last executing test programs: 14.936203065s ago: executing program 2 (id=471): io_setup(0x7fff, &(0x7f0000000040)=0x0) io_pgetevents(r0, 0x2, 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1ea]}, 0x8}) r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="8db42c43ffcf53c60000000000000020", 0x10) syz_fuse_handle_req(r1, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x400000000003, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x49, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x7, r2, r3, 0x8, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f00000001c0)=@filename='./file0/file0\x00', r2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) setxattr$security_ima(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000300), &(0x7f0000000580)=@v2={0x3, 0x3, 0x17, 0x9, 0xe4, "cb4b383986700a5110a07d9bd48fe96108f4ee7683965411bb54baf0558f1d85fdb8dbf6559b0fd06c8fae48de10c53cdfd40cc457188c7385196e836e55895c18a5ef5aa7477477f918c3b900244172818b8bec5f9015ae4a6689eb8a664d8e1f0ec2f6ef3bc133654eed7cdd198bb6ee7827c37a2f79249355242003ae3e9399fa90b411f79c092938d0f9847feb8cf417d88f80d25dfbc801739ebe04084120006be97012c8501c283d993814d359b769a867adc22b8d9e36643cbcbe4599e71033cc8d706c88c2217a37fe1c2eea094f62d95ea7780b8afc94a57bdb271069c45fa5"}, 0xed, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000001c0)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0xffffffff}}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@nolazytime}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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") 10.612392195s ago: executing program 3 (id=486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000000000086dd6d0000000008110000000000000000000000800100000000ffea"], 0x42) 10.135193738s ago: executing program 3 (id=492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) io_setup(0x30, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x24}]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0xffe4, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000001680)=ANY=[@ANYRESDEC=r4, @ANYBLOB="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", @ANYRES8=r5, @ANYRES8, @ANYRES8=r0], 0x42) 9.568372892s ago: executing program 4 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x4) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000105c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x1, 0x105a8, &(0x7f0000020c00)="$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") r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x800, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000140009052cbd7000fddbdf25022000fe", @ANYRES32=0x0, @ANYBLOB="08020039ffffff00"], 0x20}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x2}], 0x32, 0x0, &(0x7f0000000200)="db9b903c47dd8fca2fce1bb5d083925090ce79a40289c24a4ee113af62bc3c95e32f54eede886648f39e5418b7e75aee39b2"}) setrlimit(0xf, &(0x7f0000000000)={0xcb3e, 0x875f}) setrlimit(0x5, &(0x7f0000000280)={0x0, 0xfffffffffffffff9}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') read$FUSE(r2, &(0x7f0000007140)={0x2020}, 0x2020) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) writev(r4, &(0x7f0000000080), 0x29) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x4000000, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000500)="01dc8e", 0x3}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100008000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.504292493s ago: executing program 3 (id=494): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)=0x4) close(r2) 6.567458564s ago: executing program 2 (id=495): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)=0x4) close(r2) (fail_nth: 1) 6.499542844s ago: executing program 3 (id=496): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48001) syz_usb_disconnect(r3) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x4004550f, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120110030197ca10880300000000000000010902120001010840030904a0040033d0940cadf8b704afae1b81456bc851c1cba3782bfc6701a18082f79b7084dce2ba6766fca73d3ca45598c4a4b8f3629a149e43bd461953c1983dee313b5a48aaf76e6271ed71c4b9161fdeafc93f119306c1d9c27eed42cbc83d26f873f2af186d8ab5ea23f6d66d08ccf12f40d93f86f7f783412ba3e645cec3e5afccd6774dced11919bca4eeac77b4c08539378be7094b6a401fead00ef63b64b9a582a01c2994ca6ed08550cf437d92b99a8451562d39d13234140c5072dbb7"], 0x0) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040)=0x8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f000000030000000800000001"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=cp869,errors=continue,umask=00000000000000000000005,errors=remount-ro,iocharset=cp437,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00c29ecf50c53d64e210df7f4294801e19f609da0c75e3d60008000000000000"], 0x1, 0x1522, &(0x7f00000033c0)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x42000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2040054, &(0x7f0000000a00)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b46ea5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9"], 0x1, 0x5514, &(0x7f0000013680)="$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") r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) r9 = gettid() sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r8, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r9], 0x28}}, 0x0) prlimit64(r9, 0x0, &(0x7f0000000040)={0x0, 0x8000000000000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x103141, 0x2e) 6.035843607s ago: executing program 4 (id=498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0x10000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xfffffffd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 5.792265109s ago: executing program 2 (id=499): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xa, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000280)={0xfeff, 0xac80, 0x8, 0xfffe, 0x11, "0100000000000080"}) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0xa) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000880)={{}, 0x0, 0x0, @unused=[0x0, 0x5, 0xad, 0x98], @devid}) 5.546264151s ago: executing program 0 (id=502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x180, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a83}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @loopback, 0x23000000}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4af0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x180}}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0x10000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xfffffffd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000140)=0x4) 5.145635224s ago: executing program 0 (id=503): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@usrjquota}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xf}}, './file0\x00'}) openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000010400)={0x0, 0x86e1, 0x0, 0x8, 0x0, 0x0, r0}, &(0x7f0000010080), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000010300)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f00000005c0), 0x1}, 0x20) 4.931470125s ago: executing program 4 (id=505): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8, 0x12) (fail_nth: 1) 4.838200916s ago: executing program 1 (id=506): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000500)={0xe3, r4, 0x1}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@gettaction={0x24, 0x5a, 0x1, 0xfffffffd, 0x8, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000450) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)=@file={0x1, './cgroup/../file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000005c0)="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", 0x113}, {&(0x7f0000000440)="1e085c45a6296194d1b3256099818b5773aab081c5a2fc024702f12fb64dc9f82a", 0x21}, {&(0x7f0000000480)="cbb0c4d27fef6bbc9ec0f2f26596cbcabc5ea5a478db281642093b1a1b598b3377f27aadd78025ee6e9e", 0x2a}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="38000000000020a6f2084eb5ce488e0e1d000100000001000000", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r4], 0x38, 0x16000814}, 0x44) r8 = fsmount(r4, 0x0, 0xc) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x1f) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0xf, 0x80000000, 0x2, @loopback, @loopback, 0x10, 0x8, 0x0, 0x6}}) dup3(0xffffffffffffffff, r9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001fac0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x4, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x800}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) timer_settime(0x0, 0x1, 0x0, 0x0) 4.096160441s ago: executing program 0 (id=507): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x110c4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5e3c5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x40002) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x9, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) socket$pppoe(0x18, 0x1, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "bafc3b517da80fcb47012ba38ab51724caf981fe7daa63d385d9043d5e68996f382c319ebad19586fc3bd8a2186053a44e22739b5b09bb32878a78f3d18aaf55d2f57d182e637bb2f9e0f0e2708bbc2d02eb92"}, 0x5e) write$cgroup_int(r1, &(0x7f0000000000)=0x8, 0x12) 3.952035492s ago: executing program 4 (id=508): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904ffd55199"], 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) mount(0x0, 0x0, &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x10, &(0x7f0000002380)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0xe) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) execve(0x0, 0x0, 0x0) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r6 = shmat(r5, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) shmdt(r6) socket$inet_udp(0x2, 0x2, 0x0) 3.804541523s ago: executing program 1 (id=509): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r2, 0x4) (fail_nth: 1) 3.409999516s ago: executing program 0 (id=510): r0 = socket$xdp(0x2c, 0x3, 0x0) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', @ifru_data=&(0x7f0000000580)="77622d9ffe408be843c6ed9bf7330180000000000000000000000000000200"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, &(0x7f0000000040)=0xdb) 3.364809196s ago: executing program 0 (id=511): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.155653457s ago: executing program 0 (id=512): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x24044080) 2.84424267s ago: executing program 1 (id=513): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r2, 0x4) 2.707386811s ago: executing program 1 (id=514): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x20000, 0x0, 'queue1\x00', 0x6}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x92, @time={0xffffff3f, 0x1000000}, 0x0, {}, 0x0, 0x84}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r4}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r3, 0x4) 2.652793671s ago: executing program 2 (id=515): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x3ff, @local}}, 0x1, 0x101}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r1, 0x7f}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r1, 0xfa}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_cache\x00') ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x20}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x92, 0x7, 0x2}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) recvmsg(r3, &(0x7f0000001c40)={&(0x7f00000005c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/69, 0x45}, {&(0x7f00000006c0)=""/103, 0x67}, {&(0x7f0000000740)=""/219, 0xdb}, {&(0x7f0000000840)=""/154, 0x9a}, {&(0x7f0000000900)=""/107, 0x6b}, {&(0x7f0000000980)=""/87, 0x57}, {&(0x7f0000000a00)=""/134, 0x86}, {&(0x7f0000000ac0)=""/249, 0xf9}], 0x8, &(0x7f0000000c40)=""/4096, 0x1000}, 0x2020) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000001c80)) statx(r2, &(0x7f0000001cc0)='./file0\x00', 0x400, 0x100, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee00}}, './file0\x00'}) setreuid(r5, r7) r8 = open(&(0x7f0000001e40)='./file0\x00', 0x5031c1, 0x85) recvmsg$kcm(r2, &(0x7f0000002440)={&(0x7f0000001e80)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001f00)=""/254, 0xfe}, {&(0x7f0000002000)=""/121, 0x79}, {&(0x7f0000002080)=""/139, 0x8b}, {&(0x7f0000002140)=""/79, 0x4f}, {&(0x7f00000021c0)=""/253, 0xfd}], 0x5, &(0x7f0000002340)=""/246, 0xf6}, 0x40000000) sendmsg$kcm(r2, &(0x7f0000002880)={&(0x7f0000002480)=@can, 0x80, &(0x7f0000002500), 0x0, &(0x7f0000002540)=[{0xe8, 0x104, 0x9, "a9f4b2aa0697ee6faeeeee9687fed40f135a4ebf56efd20187d0ea41cedd14cbcd85f82c1db328e9d8b77bf2e6a08c2bd5857d5b1af29d908da1def7ad580036b0bdba2cf2412fc14df2ccce190e663fe1fd8c6fb863b7067b66a7732b81bb32077c140e36642712c40da889718511b3a0da76c27d732c5c083fe743529a4fd1cd9402028672db3224e4885602d87cc0c0c45f5b393305ff004c5fedd45948e0182888848dcda536a5d48a283fb7635ea658d0a097415943bdbec2bd133aa54f2db94bab3670d2e2854a7b7a694cdb3f46"}, {0xc8, 0x0, 0x2, "e350005f189d4e141a13e100f196d2d924db2b0af0bec6a1f7244a786fb450688ff91a370f3217d139dfb7962c11594dd3712799b10f15585ca799b1f080e02ff250354a041dcd8def408a5b0425bf6ba44db8f91470fab08ab1cdc47a1be0731800a24e62d2aa99255a08d27dea1ac87f844869b57ba9972134201cfe03e758ee3978debe4bfd8493c6b1ee79f663072fb4ed3596f1d14da07e2eb171ea55e3f3736316dddaf13cc1bec7468002e2d24cf548c2d6f42e78"}, {0x30, 0x112, 0x7, "e8c6d23c05cfcfbd49148d03f36637f5792ec7db87dcdede49b5d62650dd"}, {0x48, 0x3a, 0x3, "201fa45d524c798619fc9e170092d2d16ec95509ec40d71ed378716427fd2d1bfc7f4c1ca9e41529a3a5044cd27759c6b85b9868"}, {0xe0, 0x116, 0x0, "03478b97215bf2d614c4ec3f455ff0366ce6cc0640f22b9e399153b5cc5cef957d3faf9a7b595bd1dc3df953b9a98a039d635125dca412b0de1cd2e578fd4794bca0691d0350b2b40926e16176f3f7c8d599b09d03e76b0be21a12aa2d539db9238fcbecf27edfec0d88f21899bcdb8398b2754ae1a4d50cc8b8031ce9fd6a54a61889286648c993ff8eeb62584c56b45c58d421e1da80a5f67f7393ae5a6b9ed56895dea72042c769e6ffe55242f46987d638afbb012e75216afcf543d511eb04f0a2565e5f97d6eec158"}, {0x18, 0x119, 0x2, "e8b0ec9c4a54ae"}], 0x320}, 0x40000) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002bc0), 0x8000, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002c00)={0xffffffffffffffff, 0xaa, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d40)={0x11, 0x2d, &(0x7f00000028c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100}, @map_idx={0x18, 0x4}, @generic={0x1, 0x2, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7b}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002a40)='GPL\x00', 0x6, 0x96, &(0x7f0000002a80)=""/150, 0x41000, 0x14, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002b40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002b80)={0x3, 0x10, 0xab, 0x4}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000002c40)=[r9, r3, r10], &(0x7f0000002c80)=[{0x5, 0x1, 0x5, 0x9}, {0x1, 0x4, 0x8, 0xa}, {0x0, 0x5, 0xf, 0x9}, {0x5, 0x5, 0xd, 0xb}, {0x4, 0x1, 0x6, 0x9}, {0x2, 0x1, 0xb, 0xa}, {0x4, 0x4, 0x2, 0x9}, {0x4, 0x1, 0x9}, {0x2, 0x5, 0xb, 0xb}, {0x4, 0x1, 0xd, 0x2}]}, 0x94) ioctl$PPPIOCSFLAGS(r8, 0x40047459, &(0x7f0000002e00)=0x20) sendmsg$kcm(r6, &(0x7f0000003580)={&(0x7f0000002e40)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002ec0)="6edde21d5584a5e6c1847ee390ee83f08e01428ba5588eee0afc1db809b48300d53ce001eaafd3e8a02e77cc31269d8f2ac252c1b55a06f19f847149121ea515962e3cc5cb031b1e6aeabbf7875ca1a57da242631d2ee810d50c485ab36c00f3", 0x60}, {&(0x7f0000002f40)="db42c92bb979e858e653b6aa473d310201353219fe5bfeaca0b97be6511b8c903bc1886ec734ea6f2a723b4b4dc7e7856641", 0x32}, {&(0x7f0000002f80)="80733e32bd6d1eb4", 