsg+0x15dd/0x2370 [ 95.379600][ T4526] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 95.384653][ T4526] ? udp_cmsg_send+0x350/0x350 [ 95.389489][ T4526] ? preempt_schedule_irq+0xe6/0x160 [ 95.394991][ T4526] ? aa_af_perm+0x340/0x340 [ 95.399522][ T4526] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 95.405962][ T4526] ? mark_lock+0x94/0x320 [ 95.410325][ T4526] ? sock_rps_record_flow+0x17/0x3b0 [ 95.415759][ T4526] ? inet_sendmsg+0x78/0x2f0 [ 95.420393][ T4526] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 95.425722][ T4526] ? security_socket_sendmsg+0x7c/0xa0 [ 95.431217][ T4526] ? inet_send_prepare+0x260/0x260 [ 95.436367][ T4526] ____sys_sendmsg+0x5b7/0x8f0 [ 95.441175][ T4526] ? __sys_sendmsg_sock+0x30/0x30 [ 95.446238][ T4526] ? rcu_is_watching+0x11/0xa0 [ 95.451035][ T4526] ? import_iovec+0x6f/0xa0 [ 95.455705][ T4526] ___sys_sendmsg+0x236/0x2e0 [ 95.460564][ T4526] ? __sys_sendmsg+0x2a0/0x2a0 [ 95.465397][ T4526] ? __might_fault+0xb3/0x110 [ 95.470108][ T4526] __sys_sendmmsg+0x2ba/0x500 [ 95.474834][ T4526] ? __ia32_sys_sendmsg+0x80/0x80 [ 95.479901][ T4526] ? __context_tracking_exit+0x4c/0x80 [ 95.485403][ T4526] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 95.491421][ T4526] ? lock_chain_count+0x20/0x20 [ 95.496422][ T4526] ? vtime_user_exit+0x2c8/0x3e0 [ 95.501406][ T4526] __x64_sys_sendmmsg+0x9c/0xb0 [ 95.506388][ T4526] do_syscall_64+0x4c/0xa0 [ 95.510891][ T4526] ? clear_bhb_loop+0x30/0x80 [ 95.515775][ T4526] ? clear_bhb_loop+0x30/0x80 [ 95.520497][ T4526] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.526432][ T4526] RIP: 0033:0x7fb220391799 [ 95.531210][ T4526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.551156][ T4526] RSP: 002b:00007fb21e5a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 95.559952][ T4526] RAX: ffffffffffffffda RBX: 00007fb22060b180 RCX: 00007fb220391799 [ 95.567965][ T4526] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006 [ 95.576070][ T4526] RBP: 00007fb21e5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 95.584084][ T4526] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 95.592168][ T4526] R13: 00007fb22060b218 R14: 00007fb22060b180 R15: 00007fffed939138 [ 95.600307][ T4526] [ 95.606495][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 95.615680][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 95.624786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 95.634041][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 95.643099][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 95.652318][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 95.661425][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 96.098866][ T4506] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 96.109095][ T4457] Trying to free block not in datazone [ 96.126008][ T4457] Trying to free block not in datazone [ 96.153139][ T4520] Alternate GPT is invalid, using primary GPT. [ 96.159690][ T4457] Trying to free block not in datazone [ 96.173337][ T4457] Trying to free block not in datazone [ 96.173613][ T4520] loop2: p1 p2 p3 [ 96.211386][ T4457] Trying to free block not in datazone [ 96.227903][ T4457] Trying to free block not in datazone [ 96.280738][ T4457] Trying to free block not in datazone [ 96.309950][ T4457] Trying to free block not in datazone [ 96.339524][ T4530] loop3: detected capacity change from 0 to 2048 [ 96.348163][ T4457] Trying to free block not in datazone [ 96.354173][ T4457] Trying to free block not in datazone [ 96.394761][ T4457] Trying to free block not in datazone [ 96.424625][ T4457] Trying to free block not in datazone [ 96.435674][ T4457] Trying to free block not in datazone [ 96.444394][ T4530] UDF-fs: bad mount option "" or missing value [ 96.476151][ T4457] Trying to free block not in datazone [ 96.523021][ T4457] Trying to free block not in datazone [ 96.562347][ T4457] Trying to free block not in datazone [ 96.605418][ T4457] Trying to free block not in datazone [ 96.634667][ T4457] Trying to free block not in datazone [ 96.670901][ T4457] Trying to free block not in datazone [ 96.840732][ T4457] Trying to free block not in datazone [ 96.864573][ T4457] Trying to free block not in datazone [ 96.905637][ T4457] Trying to free block not in datazone [ 96.911167][ T4457] Trying to free block not in datazone [ 96.945131][ T4457] Trying to free block not in datazone [ 96.950692][ T4457] Trying to free block not in datazone [ 96.983371][ T4457] Trying to free block not in datazone [ 97.003585][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 97.005545][ T4457] Trying to free block not in datazone [ 97.029791][ T4457] Trying to free block not in datazone [ 97.042799][ T4457] Trying to free block not in datazone [ 97.048411][ T4457] Trying to free block not in datazone [ 97.054522][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 97.063718][ T4457] Trying to free block not in datazone [ 97.069833][ T4457] Trying to free block not in datazone [ 97.075525][ T4457] Trying to free block not in datazone [ 97.081069][ T4457] Trying to free block not in datazone [ 97.086635][ T4457] Trying to free block not in datazone [ 97.092806][ T4457] Trying to free block not in datazone [ 97.098378][ T4457] Trying to free block not in datazone [ 97.099653][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 97.103996][ T4457] Trying to free block not in datazone [ 97.119352][ T4457] Trying to free block not in datazone [ 97.134910][ T4457] Trying to free block not in datazone [ 97.212574][ T4457] Trying to free block not in datazone [ 97.218102][ T4457] Trying to free block not in datazone [ 97.262271][ T4457] Trying to free block not in datazone [ 97.267795][ T4457] Trying to free block not in datazone [ 97.294827][ T4515] loop0: detected capacity change from 0 to 40427 [ 97.387676][ T4457] Trying to free block not in datazone [ 97.393501][ T4457] Trying to free block not in datazone [ 97.399643][ T4457] Trying to free block not in datazone [ 97.405902][ T4457] Trying to free block not in datazone [ 97.444632][ T4457] Trying to free block not in datazone [ 97.512334][ T4457] Trying to free block not in datazone [ 97.517874][ T4457] Trying to free block not in datazone [ 97.535424][ T4515] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 97.592378][ T4515] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 97.695930][ T4457] Trying to free block not in datazone [ 97.735505][ T4457] Trying to free block not in datazone [ 97.796370][ T4515] F2FS-fs (loop0): invalid crc value [ 97.817183][ T4457] Trying to free block not in datazone [ 97.833846][ T4515] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 97.862892][ T4457] Trying to free block not in datazone [ 97.878834][ T4457] Trying to free block not in datazone [ 97.905439][ T4457] Trying to free block not in datazone [ 97.920137][ T4457] Trying to free block not in datazone [ 97.932619][ T4457] Trying to free block not in datazone [ 97.948324][ T4457] Trying to free block not in datazone [ 97.972481][ T4457] Trying to free block not in datazone [ 97.997965][ T4457] Trying to free block not in datazone [ 98.037929][ T4457] Trying to free block not in datazone [ 98.062728][ T4457] Trying to free block not in datazone [ 98.068250][ T4457] Trying to free block not in datazone [ 98.109125][ T4457] Trying to free block not in datazone [ 98.135068][ T4457] Trying to free block not in datazone [ 98.140592][ T4457] Trying to free block not in datazone [ 98.168186][ T4457] Trying to free block not in datazone [ 98.174288][ T4457] Trying to free block not in datazone [ 98.179893][ T4457] Trying to free block not in datazone [ 98.190055][ T4457] Trying to free block not in datazone [ 98.200182][ T4457] Trying to free block not in datazone [ 98.227755][ T4457] Trying to free block not in datazone [ 98.237889][ T4457] Trying to free block not in datazone [ 98.248021][ T4457] Trying to free block not in datazone [ 98.268276][ T4457] Trying to free block not in datazone [ 98.274138][ T4457] Trying to free block not in datazone [ 98.289961][ T4457] Trying to free block not in datazone [ 98.295797][ T4457] Trying to free block not in datazone [ 98.311493][ T4457] Trying to free block not in datazone [ 98.343428][ T4457] Trying to free block not in datazone [ 98.412236][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.588501][ T4606] fuse: Unknown parameter 'rooضÆe' [ 98.761094][ T4600] delete_channel: no stack [ 98.792286][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 99.722319][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.734304][ T4614] sp0: Synchronizing with TNC [ 99.739152][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 99.751290][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 99.774544][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.803075][ T4616] dlm: no locking on control device [ 99.849755][ T4611] loop3: detected capacity change from 0 to 4096 [ 99.868157][ T4616] xt_hashlimit: max too large, truncated to 1048576 [ 99.954579][ T4622] loop0: detected capacity change from 0 to 2048 [ 99.961971][ T7] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 99.983118][ T4611] EXT4-fs (loop3): Unrecognized mount option "cgroup.controllers" or missing value [ 99.987132][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.008583][ T7] usb 5-1: Product: syz [ 100.017430][ T7] usb 5-1: Manufacturer: syz [ 100.027902][ T4178] Alternate GPT is invalid, using primary GPT. [ 100.045148][ T4178] loop0: p1 p2 p3 [ 100.056941][ T7] usb 5-1: SerialNumber: syz [ 100.080800][ T7] usb 5-1: config 0 descriptor?? [ 100.092577][ T4622] Alternate GPT is invalid, using primary GPT. [ 100.098890][ T4622] loop0: p1 p2 p3 [ 100.171059][ T7] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 100.187978][ T3560] Alternate GPT is invalid, using primary GPT. [ 100.219204][ T3560] loop0: p1 p2 p3 [ 100.415737][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 100.433568][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 100.437981][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 100.461811][ T4618] loop2: detected capacity change from 0 to 32768 [ 100.495123][ T13] usb 5-1: USB disconnect, device number 3 [ 100.517091][ T4618] jfs: Unrecognized mount option "" or missing value [ 100.547229][ T4613] [U] è` [ 100.573081][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 100.585813][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 100.605273][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 100.865770][ T4633] loop4: detected capacity change from 0 to 40427 [ 100.889204][ T4633] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 100.896090][ T4633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 100.906633][ T4633] F2FS-fs (loop4): invalid crc value [ 100.994731][ T4633] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 101.110221][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 101.238487][ T4633] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 101.245680][ T4633] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 102.057691][ T4633] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 102.296993][ T4656] loop1: detected capacity change from 0 to 2048 [ 102.306973][ T4194] attempt to access beyond end of device [ 102.306973][ T4194] loop4: rw=2049, want=45112, limit=40427 [ 102.363260][ T4656] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2362, location=2362 [ 102.381102][ T4656] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 102.393014][ T4656] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 102.404877][ T4656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.427005][ T26] audit: type=1800 audit(1772615471.006:3): pid=4656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.87" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 102.447311][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.570531][ T4626] loop3: detected capacity change from 0 to 32768 [ 102.618520][ T4662] FAULT_INJECTION: forcing a failure. [ 102.618520][ T4662] name failslab, interval 1, probability 0, space 0, times 0 [ 102.694678][ T4662] CPU: 1 PID: 4662 Comm: syz.0.91 Not tainted syzkaller #0 [ 102.701937][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.712023][ T4662] Call Trace: [ 102.715333][ T4662] [ 102.718289][ T4662] dump_stack_lvl+0x188/0x250 [ 102.723002][ T4662] ? show_regs_print_info+0x20/0x20 [ 102.728232][ T4662] ? load_image+0x400/0x400 [ 102.732782][ T4662] ? __might_sleep+0xf0/0xf0 [ 102.737421][ T4662] ? __lock_acquire+0x7d10/0x7d10 [ 102.742481][ T4662] should_fail+0x38c/0x4c0 [ 102.746938][ T4662] should_failslab+0x5/0x20 [ 102.751474][ T4662] slab_pre_alloc_hook+0x51/0xc0 [ 102.756435][ T4662] ? vm_area_alloc+0x20/0xe0 [ 102.761061][ T4662] kmem_cache_alloc+0x3d/0x290 [ 102.765855][ T4662] vm_area_alloc+0x20/0xe0 [ 102.770320][ T4662] mmap_region+0xac0/0x1650 [ 102.774880][ T4662] do_mmap+0x819/0xe90 [ 102.779022][ T4662] vm_mmap_pgoff+0x1c1/0x2d0 [ 102.783655][ T4662] ? account_locked_vm+0xe0/0xe0 [ 102.788620][ T4662] ? __lock_acquire+0x7d10/0x7d10 [ 102.793684][ T4662] ksys_mmap_pgoff+0x140/0x790 [ 102.798484][ T4662] ? mmap_region+0x1650/0x1650 [ 102.803282][ T4662] ? lockdep_hardirqs_on+0x94/0x140 [ 102.808526][ T4662] do_syscall_64+0x4c/0xa0 [ 102.812971][ T4662] ? clear_bhb_loop+0x30/0x80 [ 102.817677][ T4662] ? clear_bhb_loop+0x30/0x80 [ 102.822392][ T4662] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.828342][ T4662] RIP: 0033:0x7f2560b3e502 [ 102.832783][ T4662] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 102.852457][ T4662] RSP: 002b:00007f255ed97df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 102.860905][ T4662] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2560b3e502 [ 102.868912][ T4662] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 102.877000][ T4662] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 102.885007][ T4662] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 102.893027][ T4662] R13: 00007f255ed97ee0 R14: 00007f255ed97ea0 R15: 0000200000000900 [ 102.901045][ T4662] [ 102.905993][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.043822][ T4626] XFS (loop3): Mounting V5 Filesystem [ 103.299464][ T4626] XFS (loop3): Ending clean mount [ 103.428149][ T4645] loop2: detected capacity change from 0 to 40427 [ 103.465815][ T4626] XFS (loop3): Quotacheck needed: Please wait. [ 103.494890][ T4645] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 103.551914][ T4645] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 103.659677][ T4645] F2FS-fs (loop2): invalid crc value [ 103.693263][ T4626] XFS (loop3): Quotacheck: Done. [ 103.735365][ T4645] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 103.747264][ T4229] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 103.845712][ T4190] XFS (loop3): Unmounting Filesystem [ 103.990136][ T4645] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 103.997733][ T4645] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.164392][ T4229] usb 1-1: not running at top speed; connect to a high speed hub [ 104.252703][ T4229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.433084][ T4229] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.458474][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.556551][ T4229] usb 1-1: Product: syz [ 104.585118][ T4229] usb 1-1: Manufacturer: syz [ 104.616241][ T4229] usb 1-1: SerialNumber: syz [ 105.033867][ T4229] usb 1-1: bad CDC descriptors [ 105.153048][ T4229] usb 1-1: USB disconnect, device number 3 [ 105.323820][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.331568][ T21] usb 