0x8}, {&(0x7f0000002fc0)="6f1cc37a773fcadef597fc6f9e2612ecb2e96096f37bedc3df4c33f73ce08418f6f67445f95813db3b892311f5ef65eed7c46f52483b72896bba78a2b74b4d6f47751ede165e2a27b8a6b4950861cc71718ceffbf617d9d1467cce2757cdece2fd07f1ea8677dcad1c1607f88fa6d5878aca816d587c20153c6e1456b568a6c362f9a08c253bfc46a64f1a132fddb150c2fc2e6f59bd3a0e0c067c3cd04b1454de8b1cc74a904dc93aeb4d457ead59a5523d3561adf7c389141a6e9b36d0868d3f7a92c00c081d02cc4dd3e5", 0xcc}, {&(0x7f00000030c0)="b73753f9747ee9de47c217df517276ffe6ddc96b02c3d71ea0a9b4c1e6bfd45ac34a89f4daff8bf8c1f81db8b743843f2e5bbcad9b5e29d79caffc47203a3baf79c7859e2abe108095983a009dc86b71c12c3ee1de6ba24f338f8e842d50637fc758f9dc46cfd2870870284f11b68c6c47e98abe43ca", 0x76}], 0x5, &(0x7f00000031c0)=[{0x88, 0x29, 0x6, "f8e9db1b81ecd8da585dca1cebd5b18debb341b0fe1c38d0778a918448147e61181c533ee2499c5d5d4b4419e36349a15fc17f46996b06c4dc3311328e2d58589a1fc55dce402e9ef7026b9e95fb9f24205d01777adfe3e27195e4a712d74a7e3a6aab18cae9aeb35c8f77fbd7e31b223175a619029d5f"}, {0x20, 0x110, 0x3, "26d60b81d1d4bbb3ed"}, {0xc8, 0x29, 0x8, "6f7c35c9c09b37d05da1484868b2c759d67ded111f8e4ea51244ea47ef4955bf5d35e5c6a34b8aa4bd706b71314f1bfc3ae8656d8abc91b157a4a66866e94ee448daf96e72f65e58e039694ff0ec0a74d649dcf3bb88e167a47ab941b17aac749dd99d11d3894306c6c33ea9741dd41d68836cd3f3f19b80bf7642d7df7318f08afeec4410b37c82c82d7bae938de4f65919558f8087f88d0ed675f457dc61f43f8bc34c23088835ac8513e92c39bf3c2352124b"}, {0x58, 0x10b, 0x79c, "906b6974f78d90f1b6fef1a47d45a236b0ce5392eb99fc5ec25be786c120c2785489e319417c443c984347b2142e5952c8d0fb750bd3242ebcc74fcd25259400b16c03b074d05680"}, {0xb8, 0x1, 0x401, "4bb8fe1aedef118353000dd784d793635dc3b0520907745b09b8f1f52dbc73061dde4ab0c68e6e3e7f230173485f1da4deb506304182ee2a7ec9a057bfd9df4b3c62611bb7580af8a4aef134aba49f3e447cbb672f737b3acf3264b72118cb6d8f36de64ef9ada597164f558a332e69b7890c63ed0f6d86f1a74b5b8f670ad704f955bed6b7cae3d21121246bc991ce87a643e5de05d7d65802c72aacbf80b36aec7cc0017c77251"}, {0xf8, 0x10c, 0x67, "3ca15edd5958ea3ea1ed358560cd3f1ddc6a40a2a39a7d72ad3a60d8da00175e77deae26690bbc20d5a0cdfcfda5c6e59c59c28d4c80341d2efbe12e03392c7cc9dc8cad9b655432f8b4d7a2456f707ba0fd5034e890d906f64f7532ba23037d55589a2a4d3cafc034134e8e3a41dfd2847fae8e5da7181b2d40cea69e265f15b9ec647abf50f8bc2736d6bf8b05971bdea32d671333381c8d89997b830dbf036300c0bdc0fe856e22bcc32e8ce98f00527662c58f8e90999de8bb17f733f44fcf61cc2a746d9fdebe11bda22d2ae76ae5385cc2beffbc8fb265e3a3cfa7759457ba6d9b"}, {0x18, 0x3a191c968dd86b22, 0xa4, "b916210ff712f5c9"}], 0x390}, 0x4820) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000035c0)=@sack_info={0x0, 0x3, 0x6}, &(0x7f0000003600)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000003640)={r1, 0xe6}, &(0x7f0000003680)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000036c0)={r11, 0x0, 0xffff, 0x2, 0x3, 0x5}, &(0x7f0000003700)=0x14) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000003740)={{0x5, 0x8, 0x7, 0x7f}, 'syz1\x00', 0x3a}) fcntl$setflags(r3, 0x2, 0x1) 2.400123143s ago: executing program 1 (id=516): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r2, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x10) (fail_nth: 1) 1.633428678s ago: executing program 3 (id=517): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r2, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x10) 285.447398ms ago: executing program 1 (id=518): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x100) r2 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) umount2(0x0, 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(r2, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r0, @ANYRES32=r0], 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file7\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="020000040000000000000010000400000000002000040000000000"], 0x1b, 0x2) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000140)="5cdbeefbe602e4f2762aa3e85d1820905d044424f3141c892c51d684b4eb4b6f1f263d30aebffc5c85a7d8499e108210716272ad581858adf09f2c06b58a3507e40a6ce76fd7df6dbc98eef271fde7438b96f009c13556f4652b57e514a6530754994e1c68febc1e1671d23a2a1798df3718fb6f368444ebb9bcfa6e37c75f6b641909e7da2ebe6cf43593e80a62b5a9be0a41d057f4c2b78a3b907c2ff8a6da52827e51c2b5ff75a1c3f196b290c0", 0xaf) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18410, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000000700)="$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") r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x49dd, 0x977, 0x6, 0x6, 0x18, "fa3d76170000001b"}) write$binfmt_aout(r7, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRESHEX=r3, @ANYRES32=r3], 0xa29a) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x17) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) close(r10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 230.714678ms ago: executing program 4 (id=519): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x7}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r2, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x426100, 0x0) 54.089719ms ago: executing program 3 (id=520): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40044) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400), &(0x7f0000000000)=0x8) 0s ago: executing program 4 (id=521): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000040)={0x6, 0x20, 0x8000000000000000, 0x20, 0x8}, 0x48) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) getgroups(0x9, &(0x7f0000000240)=[0xee00, 0x0, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff]) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, '-@-+%)'}}]}}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$sock(r9, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="afc96173bc29e07c1a12139550860b60d8a9de852011a9a0baf777a5fe400a55728afc2e39142bbd703e442a4cb99c66e30a99d4f9aa7f4e4a4a4c04aea388699e9c68e95ddb9d8cff1a022fa27c41899e6628f7fe8243023e025c4cb6cc8dc4b4", 0x61}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="9898041ead2049201dfc706e98db177a41681a1f04285f236b40f8b2b46d0671c3ae7d9863e23c7bc4a736a17420ddc5fcb7a735fbfdb4ee47", 0x39}], 0x3, &(0x7f0000001440)=[@txtime={{0x18, 0x1, 0x3d, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x400}}], 0x30}, 0x40040) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000014c0)) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001540)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000003580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r10, &(0x7f00000055c0)={0x290, 0x0, r11, [{{0x6, 0x0, 0x6, 0x7f, 0x0, 0xd0, {0x1, 0x80, 0xfffffffffffffffd, 0x4, 0x9, 0x5, 0x1ff, 0x1ff, 0x80000000, 0x2000, 0x6, r2, r13, 0x6, 0xe84a}}, {0x1, 0x3, 0x6, 0x0, '*^,-.-'}}, {{0x4, 0x1, 0x81, 0x8, 0x0, 0x9, {0x6, 0xf715, 0xb, 0x100000000, 0xb, 0x62e, 0xad, 0x7, 0x3, 0x8000, 0xdb, r1, r4, 0x5, 0x1}}, {0x4, 0x4, 0x3, 0x1, '&)('}}, {{0x5, 0x2, 0x4, 0x7ff, 0x6, 0x2, {0x0, 0x62, 0x9, 0x9, 0x5, 0xada9, 0x1, 0x7f, 0x0, 0x4000, 0x10, r1, r5, 0x2d5e, 0x7}}, {0x3, 0x7, 0x7, 0x5, 'user_id'}}, {{0x6, 0x3, 0x7, 0x11bb, 0x10000, 0x2, {0x6, 0x8, 0x7fffffff, 0x4, 0x7, 0x0, 0x9, 0x6, 0x3, 0x2000, 0x9, r3, r7, 0x5, 0xf0af}}, {0x6, 0xfffffffffffffffb, 0x7, 0x883, 'user_id'}}]}, 0x290) read$FUSE(r10, &(0x7f0000005880)={0x2020, 0x0, 0x0}, 0x2020) lstat(&(0x7f00000078c0)='./file0\x00', &(0x7f0000007900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r10, &(0x7f0000007980)={0x78, 0xffffffffffffffda, r14, {0x9, 0x10000, 0x0, {0x6, 0x10001, 0x6c604aab, 0x8, 0x7, 0x1, 0x6, 0xc4, 0x1000, 0x2000, 0x6, r3, r15, 0x8, 0xfffffff0}}}, 0x78) write$FUSE_ENTRY(r10, &(0x7f0000007a00)={0x90, 0x0, r12, {0x6, 0x1, 0x100, 0x8001, 0x2, 0xfff, {0x3, 0xd, 0x7, 0x2, 0xac10, 0x2, 0x9, 0x2, 0x7, 0x4000, 0x80000001, r3, r8, 0x5, 0x61}}}, 0x90) ioctl$AUTOFS_IOC_ASKUMOUNT(r10, 0x80049370, &(0x7f0000007ac0)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x40010, r9, 0x101000) r16 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000007b00), 0x4000, 0x80) r17 = syz_open_dev$mouse(&(0x7f0000007b40), 0xf94, 0x48b42) fanotify_mark(r16, 0x2, 0x40000000, r17, &(0x7f0000007b80)='./file0\x00') arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x9) io_uring_register$IORING_UNREGISTER_RING_FDS(r16, 0x15, &(0x7f0000008400)=[{0x1, 0x0, 0x0, &(0x7f0000007cc0)=[{&(0x7f0000007bc0)=""/201, 0xc9}], &(0x7f0000007d00)=[0x4, 0x41, 0x9, 0x2, 0xffffffffffffffff, 0x2a9]}, {0x9, 0x1, 0x0, &(0x7f0000008300)=[{&(0x7f0000007d40)=""/70, 0x46}, {&(0x7f0000007dc0)=""/235, 0xeb}, {&(0x7f0000007ec0)=""/81, 0x51}, {&(0x7f0000007f40)=""/255, 0xff}, {&(0x7f0000008040)=""/17, 0x11}, {&(0x7f0000008080)=""/253, 0xfd}, {&(0x7f0000008180)=""/9, 0x9}, {&(0x7f00000081c0)=""/89, 0x59}, {&(0x7f0000008240)=""/174, 0xae}], &(0x7f00000083c0)=[0x2, 0xfffffffffffffffc, 0x6, 0x1ff, 0x5, 0xfffffffffffffff8, 0x6, 0x3]}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f0000008440)={'vxcan0\x00', 0x0}) connect$can_j1939(r17, &(0x7f0000008480)={0x1d, r18, 0x1, {0x1}, 0xff}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000084c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_VERDICT(r17, &(0x7f00000085c0)={&(0x7f0000008500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000008580)={&(0x7f0000008540)={0x14, 0x1, 0x3, 0x801, 0x0, 0x0, {0xf, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x8805) r20 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r20, &(0x7f0000009e00)={&(0x7f0000008600)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000009d40)=[{&(0x7f0000008640)=""/88, 0x58}, {&(0x7f00000086c0)=""/254, 0xfe}, {&(0x7f00000087c0)=""/230, 0xe6}, {&(0x7f00000088c0)=""/48, 0x30}, {&(0x7f0000008900)=""/4096, 0x1000}, {&(0x7f0000009900)=""/56, 0x38}, {&(0x7f0000009940)=""/212, 0xd4}, {&(0x7f0000009a40)=""/250, 0xfa}, {&(0x7f0000009b40)=""/235, 0xeb}, {&(0x7f0000009c40)=""/216, 0xd8}], 0xa, 0x0, 0x0, 0x840}, 0x40001) close_range(r19, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ] tomoyo_path_number_perm+0x1e3/0x600 [ 172.871410][ T5640] ? tomoyo_path_number_perm+0x1b6/0x600 [ 172.877034][ T5640] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 172.882481][ T5640] ? ksys_write+0x1bd/0x240 [ 172.886975][ T5640] ? common_file_perm+0x171/0x1c0 [ 172.892011][ T5640] ? __fget_files+0x28/0x4d0 [ 172.896599][ T5640] security_file_ioctl+0x6c/0xa0 [ 172.901531][ T5640] __se_sys_ioctl+0x48/0x170 [ 172.906117][ T5640] do_syscall_64+0x4c/0xa0 [ 172.910525][ T5640] ? clear_bhb_loop+0x60/0xb0 [ 172.915190][ T5640] ? clear_bhb_loop+0x60/0xb0 [ 172.919861][ T5640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.925747][ T5640] RIP: 0033:0x7fdd28b8f6c9 [ 172.930159][ T5640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.949763][ T5640] RSP: 002b:00007fdd29aba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.958169][ T5640] RAX: ffffffffffffffda RBX: 00007fdd28de6090 RCX: 00007fdd28b8f6c9 [ 172.966148][ T5640] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 172.974137][ T5640] RBP: 00007fdd29aba090 R08: 0000000000000000 R09: 0000000000000000 [ 172.982109][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.990072][ T5640] R13: 00007fdd28de6128 R14: 00007fdd28de6090 R15: 00007ffc05285a98 [ 172.998048][ T5640] [ 173.002370][ T129] usb 3-1: device descriptor read/64, error -71 [ 173.096269][ T5640] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.124337][ T5640] tipc: Resetting bearer [ 173.163492][ T5637] tipc: Resetting bearer [ 173.220113][ T5637] tipc: Disabling bearer [ 173.295021][ T129] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 173.361706][ T5649] tipc: Started in network mode [ 173.379316][ T5649] tipc: Node identity 2ac782e8060d, cluster identity 4711 [ 173.430062][ T5649] tipc: Enabled bearer , priority 0 [ 173.460774][ T5647] device syzkaller0 entered promiscuous mode [ 173.479312][ T129] usb 3-1: device descriptor read/64, error -71 [ 173.557190][ T5652] tipc: Enabled bearer , priority 0 [ 173.583167][ T5647] tipc: Resetting bearer [ 173.596789][ T5652] device syzkaller0 entered promiscuous mode [ 173.607990][ T5646] tipc: Resetting bearer [ 173.617133][ T129] usb usb3-port1: attempt power cycle [ 173.655932][ T5646] tipc: Disabling bearer [ 173.785033][ T5655] loop2: detected capacity change from 0 to 7 [ 173.792250][ T4377] Dev loop2: unable to read RDB block 7 [ 173.825598][ T4377] loop2: AHDI p2 p3 [ 173.830976][ T4377] loop2: partition table partially beyond EOD, truncated [ 173.862726][ T5652] tipc: Resetting bearer [ 173.881285][ T4377] loop2: p3 start 335544320 is beyond EOD, truncated [ 173.908783][ T5655] Dev loop2: unable to read RDB block 7 [ 173.919158][ T5655] loop2: AHDI p2 p3 [ 173.923413][ T5655] loop2: partition table partially beyond EOD, truncated [ 173.931709][ T5651] tipc: Resetting bearer [ 173.963549][ T5655] loop2: p3 start 335544320 is beyond EOD, truncated [ 173.989171][ T5651] tipc: Disabling bearer [ 174.064297][ T129] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 174.116244][ T129] usb 3-1: device descriptor read/8, error -71 [ 174.138066][ T5660] tipc: Enabled bearer , priority 0 [ 174.188221][ T5660] device syzkaller0 entered promiscuous mode [ 174.232662][ T5660] FAULT_INJECTION: forcing a failure. [ 174.232662][ T5660] name failslab, interval 1, probability 0, space 0, times 0 [ 174.267543][ T5660] CPU: 1 PID: 5660 Comm: syz.4.343 Not tainted syzkaller #0 [ 174.274896][ T5660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.284972][ T5660] Call Trace: [ 174.288258][ T5660] [ 174.291216][ T5660] dump_stack_lvl+0x168/0x22e [ 174.295922][ T5660] ? show_regs_print_info+0x12/0x12 [ 174.301143][ T5660] ? load_image+0x3b0/0x3b0 [ 174.306276][ T5660] ? __might_sleep+0xd0/0xd0 [ 174.310982][ T5660] ? __lock_acquire+0x7c50/0x7c50 [ 174.316029][ T5660] should_fail_ex+0x399/0x4d0 [ 174.320728][ T5660] should_failslab+0x5/0x20 [ 174.325250][ T5660] slab_pre_alloc_hook+0x59/0x310 [ 174.330300][ T5660] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 174.336051][ T5660] __kmem_cache_alloc_node+0x4f/0x260 [ 174.341545][ T5660] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 174.347289][ T5660] __kmalloc+0xa0/0x240 [ 174.351479][ T5660] tomoyo_realpath_from_path+0xdf/0x5d0 [ 174.357081][ T5660] tomoyo_path_number_perm+0x1e3/0x600 [ 174.362561][ T5660] ? tomoyo_path_number_perm+0x1b6/0x600 [ 174.368217][ T5660] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 174.373706][ T5660] ? ksys_write+0x1bd/0x240 [ 174.378218][ T5660] ? common_file_perm+0x171/0x1c0 [ 174.383270][ T5660] ? __fget_files+0x28/0x4d0 [ 174.387864][ T5660] security_file_ioctl+0x6c/0xa0 [ 174.392829][ T5660] __se_sys_ioctl+0x48/0x170 [ 174.397425][ T5660] do_syscall_64+0x4c/0xa0 [ 174.401833][ T5660] ? clear_bhb_loop+0x60/0xb0 [ 174.406501][ T5660] ? clear_bhb_loop+0x60/0xb0 [ 174.411174][ T5660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.417060][ T5660] RIP: 0033:0x7f612cd8f6c9 [ 174.421482][ T5660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.441146][ T5660] RSP: 002b:00007f612dcd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.449558][ T5660] RAX: ffffffffffffffda RBX: 00007f612cfe5fa0 RCX: 00007f612cd8f6c9 [ 174.457543][ T5660] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 174.465526][ T5660] RBP: 00007f612dcd0090 R08: 0000000000000000 R09: 0000000000000000 [ 174.473498][ T5660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.481463][ T5660] R13: 00007f612cfe6038 R14: 00007f612cfe5fa0 R15: 00007fffe967b4c8 [ 174.489440][ T5660] [ 174.493078][ T129] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.530847][ T5666] FAULT_INJECTION: forcing a failure. [ 174.530847][ T5666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.545418][ T129] usb 3-1: device descriptor read/8, error -71 [ 174.572920][ T5666] CPU: 0 PID: 5666 Comm: syz.0.346 Not tainted syzkaller #0 [ 174.580297][ T5666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.590366][ T5666] Call Trace: [ 174.593661][ T5666] [ 174.596602][ T5666] dump_stack_lvl+0x168/0x22e [ 174.601382][ T5666] ? show_regs_print_info+0x12/0x12 [ 174.606602][ T5666] ? load_image+0x3b0/0x3b0 [ 174.611137][ T5666] ? __lock_acquire+0x7c50/0x7c50 [ 174.616197][ T5666] ? verify_lock_unused+0x140/0x140 [ 174.621419][ T5666] should_fail_ex+0x399/0x4d0 [ 174.626125][ T5666] _copy_from_user+0x2c/0x170 [ 174.630830][ T5666] ___sys_sendmsg+0x155/0x290 [ 174.635528][ T5666] ? __sys_sendmsg+0x270/0x270 [ 174.640328][ T5666] ? __lock_acquire+0x7c50/0x7c50 [ 174.645383][ T5666] ? __fdget+0x17c/0x200 [ 174.649899][ T5666] __se_sys_sendmsg+0x19e/0x270 [ 174.654769][ T5666] ? __x64_sys_sendmsg+0x80/0x80 [ 174.659732][ T5666] ? lockdep_hardirqs_on+0x94/0x140 [ 174.664954][ T5666] do_syscall_64+0x4c/0xa0 [ 174.669385][ T5666] ? clear_bhb_loop+0x60/0xb0 [ 174.674079][ T5666] ? clear_bhb_loop+0x60/0xb0 [ 174.678771][ T5666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.684673][ T5666] RIP: 0033:0x7fc58e58f6c9 [ 174.689117][ T5666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.708741][ T5666] RSP: 002b:00007fc58f497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.717191][ T5666] RAX: ffffffffffffffda RBX: 00007fc58e7e5fa0 RCX: 00007fc58e58f6c9 [ 174.725184][ T5666] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 174.733173][ T5666] RBP: 00007fc58f497090 R08: 0000000000000000 R09: 0000000000000000 [ 174.741165][ T5666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.749157][ T5666] R13: 00007fc58e7e6038 R14: 00007fc58e7e5fa0 R15: 00007ffdd16123b8 [ 174.754376][ T5660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.757139][ T5666] [ 174.777476][ T129] usb usb3-port1: unable to enumerate USB device [ 174.787223][ T5660] tipc: Resetting bearer [ 174.800503][ T5659] tipc: Resetting bearer [ 174.806467][ T5664] loop3: detected capacity change from 0 to 32768 [ 174.836568][ T5659] tipc: Disabling bearer [ 174.872229][ T5664] XFS (loop3): Mounting V5 Filesystem [ 174.960561][ T5664] XFS (loop3): Ending clean mount [ 175.072908][ T5678] loop4: detected capacity change from 0 to 128 [ 175.393569][ T5685] netlink: 'syz.1.350': attribute type 1 has an invalid length. [ 175.483741][ T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 175.519228][ T5687] netlink: 'syz.2.351': attribute type 1 has an invalid length. [ 175.676434][ T5691] bond1: (slave bridge1): making interface the new active one [ 175.687821][ T5691] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 175.805744][ T5698] loop1: detected capacity change from 0 to 1024 [ 175.812467][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 175.819466][ T14] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 175.827657][ T14] usb 1-1: config 0 has no interface number 0 [ 175.835122][ T5698] EXT4-fs: Ignoring removed nobh option [ 175.840716][ T5698] EXT4-fs: Ignoring removed bh option [ 175.846750][ T14] usb 1-1: too many endpoints for config 0 interface 255 altsetting 213: 81, using maximum allowed: 30 [ 175.858160][ T14] usb 1-1: config 0 interface 255 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 175.884276][ T14] usb 1-1: config 0 interface 255 has no altsetting 0 [ 175.905960][ T14] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 175.915191][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.939613][ T5705] netlink: 'syz.2.355': attribute type 1 has an invalid length. [ 175.948999][ T5698] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 175.972228][ T14] usb 1-1: Product: syz [ 175.976537][ T14] usb 1-1: Manufacturer: syz [ 175.981241][ T14] usb 1-1: SerialNumber: syz [ 175.986237][ T5698] sctp: [Deprecated]: syz.1.353 (pid 5698) Use of int in max_burst socket option. [ 175.986237][ T5698] Use struct sctp_assoc_value instead [ 176.004633][ T14] usb 1-1: config 0 descriptor?? [ 176.010262][ T5708] FAULT_INJECTION: forcing a failure. [ 176.010262][ T5708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.026319][ T4271] XFS (loop3): Unmounting Filesystem [ 176.026912][ T14] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 176.038627][ T5708] CPU: 0 PID: 5708 Comm: syz.2.355 Not tainted syzkaller #0 [ 176.045949][ T5708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.056025][ T5708] Call Trace: [ 176.059317][ T5708] [ 176.062255][ T5708] dump_stack_lvl+0x168/0x22e [ 176.066944][ T5708] ? show_regs_print_info+0x12/0x12 [ 176.072154][ T5708] ? load_image+0x3b0/0x3b0 [ 176.076669][ T5708] ? __lock_acquire+0x7c50/0x7c50 [ 176.081705][ T5708] ? verify_lock_unused+0x140/0x140 [ 176.086935][ T5708] should_fail_ex+0x399/0x4d0 [ 176.091629][ T5708] _copy_from_user+0x2c/0x170 [ 176.096312][ T5708] ___sys_sendmsg+0x155/0x290 [ 176.100996][ T5708] ? __sys_sendmsg+0x270/0x270 [ 176.105787][ T5708] ? __lock_acquire+0x7c50/0x7c50 [ 176.110837][ T5708] ? __fdget+0x17c/0x200 [ 176.115095][ T5708] __se_sys_sendmsg+0x19e/0x270 [ 176.119955][ T5708] ? __x64_sys_sendmsg+0x80/0x80 [ 176.124912][ T5708] ? lockdep_hardirqs_on+0x94/0x140 [ 176.130123][ T5708] do_syscall_64+0x4c/0xa0 [ 176.134544][ T5708] ? clear_bhb_loop+0x60/0xb0 [ 176.139223][ T5708] ? clear_bhb_loop+0x60/0xb0 [ 176.143909][ T5708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.149815][ T5708] RIP: 0033:0x7ffacc98f6c9 [ 176.154236][ T5708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.173855][ T5708] RSP: 002b:00007ffacd80d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.182280][ T5708] RAX: ffffffffffffffda RBX: 00007ffaccbe6090 RCX: 00007ffacc98f6c9 [ 176.190258][ T5708] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 176.198234][ T5708] RBP: 00007ffacd80d090 R08: 0000000000000000 R09: 0000000000000000 [ 176.206224][ T5708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.214202][ T5708] R13: 00007ffaccbe6128 R14: 00007ffaccbe6090 R15: 00007ffd2b4820a8 [ 176.222193][ T5708] [ 176.691364][ T5709] loop4: detected capacity change from 0 to 131072 [ 176.712705][ T14] gspca_stk1135: reg_w 0x2 err -110 [ 176.848265][ T5709] F2FS-fs (loop4): Found nat_bits in checkpoint [ 176.954002][ T5709] F2FS-fs (loop4): recover fsync data on readonly fs [ 176.964607][ T5709] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955 [ 177.134013][ T5709] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 177.144299][ T5709] CPU: 1 PID: 5709 Comm: syz.4.356 Not tainted syzkaller #0 [ 177.151620][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.161689][ T5709] Call Trace: [ 177.164982][ T5709] [ 177.167927][ T5709] dump_stack_lvl+0x168/0x22e [ 177.172635][ T5709] ? show_regs_print_info+0x12/0x12 [ 177.177854][ T5709] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 177.183522][ T5709] f2fs_is_valid_blkaddr+0xc3b/0x1250 [ 177.188924][ T5709] f2fs_get_read_data_page+0x3ed/0x610 [ 177.194405][ T5709] ? f2fs_reserve_block+0x240/0x240 [ 177.199637][ T5709] f2fs_find_data_page+0x9b/0x3a0 [ 177.204688][ T5709] __f2fs_find_entry+0x649/0xca0 [ 177.209683][ T5709] ? f2fs_find_target_dentry+0xbc0/0xbc0 [ 177.215331][ T5709] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 177.221339][ T5709] f2fs_lookup+0x242/0x830 [ 177.225783][ T5709] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 177.231866][ T5709] ? lockdep_hardirqs_on+0x94/0x140 [ 177.237105][ T5709] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 177.243191][ T5709] path_openat+0xfaf/0x2e70 [ 177.247741][ T5709] ? do_filp_open+0x3c0/0x3c0 [ 177.252447][ T5709] do_filp_open+0x1c1/0x3c0 [ 177.256967][ T5709] ? vfs_tmpfile+0x480/0x480 [ 177.261593][ T5709] ? _raw_spin_unlock+0x24/0x40 [ 177.266478][ T5709] ? alloc_fd+0x58f/0x630 [ 177.270835][ T5709] do_sys_openat2+0x142/0x490 [ 177.275539][ T5709] ? do_sys_open+0xe0/0xe0 [ 177.279969][ T5709] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 177.285972][ T5709] ? lock_chain_count+0x20/0x20 [ 177.290847][ T5709] __x64_sys_openat+0x135/0x160 [ 177.295742][ T5709] do_syscall_64+0x4c/0xa0 [ 177.300182][ T5709] ? clear_bhb_loop+0x60/0xb0 [ 177.304881][ T5709] ? clear_bhb_loop+0x60/0xb0 [ 177.309573][ T5709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.315490][ T5709] RIP: 0033:0x7f612cd8f6c9 [ 177.319929][ T5709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.339560][ T5709] RSP: 002b:00007f612dcd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.347997][ T5709] RAX: ffffffffffffffda RBX: 00007f612cfe5fa0 RCX: 00007f612cd8f6c9 [ 177.355984][ T5709] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 177.363971][ T5709] RBP: 00007f612ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 177.371960][ T5709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.379948][ T5709] R13: 00007f612cfe6038 R14: 00007f612cfe5fa0 R15: 00007fffe967b4c8 [ 177.387953][ T5709] [ 178.034343][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 178.650109][ T5709] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 178.658261][ T5709] CPU: 1 PID: 5709 Comm: syz.4.356 Not tainted syzkaller #0 [ 178.665569][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.675642][ T5709] Call Trace: [ 178.678927][ T5709] [ 178.681863][ T5709] dump_stack_lvl+0x168/0x22e [ 178.686564][ T5709] ? show_regs_print_info+0x12/0x12 [ 178.691777][ T5709] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 178.697620][ T5709] f2fs_is_valid_blkaddr+0xc3b/0x1250 [ 178.703012][ T5709] f2fs_get_read_data_page+0x3ed/0x610 [ 178.708503][ T5709] ? f2fs_reserve_block+0x240/0x240 [ 178.713723][ T5709] ? PageHeadHuge+0x8f/0x1c0 [ 178.718332][ T5709] f2fs_find_data_page+0x9b/0x3a0 [ 178.723381][ T5709] __f2fs_find_entry+0x649/0xca0 [ 178.728357][ T5709] ? f2fs_find_target_dentry+0xbc0/0xbc0 [ 178.734009][ T5709] f2fs_lookup+0x242/0x830 [ 178.738446][ T5709] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 178.744530][ T5709] ? d_hash_and_lookup+0x1b0/0x1b0 [ 178.749662][ T5709] ? __init_waitqueue_head+0xa5/0x150 [ 178.755057][ T5709] __lookup_slow+0x27d/0x3a0 [ 178.759664][ T5709] ? lookup_one_len+0x2c0/0x2c0 [ 178.764536][ T5709] ? lockdep_hardirqs_on+0x94/0x140 [ 178.769854][ T5709] ? preempt_count_add+0x8d/0x190 [ 178.774904][ T5709] ? down_read+0x1a8/0x2d0 [ 178.779337][ T5709] lookup_slow+0x53/0x70 [ 178.783598][ T5709] link_path_walk+0x928/0xe50 [ 178.788297][ T5709] ? handle_lookup_down+0x130/0x130 [ 178.793517][ T5709] __filename_parentat+0x201/0x610 [ 178.798673][ T5709] ? vfs_path_parent_lookup+0x50/0x50 [ 178.804063][ T5709] ? kasan_set_track+0x60/0x70 [ 178.808869][ T5709] ? __virt_addr_valid+0x188/0x540 [ 178.814001][ T5709] filename_create+0xcc/0x450 [ 178.818703][ T5709] ? __might_fault+0xa6/0x120 [ 178.823394][ T5709] ? kern_path_create+0x50/0x50 [ 178.828256][ T5709] ? __virt_addr_valid+0x188/0x540 [ 178.833382][ T5709] ? __virt_addr_valid+0x188/0x540 [ 178.838513][ T5709] do_mknodat+0x16e/0x4c0 [ 178.842851][ T5709] ? __check_object_size+0x500/0xa40 [ 178.848151][ T5709] ? do_o_path+0x1f0/0x1f0 [ 178.852581][ T5709] ? getname_flags+0x206/0x500 [ 178.857449][ T5709] __x64_sys_mknodat+0xa5/0xc0 [ 178.862246][ T5709] do_syscall_64+0x4c/0xa0 [ 178.866673][ T5709] ? clear_bhb_loop+0x60/0xb0 [ 178.871356][ T5709] ? clear_bhb_loop+0x60/0xb0 [ 178.876042][ T5709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.881954][ T5709] RIP: 0033:0x7f612cd8f6c9 [ 178.886379][ T5709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.906005][ T5709] RSP: 002b:00007f612dcd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 178.914435][ T5709] RAX: ffffffffffffffda RBX: 00007f612cfe5fa0 RCX: 00007f612cd8f6c9 [ 178.922603][ T5709] RDX: 00000000000081c0 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 178.930937][ T5709] RBP: 00007f612ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 178.938915][ T5709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.946895][ T5709] R13: 00007f612cfe6038 R14: 00007f612cfe5fa0 R15: 00007fffe967b4c8 [ 178.954893][ T5709] [ 179.432039][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 179.449347][ T14] gspca_stk1135: Sensor write failed [ 179.454819][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 179.940061][ T5714] netlink: 'syz.2.358': attribute type 8 has an invalid length. [ 180.532606][ T14] gspca_stk1135: Sensor write failed [ 180.537966][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 180.544379][ T14] gspca_stk1135: Sensor read failed [ 180.549602][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 180.556023][ T14] gspca_stk1135: Sensor read failed [ 180.561342][ T14] gspca_stk1135: Detected sensor type unknown (0x0) [ 180.568001][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 180.574350][ T14] gspca_stk1135: Sensor read failed [ 180.579625][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 180.586547][ T14] gspca_stk1135: Sensor read failed [ 180.591786][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 180.598451][ T14] gspca_stk1135: Sensor write failed [ 180.605318][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 180.611720][ T14] gspca_stk1135: Sensor write failed [ 180.617043][ T14] stk1135: probe of 1-1:0.255 failed with error -110 [ 180.625803][ T14] usb 1-1: USB disconnect, device number 11 [ 180.829097][ T5721] FAULT_INJECTION: forcing a failure. [ 180.829097][ T5721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.909424][ T5721] CPU: 0 PID: 5721 Comm: syz.1.359 Not tainted syzkaller #0 [ 180.916766][ T5721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.926839][ T5721] Call Trace: [ 180.930130][ T5721] [ 180.933063][ T5721] dump_stack_lvl+0x168/0x22e [ 180.937780][ T5721] ? show_regs_print_info+0x12/0x12 [ 180.943007][ T5721] ? load_image+0x3b0/0x3b0 [ 180.947533][ T5721] ? __lock_acquire+0x7c50/0x7c50 [ 180.952572][ T5721] ? verify_lock_unused+0x140/0x140 [ 180.957788][ T5721] should_fail_ex+0x399/0x4d0 [ 180.962483][ T5721] _copy_from_user+0x2c/0x170 [ 180.967184][ T5721] ___sys_sendmsg+0x155/0x290 [ 180.971882][ T5721] ? __sys_sendmsg+0x270/0x270 [ 180.976667][ T5721] ? __lock_acquire+0x7c50/0x7c50 [ 180.981697][ T5721] ? __fdget+0x17c/0x200 [ 180.985928][ T5721] __se_sys_sendmsg+0x19e/0x270 [ 180.990771][ T5721] ? __x64_sys_sendmsg+0x80/0x80 [ 180.995705][ T5721] ? lockdep_hardirqs_on+0x94/0x140 [ 181.000897][ T5721] do_syscall_64+0x4c/0xa0 [ 181.005315][ T5721] ? clear_bhb_loop+0x60/0xb0 [ 181.009978][ T5721] ? clear_bhb_loop+0x60/0xb0 [ 181.014651][ T5721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.020533][ T5721] RIP: 0033:0x7f132458f6c9 [ 181.024945][ T5721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.044543][ T5721] RSP: 002b:00007f13253b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.052955][ T5721] RAX: ffffffffffffffda RBX: 00007f13247e5fa0 RCX: 00007f132458f6c9 [ 181.060915][ T5721] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 181.068877][ T5721] RBP: 00007f13253b8090 R08: 0000000000000000 R09: 0000000000000000 [ 181.076839][ T5721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.084815][ T5721] R13: 00007f13247e6038 R14: 00007f13247e5fa0 R15: 00007fffd55d3428 [ 181.092821][ T5721] [ 181.176172][ T5724] loop2: detected capacity change from 0 to 256 [ 181.258895][ T5724] exfat: Bad value for 'uid' [ 181.478009][ T4480] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 181.594061][ T129] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 181.626707][ T5025] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 181.674279][ T5740] FAULT_INJECTION: forcing a failure. [ 181.674279][ T5740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.688908][ T5742] netlink: 'syz.1.367': attribute type 1 has an invalid length. [ 181.734048][ T5740] CPU: 0 PID: 5740 Comm: syz.4.365 Not tainted syzkaller #0 [ 181.741388][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.751466][ T5740] Call Trace: [ 181.754753][ T5740] [ 181.757696][ T5740] dump_stack_lvl+0x168/0x22e [ 181.762402][ T5740] ? show_regs_print_info+0x12/0x12 [ 181.767629][ T5740] ? load_image+0x3b0/0x3b0 [ 181.770508][ T5742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.772132][ T5740] ? __lock_acquire+0x7c50/0x7c50 [ 181.783756][ T5740] should_fail_ex+0x399/0x4d0 [ 181.788457][ T5740] _copy_to_iter+0x1cf/0x1030 [ 181.793155][ T5740] ? __lock_acquire+0x7c50/0x7c50 [ 181.798199][ T5740] ? lockdep_hardirqs_on+0x94/0x140 [ 181.803419][ T5740] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 181.809331][ T5740] ? iov_iter_init+0x1f0/0x1f0 [ 181.814113][ T5740] ? __virt_addr_valid+0x188/0x540 [ 181.819329][ T5740] ? __virt_addr_valid+0x465/0x540 [ 181.824459][ T5740] ? __phys_addr_symbol+0x2b/0x70 [ 181.829493][ T5740] ? __check_object_size+0x500/0xa40 [ 181.834804][ T5740] __skb_datagram_iter+0xde/0x740 [ 181.839839][ T5740] ? skb_copy_datagram_iter+0x290/0x290 [ 181.845400][ T5740] skb_copy_datagram_iter+0xd7/0x290 [ 181.850718][ T5740] netlink_recvmsg+0x2bd/0xd90 [ 181.855503][ T5740] ? aa_file_perm+0x117/0xec0 [ 181.860199][ T5740] ? netlink_sendmsg+0xbc0/0xbc0 [ 181.865145][ T5740] ? aa_sk_perm+0x7e5/0x920 [ 181.869661][ T5740] ? aa_af_perm+0x2b0/0x2b0 [ 181.874182][ T5740] ? verify_lock_unused+0x140/0x140 [ 181.879398][ T5740] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 181.884691][ T5740] ? security_socket_recvmsg+0x85/0xb0 [ 181.890166][ T5740] sock_read_iter+0x2bf/0x370 [ 181.894862][ T5740] ? kernel_sock_ip_overhead+0x590/0x590 [ 181.897513][ T5025] usb 4-1: Using ep0 maxpacket: 16 [ 181.900504][ T5740] ? common_file_perm+0x171/0x1c0 [ 181.910644][ T5740] ? fsnotify_perm+0x248/0x550 [ 181.912237][ T5025] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.915462][ T5740] vfs_read+0x434/0x920 [ 181.915494][ T5740] ? kernel_read+0x1e0/0x1e0 [ 181.915515][ T5740] ? __fget_files+0x44a/0x4d0 [ 181.915545][ T5740] ? __fdget_pos+0x1d4/0x360 [ 181.915563][ T5740] ? ksys_read+0x71/0x240 [ 181.915583][ T5740] ksys_read+0x143/0x240 [ 181.915604][ T5740] ? vfs_write+0x960/0x960 [ 181.915626][ T5740] ? lockdep_hardirqs_on+0x94/0x140 [ 181.915650][ T5740] do_syscall_64+0x4c/0xa0 [ 181.915667][ T5740] ? clear_bhb_loop+0x60/0xb0 [ 181.915683][ T5740] ? clear_bhb_loop+0x60/0xb0 [ 181.915701][ T5740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.915718][ T5740] RIP: 0033:0x7f612cd8f6c9 [ 181.915734][ T5740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.915749][ T5740] RSP: 002b:00007f612dcd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.915768][ T5740] RAX: ffffffffffffffda RBX: 00007f612cfe5fa0 RCX: 00007f612cd8f6c9 [ 181.915780][ T5740] RDX: 00000000fffffeb4 RSI: 0000200000000380 RDI: 0000000000000003 [ 181.915791][ T5740] RBP: 00007f612dcd0090 R08: 0000000000000000 R09: 0000000000000000 [ 181.915802][ T5740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.915813][ T5740] R13: 00007f612cfe6038 R14: 00007f612cfe5fa0 R15: 00007fffe967b4c8 [ 181.915838][ T5740] [ 181.940763][ T129] usb 1-1: Using ep0 maxpacket: 16 [ 181.971106][ T5745] bond2: (slave geneve2): making interface the new active one [ 182.072184][ T5025] usb 4-1: config 0 has no interface number 0 [ 182.082886][ T5025] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 182.109312][ T129] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 182.146404][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.176570][ T129] usb 1-1: Product: syz [ 182.190947][ T129] usb 1-1: Manufacturer: syz [ 182.195602][ T129] usb 1-1: SerialNumber: syz [ 182.207053][ T5745] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 182.247374][ T5025] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 182.255015][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 182.263828][ T5025] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.278107][ T5025] usb 4-1: Product: syz [ 182.282347][ T5025] usb 4-1: Manufacturer: syz [ 182.284863][ T129] usb 1-1: config 0 descriptor?? [ 182.287180][ T5025] usb 4-1: SerialNumber: syz [ 182.309790][ T5025] usb 4-1: config 0 descriptor?? [ 182.333120][ T129] s2255 1-1:0.0: Could not find bulk-in endpoint [ 182.351933][ T129] Sensoray 2255 driver load failed: 0xfffffff4 [ 182.372245][ T129] s2255: probe of 1-1:0.0 failed with error -12 [ 182.384262][ T5748] overlayfs: overlapping lowerdir path [ 182.475436][ T5750] netlink: 'syz.1.369': attribute type 1 has an invalid length. [ 182.501966][ T5750] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.514592][ T5750] FAULT_INJECTION: forcing a failure. [ 182.514592][ T5750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.528180][ T5750] CPU: 1 PID: 5750 Comm: syz.1.369 Not tainted syzkaller #0 [ 182.535495][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.545567][ T5750] Call Trace: [ 182.548840][ T5750] [ 182.551760][ T5750] dump_stack_lvl+0x168/0x22e [ 182.556432][ T5750] ? show_regs_print_info+0x12/0x12 [ 182.561621][ T5750] ? load_image+0x3b0/0x3b0 [ 182.566121][ T5750] ? __lock_acquire+0x7c50/0x7c50 [ 182.571136][ T5750] ? verify_lock_unused+0x140/0x140 [ 182.576331][ T5750] should_fail_ex+0x399/0x4d0 [ 182.581010][ T5750] _copy_from_user+0x2c/0x170 [ 182.585685][ T5750] ___sys_sendmsg+0x155/0x290 [ 182.590374][ T5750] ? __sys_sendmsg+0x270/0x270 [ 182.595181][ T5750] ? __lock_acquire+0x7c50/0x7c50 [ 182.600237][ T5750] ? __fdget+0x17c/0x200 [ 182.604495][ T5750] __se_sys_sendmsg+0x19e/0x270 [ 182.609353][ T5750] ? __x64_sys_sendmsg+0x80/0x80 [ 182.614303][ T5750] ? lockdep_hardirqs_on+0x94/0x140 [ 182.619495][ T5750] do_syscall_64+0x4c/0xa0 [ 182.623898][ T5750] ? clear_bhb_loop+0x60/0xb0 [ 182.628561][ T5750] ? clear_bhb_loop+0x60/0xb0 [ 182.633229][ T5750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.639116][ T5750] RIP: 0033:0x7f132458f6c9 [ 182.643517][ T5750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.663114][ T5750] RSP: 002b:00007f13253b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.671522][ T5750] RAX: ffffffffffffffda RBX: 00007f13247e5fa0 RCX: 00007f132458f6c9 [ 182.679480][ T5750] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 182.687437][ T5750] RBP: 00007f13253b8090 R08: 0000000000000000 R09: 0000000000000000 [ 182.695396][ T5750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.703361][ T5750] R13: 00007f13247e6038 R14: 00007f13247e5fa0 R15: 00007fffd55d3428 [ 182.711331][ T5750] [ 182.748029][ T5025] usb 4-1: USB disconnect, device number 5 [ 182.869504][ T7] usb 1-1: USB disconnect, device number 12 [ 182.957799][ T5757] loop1: detected capacity change from 0 to 512 [ 183.049683][ T5757] FAT-fs (loop1): Unrecognized mount option "{/" or missing value [ 183.149156][ T5763] FAULT_INJECTION: forcing a failure. [ 183.149156][ T5763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.163763][ T5757] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 183.191959][ T5763] CPU: 1 PID: 5763 Comm: syz.4.373 Not tainted syzkaller #0 [ 183.199306][ T5763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.209377][ T5763] Call Trace: [ 183.212668][ T5763] [ 183.215613][ T5763] dump_stack_lvl+0x168/0x22e [ 183.220315][ T5763] ? show_regs_print_info+0x12/0x12 [ 183.225534][ T5763] ? load_image+0x3b0/0x3b0 [ 183.230107][ T5763] ? __lock_acquire+0x7c50/0x7c50 [ 183.235155][ T5763] ? verify_lock_unused+0x140/0x140 [ 183.240375][ T5763] should_fail_ex+0x399/0x4d0 [ 183.245094][ T5763] _copy_from_user+0x2c/0x170 [ 183.249799][ T5763] ___sys_sendmsg+0x155/0x290 [ 183.254533][ T5763] ? __sys_sendmsg+0x270/0x270 [ 183.259307][ T5763] ? __lock_acquire+0x7c50/0x7c50 [ 183.264335][ T5763] ? __fdget+0x17c/0x200 [ 183.268574][ T5763] __se_sys_sendmsg+0x19e/0x270 [ 183.273420][ T5763] ? __x64_sys_sendmsg+0x80/0x80 [ 183.278355][ T5763] ? lockdep_hardirqs_on+0x94/0x140 [ 183.283547][ T5763] do_syscall_64+0x4c/0xa0 [ 183.287951][ T5763] ? clear_bhb_loop+0x60/0xb0 [ 183.292614][ T5763] ? clear_bhb_loop+0x60/0xb0 [ 183.297286][ T5763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.303168][ T5763] RIP: 0033:0x7f612cd8f6c9 [ 183.307572][ T5763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.327690][ T5763] RSP: 002b:00007f612dcd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.336092][ T5763] RAX: ffffffffffffffda RBX: 00007f612cfe5fa0 RCX: 00007f612cd8f6c9 [ 183.344054][ T5763] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 183.352012][ T5763] RBP: 00007f612dcd0090 R08: 0000000000000000 R09: 0000000000000000 [ 183.359978][ T5763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.367946][ T5763] R13: 00007f612cfe6038 R14: 00007f612cfe5fa0 R15: 00007fffe967b4c8 [ 183.375916][ T5763] [ 183.381320][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 183.387407][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 183.387596][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 183.393775][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 183.399663][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 183.429458][ T5757] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.576792][ T4344] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 183.966868][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 183.997643][ T4344] usb 1-1: Using ep0 maxpacket: 32 [ 184.005903][ T4344] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 184.014593][ T4344] usb 1-1: config 0 has no interface number 0 [ 184.020710][ T4344] usb 1-1: too many endpoints for config 0 interface 255 altsetting 213: 81, using maximum allowed: 30 [ 184.033693][ T4344] usb 1-1: config 0 interface 255 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 184.047672][ T4344] usb 1-1: config 0 interface 255 has no altsetting 0 [ 184.065021][ T4344] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 184.085079][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.093459][ T4344] usb 1-1: Product: syz [ 184.098489][ T4344] usb 1-1: Manufacturer: syz [ 184.103100][ T4344] usb 1-1: SerialNumber: syz [ 184.104784][ T5777] tipc: Started in network mode [ 184.109715][ T4344] usb 1-1: config 0 descriptor?? [ 184.122612][ T4344] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 184.130074][ T5777] tipc: Node identity 1a30ffd6c82b, cluster identity 4711 [ 184.138304][ T5777] tipc: Enabled bearer , priority 0 [ 184.148700][ T5778] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 184.164616][ T5778] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 184.171589][ T5777] device syzkaller0 entered promiscuous mode [ 184.183637][ T5778] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 184.190265][ T5778] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 184.206628][ T5778] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 184.222741][ T5778] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 184.229798][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.230677][ T5778] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 184.249200][ T5778] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 184.255832][ T5778] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 184.257288][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.263018][ T5778] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 184.279295][ T5778] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 184.288285][ T5778] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 184.295348][ T5778] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 184.302104][ T5778] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 184.304182][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.310753][ T5778] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 184.331243][ T5778] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 184.391223][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.417856][ T5778] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 184.467286][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.528319][ T5778] comedi comedi3: 8255: I/O port conflict (0xffffffffffffcadb,4) [ 184.586560][ T7] usb 4-1: config 0 descriptor?? [ 184.708261][ T4344] gspca_stk1135: reg_w 0x2 err -110 [ 184.813500][ T5785] tipc: Resetting bearer [ 184.932804][ T5778] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 185.214662][ T7] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 185.318684][ T7] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 185.724277][ T7] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 185.778074][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 186.011564][ T7] usb 4-1: USB disconnect, device number 6 [ 186.174598][ T129] tipc: Node number set to 3525050326 [ 186.377527][ T4344] gspca_stk1135: Sensor write failed [ 186.383450][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 186.389835][ T4344] gspca_stk1135: Sensor write failed [ 186.395898][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 186.402267][ T4344] gspca_stk1135: Sensor read failed [ 186.407884][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 186.414258][ T4344] gspca_stk1135: Sensor read failed [ 186.419861][ T4344] gspca_stk1135: Detected sensor type unknown (0x0) [ 186.426765][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 186.433158][ T4344] gspca_stk1135: Sensor read failed [ 186.438725][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 186.445129][ T4344] gspca_stk1135: Sensor read failed [ 186.450881][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 186.457316][ T4344] gspca_stk1135: Sensor write failed [ 186.466609][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 186.477516][ T4344] gspca_stk1135: Sensor write failed [ 186.512825][ T4344] stk1135: probe of 1-1:0.255 failed with error -110 [ 186.549224][ T5788] fido_id[5788]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 186.642383][ T4482] usb 1-1: USB disconnect, device number 13 [ 186.709267][ T5776] tipc: Resetting bearer [ 186.781309][ T5776] tipc: Disabling bearer [ 187.033330][ T5790] tipc: Started in network mode [ 187.038451][ T5790] tipc: Node identity 1a595e025aa3, cluster identity 4711 [ 187.093209][ T5790] tipc: Enabled bearer , priority 0 [ 187.139367][ T5798] device syzkaller0 entered promiscuous mode [ 187.237790][ T5800] device syzkaller0 entered promiscuous mode [ 187.326166][ T5798] FAULT_INJECTION: forcing a failure. [ 187.326166][ T5798] name failslab, interval 1, probability 0, space 0, times 0 [ 187.452079][ T5798] CPU: 0 PID: 5798 Comm: syz.2.381 Not tainted syzkaller #0 [ 187.459419][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.469497][ T5798] Call Trace: [ 187.472880][ T5798] [ 187.475823][ T5798] dump_stack_lvl+0x168/0x22e [ 187.480520][ T5798] ? show_regs_print_info+0x12/0x12 [ 187.485730][ T5798] ? load_image+0x3b0/0x3b0 [ 187.490252][ T5798] ? __might_sleep+0xd0/0xd0 [ 187.494855][ T5798] ? __lock_acquire+0x7c50/0x7c50 [ 187.499916][ T5798] should_fail_ex+0x399/0x4d0 [ 187.504623][ T5798] should_failslab+0x5/0x20 [ 187.509155][ T5798] slab_pre_alloc_hook+0x59/0x310 [ 187.514192][ T5798] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 187.519926][ T5798] __kmem_cache_alloc_node+0x4f/0x260 [ 187.525313][ T5798] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 187.531044][ T5798] __kmalloc+0xa0/0x240 [ 187.535215][ T5798] tomoyo_realpath_from_path+0xdf/0x5d0 [ 187.540791][ T5798] tomoyo_path_number_perm+0x1e3/0x600 [ 187.546259][ T5798] ? tomoyo_path_number_perm+0x1b6/0x600 [ 187.551905][ T5798] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 187.557373][ T5798] ? ksys_write+0x1bd/0x240 [ 187.561905][ T5798] ? common_file_perm+0x171/0x1c0 [ 187.566975][ T5798] ? __fget_files+0x28/0x4d0 [ 187.571583][ T5798] security_file_ioctl+0x6c/0xa0 [ 187.576545][ T5798] __se_sys_ioctl+0x48/0x170 [ 187.581155][ T5798] do_syscall_64+0x4c/0xa0 [ 187.585580][ T5798] ? clear_bhb_loop+0x60/0xb0 [ 187.590268][ T5798] ? clear_bhb_loop+0x60/0xb0 [ 187.594953][ T5798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.600876][ T5798] RIP: 0033:0x7ffacc98f6c9 [ 187.605302][ T5798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.624931][ T5798] RSP: 002b:00007ffacd80d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.633360][ T5798] RAX: ffffffffffffffda RBX: 00007ffaccbe6090 RCX: 00007ffacc98f6c9 [ 187.641341][ T5798] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 187.649321][ T5798] RBP: 00007ffacd80d090 R08: 0000000000000000 R09: 0000000000000000 [ 187.657298][ T5798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.665278][ T5798] R13: 00007ffaccbe6128 R14: 00007ffaccbe6090 R15: 00007ffd2b4820a8 [ 187.673270][ T5798] [ 187.721837][ T5798] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.774551][ T5809] FAULT_INJECTION: forcing a failure. [ 187.774551][ T5809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.787944][ T5809] CPU: 1 PID: 5809 Comm: syz.1.387 Not tainted syzkaller #0 [ 187.795346][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.798002][ T5807] loop0: detected capacity change from 0 to 256 [ 187.805925][ T5809] Call Trace: [ 187.805940][ T5809] [ 187.805948][ T5809] dump_stack_lvl+0x168/0x22e [ 187.805975][ T5809] ? show_regs_print_info+0x12/0x12 [ 187.805991][ T5809] ? load_image+0x3b0/0x3b0 [ 187.806013][ T5809] ? __lock_acquire+0x7c50/0x7c50 [ 187.806031][ T5809] ? verify_lock_unused+0x140/0x140 [ 187.806052][ T5809] should_fail_ex+0x399/0x4d0 [ 187.806075][ T5809] _copy_from_user+0x2c/0x170 [ 187.806093][ T5809] ___sys_sendmsg+0x155/0x290 [ 187.806116][ T5809] ? __sys_sendmsg+0x270/0x270 [ 187.806152][ T5809] ? __lock_acquire+0x7c50/0x7c50 [ 187.806186][ T5809] ? __fdget+0x17c/0x200 [ 187.806208][ T5809] __se_sys_sendmsg+0x19e/0x270 [ 187.806229][ T5809] ? __x64_sys_sendmsg+0x80/0x80 [ 187.806261][ T5809] ? lockdep_hardirqs_on+0x94/0x140 [ 187.806282][ T5809] do_syscall_64+0x4c/0xa0 [ 187.890618][ T5809] ? clear_bhb_loop+0x60/0xb0 [ 187.895291][ T5809] ? clear_bhb_loop+0x60/0xb0 [ 187.899959][ T5809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.905844][ T5809] RIP: 0033:0x7f132458f6c9 [ 187.910251][ T5809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.929863][ T5809] RSP: 002b:00007f13253b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.938271][ T5809] RAX: ffffffffffffffda RBX: 00007f13247e5fa0 RCX: 00007f132458f6c9 [ 187.946235][ T5809] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 187.954194][ T5809] RBP: 00007f13253b8090 R08: 0000000000000000 R09: 0000000000000000 [ 187.962152][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.970110][ T5809] R13: 00007f13247e6038 R14: 00007f13247e5fa0 R15: 00007fffd55d3428 [ 187.978086][ T5809] [ 187.997837][ T5807] exfat: Unknown parameter '18446744073709551615000000000000000000030x00000000000000032e@H_+EsY1}#:/&˻egO)x)̵s9wB&tCkicWm`nASӷ@ل}X "%$ gYŦ]G98' [ 188.112303][ T5798] tipc: Resetting bearer [ 188.193571][ T5789] tipc: Resetting bearer [ 188.250317][ T5789] tipc: Disabling bearer [ 188.449747][ T5820] loop4: detected capacity change from 0 to 4096 [ 188.489066][ T5820] __ntfs_error: 1 callbacks suppressed [ 188.489080][ T5820] ntfs: (device loop4): parse_options(): Unrecognized mount option brq"j(G3AF\ڍ*/7d?5ۙ%tm--QlDvG1844674407370955161500000000000000000000003000000000000000000000030x0000000000000000. [ 188.621273][ T22] tipc: Node number set to 1090149890 [ 188.696440][ T5822] tipc: Enabled bearer , priority 0 [ 188.758305][ T5831] tipc: Enabling of bearer rejected, failed to enable media [ 188.786859][ T5813] tipc: Resetting bearer [ 188.901065][ T5835] device team_slave_0 entered promiscuous mode [ 188.909408][ T5835] device team_slave_1 entered promiscuous mode [ 188.941461][ T5835] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.949224][ T5825] device syzkaller0 entered promiscuous mode [ 188.976861][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 188.995465][ T5812] tipc: Resetting bearer [ 189.066731][ T5812] tipc: Disabling bearer [ 189.078513][ T5844] FAULT_INJECTION: forcing a failure. [ 189.078513][ T5844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.092650][ T5844] CPU: 0 PID: 5844 Comm: syz.1.397 Not tainted syzkaller #0 [ 189.099971][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.110045][ T5844] Call Trace: [ 189.113323][ T5844] [ 189.116243][ T5844] dump_stack_lvl+0x168/0x22e [ 189.120920][ T5844] ? show_regs_print_info+0x12/0x12 [ 189.126110][ T5844] ? load_image+0x3b0/0x3b0 [ 189.130606][ T5844] ? __lock_acquire+0x7c50/0x7c50 [ 189.135625][ T5844] ? vfs_write+0x56f/0x960 [ 189.140039][ T5844] should_fail_ex+0x399/0x4d0 [ 189.144719][ T5844] _copy_from_user+0x2c/0x170 [ 189.149388][ T5844] rose_setsockopt+0x18e/0x4b0 [ 189.154148][ T5844] ? rose_listen+0x1f0/0x1f0 [ 189.158733][ T5844] ? aa_sock_opt_perm+0x74/0x100 [ 189.163661][ T5844] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 189.169190][ T5844] ? security_socket_setsockopt+0x7a/0xa0 [ 189.174904][ T5844] ? rose_listen+0x1f0/0x1f0 [ 189.179486][ T5844] __sys_setsockopt+0x2bf/0x3d0 [ 189.184332][ T5844] __x64_sys_setsockopt+0xb1/0xc0 [ 189.189356][ T5844] do_syscall_64+0x4c/0xa0 [ 189.193763][ T5844] ? clear_bhb_loop+0x60/0xb0 [ 189.198448][ T5844] ? clear_bhb_loop+0x60/0xb0 [ 189.203115][ T5844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.208997][ T5844] RIP: 0033:0x7f132458f6c9 [ 189.213401][ T5844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.232997][ T5844] RSP: 002b:00007f13253b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 189.241398][ T5844] RAX: ffffffffffffffda RBX: 00007f13247e5fa0 RCX: 00007f132458f6c9 [ 189.249358][ T5844] RDX: 0000000000000004 RSI: 0000000000000104 RDI: 0000000000000004 [ 189.257324][ T5844] RBP: 00007f13253b8090 R08: 0000000000000004 R09: 0000000000000000 [ 189.265287][ T5844] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 189.273246][ T5844] R13: 00007f13247e6038 R14: 00007f13247e5fa0 R15: 00007fffd55d3428 [ 189.281215][ T5844] [ 189.362204][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 189.580012][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 189.590847][ T7] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 189.599067][ T7] usb 5-1: config 0 has no interface number 0 [ 189.661142][ T7] usb 5-1: too many endpoints for config 0 interface 255 altsetting 213: 81, using maximum allowed: 30 [ 189.705980][ T7] usb 5-1: config 0 interface 255 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 189.746813][ T7] usb 5-1: config 0 interface 255 has no altsetting 0 [ 189.777631][ T7] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 189.825074][ T5867] FAULT_INJECTION: forcing a failure. [ 189.825074][ T5867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.842885][ T5867] CPU: 1 PID: 5867 Comm: syz.0.404 Not tainted syzkaller #0 [ 189.850228][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.860296][ T5867] Call Trace: [ 189.863583][ T5867] [ 189.866522][ T5867] dump_stack_lvl+0x168/0x22e [ 189.871211][ T5867] ? show_regs_print_info+0x12/0x12 [ 189.876425][ T5867] ? load_image+0x3b0/0x3b0 [ 189.880944][ T5867] ? __lock_acquire+0x7c50/0x7c50 [ 189.885981][ T5867] ? verify_lock_unused+0x140/0x140 [ 189.891192][ T5867] should_fail_ex+0x399/0x4d0 [ 189.895886][ T5867] _copy_from_user+0x2c/0x170 [ 189.900575][ T5867] ___sys_sendmsg+0x155/0x290 [ 189.905266][ T5867] ? __sys_sendmsg+0x270/0x270 [ 189.910055][ T5867] ? __lock_acquire+0x7c50/0x7c50 [ 189.915105][ T5867] ? __fdget+0x17c/0x200 [ 189.919358][ T5867] __se_sys_sendmsg+0x19e/0x270 [ 189.924222][ T5867] ? __x64_sys_sendmsg+0x80/0x80 [ 189.929178][ T5867] ? lockdep_hardirqs_on+0x94/0x140 [ 189.934406][ T5867] do_syscall_64+0x4c/0xa0 [ 189.938845][ T5867] ? clear_bhb_loop+0x60/0xb0 [ 189.943550][ T5867] ? clear_bhb_loop+0x60/0xb0 [ 189.948240][ T5867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.954143][ T5867] RIP: 0033:0x7fc58e58f6c9 [ 189.958571][ T5867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.978192][ T5867] RSP: 002b:00007fc58f497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.986619][ T5867] RAX: ffffffffffffffda RBX: 00007fc58e7e5fa0 RCX: 00007fc58e58f6c9 [ 189.994607][ T5867] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 190.002591][ T5867] RBP: 00007fc58f497090 R08: 0000000000000000 R09: 0000000000000000 [ 190.010606][ T5867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.018596][ T5867] R13: 00007fc58e7e6038 R14: 00007fc58e7e5fa0 R15: 00007ffdd16123b8 [ 190.026598][ T5867] [ 190.031594][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.040015][ T7] usb 5-1: Product: syz [ 190.152430][ T7] usb 5-1: Manufacturer: syz [ 190.157254][ T7] usb 5-1: SerialNumber: syz [ 190.207012][ T7] usb 5-1: config 0 descriptor?? [ 190.217553][ T7] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 190.265986][ T5872] 9pnet_fd: Insufficient options for proto=fd [ 190.771217][ T7] gspca_stk1135: reg_w 0x2 err -110 [ 190.777561][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 191.290797][ T5870] loop1: detected capacity change from 0 to 4096 [ 193.253567][ T7] gspca_stk1135: Sensor write failed [ 193.259681][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 193.266486][ T7] gspca_stk1135: Sensor write failed [ 193.271875][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 193.278540][ T7] gspca_stk1135: Sensor read failed [ 193.283871][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 193.290472][ T7] gspca_stk1135: Sensor read failed [ 193.295893][ T7] gspca_stk1135: Detected sensor type unknown (0x0) [ 193.303288][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 193.309875][ T7] gspca_stk1135: Sensor read failed [ 193.315198][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 193.321770][ T7] gspca_stk1135: Sensor read failed [ 193.327090][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 193.333668][ T7] gspca_stk1135: Sensor write failed [ 193.339298][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 193.346102][ T7] gspca_stk1135: Sensor write failed [ 193.351656][ T7] stk1135: probe of 5-1:0.255 failed with error -110 [ 193.416765][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 193.580286][ T4324] usb 5-1: USB disconnect, device number 7 [ 193.686426][ T5883] FAULT_INJECTION: forcing a failure. [ 193.686426][ T5883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.735032][ T5887] loop1: detected capacity change from 0 to 512 [ 193.741901][ T5883] CPU: 1 PID: 5883 Comm: syz.2.408 Not tainted syzkaller #0 [ 193.749236][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.759317][ T5883] Call Trace: [ 193.762615][ T5883] [ 193.765555][ T5883] dump_stack_lvl+0x168/0x22e [ 193.770263][ T5883] ? show_regs_print_info+0x12/0x12 [ 193.775498][ T5883] ? load_image+0x3b0/0x3b0 [ 193.779245][ T5887] EXT4-fs: quotafile must be on filesystem root [ 193.780026][ T5883] ? __lock_acquire+0x7c50/0x7c50 [ 193.791298][ T5883] ? verify_lock_unused+0x140/0x140 [ 193.796527][ T5883] should_fail_ex+0x399/0x4d0 [ 193.801235][ T5883] _copy_from_user+0x2c/0x170 [ 193.805941][ T5883] ___sys_sendmsg+0x155/0x290 [ 193.810646][ T5883] ? __sys_sendmsg+0x270/0x270 [ 193.815453][ T5883] ? __lock_acquire+0x7c50/0x7c50 [ 193.820538][ T5883] ? __fdget+0x17c/0x200 [ 193.824801][ T5883] __se_sys_sendmsg+0x19e/0x270 [ 193.829679][ T5883] ? __x64_sys_sendmsg+0x80/0x80 [ 193.834656][ T5883] ? lockdep_hardirqs_on+0x94/0x140 [ 193.839895][ T5883] do_syscall_64+0x4c/0xa0 [ 193.844329][ T5883] ? clear_bhb_loop+0x60/0xb0 [ 193.849028][ T5883] ? clear_bhb_loop+0x60/0xb0 [ 193.853741][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.859651][ T5883] RIP: 0033:0x7ffacc98f6c9 [ 193.864080][ T5883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.883713][ T5883] RSP: 002b:00007ffacd82e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.892601][ T5883] RAX: ffffffffffffffda RBX: 00007ffaccbe5fa0 RCX: 00007ffacc98f6c9 [ 193.900685][ T5883] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 193.908678][ T5883] RBP: 00007ffacd82e090 R08: 0000000000000000 R09: 0000000000000000 [ 193.916670][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.924666][ T5883] R13: 00007ffaccbe6038 R14: 00007ffaccbe5fa0 R15: 00007ffd2b4820a8 [ 193.932674][ T5883] [ 193.945253][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 193.961998][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 194.172655][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 194.181500][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 194.216785][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 194.243110][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.273513][ T7] usb 1-1: Product: syz [ 194.277730][ T7] usb 1-1: Manufacturer: syz [ 194.302786][ T7] usb 1-1: SerialNumber: syz [ 194.317189][ T5881] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.431139][ T5896] FAULT_INJECTION: forcing a failure. [ 194.431139][ T5896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.510766][ T5896] CPU: 0 PID: 5896 Comm: syz.2.413 Not tainted syzkaller #0 [ 194.518206][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.528283][ T5896] Call Trace: [ 194.531579][ T5896] [ 194.534532][ T5896] dump_stack_lvl+0x168/0x22e [ 194.539234][ T5896] ? show_regs_print_info+0x12/0x12 [ 194.544461][ T5896] ? load_image+0x3b0/0x3b0 [ 194.548993][ T5896] ? __lock_acquire+0x7c50/0x7c50 [ 194.554050][ T5896] should_fail_ex+0x399/0x4d0 [ 194.558754][ T5896] _copy_from_user+0x2c/0x170 [ 194.563456][ T5896] __sys_connect+0x132/0x410 [ 194.568096][ T5896] ? __sys_connect_file+0x170/0x170 [ 194.573326][ T5896] __x64_sys_connect+0x76/0x80 [ 194.578144][ T5896] do_syscall_64+0x4c/0xa0 [ 194.582579][ T5896] ? clear_bhb_loop+0x60/0xb0 [ 194.587278][ T5896] ? clear_bhb_loop+0x60/0xb0 [ 194.591984][ T5896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.597891][ T5896] RIP: 0033:0x7ffacc98f6c9 [ 194.602319][ T5896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.621953][ T5896] RSP: 002b:00007ffacd80d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 194.630388][ T5896] RAX: ffffffffffffffda RBX: 00007ffaccbe6090 RCX: 00007ffacc98f6c9 [ 194.638383][ T5896] RDX: 0000000000000010 RSI: 0000200000000600 RDI: 0000000000000004 [ 194.646373][ T5896] RBP: 00007ffacd80d090 R08: 0000000000000000 R09: 0000000000000000 [ 194.654361][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.662346][ T5896] R13: 00007ffaccbe6128 R14: 00007ffaccbe6090 R15: 00007ffd2b4820a8 [ 194.670435][ T5896] [ 194.689484][ T5881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.737431][ T5881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.758939][ T7] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 194.780241][ T5881] loop0: detected capacity change from 0 to 64 [ 194.811641][ T7] usb 1-1: USB disconnect, device number 14 [ 194.822770][ T5881] hfs: unable to read volume bitmap [ 194.829879][ T5881] hfs: can't find a HFS filesystem on dev loop0 [ 194.848910][ T7] usblp0: removed [ 195.411095][ T5909] tipc: Enabled bearer , priority 0 [ 195.446178][ T5909] device syzkaller0 entered promiscuous mode [ 195.641957][ T5914] tipc: Enabled bearer , priority 0 [ 195.682289][ T5914] device syzkaller0 entered promiscuous mode [ 195.713531][ T5914] FAULT_INJECTION: forcing a failure. [ 195.713531][ T5914] name failslab, interval 1, probability 0, space 0, times 0 [ 195.727196][ T5914] CPU: 1 PID: 5914 Comm: syz.2.419 Not tainted syzkaller #0 [ 195.734511][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.739180][ T5909] tipc: Resetting bearer [ 195.744559][ T5914] Call Trace: [ 195.744568][ T5914] [ 195.744575][ T5914] dump_stack_lvl+0x168/0x22e [ 195.744601][ T5914] ? show_regs_print_info+0x12/0x12 [ 195.744618][ T5914] ? load_image+0x3b0/0x3b0 [ 195.744641][ T5914] ? __might_sleep+0xd0/0xd0 [ 195.744662][ T5914] ? __lock_acquire+0x7c50/0x7c50 [ 195.744686][ T5914] should_fail_ex+0x399/0x4d0 [ 195.744711][ T5914] should_failslab+0x5/0x20 [ 195.744729][ T5914] slab_pre_alloc_hook+0x59/0x310 [ 195.744745][ T5914] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 195.800549][ T5914] __kmem_cache_alloc_node+0x4f/0x260 [ 195.805922][ T5914] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 195.811718][ T5914] __kmalloc+0xa0/0x240 [ 195.815871][ T5914] tomoyo_realpath_from_path+0xdf/0x5d0 [ 195.821417][ T5914] tomoyo_path_number_perm+0x1e3/0x600 [ 195.826870][ T5914] ? tomoyo_path_number_perm+0x1b6/0x600 [ 195.832492][ T5914] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 195.837941][ T5914] ? ksys_write+0x1bd/0x240 [ 195.842440][ T5914] ? common_file_perm+0x171/0x1c0 [ 195.847480][ T5914] ? __fget_files+0x28/0x4d0 [ 195.852074][ T5914] security_file_ioctl+0x6c/0xa0 [ 195.857031][ T5914] __se_sys_ioctl+0x48/0x170 [ 195.861617][ T5914] do_syscall_64+0x4c/0xa0 [ 195.866019][ T5914] ? clear_bhb_loop+0x60/0xb0 [ 195.870684][ T5914] ? clear_bhb_loop+0x60/0xb0 [ 195.875349][ T5914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.881226][ T5914] RIP: 0033:0x7ffacc98f6c9 [ 195.885626][ T5914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.905222][ T5914] RSP: 002b:00007ffacd82e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.913633][ T5914] RAX: ffffffffffffffda RBX: 00007ffaccbe5fa0 RCX: 00007ffacc98f6c9 [ 195.921601][ T5914] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 195.929587][ T5914] RBP: 00007ffacd82e090 R08: 0000000000000000 R09: 0000000000000000 [ 195.937570][ T5914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.945552][ T5914] R13: 00007ffaccbe6038 R14: 00007ffaccbe5fa0 R15: 00007ffd2b4820a8 [ 195.953536][ T5914] [ 195.962562][ T5914] ERROR: Out of memory at tomoyo_realpath_from_path. [ 195.993176][ T5908] tipc: Resetting bearer [ 196.030909][ T5916] loop4: detected capacity change from 0 to 128 [ 196.039226][ T5908] tipc: Disabling bearer [ 196.062593][ T5914] tipc: Resetting bearer [ 196.085142][ T5916] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 196.117776][ T5913] tipc: Resetting bearer [ 196.124376][ T5916] hpfs: filesystem error: improperly stopped [ 196.148758][ T5916] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 196.169897][ T5916] hpfs: You really don't want any checks? You are crazy... [ 196.187915][ T5916] hpfs: hpfs_map_sector(): read error [ 196.203254][ T5916] hpfs: code page support is disabled [ 196.210774][ T5916] hpfs: hpfs_map_4sectors(): unaligned read [ 196.212053][ T5913] tipc: Disabling bearer [ 196.217160][ T5916] hpfs: hpfs_map_4sectors(): unaligned read [ 196.231131][ T5916] hpfs: filesystem error: unable to find root dir [ 196.246741][ T5916] hpfs: hpfs_map_4sectors(): unaligned read [ 196.257001][ T5916] hpfs: hpfs_map_sector(): read error [ 196.262576][ T5918] tipc: Enabled bearer , priority 0 [ 196.280985][ T5916] hpfs: hpfs_map_4sectors(): unaligned read [ 196.288090][ T5924] device syzkaller0 entered promiscuous mode [ 196.298336][ T5916] hpfs: hpfs_map_sector(): read error [ 196.372008][ T126] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 196.380198][ T5917] tipc: Resetting bearer [ 196.463858][ T5929] loop4: detected capacity change from 0 to 1764 [ 196.478388][ T5917] tipc: Disabling bearer [ 196.508892][ T5930] FAULT_INJECTION: forcing a failure. [ 196.508892][ T5930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.523884][ T4377] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.543288][ T5930] CPU: 1 PID: 5930 Comm: syz.2.425 Not tainted syzkaller #0 [ 196.545010][ T5932] 9pnet_virtio: no channels available for device syz [ 196.550611][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.550621][ T5930] Call Trace: [ 196.550627][ T5930] [ 196.550634][ T5930] dump_stack_lvl+0x168/0x22e [ 196.550658][ T5930] ? show_regs_print_info+0x12/0x12 [ 196.550675][ T5930] ? load_image+0x3b0/0x3b0 [ 196.550696][ T5930] ? __lock_acquire+0x7c50/0x7c50 [ 196.550714][ T5930] ? verify_lock_unused+0x140/0x140 [ 196.550736][ T5930] should_fail_ex+0x399/0x4d0 [ 196.550761][ T5930] _copy_from_user+0x2c/0x170 [ 196.550779][ T5930] ___sys_sendmsg+0x155/0x290 [ 196.550800][ T5930] ? __sys_sendmsg+0x270/0x270 [ 196.550831][ T5930] ? __lock_acquire+0x7c50/0x7c50 [ 196.622230][ T5930] ? __fdget+0x17c/0x200 [ 196.626493][ T5930] __se_sys_sendmsg+0x19e/0x270 [ 196.631366][ T5930] ? __x64_sys_sendmsg+0x80/0x80 [ 196.636354][ T5930] ? lockdep_hardirqs_on+0x94/0x140 [ 196.641577][ T5930] do_syscall_64+0x4c/0xa0 [ 196.646014][ T5930] ? clear_bhb_loop+0x60/0xb0 [ 196.650689][ T5930] ? clear_bhb_loop+0x60/0xb0 [ 196.655356][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.661256][ T5930] RIP: 0033:0x7ffacc98f6c9 [ 196.665660][ T5930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.685266][ T5930] RSP: 002b:00007ffacd80d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.693673][ T5930] RAX: ffffffffffffffda RBX: 00007ffaccbe6090 RCX: 00007ffacc98f6c9 [ 196.701630][ T5930] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 196.709588][ T5930] RBP: 00007ffacd80d090 R08: 0000000000000000 R09: 0000000000000000 [ 196.717549][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.725505][ T5930] R13: 00007ffaccbe6128 R14: 00007ffaccbe6090 R15: 00007ffd2b4820a8 [ 196.733476][ T5930] [ 196.783774][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 196.791172][ T126] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 196.811941][ T126] usb 1-1: config 0 has no interface number 0 [ 196.829237][ T126] usb 1-1: too many endpoints for config 0 interface 255 altsetting 213: 81, using maximum allowed: 30 [ 196.881782][ T126] usb 1-1: config 0 interface 255 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 196.925299][ T126] usb 1-1: config 0 interface 255 has no altsetting 0 [ 196.947528][ T126] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 197.263030][ T5959] FAULT_INJECTION: forcing a failure. [ 197.263030][ T5959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.327362][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.336591][ T126] usb 1-1: Product: syz [ 197.340790][ T126] usb 1-1: Manufacturer: syz [ 197.345787][ T126] usb 1-1: SerialNumber: syz [ 197.352017][ T5959] CPU: 1 PID: 5959 Comm: syz.2.430 Not tainted syzkaller #0 [ 197.359343][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.369503][ T5959] Call Trace: [ 197.372788][ T5959] [ 197.375738][ T5959] dump_stack_lvl+0x168/0x22e [ 197.380438][ T5959] ? show_regs_print_info+0x12/0x12 [ 197.385658][ T5959] ? load_image+0x3b0/0x3b0 [ 197.390198][ T5959] ? __lock_acquire+0x7c50/0x7c50 [ 197.395242][ T5959] ? snprintf+0xd7/0x120 [ 197.399504][ T5959] should_fail_ex+0x399/0x4d0 [ 197.404206][ T5959] _copy_to_user+0x2c/0x130 [ 197.408739][ T5959] simple_read_from_buffer+0xe3/0x150 [ 197.414133][ T5959] proc_fail_nth_read+0x19a/0x210 [ 197.419173][ T5959] ? proc_fault_inject_write+0x2f0/0x2f0 [ 197.424825][ T5959] ? fsnotify_perm+0x248/0x550 [ 197.429607][ T5959] ? proc_fault_inject_write+0x2f0/0x2f0 [ 197.435258][ T5959] vfs_read+0x2c0/0x920 [ 197.439443][ T5959] ? kernel_read+0x1e0/0x1e0 [ 197.444058][ T5959] ? __fget_files+0x28/0x4d0 [ 197.448657][ T5959] ? __fget_files+0x44a/0x4d0 [ 197.453345][ T5959] ? __fdget_pos+0x2ae/0x360 [ 197.457937][ T5959] ? ksys_read+0x71/0x240 [ 197.462265][ T5959] ksys_read+0x143/0x240 [ 197.466501][ T5959] ? vfs_write+0x960/0x960 [ 197.470915][ T5959] ? lockdep_hardirqs_on+0x94/0x140 [ 197.476109][ T5959] do_syscall_64+0x4c/0xa0 [ 197.480720][ T5959] ? clear_bhb_loop+0x60/0xb0 [ 197.485386][ T5959] ? clear_bhb_loop+0x60/0xb0 [ 197.490050][ T5959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.495941][ T5959] RIP: 0033:0x7ffacc98e0dc [ 197.500343][ T5959] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.519936][ T5959] RSP: 002b:00007ffacd80d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.528339][ T5959] RAX: ffffffffffffffda RBX: 00007ffaccbe6090 RCX: 00007ffacc98e0dc [ 197.536386][ T5959] RDX: 000000000000000f RSI: 00007ffacd80d0a0 RDI: 0000000000000005 [ 197.544345][ T5959] RBP: 00007ffacd80d090 R08: 0000000000000000 R09: 0000000000000000 [ 197.552307][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.560266][ T5959] R13: 00007ffaccbe6128 R14: 00007ffaccbe6090 R15: 00007ffd2b4820a8 [ 197.568238][ T5959] [ 197.573139][ T126] usb 1-1: config 0 descriptor?? [ 197.593411][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.599830][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.606566][ T126] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 197.744333][ T52] block nbd4: Attempted send on invalid socket [ 197.752354][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.771440][ T5962] efs: cannot read volume header [ 198.162280][ T5973] FAULT_INJECTION: forcing a failure. [ 198.162280][ T5973] name failslab, interval 1, probability 0, space 0, times 0 [ 198.181619][ T126] gspca_stk1135: reg_w 0x2 err -110 [ 198.188347][ T126] gspca_stk1135: serial bus timeout: status=0x00 [ 198.337568][ T5973] CPU: 0 PID: 5973 Comm: syz.2.434 Not tainted syzkaller #0 [ 198.344917][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.354980][ T5973] Call Trace: [ 198.358264][ T5973] [ 198.361306][ T5973] dump_stack_lvl+0x168/0x22e [ 198.366018][ T5973] ? show_regs_print_info+0x12/0x12 [ 198.371228][ T5973] ? load_image+0x3b0/0x3b0 [ 198.375833][ T5973] ? __might_sleep+0xd0/0xd0 [ 198.380432][ T5973] ? __lock_acquire+0x7c50/0x7c50 [ 198.385461][ T5973] ? mark_lock+0x94/0x320 [ 198.389797][ T5973] should_fail_ex+0x399/0x4d0 [ 198.394475][ T5973] should_failslab+0x5/0x20 [ 198.398984][ T5973] slab_pre_alloc_hook+0x59/0x310 [ 198.404007][ T5973] kmem_cache_alloc_node+0x5a/0x320 [ 198.409403][ T5973] ? __alloc_skb+0xfc/0x7e0 [ 198.413905][ T5973] __alloc_skb+0xfc/0x7e0 [ 198.418232][ T5973] alloc_skb_with_frags+0xa7/0x710 [ 198.423337][ T5973] ? aa_label_sk_perm+0x3e7/0x500 [ 198.428358][ T5973] sock_alloc_send_pskb+0x853/0x980 [ 198.433561][ T5973] ? sock_kzfree_s+0x50/0x50 [ 198.438229][ T5973] ? aa_file_perm+0x117/0xec0 [ 198.442899][ T5973] ? aa_sk_perm+0x7e5/0x920 [ 198.447408][ T5973] hci_sock_sendmsg+0x200/0xe70 [ 198.452259][ T5973] ? aa_file_perm+0x3ef/0xec0 [ 198.456925][ T5973] ? hci_sock_getsockopt+0x5a0/0x5a0 [ 198.462199][ T5973] ? aa_sock_msg_perm+0x94/0x150 [ 198.467161][ T5973] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 198.472438][ T5973] ? security_socket_sendmsg+0x7c/0xa0 [ 198.477905][ T5973] sock_write_iter+0x2b5/0x3a0 [ 198.482667][ T5973] ? sock_read_iter+0x370/0x370 [ 198.487518][ T5973] ? common_file_perm+0x171/0x1c0 [ 198.492569][ T5973] ? fsnotify_perm+0x5a/0x550 [ 198.497247][ T5973] vfs_write+0x44c/0x960 [ 198.501496][ T5973] ? file_end_write+0x250/0x250 [ 198.506343][ T5973] ? __fget_files+0x44a/0x4d0 [ 198.511017][ T5973] ? __fdget_pos+0x1d4/0x360 [ 198.515612][ T5973] ? ksys_write+0x71/0x240 [ 198.520025][ T5973] ksys_write+0x143/0x240 [ 198.524353][ T5973] ? __ia32_sys_read+0x80/0x80 [ 198.529142][ T5973] ? lockdep_hardirqs_on+0x94/0x140 [ 198.534342][ T5973] do_syscall_64+0x4c/0xa0 [ 198.538770][ T5973] ? clear_bhb_loop+0x60/0xb0 [ 198.543473][ T5973] ? clear_bhb_loop+0x60/0xb0 [ 198.548156][ T5973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.554132][ T5973] RIP: 0033:0x7ffacc98f6c9 [ 198.558536][ T5973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.578143][ T5973] RSP: 002b:00007ffacd82e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.586558][ T5973] RAX: ffffffffffffffda RBX: 00007ffaccbe5fa0 RCX: 00007ffacc98f6c9 [ 198.594519][ T5973] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000004 [ 198.602488][ T5973] RBP: 00007ffacd82e090 R08: 0000000000000000 R09: 0000000000000000 [ 198.610469][ T5973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.618437][ T5973] R13: 00007ffaccbe6038 R14: 00007ffaccbe5fa0 R15: 00007ffd2b4820a8 [ 198.626412][ T5973] [ 199.755831][ T126] gspca_stk1135: Sensor write failed [ 199.761552][ T126] gspca_stk1135: serial bus timeout: status=0x00 [ 199.768200][ T126] gspca_stk1135: Sensor write failed [ 199.773700][ T126] gspca_stk1135: serial bus timeout: status=0x00 [ 199.781592][ T126] gspca_stk1135: Sensor read failed [ 199.787203][ T126] gspca_stk1135: serial bus timeout: status=0x00 [ 199.793645][ T126] gspca_stk1135: Sensor read failed [ 199.799031][ T126] gspca_stk1135: Detected sensor type unknown (0x0) [ 199.805953][ T126] gspca_stk1135: serial bus timeout: status=0x00 [ 199.812456][ T126] gspca_stk1135: Sensor read failed [ 199.817890][ T126] gspca_stk1135: serial bus timeout: status=0x00 [ 199.824322][ T126] gspca_stk1135: Sensor read failed [ 199.829777][ T126] gspca_stk1135: serial bus timeout: status=0x00 [ 199.836241][ T126] gspca_stk1135: Sensor write failed [ 199.841734][ T126] gspca_stk1135: serial bus timeout: status=0x00 [ 199.848166][ T126] gspca_stk1135: Sensor write failed [ 199.853659][ T126] stk1135: probe of 1-1:0.255 failed with error -110 [ 199.978941][ T4339] usb 1-1: USB disconnect, device number 15 [ 200.122536][ T5989] Bluetooth: MGMT ver 1.22 [ 200.145695][ T5991] device batadv0 entered promiscuous mode [ 200.203769][ T5991] device bond0 entered promiscuous mode [ 200.213873][ T5991] device bond_slave_0 entered promiscuous mode [ 200.233877][ T5991] device bond_slave_1 entered promiscuous mode [ 200.249106][ T5991] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 200.263250][ T5993] FAULT_INJECTION: forcing a failure. [ 200.263250][ T5993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.285421][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 200.312614][ T5993] CPU: 0 PID: 5993 Comm: syz.2.441 Not tainted syzkaller #0 [ 200.319958][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.330032][ T5993] Call Trace: [ 200.333329][ T5993] [ 200.336290][ T5993] dump_stack_lvl+0x168/0x22e [ 200.340986][ T5993] ? show_regs_print_info+0x12/0x12 [ 200.346289][ T5993] ? load_image+0x3b0/0x3b0 [ 200.350819][ T5993] ? __lock_acquire+0x7c50/0x7c50 [ 200.355857][ T5993] ? verify_lock_unused+0x140/0x140 [ 200.361079][ T5993] should_fail_ex+0x399/0x4d0 [ 200.365791][ T5993] _copy_from_user+0x2c/0x170 [ 200.370500][ T5993] ___sys_sendmsg+0x155/0x290 [ 200.375202][ T5993] ? __sys_sendmsg+0x270/0x270 [ 200.380006][ T5993] ? __lock_acquire+0x7c50/0x7c50 [ 200.385062][ T5993] ? __fdget+0x17c/0x200 [ 200.389320][ T5993] __se_sys_sendmsg+0x19e/0x270 [ 200.394184][ T5993] ? __x64_sys_sendmsg+0x80/0x80 [ 200.399147][ T5993] ? lockdep_hardirqs_on+0x94/0x140 [ 200.404354][ T5993] do_syscall_64+0x4c/0xa0 [ 200.408786][ T5993] ? clear_bhb_loop+0x60/0xb0 [ 200.413480][ T5993] ? clear_bhb_loop+0x60/0xb0 [ 