2-1: no configurations [ 105.353428][ T21] usb 2-1: can't read configurations, error -22 [ 105.578179][ T4701] loop4: detected capacity change from 0 to 40427 [ 105.590580][ T4701] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 105.597598][ T4701] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 105.607830][ T4701] F2FS-fs (loop4): invalid crc value [ 105.671360][ T4701] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 105.768116][ T4701] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 105.775540][ T4701] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 105.824412][ T4701] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 105.918151][ T4194] attempt to access beyond end of device [ 105.918151][ T4194] loop4: rw=2049, want=45112, limit=40427 [ 106.015333][ T4715] FAULT_INJECTION: forcing a failure. [ 106.015333][ T4715] name failslab, interval 1, probability 0, space 0, times 0 [ 106.093672][ T4715] CPU: 0 PID: 4715 Comm: syz.1.104 Not tainted syzkaller #0 [ 106.101058][ T4715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.111148][ T4715] Call Trace: [ 106.114455][ T4715] [ 106.117416][ T4715] dump_stack_lvl+0x188/0x250 [ 106.122146][ T4715] ? show_regs_print_info+0x20/0x20 [ 106.127390][ T4715] ? load_image+0x400/0x400 [ 106.131932][ T4715] ? __might_sleep+0xf0/0xf0 [ 106.136555][ T4715] ? __lock_acquire+0x7d10/0x7d10 [ 106.141623][ T4715] should_fail+0x38c/0x4c0 [ 106.146082][ T4715] should_failslab+0x5/0x20 [ 106.150611][ T4715] slab_pre_alloc_hook+0x51/0xc0 [ 106.155576][ T4715] kmem_cache_alloc_node+0x47/0x2d0 [ 106.160807][ T4715] ? __alloc_skb+0xf4/0x750 [ 106.165358][ T4715] __alloc_skb+0xf4/0x750 [ 106.169732][ T4715] netlink_dump+0x1e8/0xcf0 [ 106.174295][ T4715] ? mutex_lock_io_nested+0x60/0x60 [ 106.179534][ T4715] ? netlink_lookup+0x1d0/0x1d0 [ 106.184428][ T4715] __netlink_dump_start+0x523/0x700 [ 106.189709][ T4715] unix_diag_handler_dump+0x1d5/0x8d0 [ 106.195121][ T4715] ? __mutex_trylock_common+0x155/0x260 [ 106.201218][ T4715] ? mutex_lock_io_nested+0x60/0x60 [ 106.206451][ T4715] ? rcu_lock_release+0x20/0x20 [ 106.211377][ T4715] ? unix_diag_handler_dump+0x8d0/0x8d0 [ 106.216971][ T4715] ? rcu_lock_release+0x20/0x20 [ 106.221848][ T4715] sock_diag_rcv_msg+0x164/0x3e0 [ 106.226844][ T4715] netlink_rcv_skb+0x1f5/0x440 [ 106.231644][ T4715] ? sock_diag_bind+0xa0/0xa0 [ 106.236357][ T4715] ? netlink_ack+0xb50/0xb50 [ 106.240985][ T4715] ? __lock_acquire+0x7d10/0x7d10 [ 106.246061][ T4715] sock_diag_rcv+0x26/0x40 [ 106.250611][ T4715] netlink_unicast+0x774/0x920 [ 106.255427][ T4715] netlink_sendmsg+0x8ba/0xbe0 [ 106.260237][ T4715] ? netlink_getsockopt+0x570/0x570 [ 106.265473][ T4715] ? aa_sock_msg_perm+0x94/0x150 [ 106.270450][ T4715] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 106.275766][ T4715] ? security_socket_sendmsg+0x7c/0xa0 [ 106.281262][ T4715] sock_write_iter+0x2a6/0x3a0 [ 106.286062][ T4715] ? sock_read_iter+0x380/0x380 [ 106.290966][ T4715] ? memset+0x1e/0x40 [ 106.294995][ T4715] ? iov_iter_init+0xb4/0x170 [ 106.299732][ T4715] vfs_write+0x745/0xd60 [ 106.304032][ T4715] ? file_end_write+0x250/0x250 [ 106.308922][ T4715] ? __fget_files+0x40f/0x480 [ 106.313635][ T4715] ? __fdget_pos+0x1e2/0x370 [ 106.318249][ T4715] ? ksys_write+0x71/0x260 [ 106.322704][ T4715] ksys_write+0x152/0x260 [ 106.327079][ T4715] ? __ia32_sys_read+0x80/0x80 [ 106.331882][ T4715] ? lockdep_hardirqs_on+0x94/0x140 [ 106.337122][ T4715] do_syscall_64+0x4c/0xa0 [ 106.341568][ T4715] ? clear_bhb_loop+0x30/0x80 [ 106.346282][ T4715] ? clear_bhb_loop+0x30/0x80 [ 106.351008][ T4715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.356938][ T4715] RIP: 0033:0x7fa1d0195799 [ 106.361411][ T4715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.381316][ T4715] RSP: 002b:00007fa1ce3ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.389949][ T4715] RAX: ffffffffffffffda RBX: 00007fa1d040efa0 RCX: 00007fa1d0195799 [ 106.397981][ T4715] RDX: 0000000000000140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 106.405991][ T4715] RBP: 00007fa1ce3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 106.413987][ T4715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.421975][ T4715] R13: 00007fa1d040f038 R14: 00007fa1d040efa0 R15: 00007ffc9fefa918 [ 106.429973][ T4715] [ 106.433025][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.547044][ T4723] netlink: 'syz.2.105': attribute type 5 has an invalid length. [ 106.947739][ T4727] loop2: detected capacity change from 0 to 1024 [ 107.610179][ T4704] loop3: detected capacity change from 0 to 32768 [ 110.014863][ T4747] usb usb7: usbfs: process 4747 (syz.2.112) did not claim interface 0 before use [ 110.248907][ T4749] loop1: detected capacity change from 0 to 40427 [ 110.292466][ T4749] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 110.298895][ T4749] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 110.310626][ T4749] F2FS-fs (loop1): invalid crc value [ 110.342214][ T4749] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 110.387280][ T4749] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 110.394441][ T4749] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.449186][ T4757] loop3: detected capacity change from 0 to 8 [ 110.466704][ T4749] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 110.591941][ T4757] unable to read id index table [ 110.684168][ T4761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.115'. [ 110.958640][ T4184] attempt to access beyond end of device [ 110.958640][ T4184] loop1: rw=2049, want=45112, limit=40427 [ 113.107412][ T4768] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 113.717416][ T4789] loop4: detected capacity change from 0 to 1024 [ 114.466847][ T4796] loop4: detected capacity change from 0 to 40427 [ 114.536465][ T4796] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 114.543191][ T4796] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 114.566726][ T4796] F2FS-fs (loop4): invalid crc value [ 114.645262][ T4802] loop0: detected capacity change from 0 to 1024 [ 114.669559][ T4796] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 114.733912][ T4796] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 114.741130][ T4796] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.793534][ T4796] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 114.842504][ T4194] attempt to access beyond end of device [ 114.842504][ T4194] loop4: rw=2049, want=45112, limit=40427 [ 114.999691][ T4807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'. [ 115.771182][ T4790] loop2: detected capacity change from 0 to 32768 [ 115.830177][ T4790] jfs: Unrecognized mount option "" or missing value [ 116.047862][ T4816] loop3: detected capacity change from 0 to 2048 [ 116.054873][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.068537][ T4816] UDF-fs: bad mount option "sh^rtad" or missing value [ 116.144204][ T4816] netlink: 'syz.3.132': attribute type 4 has an invalid length. [ 116.172784][ T4198] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.297079][ T4820] loop4: detected capacity change from 0 to 4096 [ 116.322261][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 116.355847][ T4820] NILFS (loop4): unrecognized mount option "ëSÆ\Ýë-" [ 116.442581][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.482425][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.530710][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.565429][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.582596][ T4198] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 116.609140][ T4824] sp0: Synchronizing with TNC [ 116.615456][ T1108] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 116.628412][ T4198] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 116.648828][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.658753][ T4198] usb 1-1: config 220 interface 0 has no altsetting 0 [ 116.667232][ T4824] dlm: no locking on control device [ 116.702088][ T1108] usb 2-1: config 0 descriptor?? [ 116.736570][ T4827] loop3: detected capacity change from 0 to 2048 [ 116.746052][ T4825] xt_hashlimit: max too large, truncated to 1048576 [ 116.786833][ T4178] Alternate GPT is invalid, using primary GPT. [ 116.794604][ T4178] loop3: p1 p2 p3 [ 116.817264][ T4827] Alternate GPT is invalid, using primary GPT. [ 116.823772][ T4827] loop3: p1 p2 p3 [ 116.873673][ T4198] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 116.883533][ T4198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.891611][ T4198] usb 1-1: Product: syz [ 116.897331][ T4198] usb 1-1: Manufacturer: syz [ 116.905809][ T4198] usb 1-1: SerialNumber: syz [ 117.109536][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 117.124747][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 117.182179][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 117.249038][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 117.264510][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 117.290421][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 117.358449][ T4823] [U] è` [ 118.134475][ T4837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.140'. [ 118.210100][ T4837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.140'. [ 118.236031][ T1108] usbhid 2-1:0.0: can't add hid device: -71 [ 118.242087][ T1108] usbhid: probe of 2-1:0.0 failed with error -71 [ 118.250531][ T1108] usb 2-1: USB disconnect, device number 4 [ 119.417903][ T4198] usb 1-1: USB disconnect, device number 4 [ 120.411724][ T4863] netlink: 100 bytes leftover after parsing attributes in process `syz.0.148'. [ 120.421627][ T4863] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 120.469774][ T4863] netlink: 'syz.0.148': attribute type 5 has an invalid length. [ 120.479402][ T4863] pim6reg1: tun_chr_ioctl cmd 1074025673 [ 120.488440][ T4863] loop0: detected capacity change from 0 to 256 [ 120.508040][ T4864] loop2: detected capacity change from 0 to 2048 [ 120.565009][ T4176] Alternate GPT is invalid, using primary GPT. [ 120.572704][ T4176] loop2: p1 p2 p3 [ 120.611466][ T4864] Alternate GPT is invalid, using primary GPT. [ 120.617887][ T4864] loop2: p1 p2 p3 [ 120.632358][ T4863] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 120.699784][ T4844] loop3: detected capacity change from 0 to 32768 [ 120.802717][ T4844] jfs: Unrecognized mount option "" or missing value [ 120.968283][ T4870] sp0: Synchronizing with TNC [ 120.985770][ T4870] dlm: no locking on control device [ 121.048467][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 121.067866][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 121.081082][ T4872] xt_hashlimit: max too large, truncated to 1048576 [ 121.089431][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 121.147755][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 121.452350][ T4229] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.463111][ T4877] dlm: no locking on control device [ 121.742305][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 121.808868][ T4886] loop4: detected capacity change from 0 to 512 [ 121.882028][ T4887] netlink: 72 bytes leftover after parsing attributes in process `syz.3.155'. [ 122.229701][ T4876] [U] è`` [ 122.632520][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.673343][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.700471][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.740458][ T4229] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.772404][ T4229] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 122.810016][ T4895] nbd0: detected capacity change from 0 to 549764202496 [ 122.828974][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.853907][ T4229] usb 3-1: config 0 descriptor?? [ 122.918853][ T4903] loop1: detected capacity change from 0 to 2048 [ 122.933335][ T4886] EXT4-fs (loop4): Test dummy encryption mode enabled [ 122.954078][ T4886] EXT4-fs (loop4): Unrecognized mount option "fscontext=user_u" or missing value [ 122.976521][ T4398] Alternate GPT is invalid, using primary GPT. [ 122.987528][ T4398] loop1: p1 p2 p3 [ 123.014369][ T4903] Alternate GPT is invalid, using primary GPT. [ 123.020661][ T4903] loop1: p1 p2 p3 [ 123.037358][ T3560] Alternate GPT is invalid, using primary GPT. [ 123.073897][ T4192] block nbd0: Receive control failed (result -104) [ 123.229743][ T3560] loop1: p1 p2 p3 [ 123.980831][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 123.994454][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 124.006836][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 124.102309][ T4922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.166'. [ 124.293093][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.370934][ T4921] dlm: no locking on control device [ 124.622519][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 124.795569][ T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.815160][ T4229] usbhid 3-1:0.0: can't add hid device: -71 [ 124.821217][ T4229] usbhid: probe of 3-1:0.0 failed with error -71 [ 124.850772][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 124.852696][ T23] usb 5-1: config 0 has no interface number 0 [ 124.867699][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 124.878821][ T4472] udevd[4472]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 124.890355][ T4923] xt_hashlimit: max too large, truncated to 1048576 [ 124.898453][ T4229] usb 3-1: USB disconnect, device number 4 [ 124.950401][ T23] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.966634][ T4928] loop2: detected capacity change from 0 to 256 [ 124.998291][ T23] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.008931][ T4919] [U] ‹ [ 125.013784][ T4930] FAULT_INJECTION: forcing a failure. [ 125.013784][ T4930] name failslab, interval 1, probability 0, space 0, times 0 [ 125.026926][ T4930] CPU: 0 PID: 4930 Comm: syz.1.171 Not tainted syzkaller #0 [ 125.034254][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.039620][ T23] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 125.044346][ T4930] Call Trace: [ 125.044356][ T4930] [ 125.044365][ T4930] dump_stack_lvl+0x188/0x250 [ 125.044397][ T4930] ? show_regs_print_info+0x20/0x20 [ 125.044421][ T4930] ? load_image+0x400/0x400 [ 125.044448][ T4930] ? __lock_acquire+0x7d10/0x7d10 [ 125.044483][ T4930] should_fail+0x38c/0x4c0 [ 125.044512][ T4930] should_failslab+0x5/0x20 [ 125.044531][ T4930] slab_pre_alloc_hook+0x51/0xc0 [ 125.044554][ T4930] __kmalloc+0x6b/0x330 [ 125.044571][ T4930] ? __se_sys_memfd_create+0x142/0x450 [ 125.044595][ T4930] ? strnlen_user+0x19b/0x250 [ 125.044619][ T4930] __se_sys_memfd_create+0x142/0x450 [ 125.044642][ T4930] ? lock_chain_count+0x20/0x20 [ 125.044666][ T4930] ? __x64_sys_memfd_create+0x60/0x60 [ 125.044693][ T4930] ? lockdep_hardirqs_on+0x94/0x140 [ 125.044719][ T4930] do_syscall_64+0x4c/0xa0 [ 125.044738][ T4930] ? clear_bhb_loop+0x30/0x80 [ 125.044758][ T4930] ? clear_bhb_loop+0x30/0x80 [ 125.044779][ T4930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.044801][ T4930] RIP: 0033:0x7fa1d0195799 [ 125.044821][ T4930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.044838][ T4930] RSP: 002b:00007fa1ce3eee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 125.044861][ T4930] RAX: ffffffffffffffda RBX: 000000000001ee5a RCX: 00007fa1d0195799 [ 125.044877][ T4930] RDX: 00007fa1ce3eeee0 RSI: 0000000000000000 RDI: 00007fa1d022bdb9 [ 125.044891][ T4930] RBP: 000020000001f780 R08: 00000000ffffffff R09: 0000000000000000 [ 125.044905][ T4930] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0 [ 125.044919][ T4930] R13: 00007fa1ce3eeee0 R14: 00007fa1ce3eeea0 R15: 0000200000000900 [ 125.072290][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.074580][ T4930] [ 125.239696][ T23] usb 5-1: config 0 descriptor?? [ 125.290035][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 125.306162][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 125.320104][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 125.370614][ T26] audit: type=1800 audit(1772615493.946:4): pid=4928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.170" name="file1" dev="loop2" ino=1048591 res=0 errno=0 [ 125.497512][ T4937] sp0: Synchronizing with TNC [ 125.547462][ T4939] loop0: detected capacity change from 0 to 512 [ 125.572900][ T4937] dlm: no locking on control device [ 125.621104][ T4939] EXT4-fs (loop0): Test dummy encryption mode enabled [ 125.709885][ T4945] loop3: detected capacity change from 0 to 2048 [ 125.719810][ T4939] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.176: inode #7: comm syz.0.176: iget: illegal inode # [ 125.737772][ T4939] EXT4-fs (loop0): Remounting filesystem read-only [ 125.744758][ T4939] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.176: error while reading EA inode 7 err=-117 [ 125.764755][ T4939] EXT4-fs (loop0): Remounting filesystem read-only [ 125.771358][ T4939] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.176: inode #1: comm syz.0.176: iget: illegal inode # [ 125.792376][ T4398] Alternate GPT is invalid, using primary GPT. [ 125.793639][ T4939] EXT4-fs (loop0): Remounting filesystem read-only [ 125.805892][ T4939] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.176: error while reading EA inode 1 err=-117 [ 125.818135][ T4398] loop3: p1 p2 p3 [ 125.824683][ T4939] EXT4-fs (loop0): Remounting filesystem read-only [ 125.824825][ T4943] loop2: detected capacity change from 0 to 4096 [ 125.834125][ T4939] EXT4-fs (loop0): 1 orphan inode deleted [ 125.844396][ T4939] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x0000000000000044,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,data_err=abort,errors=remount-ro,. Quota mode: none. [ 125.870695][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.891815][ T4945] Alternate GPT is invalid, using primary GPT. [ 125.898230][ T4945] loop3: p1 p2 p3 [ 125.950955][ T4943] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 125.972738][ T4943] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 126.061207][ T4943] ntfs: volume version 3.1. [ 126.168513][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 126.242829][ T4936] [U] è` [ 126.396246][ T4955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.179'. [ 127.182600][ T23] usbhid 5-1:0.1: can't add hid device: -71 [ 127.188678][ T23] usbhid: probe of 5-1:0.1 failed with error -71 [ 127.240552][ T4961] ALSA: mixer_oss: invalid OSS volume '' [ 127.267794][ T23] usb 5-1: USB disconnect, device number 4 [ 127.269093][ T4961] ALSA: mixer_oss: invalid OSS volume '' [ 127.391977][ T4962] loop1: detected capacity change from 0 to 4096 [ 127.473858][ T4962] ntfs: (device loop1): parse_options(): Unrecognized mount option 0x0000000000000003ÿÿ00000000000000000003. [ 128.311793][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.552439][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 128.740452][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.890476][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.082325][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.387029][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.401133][ T7] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 129.410702][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.451283][ T7] usb 3-1: config 0 descriptor?? [ 129.749356][ T4990] loop4: detected capacity change from 0 to 2048 [ 129.845811][ T4999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.193'. [ 130.643294][ T4997] sp0: Synchronizing with TNC [ 130.696883][ T4990] Alternate GPT is invalid, using primary GPT. [ 130.703904][ T4990] loop4: p1 p2 p3 [ 130.928562][ T4997] dlm: no locking on control device [ 131.002538][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 131.008591][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 131.033934][ T7] usb 3-1: USB disconnect, device number 5 [ 131.248416][ T5003] xt_hashlimit: max too large, truncated to 1048576 [ 132.017753][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 132.031298][ T4471] udevd[4471]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 132.042961][ T4991] [U] è` [ 132.072481][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 132.775694][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.782091][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.786376][ T5038] overlayfs: overlapping lowerdir path [ 133.832917][ T5038] overlayfs: overlapping lowerdir path [ 133.951239][ T5044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 134.083710][ T4231] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.392425][ T4231] usb 3-1: Using ep0 maxpacket: 16 [ 134.543476][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.689888][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.701214][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.711082][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.724186][ T4231] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 134.733478][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.784723][ T4231] usb 3-1: config 0 descriptor?? [ 134.846067][ T5046] sp0: Synchronizing with TNC [ 134.921481][ T5046] dlm: no locking on control device [ 134.992557][ T5052] xt_hashlimit: max too large, truncated to 1048576 [ 135.782855][ T5045] [U] è` [ 136.962480][ T4231] usbhid 3-1:0.0: can't add hid device: -71 [ 136.972319][ T4231] usbhid: probe of 3-1:0.0 failed with error -71 [ 136.994848][ T5060] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.033109][ T5060] loop1: detected capacity change from 0 to 256 [ 137.049468][ T5060] exfat: Deprecated parameter 'namecase' [ 137.062720][ T5060] exfat: Deprecated parameter 'namecase' [ 137.077824][ T4231] usb 3-1: USB disconnect, device number 6 [ 137.157926][ T5060] exFAT-fs (loop1): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 137.238036][ T5064] sp0: Synchronizing with TNC [ 137.277001][ T5064] dlm: no locking on control device [ 137.357266][ T5067] xt_hashlimit: max too large, truncated to 1048576 [ 138.119211][ T5063] [U] è` [ 138.526467][ T5089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'. [ 140.669041][ T5097] loop0: detected capacity change from 0 to 32768 [ 140.722480][ T5101] sp0: Synchronizing with TNC [ 140.984185][ T5110] xt_hashlimit: max too large, truncated to 1048576 [ 141.067718][ T5097] XFS (loop0): Mounting V5 Filesystem [ 141.251062][ T5097] XFS (loop0): Internal error head_block >= tail_block || head_cycle != tail_cycle + 1 at line 1656 of file fs/xfs/xfs_log_recover.c. Caller xlog_clear_stale_blocks+0x2d6/0x420 [ 141.269034][ T5097] CPU: 1 PID: 5097 Comm: syz.0.223 Not tainted syzkaller #0 [ 141.276463][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.286542][ T5097] Call Trace: [ 141.289841][ T5097] [ 141.292776][ T5097] dump_stack_lvl+0x188/0x250 [ 141.297469][ T5097] ? xfs_info+0x2c0/0x2c0 [ 141.301838][ T5097] ? show_regs_print_info+0x20/0x20 [ 141.307043][ T5097] ? xfs_rw_bdev+0x467/0x4e0 [ 141.311643][ T5097] xfs_corruption_error+0x117/0x170 [ 141.316879][ T5097] ? xlog_clear_stale_blocks+0x2d6/0x420 [ 141.322539][ T5097] xlog_clear_stale_blocks+0x36f/0x420 [ 141.328025][ T5097] ? xlog_clear_stale_blocks+0x2d6/0x420 [ 141.333669][ T5097] xlog_find_tail+0x79e/0x9f0 [ 141.338359][ T5097] xlog_recover+0x48/0x410 [ 141.342790][ T5097] xfs_log_mount+0x393/0x6b0 [ 141.347405][ T5097] xfs_mountfs+0xb37/0x1b30 [ 141.351928][ T5097] ? xfs_default_resblks+0x70/0x70 [ 141.357148][ T5097] ? rcu_is_watching+0x11/0xa0 [ 141.361930][ T5097] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 141.368178][ T5097] xfs_fs_fill_super+0x11a4/0x13f0 [ 141.373312][ T5097] get_tree_bdev+0x3f1/0x610 [ 141.377968][ T5097] ? xfs_mount_set_dax_mode+0x100/0x100 [ 141.383654][ T5097] vfs_get_tree+0x88/0x270 [ 141.388118][ T5097] do_new_mount+0x24a/0xa40 [ 141.389670][ T5100] [U] è` [ 141.392660][ T5097] __se_sys_mount+0x2e3/0x3d0 [ 141.400206][ T5097] ? __x64_sys_mount+0xc0/0xc0 [ 141.405012][ T5097] ? lockdep_hardirqs_on+0x94/0x140 [ 141.410245][ T5097] ? __x64_sys_mount+0x1c/0xc0 [ 141.415023][ T5097] do_syscall_64+0x4c/0xa0 [ 141.419634][ T5097] ? clear_bhb_loop+0x30/0x80 [ 141.424324][ T5097] ? clear_bhb_loop+0x30/0x80 [ 141.429102][ T5097] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.435031][ T5097] RIP: 0033:0x7f2560b3fa0a [ 141.439493][ T5097] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.459137][ T5097] RSP: 002b:00007f255ed97e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 141.467573][ T5097] RAX: ffffffffffffffda RBX: 00007f255ed97ee0 RCX: 00007f2560b3fa0a [ 141.475586][ T5097] RDX: 0000200000009700 RSI: 0000200000000140 RDI: 00007f255ed97ea0 [ 141.483583][ T5097] RBP: 0000200000009700 R08: 00007f255ed97ee0 R09: 0000000000000002 [ 141.491593][ T5097] R10: 0000000000000002 R11: 0000000000000246 R12: 0000200000000140 [ 141.499593][ T5097] R13: 00007f255ed97ea0 R14: 00000000000097e9 R15: 0000200000000000 [ 141.507613][ T5097] [ 141.510744][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.518466][ T5097] XFS (loop0): Corruption detected. Unmount and run xfs_repair [ 141.526199][ T5097] XFS (loop0): failed to locate log tail [ 141.532414][ T5097] XFS (loop0): log mount/recovery failed: error -117 [ 141.672306][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.688888][ T5134] loop1: detected capacity change from 0 to 256 [ 141.695664][ T5097] XFS (loop0): log mount failed [ 141.842843][ T5137] sp0: Synchronizing with TNC [ 141.850137][ T5137] dlm: no locking on control device [ 141.929655][ T5142] xt_hashlimit: max too large, truncated to 1048576 [ 141.972542][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 142.093307][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 128, changing to 11 [ 142.240324][ T5134] FAT-fs (loop1): Directory bread(block 64) failed [ 142.724381][ T5134] FAT-fs (loop1): Directory bread(block 65) failed [ 142.731086][ T5134] FAT-fs (loop1): Directory bread(block 66) failed [ 142.737814][ T5134] FAT-fs (loop1): Directory bread(block 67) failed [ 142.881788][ T5135] [U] è` [ 142.882747][ T7] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 142.900533][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.902848][ T5134] FAT-fs (loop1): Directory bread(block 68) failed [ 142.908799][ T7] usb 4-1: Product: syz [ 142.919388][ T7] usb 4-1: Manufacturer: syz [ 142.924080][ T7] usb 4-1: SerialNumber: syz [ 142.932637][ T5134] FAT-fs (loop1): Directory bread(block 69) failed [ 142.939333][ T5134] FAT-fs (loop1): Directory bread(block 70) failed [ 142.946027][ T5134] FAT-fs (loop1): Directory bread(block 71) failed [ 142.952723][ T5134] FAT-fs (loop1): Directory bread(block 72) failed [ 142.959290][ T5134] FAT-fs (loop1): Directory bread(block 73) failed [ 144.181129][ T5109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.669668][ T7] usb 4-1: MIDIStreaming interface descriptor not found [ 145.892649][ T5174] xt_hashlimit: max too large, truncated to 1048576 [ 145.934931][ T7] usb 4-1: USB disconnect, device number 3 [ 146.301712][ T5179] loop2: detected capacity change from 0 to 1024 [ 146.387177][ T5179] EXT4-fs (loop2): quotafile must be on filesystem root [ 146.504848][ T5171] [U] ‹ [ 146.924160][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.283175][ T5176] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 147.411416][ T5193] sp0: Synchronizing with TNC [ 147.451540][ T5193] dlm: no locking on control device [ 147.551605][ T5198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.246'. [ 147.920400][ T5203] xt_hashlimit: max too large, truncated to 1048576 [ 148.241216][ T5202] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 148.459571][ T5192] [U] è` [ 150.846039][ T5225] sp0: Synchronizing with TNC [ 150.977716][ T5229] xt_hashlimit: max too large, truncated to 1048576 [ 151.012320][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.630505][ T5224] [U] è` [ 151.905867][ T5233] loop2: detected capacity change from 0 to 512 [ 152.118387][ T5233] FAT-fs (loop2): Unrecognized mount option "disc3rd" or missing value [ 152.185830][ T5235] loop1: detected capacity change from 0 to 40427 [ 152.194559][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 152.243245][ T5242] sp0: Synchronizing with TNC [ 152.252094][ T5242] dlm: no locking on control device [ 152.295636][ T5235] F2FS-fs (loop1): invalid crc value [ 152.312699][ T5245] xt_hashlimit: max too large, truncated to 1048576 [ 152.332777][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.343475][ T5235] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.383881][ T5235] F2FS-fs (loop1): Start checkpoint disabled! [ 152.397740][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.416417][ T5235] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 152.432297][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.452175][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.507172][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 152.542202][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.582670][ T23] usb 1-1: config 0 descriptor?? [ 152.622097][ T4570] attempt to access beyond end of device [ 152.622097][ T4570] loop1: rw=2049, want=40976, limit=40427 [ 152.736358][ T5233] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 152.736358][ T5233] program syz.2.259 not setting count and/or reply_len properly [ 153.066315][ T5241] [U] è` [ 153.109429][ T5254] FAULT_INJECTION: forcing a failure. [ 153.109429][ T5254] name failslab, interval 1, probability 0, space 0, times 0 [ 153.132520][ T5254] CPU: 1 PID: 5254 Comm: syz.1.263 Not tainted syzkaller #0 [ 153.139875][ T5254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.149967][ T5254] Call Trace: [ 153.153278][ T5254] [ 153.156238][ T5254] dump_stack_lvl+0x188/0x250 [ 153.160980][ T5254] ? show_regs_print_info+0x20/0x20 [ 153.166221][ T5254] ? load_image+0x400/0x400 [ 153.170768][ T5254] ? __might_sleep+0xf0/0xf0 [ 153.175413][ T5254] ? __lock_acquire+0x7d10/0x7d10 [ 153.180479][ T5254] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 153.186855][ T5254] should_fail+0x38c/0x4c0 [ 153.191319][ T5254] should_failslab+0x5/0x20 [ 153.195872][ T5254] slab_pre_alloc_hook+0x51/0xc0 [ 153.201344][ T5254] __kmalloc+0x6b/0x330 [ 153.205539][ T5254] ? tomoyo_encode+0x27e/0x540 [ 153.210347][ T5254] tomoyo_encode+0x27e/0x540 [ 153.214987][ T5254] tomoyo_realpath_from_path+0x5cd/0x610 [ 153.220714][ T5254] tomoyo_path_number_perm+0x242/0x660 [ 153.226242][ T5254] ? verify_lock_unused+0x140/0x140 [ 153.231582][ T5254] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 153.237182][ T5254] ? ksys_write+0x1c6/0x260 [ 153.241819][ T5254] security_file_ioctl+0x6c/0xa0 [ 153.247057][ T5254] __se_sys_ioctl+0x48/0x170 [ 153.251682][ T5254] do_syscall_64+0x4c/0xa0 [ 153.256130][ T5254] ? clear_bhb_loop+0x30/0x80 [ 153.260859][ T5254] ? clear_bhb_loop+0x30/0x80 [ 153.265579][ T5254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.271507][ T5254] RIP: 0033:0x7fa1d0195799 [ 153.275949][ T5254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.295633][ T5254] RSP: 002b:00007fa1ce3ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.304085][ T5254] RAX: ffffffffffffffda RBX: 00007fa1d040efa0 RCX: 00007fa1d0195799 [ 153.312206][ T5254] RDX: 0000200000000180 RSI: 00000000c0585611 RDI: 0000000000000003 [ 153.320215][ T5254] RBP: 00007fa1ce3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 153.328222][ T5254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.336216][ T5254] R13: 00007fa1d040f038 R14: 00007fa1d040efa0 R15: 00007ffc9fefa918 [ 153.344230][ T5254] [ 153.347373][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.359649][ T150] block nbd0: Possible stuck request ffff888020c80000: control (read@0,4096B). Runtime 30 seconds [ 153.402530][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 153.417447][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 153.428358][ T23] usb 1-1: USB disconnect, device number 5 [ 153.522382][ T5254] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.719288][ T5269] sp0: Synchronizing with TNC [ 154.942550][ T5272] xt_hashlimit: max too large, truncated to 1048576 [ 155.295854][ T5278] loop4: detected capacity change from 0 to 40427 [ 155.484843][ T5268] [U] è` [ 155.512377][ T5278] F2FS-fs (loop4): invalid crc value [ 155.540649][ T5278] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.582468][ T5278] F2FS-fs (loop4): Start checkpoint disabled! [ 155.669194][ T5284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.274'. [ 156.420947][ T5278] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 156.501376][ T5277] attempt to access beyond end of device [ 156.501376][ T5277] loop4: rw=10241, want=45104, limit=40427 [ 156.515018][ T5287] overlayfs: overlapping lowerdir path [ 156.533884][ T5278] attempt to access beyond end of device [ 156.533884][ T5278] loop4: rw=2049, want=45104, limit=40427 [ 156.561973][ T5291] loop2: detected capacity change from 0 to 1024 [ 156.570146][ T5287] overlayfs: overlapping lowerdir path [ 156.606742][ T5291] EXT4-fs (loop2): Ignoring removed oldalloc option [ 156.613515][ T5291] EXT4-fs (loop2): Ignoring removed bh option [ 156.619690][ T5291] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.660497][ T5293] sp0: Synchronizing with TNC [ 156.687043][ T5291] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 156.720877][ T26] audit: type=1804 audit(1772615525.296:5): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.276" name="/newroot/58/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 156.800710][ T5293] dlm: no locking on control device [ 156.972776][ T5297] xt_hashlimit: max too large, truncated to 1048576 [ 157.037049][ T4287] attempt to access beyond end of device [ 157.037049][ T4287] loop4: rw=2049, want=40976, limit=40427 [ 157.151225][ T26] audit: type=1326 audit(1772615525.726:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5299 comm="syz.0.280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2560b3e799 code=0x0 [ 157.431646][ T5292] [U] è` [ 160.414073][ T5330] sp0: Synchronizing with TNC [ 160.516762][ T5330] xt_hashlimit: max too large, truncated to 1048576 [ 160.559252][ T5341] overlayfs: overlapping lowerdir path [ 160.857653][ T5343] loop2: detected capacity change from 0 to 40427 [ 160.871552][ T5329] [U] ‹è [ 160.884172][ T5346] overlayfs: overlapping lowerdir path [ 161.124962][ T5343] F2FS-fs (loop2): invalid crc value [ 161.280974][ T5354] loop1: detected capacity change from 0 to 2048 [ 161.301513][ T5348] loop0: detected capacity change from 0 to 2048 [ 161.313942][ T5343] F2FS-fs (loop2): Found nat_bits in checkpoint [ 161.360396][ T5343] F2FS-fs (loop2): Start checkpoint disabled! [ 161.646731][ T5348] Alternate GPT is invalid, using primary GPT. [ 161.653215][ T5348] loop0: p1 p2 p3 [ 161.682731][ T5354] loop1: p3 < > [ 161.752467][ T5343] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 161.801906][ T5361] sp0: Synchronizing with TNC [ 161.827167][ T3560] Alternate GPT is invalid, using primary GPT. [ 161.837916][ T5361] dlm: no locking on control device [ 161.874541][ T3560] loop0: p1 p2 p3 [ 161.878440][ T5361] xt_hashlimit: max too large, truncated to 1048576 [ 161.908307][ T5359] [U] è` [ 162.010046][ T4287] attempt to access beyond end of device [ 162.010046][ T4287] loop2: rw=2049, want=40976, limit=40427 [ 162.169069][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 162.181920][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 162.195725][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 162.239445][ T5369] loop4: detected capacity change from 0 to 8 [ 162.308205][ T5374] overlayfs: overlapping lowerdir path [ 162.321235][ T5374] overlayfs: overlapping lowerdir path [ 162.399256][ T5369] SQUASHFS error: xz decompression failed, data probably corrupt [ 162.430173][ T5369] SQUASHFS error: Failed to read block 0x108: -5 [ 162.488992][ T5369] SQUASHFS error: Unable to read metadata cache entry [106] [ 162.517845][ T5369] SQUASHFS error: Unable to read inode 0x11f [ 162.576743][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 163.699441][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 163.729350][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 163.746093][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 163.829338][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 164.021191][ T5391] loop2: detected capacity change from 0 to 512 [ 164.169289][ T5391] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.403005][ T5391] EXT4-fs (loop2): 1 orphan inode deleted [ 164.420410][ T5393] loop1: detected capacity change from 0 to 40427 [ 164.424805][ T5391] EXT4-fs (loop2): 1 truncate cleaned up [ 164.478275][ T5391] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 164.502545][ T5393] F2FS-fs (loop1): invalid crc value [ 164.529850][ T5393] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.573526][ T5393] F2FS-fs (loop1): Start checkpoint disabled! [ 164.589494][ T5391] EXT4-fs (loop2): shut down requested (1) [ 164.596069][ T5393] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 164.616001][ T5403] loop3: detected capacity change from 0 to 256 [ 164.720383][ T5403] FAT-fs (loop3): bogus logical sector size 0 [ 164.741522][ T5403] FAT-fs (loop3): Can't find a valid FAT filesystem [ 164.974377][ T4356] attempt to access beyond end of device [ 164.974377][ T4356] loop1: rw=2049, want=40976, limit=40427 [ 165.074364][ T5413] loop3: detected capacity change from 0 to 2048 [ 165.097222][ T5416] overlayfs: overlapping lowerdir path [ 165.243239][ T5413] Alternate GPT is invalid, using primary GPT. [ 165.249620][ T5413] loop3: p1 p2 p3 [ 165.293207][ T5422] overlayfs: overlapping lowerdir path [ 165.306619][ T5418] sp0: Synchronizing with TNC [ 166.052711][ T3560] Alternate GPT is invalid, using primary GPT. [ 166.079536][ T5418] dlm: no locking on control device [ 166.092255][ T3560] loop3: p1 p2 p3 [ 166.127183][ T5418] xt_hashlimit: max too large, truncated to 1048576 [ 166.216246][ T5429] FAULT_INJECTION: forcing a failure. [ 166.216246][ T5429] name failslab, interval 1, probability 0, space 0, times 0 [ 166.238335][ T5414] [U] è` [ 166.248506][ T5429] CPU: 1 PID: 5429 Comm: syz.4.317 Not tainted syzkaller #0 [ 166.256038][ T5429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.266135][ T5429] Call Trace: [ 166.269447][ T5429] [ 166.272405][ T5429] dump_stack_lvl+0x188/0x250 [ 166.277125][ T5429] ? show_regs_print_info+0x20/0x20 [ 166.282366][ T5429] ? load_image+0x400/0x400 [ 166.286913][ T5429] ? __lock_acquire+0x7d10/0x7d10 [ 166.291982][ T5429] should_fail+0x38c/0x4c0 [ 166.296441][ T5429] should_failslab+0x5/0x20 [ 166.300977][ T5429] slab_pre_alloc_hook+0x51/0xc0 [ 166.305962][ T5429] __kmalloc+0x6b/0x330 [ 166.310192][ T5429] ? __se_sys_memfd_create+0x142/0x450 [ 166.315691][ T5429] ? strnlen_user+0x19b/0x250 [ 166.320499][ T5429] __se_sys_memfd_create+0x142/0x450 [ 166.325841][ T5429] ? lock_chain_count+0x20/0x20 [ 166.330744][ T5429] ? __x64_sys_memfd_create+0x60/0x60 [ 166.336154][ T5429] ? lockdep_hardirqs_on+0x94/0x140 [ 166.341397][ T5429] do_syscall_64+0x4c/0xa0 [ 166.345879][ T5429] ? clear_bhb_loop+0x30/0x80 [ 166.350592][ T5429] ? clear_bhb_loop+0x30/0x80 [ 166.355311][ T5429] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.361236][ T5429] RIP: 0033:0x7fd61b033799 [ 166.365681][ T5429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.385364][ T5429] RSP: 002b:00007fd61928ce08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 166.393818][ T5429] RAX: ffffffffffffffda RBX: 0000000000000352 RCX: 00007fd61b033799 [ 166.401866][ T5429] RDX: 00007fd61928cee0 RSI: 0000000000000000 RDI: 00007fd61b0c9db9 [ 166.410043][ T5429] RBP: 0000200000000b80 R08: 00000000ffffffff R09: 0000000000000000 [ 166.418149][ T5429] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000100 [ 166.426155][ T5429] R13: 00007fd61928cee0 R14: 00007fd61928cea0 R15: 0000200000000680 [ 166.434161][ T5429] [ 166.437212][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.033824][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 167.043713][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 167.144917][ T5448] loop3: detected capacity change from 0 to 1024 [ 167.329094][ T5453] loop1: detected capacity change from 0 to 4096 [ 167.416905][ T5448] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.417902][ T5450] loop0: detected capacity change from 0 to 40427 [ 167.455277][ T5453] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 167.496647][ T5450] F2FS-fs (loop0): invalid crc value [ 167.512375][ T5450] F2FS-fs (loop0): Found nat_bits in checkpoint [ 167.558851][ T5450] F2FS-fs (loop0): Start checkpoint disabled! [ 167.574748][ T5450] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 167.596068][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 167.609421][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 167.626281][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 167.798343][ T5440] loop4: detected capacity change from 0 to 32768 [ 167.913142][ T5440] jfs: Unrecognized mount option "" or missing value [ 167.940145][ T4356] attempt to access beyond end of device [ 167.940145][ T4356] loop0: rw=2049, want=40976, limit=40427 [ 168.189689][ T5464] overlayfs: overlapping lowerdir path [ 168.235047][ T5464] overlayfs: overlapping lowerdir path [ 168.492370][ T4283] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 169.682573][ T4283] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 169.720023][ T4283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 169.829952][ T4283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 170.103047][ T4283] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 170.144556][ T4283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.275943][ T4283] usb 3-1: Product: syz [ 170.280163][ T4283] usb 3-1: Manufacturer: syz [ 170.284861][ T5479] sp0: Synchronizing with TNC [ 170.336744][ T4283] usb 3-1: SerialNumber: syz [ 170.342736][ T5480] dlm: no locking on control device [ 170.394347][ T4283] usb 3-1: config 0 descriptor?? [ 170.553414][ T4283] hub 3-1:0.0: bad descriptor, ignoring hub [ 170.643527][ T4283] hub: probe of 3-1:0.0 failed with error -5 [ 170.871946][ T4283] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 171.169253][ T4283] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 171.318922][ T5490] [U] è` [ 171.347135][ T4283] usbtouchscreen: probe of 3-1:0.0 failed with error -90 [ 171.443629][ T4283] usb 3-1: USB disconnect, device number 7 [ 171.577617][ T5493] loop0: detected capacity change from 0 to 40427 [ 173.343856][ T5493] F2FS-fs (loop0): invalid crc value [ 173.393726][ T5510] overlayfs: overlapping lowerdir path [ 173.401629][ T5493] F2FS-fs (loop0): Found nat_bits in checkpoint [ 173.447536][ T5493] F2FS-fs (loop0): Start checkpoint disabled! [ 173.968690][ T5513] overlayfs: overlapping lowerdir path [ 174.024221][ T5493] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 174.773184][ T5520] capability: warning: `syz.0.340' uses 32-bit capabilities (legacy support in use) [ 175.811560][ T5531] sp0: Synchronizing with TNC [ 175.887893][ T5533] xt_hashlimit: max too large, truncated to 1048576 [ 175.995469][ T5511] loop1: detected capacity change from 0 to 32768 [ 176.015589][ T5536] loop2: detected capacity change from 0 to 2048 [ 176.036891][ T5511] jfs: Unrecognized mount option "" or missing value [ 176.069888][ T5187] Alternate GPT is invalid, using primary GPT. [ 176.076477][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 176.085372][ T5187] loop2: p1 p2 p3 [ 176.122677][ T5536] Alternate GPT is invalid, using primary GPT. [ 176.128937][ T5536] loop2: p1 p2 p3 [ 176.186900][ T5523] loop4: detected capacity change from 0 to 32768 [ 176.221845][ T5523] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.342 (5523) [ 176.332418][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 176.377653][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 176.378285][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 176.398998][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 176.435630][ T5523] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 176.456099][ T5523] BTRFS info (device loop4): using free space tree [ 176.469773][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 176.490313][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 176.504512][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 176.516143][ T5523] BTRFS info (device loop4): has skinny extents [ 176.525695][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 176.553095][ T5530] [U] è` [ 176.632497][ T13] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 176.651914][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.672313][ T13] usb 1-1: Product: syz [ 176.676598][ T13] usb 1-1: Manufacturer: syz [ 176.681276][ T13] usb 1-1: SerialNumber: syz [ 177.259171][ T5567] loop2: detected capacity change from 0 to 40427 [ 177.415568][ T5523] BTRFS info (device loop4): enabling ssd optimizations [ 177.453462][ T5567] F2FS-fs (loop2): invalid crc value [ 177.509235][ T5567] F2FS-fs (loop2): Found nat_bits in checkpoint [ 177.594746][ T5567] F2FS-fs (loop2): Start checkpoint disabled! [ 177.660814][ T5567] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 178.011273][ T4568] attempt to access beyond end of device [ 178.011273][ T4568] loop2: rw=2049, want=40976, limit=40427 [ 178.382369][ T13] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 179.130809][ T13] usb 1-1: USB disconnect, device number 6 [ 179.290513][ T5592] loop2: detected capacity change from 0 to 2048 [ 179.339758][ T5595] FAULT_INJECTION: forcing a failure. [ 179.339758][ T5595] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 179.388979][ T5595] CPU: 0 PID: 5595 Comm: syz.1.360 Not tainted syzkaller #0 [ 179.396336][ T5595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.406424][ T5595] Call Trace: [ 179.409739][ T5595] [ 179.412744][ T5595] dump_stack_lvl+0x188/0x250 [ 179.417467][ T5595] ? show_regs_print_info+0x20/0x20 [ 179.422710][ T5595] ? load_image+0x400/0x400 [ 179.427258][ T5595] ? __lock_acquire+0x7d10/0x7d10 [ 179.432330][ T5595] ? __lock_acquire+0x12e8/0x7d10 [ 179.437390][ T5595] ? verify_lock_unused+0x140/0x140 [ 179.442642][ T5595] should_fail+0x38c/0x4c0 [ 179.447104][ T5595] prepare_alloc_pages+0x1e4/0x5f0 [ 179.452257][ T5595] __alloc_pages+0x11b/0x480 [ 179.456884][ T5595] ? zone_statistics+0x170/0x170 [ 179.461872][ T5595] ? count_memcg_event_mm+0x324/0x370 [ 179.467290][ T5595] ? remove_device_exclusive_entry+0xa90/0xa90 [ 179.473479][ T5595] alloc_pages_vma+0x393/0x7c0 [ 179.478292][ T5595] handle_mm_fault+0x23be/0x4410 [ 179.483320][ T5595] ? get_page+0xe0/0xe0 [ 179.487519][ T5595] ? vmacache_find+0x238/0x590 [ 179.492325][ T5595] ? find_vma+0xd2/0x230 [ 179.496608][ T5595] do_user_addr_fault+0x489/0xc80 [ 179.501772][ T5595] exc_page_fault+0x60/0x100 [ 179.506501][ T5595] asm_exc_page_fault+0x22/0x30 [ 179.511420][ T5595] RIP: 0033:0x7fa1d004ca63 [ 179.515862][ T5595] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 179.536023][ T5595] RSP: 002b:00007fa1ce3ee470 EFLAGS: 00010202 [ 179.542101][ T5595] RAX: 0000000000007000 RBX: 00007fa1ce3ee530 RCX: 00007fa1c5fcf000 [ 179.550300][ T5595] RDX: 00007fa1ce3ee6d0 RSI: 0000000000000000 RDI: 00007fa1ce3ee5d0 [ 179.558300][ T5595] RBP: 0000000000000004 R08: 000000000000000a R09: 00000000000002d8 [ 179.566365][ T5595] R10: 000000000000031c R11: 00007fa1ce3ee530 R12: 0000000000000101 [ 179.574351][ T5595] R13: 00007fa1d024b320 R14: 00000000000000b5 R15: 00007fa1ce3ee5d0 [ 179.582356][ T5595] [ 179.585448][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.606741][ T5592] Alternate GPT is invalid, using primary GPT. [ 179.613122][ T5592] loop2: p1 p2 p3 [ 179.671453][ T5590] Zero length message leads to an empty skb [ 179.683381][ T5595] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 179.696914][ T3560] Alternate GPT is invalid, using primary GPT. [ 179.705554][ T3560] loop2: p1 p2 p3 [ 179.711290][ T5595] loop1: detected capacity change from 0 to 128 [ 179.950002][ T5590] loop0: detected capacity change from 0 to 32768 [ 179.999031][ T5595] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 180.038411][ T5590] (syz.0.358,5590,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.053829][ T5590] (syz.0.358,5590,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.095325][ T5582] loop3: detected capacity change from 0 to 32768 [ 180.117772][ T5595] hpfs: filesystem error: improperly stopped [ 180.165730][ T5590] JBD2: Ignoring recovery information on journal [ 180.179589][ T5595] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 180.187746][ T5595] hpfs: You really don't want any checks? You are crazy... [ 180.198200][ T5582] jfs: Unrecognized mount option "" or missing value [ 180.223485][ T5595] hpfs: hpfs_map_sector(): read error [ 180.239247][ T5595] hpfs: code page support is disabled [ 180.262364][ T5595] hpfs: hpfs_map_4sectors(): unaligned read [ 180.268683][ T5595] hpfs: hpfs_map_4sectors(): unaligned read [ 180.282948][ T5595] hpfs: filesystem error: unable to find root dir [ 180.333284][ T5590] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 181.796216][ T5613] loop4: detected capacity change from 0 to 40427 [ 181.861279][ T5613] F2FS-fs (loop4): invalid crc value [ 181.872482][ T5617] loop3: detected capacity change from 0 to 512 [ 181.894810][ T5613] F2FS-fs (loop4): Found nat_bits in checkpoint [ 181.931319][ T5613] F2FS-fs (loop4): Start checkpoint disabled! [ 181.956120][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 181.971433][ T5613] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 182.017466][ T5617] EXT4-fs (loop3): Ignoring removed oldalloc option [ 182.071582][ T5617] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.707284][ T5617] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 182.803321][ T5617] EXT4-fs (loop3): 1 truncate cleaned up [ 182.809022][ T5617] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,noload,oldalloc,,errors=continue. Quota mode: none. [ 182.830473][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.850313][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 182.863798][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 182.885255][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 182.974787][ T5631] fuse: Bad value for 'group_id' [ 182.981452][ T5631] overlayfs: overlapping lowerdir path [ 182.998218][ T5631] overlayfs: overlapping lowerdir path [ 183.133591][ T9] attempt to access beyond end of device [ 183.133591][ T9] loop4: rw=2049, want=40976, limit=40427 [ 183.332887][ T5642] loop0: detected capacity change from 0 to 2048 [ 183.386583][ T5642] Alternate GPT is invalid, using primary GPT. [ 183.393279][ T5642] loop0: p1 p2 p3 [ 183.966487][ T150] block nbd0: Possible stuck request ffff888020c80000: control (read@0,4096B). Runtime 60 seconds [ 184.091300][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 184.108097][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 184.109602][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 184.177287][ T3560] Alternate GPT is invalid, using primary GPT. [ 184.221920][ T3560] loop0: p1 p2 p3 [ 185.726159][ T5659] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 185.805253][ T5637] loop1: detected capacity change from 0 to 32768 [ 185.847673][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 185.861601][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 185.916176][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 186.099724][ T5670] loop3: detected capacity change from 0 to 764 [ 186.208900][ T5666] loop0: detected capacity change from 0 to 40427 [ 186.314446][ T5666] F2FS-fs (loop0): invalid crc value [ 186.322727][ T5670] rock: directory entry would overflow storage [ 186.331313][ T5666] F2FS-fs (loop0): Found nat_bits in checkpoint [ 186.373119][ T5666] F2FS-fs (loop0): Start checkpoint disabled! [ 186.390588][ T5670] rock: sig=0x4654, size=5, remaining=4 [ 186.396481][ T5666] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 186.698700][ T5677] FAULT_INJECTION: forcing a failure. [ 186.698700][ T5677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.712060][ T5677] CPU: 0 PID: 5677 Comm: syz.3.380 Not tainted syzkaller #0 [ 186.719385][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.729553][ T5677] Call Trace: [ 186.732857][ T5677] [ 186.735876][ T5677] dump_stack_lvl+0x188/0x250 [ 186.740726][ T5677] ? show_regs_print_info+0x20/0x20 [ 186.745953][ T5677] ? load_image+0x400/0x400 [ 186.750490][ T5677] ? __lock_acquire+0x7d10/0x7d10 [ 186.755573][ T5677] should_fail+0x38c/0x4c0 [ 186.760026][ T5677] _copy_from_iter+0x22e/0x1170 [ 186.764913][ T5677] ? __lock_acquire+0x7d10/0x7d10 [ 186.770004][ T5677] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 186.775413][ T5677] ? __virt_addr_valid+0x3c6/0x470 [ 186.780559][ T5677] ? __phys_addr_symbol+0x2b/0x70 [ 186.785610][ T5677] ? __check_object_size+0x30c/0x410 [ 186.790928][ T5677] netlink_sendmsg+0x758/0xbe0 [ 186.795836][ T5677] ? netlink_getsockopt+0x570/0x570 [ 186.801071][ T5677] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 186.806737][ T5677] ? aa_sock_msg_perm+0x94/0x150 [ 186.811758][ T5677] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 186.817071][ T5677] ? security_socket_sendmsg+0x7c/0xa0 [ 186.822567][ T5677] ? netlink_getsockopt+0x570/0x570 [ 186.827821][ T5677] ____sys_sendmsg+0x5b7/0x8f0 [ 186.832629][ T5677] ? __sys_sendmsg_sock+0x30/0x30 [ 186.837695][ T5677] ? import_iovec+0x6f/0xa0 [ 186.842236][ T5677] ___sys_sendmsg+0x236/0x2e0 [ 186.847037][ T5677] ? __sys_sendmsg+0x2a0/0x2a0 [ 186.851961][ T5677] __se_sys_sendmsg+0x1af/0x290 [ 186.856846][ T5677] ? __x64_sys_sendmsg+0x80/0x80 [ 186.861850][ T5677] ? syscall_enter_from_user_mode+0x2a/0x70 [ 186.867782][ T5677] do_syscall_64+0x4c/0xa0 [ 186.872230][ T5677] ? clear_bhb_loop+0x30/0x80 [ 186.876933][ T5677] ? clear_bhb_loop+0x30/0x80 [ 186.881649][ T5677] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.887571][ T5677] RIP: 0033:0x7fb220391799 [ 186.892015][ T5677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.911651][ T5677] RSP: 002b:00007fb21e5a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.920303][ T5677] RAX: ffffffffffffffda RBX: 00007fb22060b180 RCX: 00007fb220391799 [ 186.928403][ T5677] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 186.936406][ T5677] RBP: 00007fb21e5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 186.944412][ T5677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.952414][ T5677] R13: 00007fb22060b218 R14: 00007fb22060b180 R15: 00007fffed939138 [ 186.960425][ T5677] [ 186.963522][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.089352][ T5648] loop2: detected capacity change from 0 to 32768 [ 187.166316][ T5648] jfs: Unrecognized mount option "" or missing value [ 187.466776][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 187.508172][ T5679] fuse: Bad value for 'group_id' [ 187.529952][ T5679] overlayfs: overlapping lowerdir path [ 187.583636][ T5682] loop2: detected capacity change from 0 to 764 [ 187.621220][ T5684] overlayfs: overlapping lowerdir path [ 187.674170][ T5682] rock: directory entry would overflow storage [ 187.710076][ T5682] rock: sig=0x4654, size=5, remaining=4 [ 189.549739][ T5696] loop2: detected capacity change from 0 to 2048 [ 189.602904][ T5696] Alternate GPT is invalid, using primary GPT. [ 189.609558][ T5696] loop2: p1 p2 p3 [ 189.794211][ T3560] Alternate GPT is invalid, using primary GPT. [ 189.878257][ T3560] loop2: p1 p2 p3 [ 190.283079][ T5683] loop1: detected capacity change from 0 to 32768 [ 190.312570][ T5683] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.383 (5683) [ 190.372346][ T5683] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 190.381779][ T5683] BTRFS info (device loop1): setting nodatacow, compression disabled [ 190.438377][ T5683] BTRFS info (device loop1): setting datasum, datacow enabled [ 190.487144][ T5683] BTRFS info (device loop1): force clearing of disk cache [ 190.512081][ T5683] BTRFS info (device loop1): enabling ssd optimizations [ 191.471290][ T5683] BTRFS info (device loop1): using spread ssd allocation scheme [ 191.483157][ T4231] Bluetooth: hci0: command 0x0406 tx timeout [ 191.489367][ T4231] Bluetooth: hci1: command 0x0406 tx timeout [ 191.495527][ T4231] Bluetooth: hci2: command 0x0406 tx timeout [ 191.502647][ T4231] Bluetooth: hci4: command 0x0406 tx timeout [ 191.509345][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 191.521722][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 191.548227][ T5683] BTRFS info (device loop1): turning on sync discard [ 191.588785][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 191.702324][ T5683] BTRFS info (device loop1): turning off barriers [ 191.729318][ T5683] BTRFS info (device loop1): enabling auto defrag [ 191.774516][ T5683] BTRFS info (device loop1): not using ssd optimizations [ 192.011174][ T5716] loop4: detected capacity change from 0 to 40427 [ 192.034048][ T5683] BTRFS info (device loop1): not using spread ssd allocation scheme [ 192.072341][ T5683] BTRFS info (device loop1): using free space tree [ 192.081413][ T5716] F2FS-fs (loop4): invalid crc value [ 192.098164][ T5683] BTRFS info (device loop1): has skinny extents [ 192.123300][ T5716] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.171463][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 192.181573][ T5716] F2FS-fs (loop4): Start checkpoint disabled! [ 192.197514][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 192.206053][ T5716] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 192.227540][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 193.230107][ T5751] loop2: detected capacity change from 0 to 1024 [ 193.476272][ T5683] BTRFS error (device loop1): open_ctree failed: -12 [ 194.238789][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.245829][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.877802][ T5761] sp0: Synchronizing with TNC [ 194.940022][ T5761] dlm: no locking on control device [ 195.154605][ T5758] [U] è` [ 195.303947][ T5770] sp0: Synchronizing with TNC [ 195.362340][ T5770] dlm: no locking on control device [ 195.414023][ T5770] xt_hashlimit: max too large, truncated to 1048576 [ 195.489105][ T5768] [U] è` [ 196.980947][ T5779] fuse: Bad value for 'group_id' [ 196.990926][ T5779] overlayfs: overlapping lowerdir path [ 197.001554][ T5779] overlayfs: overlapping lowerdir path [ 197.055118][ T5777] loop0: detected capacity change from 0 to 2048 [ 197.207153][ T5782] loop2: detected capacity change from 0 to 1024 [ 197.487840][ T5765] loop3: detected capacity change from 0 to 32768 [ 197.604070][ T5765] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.401 (5765) [ 197.866496][ T5788] loop0: detected capacity change from 0 to 40427 [ 198.152818][ T5788] F2FS-fs (loop0): invalid crc value [ 198.205052][ T5788] F2FS-fs (loop0): Found nat_bits in checkpoint [ 198.258505][ T5788] F2FS-fs (loop0): Start checkpoint disabled! [ 198.578364][ T5765] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 198.614240][ T5788] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 198.632593][ T5765] BTRFS info (device loop3): enabling auto defrag [ 198.639080][ T5765] BTRFS info (device loop3): use no compression [ 198.645619][ T5765] BTRFS info (device loop3): max_inline at 4096 [ 198.654288][ T5765] BTRFS info (device loop3): using free space tree [ 198.660939][ T5765] BTRFS info (device loop3): has skinny extents [ 198.866412][ T5765] BTRFS error (device loop3): open_ctree failed: -12 [ 199.125205][ T4176] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4176) [ 201.045809][ T5827] sp0: Synchronizing with TNC [ 201.071256][ T5835] overlayfs: overlapping lowerdir path [ 201.096520][ T5835] overlayfs: overlapping lowerdir path [ 201.128522][ T5827] dlm: no locking on control device [ 201.171297][ T5838] dlm: no locking on control device [ 201.214879][ T5838] xt_hashlimit: max too large, truncated to 1048576 [ 201.260297][ T5840] device syzkaller0 entered promiscuous mode [ 201.338767][ T5826] [U] è`` [ 201.586874][ T5843] loop0: detected capacity change from 0 to 2048 [ 201.656377][ T5843] Alternate GPT is invalid, using primary GPT. [ 201.663167][ T5843] loop0: p1 p2 p3 [ 201.857882][ T3560] Alternate GPT is invalid, using primary GPT. [ 201.935331][ T3560] loop0: p1 p2 p3 [ 202.118617][ T5847] loop1: detected capacity change from 0 to 1024 [ 202.571648][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 202.589992][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 202.628047][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 202.675475][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 202.688990][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 202.787655][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 203.461175][ T5851] loop0: detected capacity change from 0 to 32768 [ 203.478891][ T5860] loop3: detected capacity change from 0 to 16 [ 203.534528][ T5851] jfs: Unrecognized mount option "" or missing value [ 204.372527][ T5860] erofs: (device loop3): erofs_read_inode: unsupported i_format 255 of nid 36 [ 204.423756][ T5867] overlayfs: overlapping lowerdir path [ 204.434822][ T5867] overlayfs: overlapping lowerdir path [ 204.789725][ T5871] 9pnet: Insufficient options for proto=fd [ 204.900571][ T5875] sp0: Synchronizing with TNC [ 204.965320][ T5875] dlm: no locking on control device [ 205.013322][ T5878] dlm: no locking on control device [ 205.165210][ T5881] loop3: detected capacity change from 0 to 2048 [ 205.825868][ T5877] [U] è`` [ 205.938925][ T5187] Alternate GPT is invalid, using primary GPT. [ 205.972380][ T5187] loop3: p1 p2 p3 [ 206.063428][ T5881] Alternate GPT is invalid, using primary GPT. [ 206.083014][ T5881] loop3: p1 p2 p3 [ 209.003008][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 209.058583][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 209.142312][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 209.219983][ T5902] overlayfs: overlapping lowerdir path [ 209.274369][ T5904] overlayfs: overlapping lowerdir path [ 209.358789][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 209.376068][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 209.389374][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 209.652375][ T5909] sp0: Synchronizing with TNC [ 209.670549][ T5909] dlm: no locking on control device [ 209.708506][ T5908] [U] è` [ 209.954525][ T5919] sp0: Synchronizing with TNC [ 209.983026][ T5919] dlm: no locking on control device [ 210.049686][ T5924] xt_hashlimit: max too large, truncated to 1048576 [ 210.189699][ T5925] loop0: detected capacity change from 0 to 2048 [ 210.294999][ T4176] Alternate GPT is invalid, using primary GPT. [ 210.340619][ T4176] loop0: p1 p2 p3 [ 210.904625][ T5918] [U] è` [ 210.984749][ T5925] Alternate GPT is invalid, using primary GPT. [ 210.993564][ T5899] loop4: detected capacity change from 0 to 32768 [ 211.012284][ T5925] loop0: p1 p2 p3 [ 211.043466][ T5899] jfs: Unrecognized mount option "" or missing value [ 211.123899][ T5929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'. [ 211.673702][ T3560] Alternate GPT is invalid, using primary GPT. [ 211.681396][ T3560] loop0: p1 p2 p3 [ 212.122503][ T4231] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 212.523161][ T4231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.592312][ T4231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.649658][ T4231] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.681558][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 212.695123][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 212.695439][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 212.774111][ T4231] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.846220][ T5946] overlayfs: overlapping lowerdir path [ 212.852310][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.867691][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 212.867764][ T4231] usb 2-1: config 0 descriptor?? [ 212.991767][ T5946] overlayfs: overlapping lowerdir path [ 213.255327][ T5950] loop4: detected capacity change from 0 to 764 [ 213.378732][ T5950] rock: directory entry would overflow storage [ 213.409839][ T4231] plantronics 0003:047F:FFFF.0002: unbalanced delimiter at end of report description [ 213.411709][ T5952] loop0: detected capacity change from 0 to 1024 [ 213.430694][ T5950] rock: sig=0x4654, size=5, remaining=4 [ 213.447209][ T4231] plantronics 0003:047F:FFFF.0002: parse failed [ 213.460849][ T4231] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22 [ 213.554412][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 213.736159][ T5955] sp0: Synchronizing with TNC [ 213.741180][ T5933] loop1: detected capacity change from 0 to 8 [ 213.769215][ T5955] dlm: no locking on control device [ 213.800032][ T5955] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 213.832837][ T5933] SQUASHFS error: lzo decompression failed, data probably corrupt [ 213.841057][ T5933] SQUASHFS error: Failed to read block 0x1c6: -5 [ 213.869081][ T5933] SQUASHFS error: Unable to read metadata cache entry [1c4] [ 213.901485][ T5933] SQUASHFS error: Unable to read inode 0x11f [ 213.999197][ T5816] usb 2-1: USB disconnect, device number 5 [ 214.042245][ T150] block nbd0: Possible stuck request ffff888020c80000: control (read@0,4096B). Runtime 90 seconds [ 214.461542][ T5966] dlm: no locking on control device [ 214.543707][ T5967] xt_hashlimit: max too large, truncated to 1048576 [ 214.741302][ T5970] loop3: detected capacity change from 0 to 2048 [ 214.841720][ T5970] Alternate GPT is invalid, using primary GPT. [ 214.848600][ T5970] loop3: p1 p2 p3 [ 215.273027][ T5965] [U] è`` [ 215.368464][ T5957] loop2: detected capacity change from 0 to 40427 [ 215.559562][ T5957] F2FS-fs (loop2): invalid crc value [ 215.638663][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 215.639074][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 215.671676][ T5957] F2FS-fs (loop2): Found nat_bits in checkpoint [ 215.760343][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 216.032516][ T5957] F2FS-fs (loop2): Start checkpoint disabled! [ 216.057995][ T5983] overlayfs: overlapping lowerdir path [ 216.109533][ T5957] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 216.127534][ T5985] overlayfs: overlapping lowerdir path [ 216.235462][ T5956] attempt to access beyond end of device [ 216.235462][ T5956] loop2: rw=10241, want=45104, limit=40427 [ 216.306096][ T5957] attempt to access beyond end of device [ 216.306096][ T5957] loop2: rw=2049, want=45104, limit=40427 [ 216.498575][ T5974] loop3: detected capacity change from 0 to 32768 [ 216.531999][ T5987] loop1: detected capacity change from 0 to 64 [ 216.543243][ T5974] jfs: Unrecognized mount option "" or missing value [ 216.628300][ T4579] attempt to access beyond end of device [ 216.628300][ T4579] loop2: rw=2049, want=40976, limit=40427 [ 216.707388][ T5987] hfs: can't find a HFS filesystem on dev loop1 [ 216.871830][ T5999] loop4: detected capacity change from 0 to 256 [ 216.992327][ T5996] sp0: Synchronizing with TNC [ 217.109003][ T5999] FAT-fs (loop4): Directory bread(block 64) failed [ 217.115986][ T5999] FAT-fs (loop4): Directory bread(block 65) failed [ 217.123214][ T5999] FAT-fs (loop4): Directory bread(block 66) failed [ 217.129975][ T5999] FAT-fs (loop4): Directory bread(block 67) failed [ 217.137225][ T5999] FAT-fs (loop4): Directory bread(block 68) failed [ 217.144017][ T5999] FAT-fs (loop4): Directory bread(block 69) failed [ 217.151072][ T5999] FAT-fs (loop4): Directory bread(block 70) failed [ 217.157865][ T5999] FAT-fs (loop4): Directory bread(block 71) failed [ 217.165018][ T5999] FAT-fs (loop4): Directory bread(block 72) failed [ 217.171765][ T5999] FAT-fs (loop4): Directory bread(block 73) failed [ 217.525357][ T5999] attempt to access beyond end of device [ 217.525357][ T5999] loop4: rw=524288, want=1196, limit=256 [ 217.537575][ T5999] attempt to access beyond end of device [ 217.537575][ T5999] loop4: rw=0, want=1196, limit=256 [ 217.562313][ T26] audit: type=1800 audit(1772615586.126:7): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.471" name="file1" dev="loop4" ino=1048612 res=0 errno=0 [ 217.609485][ T5999] syz.4.471 (5999) used greatest stack depth: 20688 bytes left [ 217.695677][ T5996] dlm: no locking on control device [ 217.777901][ T6001] xt_hashlimit: max too large, truncated to 1048576 [ 217.908281][ T5994] [U] è` [ 217.960154][ T6008] loop1: detected capacity change from 0 to 2048 [ 218.035315][ T6008] Alternate GPT is invalid, using primary GPT. [ 218.042028][ T6008] loop1: p1 p2 p3 [ 218.152327][ T4226] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 218.481279][ T3560] Alternate GPT is invalid, using primary GPT. [ 218.573832][ T3560] loop1: p1 p2 p3 [ 218.602993][ T4226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.666688][ T4226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.785724][ T4226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.832419][ T4226] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 218.873790][ T6011] netlink: 'syz.4.474': attribute type 39 has an invalid length. [ 218.922562][ T4226] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 218.974754][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.861143][ T4226] usb 1-1: config 0 descriptor?? [ 220.000583][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 220.020129][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 220.025620][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 220.158841][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 220.172552][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 220.172657][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 220.247866][ T4226] usbhid 1-1:0.0: can't add hid device: -71 [ 220.254054][ T4226] usbhid: probe of 1-1:0.0 failed with error -71 [ 220.288940][ T4226] usb 1-1: USB disconnect, device number 7 [ 220.389588][ T6007] netlink: 104 bytes leftover after parsing attributes in process `syz.0.475'. [ 220.750420][ T6032] loop4: detected capacity change from 0 to 40427 [ 220.792252][ T4226] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 220.810018][ T6032] F2FS-fs (loop4): invalid crc value [ 220.839123][ T6032] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.905420][ T6035] loop1: detected capacity change from 0 to 64 [ 220.970442][ T6032] F2FS-fs (loop4): Start checkpoint disabled! [ 221.008511][ T6032] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 221.072382][ T4226] usb 1-1: Using ep0 maxpacket: 8 [ 221.083888][ T6030] attempt to access beyond end of device [ 221.083888][ T6030] loop4: rw=10241, want=45104, limit=40427 [ 221.126186][ T6032] attempt to access beyond end of device [ 221.126186][ T6032] loop4: rw=2049, want=45104, limit=40427 [ 221.232496][ T4226] usb 1-1: unable to get BOS descriptor or descriptor too short [ 221.314864][ T6043] loop1: detected capacity change from 0 to 8 [ 221.323024][ T4573] attempt to access beyond end of device [ 221.323024][ T4573] loop4: rw=2049, want=40976, limit=40427 [ 221.331650][ T4226] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 221.365786][ T4226] usb 1-1: can't read configurations, error -71 [ 221.417675][ T6043] SQUASHFS error: lzo decompression failed, data probably corrupt [ 221.446129][ T6043] SQUASHFS error: Failed to read block 0x91: -5 [ 221.474781][ T6043] SQUASHFS error: Unable to read metadata cache entry [8f] [ 221.482056][ T6043] SQUASHFS error: Unable to read inode 0x11f [ 221.500269][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 221.515908][ T6045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.559953][ T6045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.654513][ T6039] loop2: detected capacity change from 0 to 32768 [ 221.658208][ T6048] loop3: detected capacity change from 0 to 256 [ 221.725860][ T6039] jfs: Unrecognized mount option "" or missing value [ 221.866982][ T6048] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 222.250619][ T6039] loop2: detected capacity change from 0 to 512 [ 222.333407][ T6039] EXT4-fs (loop2): Ignoring removed oldalloc option [ 222.503328][ T6039] EXT4-fs (loop2): 1 truncate cleaned up [ 222.565025][ T6039] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 223.227719][ T6079] FAULT_INJECTION: forcing a failure. [ 223.227719][ T6079] name failslab, interval 1, probability 0, space 0, times 0 [ 223.295652][ T6079] CPU: 0 PID: 6079 Comm: syz.0.490 Not tainted syzkaller #0 [ 223.303030][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.313119][ T6079] Call Trace: [ 223.316428][ T6079] [ 223.319389][ T6079] dump_stack_lvl+0x188/0x250 [ 223.324111][ T6079] ? show_regs_print_info+0x20/0x20 [ 223.329345][ T6079] ? load_image+0x400/0x400 [ 223.333891][ T6079] ? __might_sleep+0xf0/0xf0 [ 223.338514][ T6079] ? __lock_acquire+0x7d10/0x7d10 [ 223.343575][ T6079] should_fail+0x38c/0x4c0 [ 223.348034][ T6079] should_failslab+0x5/0x20 [ 223.352570][ T6079] slab_pre_alloc_hook+0x51/0xc0 [ 223.357630][ T6079] ? ptlock_alloc+0x1c/0x60 [ 223.362194][ T6079] kmem_cache_alloc+0x3d/0x290 [ 223.367009][ T6079] ptlock_alloc+0x1c/0x60 [ 223.371377][ T6079] pte_alloc_one+0xc0/0x310 [ 223.375921][ T6079] ? rcu_lock_release+0x20/0x20 [ 223.380815][ T6079] ? count_memcg_event_mm+0x324/0x370 [ 223.386234][ T6079] ? remove_device_exclusive_entry+0xa90/0xa90 [ 223.392424][ T6079] ? __lock_acquire+0x7d10/0x7d10 [ 223.397493][ T6079] __pte_alloc+0x21/0x150 [ 223.401889][ T6079] handle_mm_fault+0x39b6/0x4410 [ 223.406874][ T6079] ? get_page+0xe0/0xe0 [ 223.411076][ T6079] ? vmacache_find+0x4f0/0x590 [ 223.415888][ T6079] ? vmacache_update+0xa0/0x100 [ 223.420780][ T6079] ? find_vma+0x1df/0x230 [ 223.425161][ T6079] do_user_addr_fault+0x489/0xc80 [ 223.430243][ T6079] exc_page_fault+0x60/0x100 [ 223.434885][ T6079] ? clear_bhb_loop+0x30/0x80 [ 223.439590][ T6079] asm_exc_page_fault+0x22/0x30 [ 223.444465][ T6079] RIP: 0033:0x7f25609f5b0e [ 223.448894][ T6079] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 223.468514][ T6079] RSP: 002b:00007f255ed97470 EFLAGS: 00010246 [ 223.474598][ T6079] RAX: 0000000000000001 RBX: 00007f255ed97530 RCX: 0000000000000101 [ 223.482598][ T6079] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f255ed975d0 [ 223.490601][ T6079] RBP: 0000000000000102 R08: 00007f2556978000 R09: 0000000000000000 [ 223.498599][ T6079] R10: 0000000000000000 R11: 00007f255ed97540 R12: 0000000000000001 [ 223.506595][ T6079] R13: 00007f2560bf4320 R14: 0000000000000000 R15: 00007f255ed975d0 [ 223.514607][ T6079] [ 223.593695][ T6079] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 224.163472][ T6100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.497'. [ 224.331946][ T6104] loop4: detected capacity change from 0 to 1024 [ 224.649984][ T6079] loop0: detected capacity change from 0 to 32768 [ 224.734191][ T6112] loop2: detected capacity change from 0 to 256 [ 224.946860][ T6112] FAT-fs (loop2): Directory bread(block 64) failed [ 224.985717][ T6112] FAT-fs (loop2): Directory bread(block 65) failed [ 225.038954][ T6120] FAULT_INJECTION: forcing a failure. [ 225.038954][ T6120] name failslab, interval 1, probability 0, space 0, times 0 [ 225.043820][ T6112] FAT-fs (loop2): Directory bread(block 66) failed [ 225.052907][ T6120] CPU: 0 PID: 6120 Comm: syz.0.501 Not tainted syzkaller #0 [ 225.052948][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.052961][ T6120] Call Trace: [ 225.052969][ T6120] [ 225.083094][ T6120] dump_stack_lvl+0x188/0x250 [ 225.087820][ T6120] ? show_regs_print_info+0x20/0x20 [ 225.093168][ T6120] ? load_image+0x400/0x400 [ 225.097728][ T6120] should_fail+0x38c/0x4c0 [ 225.102189][ T6120] should_failslab+0x5/0x20 [ 225.106731][ T6120] slab_pre_alloc_hook+0x51/0xc0 [ 225.111700][ T6120] ? nf_ct_ext_add+0x42e/0x660 [ 225.112519][ T6112] FAT-fs (loop2): Directory bread(block 67) failed [ 225.116492][ T6120] __kmalloc_track_caller+0x69/0x330 [ 225.128299][ T6120] ? nf_ct_ext_add+0x42e/0x660 [ 225.133099][ T6120] ? __nf_conntrack_alloc+0x99/0x380 [ 225.138427][ T6120] krealloc+0x5a/0xf0 [ 225.142462][ T6120] nf_ct_ext_add+0x42e/0x660 [ 225.144349][ T6112] FAT-fs (loop2): Directory bread(block 68) failed [ 225.147095][ T6120] init_conntrack+0x768/0x14d0 [ 225.158452][ T6120] ? __nf_conntrack_find_get+0x581/0x650 [ 225.164141][ T6120] ? early_drop+0x810/0x810 [ 225.168691][ T6120] ? nf_conntrack_find_get+0x670/0x670 [ 225.174186][ T6120] ? __siphash_unaligned+0x258/0x3a0 [ 225.179504][ T6120] nf_conntrack_in+0xd38/0x1730 [ 225.184396][ T6120] ? nf_ct_pernet+0x240/0x240 [ 225.189116][ T6120] ? __netif_receive_skb_core+0x2fbd/0x3690 [ 225.195030][ T6120] ? ipv4_conntrack_defrag+0x284/0x590 [ 225.200513][ T6120] ? ip_sabotage_in+0x53/0x290 [ 225.205312][ T6120] ? rcu_lock_release+0x20/0x20 [ 225.210183][ T6120] nf_hook_slow+0xb9/0x200 [ 225.214648][ T6120] ? ip_rcv_core+0xb60/0xb60 [ 225.219331][ T6120] NF_HOOK+0x1f2/0x390 [ 225.223422][ T6120] ? ip_rcv_core+0xb60/0xb60 [ 225.228032][ T6120] ? ip_local_deliver+0x1a0/0x1a0 [ 225.233078][ T6120] ? ip_rcv_core+0xb60/0xb60 [ 225.237697][ T6120] ? ip_local_deliver_finish+0x320/0x320 [ 225.243355][ T6120] ? ip_local_deliver_finish+0x320/0x320 [ 225.249016][ T6120] __netif_receive_skb+0xcc/0x290 [ 225.254060][ T6120] ? ktime_get_with_offset+0x2d7/0x320 [ 225.259541][ T6120] netif_receive_skb+0x19e/0x700 [ 225.264506][ T6120] ? netif_receive_skb_core+0x210/0x210 [ 225.270079][ T6120] tun_rx_batched+0x5fb/0x760 [ 225.274782][ T6120] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 225.280790][ T6120] ? local_bh_enable+0x20/0x20 [ 225.285570][ T6120] ? __local_bh_enable_ip+0x136/0x1c0 [ 225.291048][ T6120] ? read_lock_is_recursive+0x10/0x10 [ 225.296447][ T6120] ? __local_bh_enable_ip+0x136/0x1c0 [ 225.301849][ T6120] ? _local_bh_enable+0xa0/0xa0 [ 225.306712][ T6120] ? skb_set_owner_w+0x213/0x340 [ 225.311682][ T6120] tun_get_user+0x2517/0x3a70 [ 225.316389][ T6120] ? tun_ring_recv+0xc40/0xc40 [ 225.321189][ T6120] ? rcu_lock_release+0x5/0x20 [ 225.325967][ T6120] ? __lock_acquire+0x7d10/0x7d10 [ 225.331020][ T6120] tun_chr_write_iter+0x112/0x1e0 [ 225.336178][ T6120] vfs_write+0x745/0xd60 [ 225.340447][ T6120] ? file_end_write+0x250/0x250 [ 225.345337][ T6120] ? __fget_files+0x40f/0x480 [ 225.350298][ T6120] ? __fdget_pos+0x1e2/0x370 [ 225.354905][ T6120] ? ksys_write+0x71/0x260 [ 225.359347][ T6120] ksys_write+0x152/0x260 [ 225.363782][ T6120] ? __ia32_sys_read+0x80/0x80 [ 225.368597][ T6120] ? lockdep_hardirqs_on+0x94/0x140 [ 225.373845][ T6120] do_syscall_64+0x4c/0xa0 [ 225.378293][ T6120] ? clear_bhb_loop+0x30/0x80 [ 225.382994][ T6120] ? clear_bhb_loop+0x30/0x80 [ 225.387733][ T6120] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.393653][ T6120] RIP: 0033:0x7f2560afefce [ 225.398095][ T6120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.417810][ T6120] RSP: 002b:00007f255ed76fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.426340][ T6120] RAX: ffffffffffffffda RBX: 00007f255ed776c0 RCX: 00007f2560afefce [ 225.434334][ T6120] RDX: 0000000000000036 RSI: 0000200000000000 RDI: 00000000000000c8 [ 225.442322][ T6120] RBP: 00007f255ed77090 R08: 0000000000000000 R09: 0000000000000000 [ 225.450493][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.458485][ T6120] R13: 00007f2560db8128 R14: 00007f2560db8090 R15: 00007ffd8eb1caa8 [ 225.466493][ T6120] [ 225.482329][ T6112] FAT-fs (loop2): Directory bread(block 69) failed [ 225.489114][ T6112] FAT-fs (loop2): Directory bread(block 70) failed [ 225.571898][ T6112] FAT-fs (loop2): Directory bread(block 71) failed [ 225.629989][ T6112] FAT-fs (loop2): Directory bread(block 72) failed [ 225.671306][ T6112] FAT-fs (loop2): Directory bread(block 73) failed [ 225.820628][ T6099] loop1: detected capacity change from 0 to 40427 [ 225.977975][ T6099] F2FS-fs (loop1): invalid crc value [ 226.039732][ T6099] F2FS-fs (loop1): Found nat_bits in checkpoint [ 226.407836][ T6099] F2FS-fs (loop1): Start checkpoint disabled! [ 226.498951][ T6099] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 227.684470][ T6127] loop0: detected capacity change from 0 to 32768 [ 227.850896][ T6127] jfs: Unrecognized mount option "" or missing value [ 227.894254][ T6155] Falling back ldisc for ttyprintk. [ 227.961625][ T6155] capability: warning: `syz.3.507' uses deprecated v2 capabilities in a way that may be insecure [ 228.023447][ T6161] device syzkaller0 entered promiscuous mode [ 228.250315][ T6171] Invalid ELF header magic: != ELF [ 228.265222][ T6169] device syzkaller0 entered promiscuous mode [ 228.378548][ T6127] loop0: detected capacity change from 0 to 512 [ 228.409946][ T6127] EXT4-fs (loop0): Ignoring removed oldalloc option [ 228.500971][ T6127] EXT4-fs (loop0): 1 truncate cleaned up [ 228.507144][ T6127] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 228.667268][ T6183] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.365564][ T6196] tipc: Started in network mode [ 230.382352][ T6196] tipc: Node identity dac444dabbf7, cluster identity 4711 [ 230.389795][ T6196] tipc: Enabled bearer , priority 0 [ 230.475107][ T6196] syzkaller0: mtu greater than device maximum [ 230.501938][ T6197] device syzkaller0 entered promiscuous mode [ 230.541582][ T6207] loop4: detected capacity change from 0 to 128 [ 230.561399][ T6195] tipc: Resetting bearer [ 230.801591][ T6195] tipc: Disabling bearer [ 231.129345][ T6216] loop1: detected capacity change from 0 to 1024 [ 231.153839][ T6213] device team_slave_0 entered promiscuous mode [ 231.160513][ T6213] device team_slave_1 entered promiscuous mode [ 231.167939][ T6213] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 231.796588][ T6185] loop3: detected capacity change from 0 to 40427 [ 231.877637][ T6185] F2FS-fs (loop3): invalid crc value [ 231.947306][ T6185] F2FS-fs (loop3): Found nat_bits in checkpoint [ 231.988758][ T6229] loop4: detected capacity change from 0 to 2048 [ 232.094828][ T6185] F2FS-fs (loop3): Start checkpoint disabled! [ 232.134163][ T6185] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 232.272547][ T6235] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.402432][ T6254] loop2: detected capacity change from 0 to 512 [ 233.664646][ T6254] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 233.802936][ T6254] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 233.990183][ T6254] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.529: Failed to acquire dquot type 0 [ 234.408015][ T6254] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.529: bg 0: block 64: padding at end of block bitmap is not set [ 234.550891][ T6254] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 234.592726][ T6254] EXT4-fs (loop2): 1 truncate cleaned up [ 234.604602][ T6254] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.672372][ T6254] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.746225][ T6254] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 234.780458][ T6254] syzkaller0: linktype set to 776 [ 234.867714][ T6254] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 234.917713][ T6254] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 234.962644][ T6254] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.529: Failed to acquire dquot type 0 [ 235.030498][ T6277] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 235.038421][ T6249] loop3: detected capacity change from 0 to 32768 [ 235.088063][ T6249] jfs: Unrecognized mount option "" or missing value [ 235.295365][ T6286] loop0: detected capacity change from 0 to 1024 [ 235.488067][ T6286] hfsplus: type requires a 4 character value [ 235.500340][ T6290] loop3: detected capacity change from 0 to 256 [ 235.508694][ T6286] hfsplus: unable to parse mount options [ 235.683437][ T6294] loop2: detected capacity change from 0 to 2048 [ 235.744360][ T6294] Alternate GPT is invalid, using primary GPT. [ 235.750967][ T6294] loop2: p1 p2 p3 [ 236.200317][ T6299] loop4: detected capacity change from 0 to 8 [ 236.228229][ T6290] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 236.333103][ T6290] FAT-fs (loop3): Filesystem has been set read-only [ 236.603206][ T3560] Alternate GPT is invalid, using primary GPT. [ 236.629832][ T3560] loop2: p1 p2 p3 [ 237.349064][ T6310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.541'. [ 237.800225][ T6312] overlayfs: overlapping lowerdir path [ 237.858960][ T6313] overlayfs: overlapping lowerdir path [ 238.000788][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 238.033459][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 238.069929][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 238.387669][ T6325] dlm: no locking on control device [ 238.696117][ T6316] sp0: Synchronizing with TNC [ 238.813964][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 238.820187][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 238.947286][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 239.018212][ T6330] loop0: detected capacity change from 0 to 1024 [ 239.312466][ T6332] [U] è` [ 239.625459][ T6342] loop1: detected capacity change from 0 to 2048 [ 239.683105][ T6342] Alternate GPT is invalid, using primary GPT. [ 239.689736][ T6342] loop1: p1 p2 p3 [ 240.516430][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 240.529067][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 240.553815][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 240.878124][ T6328] loop4: detected capacity change from 0 to 32768 [ 240.905685][ T6328] jfs: Unrecognized mount option "" or missing value [ 241.030540][ T6349] loop3: detected capacity change from 0 to 4096 [ 241.219107][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.556'. [ 241.259761][ T6349] ntfs: volume version 3.1. [ 242.090277][ T6341] loop2: detected capacity change from 0 to 40427 [ 242.108659][ T6349] ntfs: (device loop3): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80. Aborting truncate. [ 242.159120][ T6341] F2FS-fs (loop2): invalid crc value [ 242.171538][ T6357] fuse: Unknown parameter 'grou00000000000000000000' [ 242.224641][ T6358] overlayfs: overlapping lowerdir path [ 242.280150][ T6357] overlayfs: overlapping lowerdir path [ 242.287692][ T6341] F2FS-fs (loop2): Found nat_bits in checkpoint [ 243.108269][ T6341] F2FS-fs (loop2): Start checkpoint disabled! [ 243.993110][ T6370] sp0: Synchronizing with TNC [ 244.027781][ T6370] dlm: no locking on control device [ 244.087347][ T6373] dlm: no locking on control device [ 244.122294][ T150] block nbd0: Possible stuck request ffff888020c80000: control (read@0,4096B). Runtime 120 seconds [ 244.148200][ T6376] xt_hashlimit: max too large, truncated to 1048576 [ 244.197361][ T6375] xt_hashlimit: max too large, truncated to 1048576 [ 244.911170][ T6372] [U] è`` [ 245.010522][ T6382] loop1: detected capacity change from 0 to 32768 [ 245.074584][ T6382] jfs: Unrecognized mount option "" or missing value [ 245.108695][ T6392] fuse: Unknown parameter 'grou00000000000000000000' [ 245.193014][ T6394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.568'. [ 245.239511][ T6392] overlayfs: overlapping lowerdir path [ 245.695333][ T6396] overlayfs: overlapping lowerdir path [ 247.459158][ T6414] sp0: Synchronizing with TNC [ 247.497729][ T6414] dlm: no locking on control device [ 247.566022][ T6419] dlm: no locking on control device [ 247.579338][ T6420] xt_hashlimit: max too large, truncated to 1048576 [ 247.688905][ T6421] xt_hashlimit: max too large, truncated to 1048576 [ 247.883296][ T6403] loop1: detected capacity change from 0 to 40427 [ 247.969100][ T6403] F2FS-fs (loop1): invalid crc value [ 248.020675][ T6403] F2FS-fs (loop1): Found nat_bits in checkpoint [ 248.174621][ T6403] F2FS-fs (loop1): Start checkpoint disabled! [ 248.197394][ T6403] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 248.219117][ T6426] loop3: detected capacity change from 0 to 1024 [ 248.284097][ T6428] device syzkaller0 entered promiscuous mode [ 248.375044][ T6428] fuse: Bad value for 'fd' [ 248.377251][ T6418] [U] è`` [ 248.476161][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.582'. [ 249.216398][ T4568] attempt to access beyond end of device [ 249.216398][ T4568] loop1: rw=2049, want=40976, limit=40427 [ 249.414414][ T6440] loop2: detected capacity change from 0 to 1024 [ 249.480070][ T6442] fuse: Unknown parameter 'grou00000000000000000000' [ 249.552965][ T6445] overlayfs: overlapping lowerdir path [ 249.596494][ T6440] EXT4-fs error (device loop2): ext4_fill_super:4866: comm syz.2.585: inode #2: comm syz.2.585: iget: illegal inode # [ 249.613968][ T6440] EXT4-fs (loop2): get root inode failed [ 249.619813][ T6442] overlayfs: overlapping lowerdir path [ 249.624343][ T6440] EXT4-fs (loop2): mount failed [ 250.684643][ T6438] loop0: detected capacity change from 0 to 32768 [ 250.802687][ T6438] jfs: Unrecognized mount option "" or missing value [ 251.085760][ T6467] sp0: Synchronizing with TNC [ 251.093458][ T6467] dlm: no locking on control device [ 251.158384][ T6468] xt_hashlimit: max too large, truncated to 1048576 [ 251.241245][ T6472] dlm: no locking on control device [ 251.330480][ T6473] xt_hashlimit: max too large, truncated to 1048576 [ 251.502510][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.596'. [ 252.042877][ T6470] [U] è`` [ 252.405203][ T6481] device syzkaller0 entered promiscuous mode [ 253.326365][ T6488] fuse: Unknown parameter 'group_i00000000000000000000' [ 253.403897][ T6488] overlayfs: overlapping lowerdir path [ 253.450546][ T6488] overlayfs: overlapping lowerdir path [ 253.749095][ T6496] loop4: detected capacity change from 0 to 1024 [ 253.945837][ T6471] loop0: detected capacity change from 0 to 40427 [ 254.036761][ T6471] F2FS-fs (loop0): invalid crc value [ 254.046298][ T6471] F2FS-fs (loop0): Found nat_bits in checkpoint [ 254.175939][ T6471] F2FS-fs (loop0): Start checkpoint disabled! [ 255.086654][ T6510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.607'. [ 255.638602][ T6516] loop3: detected capacity change from 0 to 1024 [ 255.646498][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.652957][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.695029][ T6513] sp0: Synchronizing with TNC [ 255.744994][ T6514] [U] è` [ 255.763540][ T6499] loop2: detected capacity change from 0 to 32768 [ 255.774287][ T6516] EXT4-fs (loop3): Ignoring removed bh option [ 255.836626][ T6499] jfs: Unrecognized mount option "" or missing value [ 255.861536][ T6516] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000005,nolazytime,debug_want_extra_isize=0x0000000000000080,debug_want_extra_isize=0x0000000000000006,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 255.949296][ T6526] fuse: Unknown parameter 'group_i00000000000000000000' [ 255.966132][ T6519] dlm: no locking on control device [ 256.201545][ T6519] xt_hashlimit: max too large, truncated to 1048576 [ 256.339105][ T6526] overlayfs: overlapping lowerdir path [ 256.404282][ T6529] overlayfs: overlapping lowerdir path [ 256.575256][ T6518] [U] ‹ [ 256.810232][ T6499] loop2: detected capacity change from 0 to 512 [ 256.964867][ T6499] EXT4-fs (loop2): Ignoring removed oldalloc option [ 257.165047][ T6499] EXT4-fs (loop2): 1 truncate cleaned up [ 257.170807][ T6499] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 257.438369][ T6537] loop0: detected capacity change from 0 to 8192 [ 257.637544][ T6552] loop4: detected capacity change from 0 to 1024 [ 257.969895][ T6553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'. [ 258.831180][ T6562] sp0: Synchronizing with TNC [ 258.936694][ T6560] dlm: no locking on control device [ 259.536511][ T6568] [U] è` [ 259.538439][ T6571] fuse: Unknown parameter 'group_i00000000000000000000' [ 259.560487][ T6571] overlayfs: overlapping lowerdir path [ 259.583368][ T6571] overlayfs: overlapping lowerdir path [ 259.658841][ T6573] sp0: Synchronizing with TNC [ 259.677179][ T6573] dlm: no locking on control device [ 259.739834][ T6546] loop1: detected capacity change from 0 to 40427 [ 259.748489][ T6576] xt_hashlimit: max too large, truncated to 1048576 [ 259.949451][ T6546] F2FS-fs (loop1): invalid crc value [ 259.992689][ T6546] F2FS-fs (loop1): Found nat_bits in checkpoint [ 260.291136][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.633'. [ 260.470250][ T6572] [U] è` [ 261.033357][ T6546] F2FS-fs (loop1): Start checkpoint disabled! [ 261.286751][ T6604] fuse: Unknown parameter 'group_id00000000000000000000' [ 261.338121][ T6605] overlayfs: overlapping lowerdir path [ 261.376350][ T6604] overlayfs: overlapping lowerdir path [ 261.537525][ T6582] loop3: detected capacity change from 0 to 32768 [ 261.572966][ T6582] jfs: Unrecognized mount option "" or missing value [ 261.599799][ T6607] sp0: Synchronizing with TNC [ 261.639170][ T6607] dlm: no locking on control device [ 261.839006][ T6608] xt_hashlimit: max too large, truncated to 1048576 [ 262.355457][ T6606] [U] è` [ 263.704157][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.644'. [ 264.509079][ T6633] sp0: Synchronizing with TNC [ 264.555721][ T6633] dlm: no locking on control device [ 264.576057][ T6638] fuse: Unknown parameter 'group_id00000000000000000000' [ 264.628061][ T6640] overlayfs: overlapping lowerdir path [ 264.637439][ T6636] xt_hashlimit: max too large, truncated to 1048576 [ 264.684762][ T6638] overlayfs: overlapping lowerdir path [ 265.673248][ T6632] [U] è` [ 265.848108][ T6646] sp0: Synchronizing with TNC [ 265.895709][ T6646] dlm: no locking on control device [ 265.967194][ T6647] xt_hashlimit: max too large, truncated to 1048576 [ 266.157897][ T6631] loop1: detected capacity change from 0 to 40427 [ 266.218896][ T6631] F2FS-fs (loop1): invalid crc value [ 266.386392][ T6631] F2FS-fs (loop1): Found nat_bits in checkpoint [ 266.740317][ T6645] [U] è [ 266.978390][ T6631] F2FS-fs (loop1): Start checkpoint disabled! [ 267.211588][ T6631] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 268.258938][ T6666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 269.029865][ T6664] tipc: Started in network mode [ 269.120119][ T6672] fuse: Unknown parameter 'group_id00000000000000000000' [ 269.127604][ T6664] tipc: Node identity a26a7bc023ae, cluster identity 4711 [ 269.152434][ T6664] tipc: Enabled bearer , priority 0 [ 269.160727][ T6672] overlayfs: overlapping lowerdir path [ 269.211839][ T6673] overlayfs: overlapping lowerdir path [ 269.244115][ T6664] syzkaller0: mtu less than device minimum [ 269.294639][ T6663] tipc: Disabling bearer [ 269.417919][ T6678] sp0: Synchronizing with TNC [ 269.483140][ T6678] dlm: no locking on control device [ 269.556328][ T6683] xt_hashlimit: max too large, truncated to 1048576 [ 269.722326][ T27] INFO: task udevd:4178 blocked for more than 143 seconds. [ 269.729607][ T27] Not tainted syzkaller #0 [ 269.770975][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.807703][ T27] task:udevd state:D stack:24368 pid: 4178 ppid: 3560 flags:0x00004002 [ 269.835489][ T27] Call Trace: [ 269.838962][ T27] [ 269.841934][ T27] __schedule+0x11ef/0x43c0 [ 269.853164][ T27] ? preempt_schedule+0xbc/0xd0 [ 269.858131][ T27] ? preempt_schedule_common+0xa5/0xd0 [ 269.869049][ T27] ? release_firmware_map_entry+0x190/0x190 [ 269.877028][ T27] ? preempt_schedule+0xbc/0xd0 [ 269.882475][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 269.888294][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 269.900689][ T27] ? lock_chain_count+0x20/0x20 [ 269.906151][ T27] schedule+0x11b/0x1e0 [ 269.910596][ T27] io_schedule+0x7c/0xd0 [ 269.921164][ T27] wait_on_page_bit_common+0x83b/0xe50 [ 269.929226][ T27] ? wait_on_page_bit+0x50/0x50 [ 269.940554][ T27] ? blkdev_fallocate+0x4d0/0x4d0 [ 269.946057][ T4198] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 269.959953][ T27] ? rcu_lock_release+0x20/0x20 [ 269.965439][ T27] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 269.971174][ T27] do_read_cache_page+0xb05/0x1030 [ 269.992064][ T27] read_part_sector+0xd4/0x4f0 [ 270.002799][ T27] ? vsnprintf+0x14e/0x1c20 [ 270.008654][ T27] adfspart_check_ICS+0xc3/0xe40 [ 270.021968][ T27] ? vsnprintf+0x1b21/0x1c20 [ 270.031494][ T27] ? adfspart_check_ADFS+0x840/0x840 [ 270.049834][ T27] ? snprintf+0xe5/0x140 [ 270.059112][ T27] ? vscnprintf+0x80/0x80 [ 270.064908][ T27] bdev_disk_changed+0x933/0x16c0 [ 270.070237][ T27] ? blk_drop_partitions+0x1b0/0x1b0 [ 270.080564][ T27] ? _atomic_dec_and_lock+0x8f/0x110 [ 270.087416][ T27] blkdev_get_whole+0x2f9/0x390 [ 270.097599][ T27] blkdev_get_by_dev+0x2d0/0xa60 [ 270.104415][ T27] blkdev_open+0x12d/0x2c0 [ 270.109028][ T27] ? block_ioctl+0xf0/0xf0 [ 270.118464][ T27] do_dentry_open+0x7ff/0xf80 [ 270.127681][ T27] path_openat+0x26f5/0x2fa0 [ 270.137242][ T27] ? verify_lock_unused+0x140/0x140 [ 270.144217][ T27] ? slab_post_alloc_hook+0x4c/0x380 [ 270.149697][ T27] ? do_filp_open+0x410/0x410 [ 270.155116][ T6675] [U] è` [ 270.165178][ T27] do_filp_open+0x1e2/0x410 [ 270.169991][ T27] ? vfs_tmpfile+0x300/0x300 [ 270.179230][ T27] ? _raw_spin_unlock+0x24/0x40 [ 270.185849][ T27] ? alloc_fd+0x598/0x630 [ 270.190322][ T27] do_sys_openat2+0x150/0x4b0 [ 270.199890][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 270.212109][ T27] ? do_sys_open+0xe0/0xe0 [ 270.216688][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 270.228880][ T4198] usb 1-1: Using ep0 maxpacket: 32 [ 270.235003][ T27] ? lock_chain_count+0x20/0x20 [ 270.240037][ T27] ? vtime_user_exit+0x2c8/0x3e0 [ 270.250965][ T27] __x64_sys_openat+0x135/0x160 [ 270.256442][ T27] do_syscall_64+0x4c/0xa0 [ 270.261013][ T27] ? clear_bhb_loop+0x30/0x80 [ 270.271838][ T27] ? clear_bhb_loop+0x30/0x80 [ 270.279133][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.298617][ T27] RIP: 0033:0x7f07c3aad407 [ 270.309025][ T27] RSP: 002b:00007fff50a6de90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 270.335774][ T27] RAX: ffffffffffffffda RBX: 00007f07c39bf880 RCX: 00007f07c3aad407 [ 270.354356][ T27] RDX: 00000000000a0800 RSI: 00005586372b6f00 RDI: ffffffffffffff9c [ 270.377485][ T27] RBP: 00005586372a0910 R08: 0000000000000000 R09: 0000000000000000 [ 270.388055][ T6680] loop3: detected capacity change from 0 to 32768 [ 270.392385][ T4198] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 270.404006][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 00005586372cbe50 [ 270.418054][ T4198] usb 1-1: config 2 has no interface number 0 [ 270.425851][ T27] R13: 00005586372b8410 R14: 0000000000000000 R15: 00005586372cbe50 [ 270.437867][ T4198] usb 1-1: config 2 interface 88 has no altsetting 0 [ 270.447294][ T27] [ 270.457776][ T27] [ 270.457776][ T27] Showing all locks held in the system: [ 270.474794][ T27] 1 lock held by khungtaskd/27: [ 270.480022][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 270.497045][ T27] 1 lock held by udevd/3560: [ 270.501819][ T27] #0: ffff8880201a6118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 270.518418][ T27] 2 locks held by getty/3948: [ 270.523503][ T27] #0: ffff88814d145098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 270.539482][ T27] #1: ffffc900025ce2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 270.550090][ T27] 1 lock held by udevd/4176: [ 270.561557][ T27] #0: ffff8880201a6118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 270.573360][ T27] 1 lock held by udevd/4178: [ 270.578155][ T27] #0: ffff88802053a918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 270.598076][ T27] 3 locks held by kworker/1:3/4198: [ 270.605861][ T27] #0: ffff888017bc1d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 270.610599][ T6690] loop2: detected capacity change from 0 to 1024 [ 270.629177][ T27] #1: ffffc9000303fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 270.641064][ T4198] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 270.657139][ T4198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.671033][ T4198] usb 1-1: Product: syz [ 270.678826][ T27] #2: ffff888023ed4220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 [ 270.690579][ T4198] usb 1-1: Manufacturer: syz [ 270.698652][ T4198] usb 1-1: SerialNumber: syz [ 270.706028][ T27] 4 locks held by kworker/u4:16/4576: [ 270.712714][ T27] 2 locks held by syz.1.662/6675: [ 270.721617][ T27] #0: ffff888074b00098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x10c/0x200 [ 270.737367][ T27] #1: ffffffff8c323430 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4c0 [ 270.748278][ T27] 2 locks held by syz.3.651/6680: [ 270.759265][ T27] #0: ffff8880201a6118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 270.778878][ T27] #1: ffff8881476d4468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 [ 270.788335][ T27] 3 locks held by syz.2.664/6689: [ 270.799140][ T27] 2 locks held by syz.2.664/6690: [ 270.804438][ T27] #0: ffff8880201a4518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 270.820107][ T27] #1: ffff8881476d1468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 [ 270.831879][ T27] 1 lock held by syz.4.665/6686: [ 270.842769][ T27] #0: ffffffff8c323430 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4c0 [ 270.857538][ T27] [ 270.860084][ T27] ============================================= [ 270.860084][ T27] [ 270.865525][ T6680] jfs: Unrecognized mount option "" or missing value [ 270.903353][ T27] NMI backtrace for cpu 1 [ 270.907738][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 270.914959][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.925156][ T27] Call Trace: [ 270.928551][ T27] [ 270.931507][ T27] dump_stack_lvl+0x188/0x250 [ 270.936221][ T27] ? show_regs_print_info+0x20/0x20 [ 270.941468][ T27] ? load_image+0x400/0x400 [ 270.946015][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 270.951427][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 270.956588][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 270.961566][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 270.967761][ T27] ? _printk+0xda/0x130 [ 270.971948][ T27] ? load_image+0x400/0x400 [ 270.976524][ T27] ? load_image+0x400/0x400 [ 270.981067][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 270.987191][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 270.993220][ T27] watchdog+0xe0f/0xe50 [ 270.997425][ T27] kthread+0x436/0x520 [ 271.001546][ T27] ? hungtask_pm_notify+0x40/0x40 [ 271.006628][ T27] ? kthread_blkcg+0xd0/0xd0 [ 271.011276][ T27] ret_from_fork+0x1f/0x30 [ 271.015854][ T27] [ 271.018964][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.026918][ T27] Sending NMI from CPU 1 to CPUs 0: [ 271.032209][ C0] NMI backtrace for cpu 0 [ 271.032222][ C0] CPU: 0 PID: 4576 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 271.032239][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.032251][ C0] Workqueue: netns cleanup_net [ 271.032273][ C0] RIP: 0010:__lock_acquire+0x143f/0x7d10 [ 271.032296][ C0] Code: 03 48 89 44 24 50 42 80 3c 00 00 74 12 48 89 df e8 b6 13 61 00 49 b8 00 00 00 00 00 fc ff df 48 89 9c 24 80 00 00 00 48 8b 1b <48> 85 db 0f 94 c0 48 83 c3 f8 0f 94 c1 08 c1 0f 84 83 02 00 00 e8 [ 271.032311][ C0] RSP: 0018:ffffc90000007660 EFLAGS: 00000046 [ 271.032323][ C0] RAX: 1ffffffff1fe222b RBX: ffffffff9025cb48 RCX: ffffffff815d19fc [ 271.032337][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901d30d0 [ 271.032348][ C0] RBP: ffffc900000078b0 R08: dffffc0000000000 R09: 1ffffffff203a61a [ 271.032360][ C0] R10: dffffc0000000000 R11: fffffbfff203a61b R12: 4d5967ed9b6b6d04 [ 271.032372][ C0] R13: ffff88807db6bb80 R14: 000000009b6b6d04 R15: ffff88807db6c7a8 [ 271.032385][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 271.032399][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.032410][ C0] CR2: 000000110c443575 CR3: 0000000063675000 CR4: 00000000003506f0 [ 271.032425][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 271.032434][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 271.032444][ C0] Call Trace: [ 271.032449][ C0] [ 271.032462][ C0] ? arch_stack_walk+0x10c/0x140 [ 271.032484][ C0] ? verify_lock_unused+0x140/0x140 [ 271.032503][ C0] ? stack_trace_save+0xa6/0xf0 [ 271.032535][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 271.032555][ C0] lock_acquire+0x19e/0x400 [ 271.032572][ C0] ? try_to_wake_up+0x5c/0x1050 [ 271.032590][ C0] ? sysvec_apic_timer_interrupt+0xa0/0xc0 [ 271.032608][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 271.032625][ C0] ? lock_acquire+0x208/0x400 [ 271.032645][ C0] ? worker_thread+0xaa6/0x1290 [ 271.032661][ C0] ? kthread+0x436/0x520 [ 271.032674][ C0] ? ret_from_fork+0x1f/0x30 [ 271.032710][ C0] ? read_lock_is_recursive+0x10/0x10 [ 271.032734][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 271.032763][ C0] ? try_to_wake_up+0x5c/0x1050 [ 271.032780][ C0] ? _raw_spin_lock+0x40/0x40 [ 271.032809][ C0] try_to_wake_up+0x5c/0x1050 [ 271.032828][ C0] ? insert_work+0x2ee/0x3d0 [ 271.032845][ C0] __queue_work+0x9c5/0xd50 [ 271.032862][ C0] ? queue_work_node+0x3a0/0x3a0 [ 271.032877][ C0] call_timer_fn+0x17b/0x540 [ 271.032894][ C0] ? queue_work_node+0x3a0/0x3a0 [ 271.032909][ C0] ? __run_timers+0x800/0x800 [ 271.032929][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 271.032944][ C0] ? queue_work_node+0x3a0/0x3a0 [ 271.032959][ C0] __run_timers+0x569/0x800 [ 271.032980][ C0] ? detach_timer+0x2b0/0x2b0 [ 271.032996][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 271.033016][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 271.033032][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 271.033049][ C0] run_timer_softirq+0x63/0xf0 [ 271.033066][ C0] handle_softirqs+0x339/0x830 [ 271.033083][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 271.033100][ C0] ? do_softirq+0x210/0x210 [ 271.033118][ C0] __irq_exit_rcu+0x13b/0x230 [ 271.033133][ C0] ? irq_exit_rcu+0x20/0x20 [ 271.033151][ C0] irq_exit_rcu+0x5/0x20 [ 271.033164][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 271.033181][ C0] [ 271.033185][ C0] [ 271.033190][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 271.033206][ C0] RIP: 0010:lock_acquire+0x208/0x400 [ 271.033223][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 271.033237][ C0] RSP: 0018:ffffc90003e8f900 EFLAGS: 00000206 [ 271.033249][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: de6426d27e321f00 [ 271.033284][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f800 [ 271.033296][ C0] RBP: ffffc90003e8fa20 R08: dffffc0000000000 R09: 1ffffffff203a618 [ 271.033308][ C0] R10: dffffc0000000000 R11: fffffbfff203a619 R12: ffffffff8c31eaa0 [ 271.033320][ C0] R13: 1ffff920007d1f2c R14: 0000000000000246 R15: dffffc0000000000 [ 271.033341][ C0] ? rcu_lock_release+0x5/0x20 [ 271.033359][ C0] ? read_lock_is_recursive+0x10/0x10 [ 271.033378][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 271.033397][ C0] ? inet_twsk_purge+0x731/0x840 [ 271.033417][ C0] rcu_lock_acquire+0x2a/0x30 [ 271.033434][ C0] ? rcu_lock_acquire+0x5/0x30 [ 271.033450][ C0] inet_twsk_purge+0x119/0x840 [ 271.033472][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 271.033491][ C0] ? iput+0x706/0x8a0 [ 271.033508][ C0] ? dccp_v4_exit_net+0x80/0x80 [ 271.033527][ C0] cleanup_net+0x791/0xba0 [ 271.033544][ C0] ? ops_free_list+0x330/0x330 [ 271.033560][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 271.033576][ C0] ? _raw_spin_unlock+0x40/0x40 [ 271.033591][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 271.033608][ C0] process_one_work+0x85f/0x1010 [ 271.033631][ C0] ? worker_detach_from_pool+0x240/0x240 [ 271.033647][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 271.033665][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 271.033680][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 271.033697][ C0] ? wq_worker_running+0x97/0x170 [ 271.033713][ C0] worker_thread+0xaa6/0x1290 [ 271.033746][ C0] kthread+0x436/0x520 [ 271.033760][ C0] ? rcu_lock_release+0x20/0x20 [ 271.033776][ C0] ? kthread_blkcg+0xd0/0xd0 [ 271.033792][ C0] ret_from_fork+0x1f/0x30 [ 271.033813][ C0] [ 271.587339][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.616704][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 271.623619][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 271.630853][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.641066][ T27] Call Trace: [ 271.644385][ T27] [ 271.647345][ T27] dump_stack_lvl+0x188/0x250 [ 271.652067][ T27] ? show_regs_print_info+0x20/0x20 [ 271.657308][ T27] ? load_image+0x400/0x400 [ 271.661877][ T27] panic+0x2e5/0x810 [ 271.665818][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 271.671493][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 271.676149][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 271.681759][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 271.687959][ T27] watchdog+0xe4e/0xe50 [ 271.692187][ T27] kthread+0x436/0x520 [ 271.696286][ T27] ? hungtask_pm_notify+0x40/0x40 [ 271.701344][ T27] ? kthread_blkcg+0xd0/0xd0 [ 271.706057][ T27] ret_from_fork+0x1f/0x30 [ 271.710518][ T27] [ 271.713937][ T27] Kernel Offset: disabled [ 271.718449][ T27] Rebooting in 86400 seconds..