200.418169][ T5993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.424075][ T5993] RIP: 0033:0x7ffacc98f6c9 [ 200.428497][ T5993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.448125][ T5993] RSP: 002b:00007ffacd82e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.456566][ T5993] RAX: ffffffffffffffda RBX: 00007ffaccbe5fa0 RCX: 00007ffacc98f6c9 [ 200.464556][ T5993] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 200.472537][ T5993] RBP: 00007ffacd82e090 R08: 0000000000000000 R09: 0000000000000000 [ 200.480531][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.488512][ T5993] R13: 00007ffaccbe6038 R14: 00007ffaccbe5fa0 R15: 00007ffd2b4820a8 [ 200.496503][ T5993] [ 200.554421][ T6002] device batadv0 entered promiscuous mode [ 200.568697][ T6002] device bond0 entered promiscuous mode [ 200.580921][ T6002] device bond_slave_0 entered promiscuous mode [ 200.587743][ T6002] device bond_slave_1 entered promiscuous mode [ 200.611708][ T6002] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 200.642832][ T6002] Cannot create hsr debugfs directory [ 200.648862][ T6002] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 200.660217][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 200.700146][ T6009] FAULT_INJECTION: forcing a failure. [ 200.700146][ T6009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.735373][ T6009] CPU: 1 PID: 6009 Comm: syz.0.446 Not tainted syzkaller #0 [ 200.742720][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.752793][ T6009] Call Trace: [ 200.756071][ T6009] [ 200.758988][ T6009] dump_stack_lvl+0x168/0x22e [ 200.763660][ T6009] ? show_regs_print_info+0x12/0x12 [ 200.768848][ T6009] ? load_image+0x3b0/0x3b0 [ 200.773344][ T6009] ? __lock_acquire+0x7c50/0x7c50 [ 200.778368][ T6009] should_fail_ex+0x399/0x4d0 [ 200.783058][ T6009] _copy_from_user+0x2c/0x170 [ 200.787749][ T6009] __sys_bind+0x1cf/0x3f0 [ 200.792083][ T6009] ? __ia32_sys_socketpair+0xb0/0xb0 [ 200.797377][ T6009] __x64_sys_bind+0x76/0x80 [ 200.801873][ T6009] do_syscall_64+0x4c/0xa0 [ 200.806279][ T6009] ? clear_bhb_loop+0x60/0xb0 [ 200.810947][ T6009] ? clear_bhb_loop+0x60/0xb0 [ 200.815611][ T6009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.821493][ T6009] RIP: 0033:0x7fc58e58f6c9 [ 200.825897][ T6009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.845672][ T6009] RSP: 002b:00007fc58f497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 200.854074][ T6009] RAX: ffffffffffffffda RBX: 00007fc58e7e5fa0 RCX: 00007fc58e58f6c9 [ 200.862037][ T6009] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 200.869993][ T6009] RBP: 00007fc58f497090 R08: 0000000000000000 R09: 0000000000000000 [ 200.877954][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.885913][ T6009] R13: 00007fc58e7e6038 R14: 00007fc58e7e5fa0 R15: 00007ffdd16123b8 [ 200.893882][ T6009] [ 201.092885][ T6012] loop2: detected capacity change from 0 to 4096 [ 201.651180][ T6012] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 201.665618][ T6012] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 201.708137][ T6012] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 201.722449][ T6012] Remounting filesystem read-only [ 201.728082][ T6012] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 524288 [ 201.737778][ T6012] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 201.748532][ T6012] NILFS (loop2): error -5 truncating bmap (ino=15) [ 201.796536][ T4324] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 201.838679][ T6016] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.851836][ T4265] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 202.030373][ T4324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.050925][ T4324] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.080228][ T4324] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 202.103527][ T4482] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 202.120337][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.140029][ T4324] usb 4-1: config 0 descriptor?? [ 202.151535][ T6020] FAULT_INJECTION: forcing a failure. [ 202.151535][ T6020] name failslab, interval 1, probability 0, space 0, times 0 [ 202.222599][ T6020] CPU: 1 PID: 6020 Comm: syz.0.451 Not tainted syzkaller #0 [ 202.229942][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.240018][ T6020] Call Trace: [ 202.243310][ T6020] [ 202.246252][ T6020] dump_stack_lvl+0x168/0x22e [ 202.250949][ T6020] ? show_regs_print_info+0x12/0x12 [ 202.256418][ T6020] ? load_image+0x3b0/0x3b0 [ 202.260944][ T6020] ? __might_sleep+0xd0/0xd0 [ 202.265548][ T6020] ? __lock_acquire+0x7c50/0x7c50 [ 202.270584][ T6020] ? aa_file_perm+0x3ef/0xec0 [ 202.275274][ T6020] should_fail_ex+0x399/0x4d0 [ 202.279975][ T6020] should_failslab+0x5/0x20 [ 202.284496][ T6020] slab_pre_alloc_hook+0x59/0x310 [ 202.289538][ T6020] ? kernfs_fop_write_iter+0x155/0x520 [ 202.295010][ T6020] __kmem_cache_alloc_node+0x4f/0x260 [ 202.300401][ T6020] ? kernfs_fop_write_iter+0x155/0x520 [ 202.305880][ T6020] __kmalloc+0xa0/0x240 [ 202.310072][ T6020] kernfs_fop_write_iter+0x155/0x520 [ 202.315450][ T6020] vfs_write+0x44c/0x960 [ 202.319693][ T6020] ? file_end_write+0x250/0x250 [ 202.324544][ T6020] ? __fget_files+0x44a/0x4d0 [ 202.329229][ T6020] ? __fdget_pos+0x2ae/0x360 [ 202.333822][ T6020] ? ksys_write+0x71/0x240 [ 202.338236][ T6020] ksys_write+0x143/0x240 [ 202.342568][ T6020] ? __ia32_sys_read+0x80/0x80 [ 202.347328][ T6020] ? lockdep_hardirqs_on+0x94/0x140 [ 202.352525][ T6020] do_syscall_64+0x4c/0xa0 [ 202.356931][ T6020] ? clear_bhb_loop+0x60/0xb0 [ 202.361600][ T6020] ? clear_bhb_loop+0x60/0xb0 [ 202.366271][ T6020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.372158][ T6020] RIP: 0033:0x7fc58e58f6c9 [ 202.376584][ T6020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.396203][ T6020] RSP: 002b:00007fc58f497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.404610][ T6020] RAX: ffffffffffffffda RBX: 00007fc58e7e5fa0 RCX: 00007fc58e58f6c9 [ 202.412577][ T6020] RDX: 000000000000000a RSI: 0000200000000140 RDI: 0000000000000004 [ 202.420542][ T6020] RBP: 00007fc58f497090 R08: 0000000000000000 R09: 0000000000000000 [ 202.428505][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.436557][ T6020] R13: 00007fc58e7e6038 R14: 00007fc58e7e5fa0 R15: 00007ffdd16123b8 [ 202.444535][ T6020] [ 202.447679][ T4482] usb 5-1: Using ep0 maxpacket: 32 [ 202.482081][ T4482] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 202.491081][ T4482] usb 5-1: config 0 has no interface number 0 [ 202.501777][ T4324] usb 4-1: USB disconnect, device number 7 [ 202.512158][ T4482] usb 5-1: too many endpoints for config 0 interface 255 altsetting 213: 81, using maximum allowed: 30 [ 202.542026][ T4482] usb 5-1: config 0 interface 255 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 202.567230][ T4482] usb 5-1: config 0 interface 255 has no altsetting 0 [ 202.583633][ T4482] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 202.604236][ T4482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.623282][ T4482] usb 5-1: Product: syz [ 202.631970][ T4482] usb 5-1: Manufacturer: syz [ 202.636872][ T4482] usb 5-1: SerialNumber: syz [ 202.654165][ T4482] usb 5-1: config 0 descriptor?? [ 202.679784][ T4482] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 202.729824][ T6026] tipc: Started in network mode [ 202.756146][ T6026] tipc: Node identity @, cluster identity 4711 [ 202.762670][ T6026] tipc: Enabling of bearer rejected, failed to enable media [ 202.815825][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.818573][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 203.230287][ T4482] gspca_stk1135: reg_w 0x2 err -110 [ 203.401276][ T14] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 204.189841][ T4482] gspca_stk1135: serial bus timeout: status=0x00 [ 204.279260][ T14] usb 2-1: config 0 has no interface number 0 [ 204.285506][ T4482] gspca_stk1135: Sensor write failed [ 204.290901][ T4482] gspca_stk1135: serial bus timeout: status=0x00 [ 204.297557][ T4482] gspca_stk1135: Sensor write failed [ 204.303194][ T4482] gspca_stk1135: serial bus timeout: status=0x00 [ 204.309997][ T4482] gspca_stk1135: Sensor read failed [ 204.315554][ T4482] gspca_stk1135: serial bus timeout: status=0x00 [ 204.322486][ T4482] gspca_stk1135: Sensor read failed [ 204.328792][ T14] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 204.338170][ T4482] gspca_stk1135: Detected sensor type unknown (0x0) [ 204.344821][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.352994][ T4482] gspca_stk1135: serial bus timeout: status=0x00 [ 204.359441][ T14] usb 2-1: Product: syz [ 204.363667][ T4482] gspca_stk1135: Sensor read failed [ 204.368996][ T14] usb 2-1: Manufacturer: syz [ 204.373785][ T14] usb 2-1: SerialNumber: syz [ 204.378491][ T4482] gspca_stk1135: serial bus timeout: status=0x00 [ 204.384925][ T4482] gspca_stk1135: Sensor read failed [ 204.385672][ T6034] loop3: detected capacity change from 0 to 1024 [ 204.392167][ T14] usb 2-1: config 0 descriptor?? [ 204.401903][ T4482] gspca_stk1135: serial bus timeout: status=0x00 [ 204.409437][ T4482] gspca_stk1135: Sensor write failed [ 204.415087][ T4482] gspca_stk1135: serial bus timeout: status=0x00 [ 204.421836][ T4482] gspca_stk1135: Sensor write failed [ 204.428378][ T4482] stk1135: probe of 5-1:0.255 failed with error -110 [ 204.494137][ T41] usb 5-1: USB disconnect, device number 8 [ 204.649527][ T6034] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 204.747410][ T6040] FAULT_INJECTION: forcing a failure. [ 204.747410][ T6040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.775906][ T6040] CPU: 1 PID: 6040 Comm: syz.4.457 Not tainted syzkaller #0 [ 204.783253][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 204.793322][ T6040] Call Trace: [ 204.796607][ T6040] [ 204.799550][ T6040] dump_stack_lvl+0x168/0x22e [ 204.804257][ T6040] ? show_regs_print_info+0x12/0x12 [ 204.809466][ T6040] ? load_image+0x3b0/0x3b0 [ 204.813993][ T6040] ? __lock_acquire+0x7c50/0x7c50 [ 204.819046][ T6040] ? verify_lock_unused+0x140/0x140 [ 204.824280][ T6040] should_fail_ex+0x399/0x4d0 [ 204.828983][ T6040] _copy_from_user+0x2c/0x170 [ 204.833675][ T6040] ___sys_sendmsg+0x155/0x290 [ 204.838367][ T6040] ? __sys_sendmsg+0x270/0x270 [ 204.843165][ T6040] ? __lock_acquire+0x7c50/0x7c50 [ 204.848242][ T6040] ? __fdget+0x17c/0x200 [ 204.852514][ T6040] __se_sys_sendmsg+0x19e/0x270 [ 204.857379][ T6040] ? __x64_sys_sendmsg+0x80/0x80 [ 204.862346][ T6040] ? lockdep_hardirqs_on+0x94/0x140 [ 204.867560][ T6040] do_syscall_64+0x4c/0xa0 [ 204.871984][ T6040] ? clear_bhb_loop+0x60/0xb0 [ 204.876664][ T6040] ? clear_bhb_loop+0x60/0xb0 [ 204.881358][ T6040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.884834][ T14] usb 2-1: Firmware version (0.0) predates our first public release. [ 204.887266][ T6040] RIP: 0033:0x7f612cd8f6c9 [ 204.887287][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.887300][ T6040] RSP: 002b:00007f612dcd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.927747][ T6040] RAX: ffffffffffffffda RBX: 00007f612cfe5fa0 RCX: 00007f612cd8f6c9 [ 204.935716][ T6040] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000004 [ 204.943678][ T6040] RBP: 00007f612dcd0090 R08: 0000000000000000 R09: 0000000000000000 [ 204.951639][ T6040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.959605][ T6040] R13: 00007f612cfe6038 R14: 00007f612cfe5fa0 R15: 00007fffe967b4c8 [ 204.967580][ T6040] [ 204.990866][ T14] usb 2-1: Please update to version 0.2 or newer [ 204.991248][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 205.025780][ T14] usb 2-1: Firmware: build [ 205.857359][ T6052] 9pnet_fd: Insufficient options for proto=fd [ 205.878003][ T14] usb 2-1: USB disconnect, device number 7 [ 205.985381][ T6056] FAULT_INJECTION: forcing a failure. [ 205.985381][ T6056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.999148][ T6056] CPU: 0 PID: 6056 Comm: syz.4.461 Not tainted syzkaller #0 [ 206.006470][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.016606][ T6056] Call Trace: [ 206.019872][ T6056] [ 206.022851][ T6056] dump_stack_lvl+0x168/0x22e [ 206.027552][ T6056] ? show_regs_print_info+0x12/0x12 [ 206.032836][ T6056] ? load_image+0x3b0/0x3b0 [ 206.037330][ T6056] ? __lock_acquire+0x7c50/0x7c50 [ 206.042343][ T6056] should_fail_ex+0x399/0x4d0 [ 206.047007][ T6056] _copy_from_user+0x2c/0x170 [ 206.051669][ T6056] __sys_bpf+0x265/0x6d0 [ 206.055895][ T6056] ? bpf_link_show_fdinfo+0x340/0x340 [ 206.061256][ T6056] ? lock_chain_count+0x20/0x20 [ 206.066093][ T6056] __x64_sys_bpf+0x78/0x90 [ 206.070494][ T6056] do_syscall_64+0x4c/0xa0 [ 206.074892][ T6056] ? clear_bhb_loop+0x60/0xb0 [ 206.079562][ T6056] ? clear_bhb_loop+0x60/0xb0 [ 206.084255][ T6056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.090163][ T6056] RIP: 0033:0x7f612cd8f6c9 [ 206.094593][ T6056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.114219][ T6056] RSP: 002b:00007f612dcd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.122628][ T6056] RAX: ffffffffffffffda RBX: 00007f612cfe5fa0 RCX: 00007f612cd8f6c9 [ 206.130589][ T6056] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 206.138551][ T6056] RBP: 00007f612dcd0090 R08: 0000000000000000 R09: 0000000000000000 [ 206.146597][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.154818][ T6056] R13: 00007f612cfe6038 R14: 00007f612cfe5fa0 R15: 00007fffe967b4c8 [ 206.162814][ T6056] [ 206.286614][ T6055] block nbd3: Device being setup by another task [ 206.477980][ T4282] block nbd3: Receive control failed (result -32) [ 206.521813][ T6059] block nbd3: shutting down sockets [ 206.550495][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 206.789762][ T6078] FAULT_INJECTION: forcing a failure. [ 206.789762][ T6078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.803149][ T6078] CPU: 0 PID: 6078 Comm: syz.3.469 Not tainted syzkaller #0 [ 206.810453][ T6078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.820519][ T6078] Call Trace: [ 206.823817][ T6078] [ 206.826752][ T6078] dump_stack_lvl+0x168/0x22e [ 206.831577][ T6078] ? show_regs_print_info+0x12/0x12 [ 206.836807][ T6078] ? load_image+0x3b0/0x3b0 [ 206.841340][ T6078] ? __lock_acquire+0x7c50/0x7c50 [ 206.846399][ T6078] ? verify_lock_unused+0x140/0x140 [ 206.851628][ T6078] should_fail_ex+0x399/0x4d0 [ 206.856324][ T6078] _copy_from_user+0x2c/0x170 [ 206.861020][ T6078] ___sys_sendmsg+0x155/0x290 [ 206.865748][ T6078] ? __sys_sendmsg+0x270/0x270 [ 206.870555][ T6078] ? __lock_acquire+0x7c50/0x7c50 [ 206.875618][ T6078] ? __fdget+0x17c/0x200 [ 206.879886][ T6078] __se_sys_sendmsg+0x19e/0x270 [ 206.885112][ T6078] ? __x64_sys_sendmsg+0x80/0x80 [ 206.890077][ T6078] ? lockdep_hardirqs_on+0x94/0x140 [ 206.895295][ T6078] do_syscall_64+0x4c/0xa0 [ 206.899734][ T6078] ? clear_bhb_loop+0x60/0xb0 [ 206.904534][ T6078] ? clear_bhb_loop+0x60/0xb0 [ 206.909232][ T6078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.915135][ T6078] RIP: 0033:0x7fdd28b8f6c9 [ 206.919559][ T6078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.939183][ T6078] RSP: 002b:00007fdd29adb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.947608][ T6078] RAX: ffffffffffffffda RBX: 00007fdd28de5fa0 RCX: 00007fdd28b8f6c9 [ 206.955589][ T6078] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 206.963567][ T6078] RBP: 00007fdd29adb090 R08: 0000000000000000 R09: 0000000000000000 [ 206.971548][ T6078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.979522][ T6078] R13: 00007fdd28de6038 R14: 00007fdd28de5fa0 R15: 00007ffc05285a98 [ 206.987608][ T6078] [ 207.180159][ T6081] loop1: detected capacity change from 0 to 128 [ 207.204530][ T6081] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 207.217466][ T6081] hpfs: filesystem error: improperly stopped [ 207.225307][ T4339] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 207.240206][ T6081] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 207.285805][ T6081] hpfs: You really don't want any checks? You are crazy... [ 207.333771][ T6081] hpfs: hpfs_map_sector(): read error [ 207.344019][ T6081] hpfs: code page support is disabled [ 207.350937][ T6081] hpfs: hpfs_map_4sectors(): unaligned read [ 207.356974][ T6081] hpfs: hpfs_map_4sectors(): unaligned read [ 207.363614][ T6081] hpfs: filesystem error: unable to find root dir [ 207.444663][ T4339] usb 5-1: Using ep0 maxpacket: 32 [ 207.453093][ T4339] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 207.480387][ T4339] usb 5-1: config 0 has no interface number 0 [ 207.502430][ T4339] usb 5-1: too many endpoints for config 0 interface 255 altsetting 213: 81, using maximum allowed: 30 [ 207.515250][ T4339] usb 5-1: config 0 interface 255 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 207.530196][ T4339] usb 5-1: config 0 interface 255 has no altsetting 0 [ 207.558844][ T4339] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 207.590102][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.608829][ T4339] usb 5-1: Product: syz [ 207.613198][ T4339] usb 5-1: Manufacturer: syz [ 207.624160][ T4339] usb 5-1: SerialNumber: syz [ 207.645504][ T4339] usb 5-1: config 0 descriptor?? [ 207.666476][ T4339] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 207.675279][ T6088] FAULT_INJECTION: forcing a failure. [ 207.675279][ T6088] name failslab, interval 1, probability 0, space 0, times 0 [ 207.707534][ T6088] CPU: 1 PID: 6088 Comm: syz.3.473 Not tainted syzkaller #0 [ 207.714889][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.724965][ T6088] Call Trace: [ 207.728253][ T6088] [ 207.731194][ T6088] dump_stack_lvl+0x168/0x22e [ 207.735894][ T6088] ? show_regs_print_info+0x12/0x12 [ 207.741116][ T6088] ? load_image+0x3b0/0x3b0 [ 207.745654][ T6088] ? __lock_acquire+0x7c50/0x7c50 [ 207.750709][ T6088] should_fail_ex+0x399/0x4d0 [ 207.755506][ T6088] should_failslab+0x5/0x20 [ 207.760036][ T6088] slab_pre_alloc_hook+0x59/0x310 [ 207.765078][ T6088] ? alloc_pipe_info+0xe4/0x4b0 [ 207.769954][ T6088] __kmem_cache_alloc_node+0x4f/0x260 [ 207.775348][ T6088] ? alloc_pipe_info+0xe4/0x4b0 [ 207.780222][ T6088] kmalloc_trace+0x26/0xe0 [ 207.784671][ T6088] alloc_pipe_info+0xe4/0x4b0 [ 207.789375][ T6088] splice_direct_to_actor+0x91f/0xb60 [ 207.794776][ T6088] ? aa_path_link+0x850/0x850 [ 207.799479][ T6088] ? aa_file_perm+0x3ef/0xec0 [ 207.804191][ T6088] ? direct_file_splice_eof+0xa0/0xa0 [ 207.809580][ T6088] ? pipe_to_sendpage+0x310/0x310 [ 207.814647][ T6088] ? common_file_perm+0x171/0x1c0 [ 207.819696][ T6088] ? fsnotify_perm+0x5a/0x550 [ 207.824391][ T6088] ? security_file_permission+0x75/0xa0 [ 207.829970][ T6088] do_splice_direct+0x1b0/0x2b0 [ 207.834881][ T6088] ? splice_direct_to_actor+0xb60/0xb60 [ 207.840446][ T6088] ? rcu_read_lock_any_held+0xb0/0x120 [ 207.846012][ T6088] ? do_splice_direct+0x2b0/0x2b0 [ 207.851058][ T6088] ? common_file_perm+0x171/0x1c0 [ 207.856114][ T6088] do_sendfile+0x5cc/0xeb0 [ 207.860564][ T6088] ? do_pwritev+0x340/0x340 [ 207.865106][ T6088] __se_sys_sendfile64+0x13b/0x190 [ 207.870246][ T6088] ? lock_chain_count+0x20/0x20 [ 207.875223][ T6088] ? __x64_sys_sendfile64+0xa0/0xa0 [ 207.880455][ T6088] ? lockdep_hardirqs_on+0x94/0x140 [ 207.885675][ T6088] do_syscall_64+0x4c/0xa0 [ 207.890113][ T6088] ? clear_bhb_loop+0x60/0xb0 [ 207.894792][ T6088] ? clear_bhb_loop+0x60/0xb0 [ 207.899478][ T6088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.905374][ T6088] RIP: 0033:0x7fdd28b8f6c9 [ 207.909781][ T6088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.929392][ T6088] RSP: 002b:00007fdd29adb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 207.937827][ T6088] RAX: ffffffffffffffda RBX: 00007fdd28de5fa0 RCX: 00007fdd28b8f6c9 [ 207.945808][ T6088] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 207.953770][ T6088] RBP: 00007fdd29adb090 R08: 0000000000000000 R09: 0000000000000000 [ 207.961737][ T6088] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 207.969787][ T6088] R13: 00007fdd28de6038 R14: 00007fdd28de5fa0 R15: 00007ffc05285a98 [ 207.977822][ T6088] [ 208.246727][ T4339] gspca_stk1135: reg_w 0x2 err -110 [ 208.253080][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 209.961936][ T4339] gspca_stk1135: Sensor write failed [ 209.967315][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 209.973897][ T4339] gspca_stk1135: Sensor write failed [ 209.979752][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 209.986734][ T4339] gspca_stk1135: Sensor read failed [ 209.992185][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 209.999628][ T4339] gspca_stk1135: Sensor read failed [ 210.004932][ T4339] gspca_stk1135: Detected sensor type unknown (0x0) [ 210.012294][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 210.018830][ T4339] gspca_stk1135: Sensor read failed [ 210.024210][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 210.030816][ T4339] gspca_stk1135: Sensor read failed [ 210.036183][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 210.042725][ T4339] gspca_stk1135: Sensor write failed [ 210.048135][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 210.055621][ T4339] gspca_stk1135: Sensor write failed [ 210.061014][ T4339] stk1135: probe of 5-1:0.255 failed with error -110 [ 210.161566][ T41] usb 5-1: USB disconnect, device number 9 [ 210.171485][ T6093] FAULT_INJECTION: forcing a failure. [ 210.171485][ T6093] name failslab, interval 1, probability 0, space 0, times 0 [ 210.205834][ T6093] CPU: 0 PID: 6093 Comm: syz.3.476 Not tainted syzkaller #0 [ 210.213171][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.223245][ T6093] Call Trace: [ 210.226532][ T6093] [ 210.229482][ T6093] dump_stack_lvl+0x168/0x22e [ 210.234174][ T6093] ? show_regs_print_info+0x12/0x12 [ 210.239390][ T6093] ? load_image+0x3b0/0x3b0 [ 210.243911][ T6093] ? __might_sleep+0xd0/0xd0 [ 210.248517][ T6093] ? __lock_acquire+0x7c50/0x7c50 [ 210.253570][ T6093] should_fail_ex+0x399/0x4d0 [ 210.258259][ T6093] should_failslab+0x5/0x20 [ 210.262770][ T6093] slab_pre_alloc_hook+0x59/0x310 [ 210.267795][ T6093] ? rds_info_getsockopt+0x1d4/0x470 [ 210.273090][ T6093] __kmem_cache_alloc_node+0x4f/0x260 [ 210.278472][ T6093] ? rds_info_getsockopt+0x1d4/0x470 [ 210.283753][ T6093] __kmalloc+0xa0/0x240 [ 210.287903][ T6093] rds_info_getsockopt+0x1d4/0x470 [ 210.293051][ T6093] ? rds_info_copy+0x2a0/0x2a0 [ 210.297808][ T6093] ? __might_fault+0xa6/0x120 [ 210.302478][ T6093] ? __might_fault+0xc2/0x120 [ 210.307138][ T6093] ? __might_fault+0xa6/0x120 [ 210.311800][ T6093] ? rds_getsockopt+0x159/0x3c0 [ 210.316639][ T6093] ? rds_setsockopt+0xe20/0xe20 [ 210.321564][ T6093] __sys_getsockopt+0x1b0/0x230 [ 210.326416][ T6093] __x64_sys_getsockopt+0xb1/0xc0 [ 210.331436][ T6093] do_syscall_64+0x4c/0xa0 [ 210.335843][ T6093] ? clear_bhb_loop+0x60/0xb0 [ 210.340504][ T6093] ? clear_bhb_loop+0x60/0xb0 [ 210.345168][ T6093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.351045][ T6093] RIP: 0033:0x7fdd28b8f6c9 [ 210.355454][ T6093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.375054][ T6093] RSP: 002b:00007fdd29adb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 210.383462][ T6093] RAX: ffffffffffffffda RBX: 00007fdd28de5fa0 RCX: 00007fdd28b8f6c9 [ 210.391595][ T6093] RDX: 000000000000271c RSI: 0000200000000114 RDI: 0000000000000004 [ 210.399553][ T6093] RBP: 00007fdd29adb090 R08: 0000200000000040 R09: 0000000000000000 [ 210.407525][ T6093] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 210.415632][ T6093] R13: 00007fdd28de6038 R14: 00007fdd28de5fa0 R15: 00007ffc05285a98 [ 210.423603][ T6093] [ 210.455328][ T6095] block device autoloading is deprecated and will be removed. [ 210.698461][ T6090] loop2: detected capacity change from 0 to 32768 [ 210.704683][ T6101] loop1: detected capacity change from 0 to 1024 [ 210.798573][ T6090] XFS (loop2): Mounting V5 Filesystem [ 210.905630][ T6090] XFS (loop2): Ending clean mount [ 210.944937][ T4265] XFS (loop2): Unmounting Filesystem [ 211.065978][ T6122] FAULT_INJECTION: forcing a failure. [ 211.065978][ T6122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.111055][ T6120] loop0: detected capacity change from 0 to 2048 [ 211.111300][ T6122] CPU: 1 PID: 6122 Comm: syz.1.483 Not tainted syzkaller #0 [ 211.124721][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.134807][ T6122] Call Trace: [ 211.138104][ T6122] [ 211.141051][ T6122] dump_stack_lvl+0x168/0x22e [ 211.145761][ T6122] ? show_regs_print_info+0x12/0x12 [ 211.150982][ T6122] ? load_image+0x3b0/0x3b0 [ 211.155514][ T6122] ? __lock_acquire+0x7c50/0x7c50 [ 211.160585][ T6122] ? verify_lock_unused+0x140/0x140 [ 211.165824][ T6122] should_fail_ex+0x399/0x4d0 [ 211.170547][ T6122] _copy_from_user+0x2c/0x170 [ 211.175257][ T6122] ___sys_sendmsg+0x155/0x290 [ 211.179964][ T6122] ? __sys_sendmsg+0x270/0x270 [ 211.184333][ T6120] NILFS (loop0): unrecognized mount option "j6pt(3!]\E1kcФBդWMfՆ=WD" [ 211.184813][ T6122] ? __lock_acquire+0x7c50/0x7c50 [ 211.201247][ T6122] ? __fdget+0x17c/0x200 [ 211.205513][ T6122] __se_sys_sendmsg+0x19e/0x270 [ 211.210394][ T6122] ? __x64_sys_sendmsg+0x80/0x80 [ 211.215362][ T6122] ? lockdep_hardirqs_on+0x94/0x140 [ 211.220583][ T6122] do_syscall_64+0x4c/0xa0 [ 211.225016][ T6122] ? clear_bhb_loop+0x60/0xb0 [ 211.229709][ T6122] ? clear_bhb_loop+0x60/0xb0 [ 211.234409][ T6122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.240314][ T6122] RIP: 0033:0x7f132458f6c9 [ 211.244752][ T6122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.264554][ T6122] RSP: 002b:00007f13253b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.272991][ T6122] RAX: ffffffffffffffda RBX: 00007f13247e5fa0 RCX: 00007f132458f6c9 [ 211.280962][ T6122] RDX: 0000000008000840 RSI: 00002000000003c0 RDI: 0000000000000006 [ 211.288923][ T6122] RBP: 00007f13253b8090 R08: 0000000000000000 R09: 0000000000000000 [ 211.296882][ T6122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.304841][ T6122] R13: 00007f13247e6038 R14: 00007f13247e5fa0 R15: 00007fffd55d3428 [ 211.312807][ T6122] [ 211.384686][ T6120] 9pnet_fd: Insufficient options for proto=fd [ 211.620877][ T6129] loop0: detected capacity change from 0 to 16 [ 211.642681][ T6129] erofs: (device loop0): mounted with root inode @ nid 36. [ 211.733041][ T6129] syz.0.487: attempt to access beyond end of device [ 211.733041][ T6129] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 211.781540][ T6129] syz.0.487: attempt to access beyond end of device [ 211.781540][ T6129] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 211.798875][ T6129] syz.0.487: attempt to access beyond end of device [ 211.798875][ T6129] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 211.827319][ T6129] syz.0.487: attempt to access beyond end of device [ 211.827319][ T6129] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 211.937457][ T6138] FAULT_INJECTION: forcing a failure. [ 211.937457][ T6138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.950881][ T4339] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.990577][ T6138] CPU: 0 PID: 6138 Comm: syz.4.490 Not tainted syzkaller #0 [ 211.997916][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.008083][ T6138] Call Trace: [ 212.011377][ T6138] [ 212.014317][ T6138] dump_stack_lvl+0x168/0x22e [ 212.019015][ T6138] ? show_regs_print_info+0x12/0x12 [ 212.024231][ T6138] ? load_image+0x3b0/0x3b0 [ 212.028755][ T6138] ? __lock_acquire+0x7c50/0x7c50 [ 212.033797][ T6138] ? __lock_acquire+0x12e5/0x7c50 [ 212.038843][ T6138] should_fail_ex+0x399/0x4d0 [ 212.043547][ T6138] _copy_from_iter+0x1c5/0x10c0 [ 212.048418][ T6138] ? copyout_mc+0x110/0x110 [ 212.052947][ T6138] ? verify_lock_unused+0x140/0x140 [ 212.058163][ T6138] tun_get_user+0x1e2/0x3b90 [ 212.062786][ T6138] ? __lock_acquire+0x7c50/0x7c50 [ 212.067828][ T6138] ? rcu_read_unlock+0xa0/0xa0 [ 212.072614][ T6138] ? tun_get+0x1c/0x2e0 [ 212.076782][ T6138] ? __lock_acquire+0x7c50/0x7c50 [ 212.081821][ T6138] ? tun_get+0x1c/0x2e0 [ 212.085996][ T6138] tun_chr_write_iter+0x112/0x1f0 [ 212.091039][ T6138] vfs_write+0x44c/0x960 [ 212.095310][ T6138] ? file_end_write+0x250/0x250 [ 212.100199][ T6138] ? __fget_files+0x44a/0x4d0 [ 212.105000][ T6138] ? __fdget_pos+0x1d4/0x360 [ 212.109700][ T6138] ? ksys_write+0x71/0x240 [ 212.114136][ T6138] ksys_write+0x143/0x240 [ 212.118485][ T6138] ? __ia32_sys_read+0x80/0x80 [ 212.123270][ T6138] ? lockdep_hardirqs_on+0x94/0x140 [ 212.128492][ T6138] do_syscall_64+0x4c/0xa0 [ 212.132919][ T6138] ? clear_bhb_loop+0x60/0xb0 [ 212.137609][ T6138] ? clear_bhb_loop+0x60/0xb0 [ 212.142296][ T6138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.148217][ T6138] RIP: 0033:0x7f612cd8f6c9 [ 212.152652][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.172366][ T6138] RSP: 002b:00007f612dcd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.180773][ T6138] RAX: ffffffffffffffda RBX: 00007f612cfe5fa0 RCX: 00007f612cd8f6c9 [ 212.188769][ T6138] RDX: 0000000000000042 RSI: 0000200000000500 RDI: 0000000000000003 [ 212.196758][ T6138] RBP: 00007f612dcd0090 R08: 0000000000000000 R09: 0000000000000000 [ 212.204744][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.212722][ T6138] R13: 00007f612cfe6038 R14: 00007f612cfe5fa0 R15: 00007fffe967b4c8 [ 212.220751][ T6138] [ 212.235133][ T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 212.363352][ T4339] usb 2-1: Using ep0 maxpacket: 32 [ 212.373058][ T4339] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 212.381729][ T4339] usb 2-1: config 0 has no interface number 0 [ 212.400214][ T4339] usb 2-1: too many endpoints for config 0 interface 255 altsetting 213: 81, using maximum allowed: 30 [ 212.454086][ T4339] usb 2-1: config 0 interface 255 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 212.467988][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 212.475205][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.529695][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.547987][ T4339] usb 2-1: config 0 interface 255 has no altsetting 0 [ 212.566455][ T7] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 212.578184][ T4339] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 212.609623][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.624284][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.643321][ T7] usb 3-1: Product: syz [ 212.654282][ T4339] usb 2-1: Product: syz [ 212.663730][ T7] usb 3-1: Manufacturer: syz [ 212.673337][ T4339] usb 2-1: Manufacturer: syz [ 212.682880][ T7] usb 3-1: SerialNumber: syz [ 212.693783][ T4339] usb 2-1: SerialNumber: syz [ 212.719258][ T7] usb 3-1: config 0 descriptor?? [ 212.743235][ T4339] usb 2-1: config 0 descriptor?? [ 212.783395][ T4339] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 213.391894][ T6148] loop4: detected capacity change from 0 to 131072 [ 213.415282][ T4339] gspca_stk1135: reg_w 0x2 err -110 [ 213.429178][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 213.607069][ T6148] F2FS-fs (loop4): invalid crc value [ 213.688458][ T6148] F2FS-fs (loop4): Found nat_bits in checkpoint [ 213.843540][ T6148] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 215.341207][ T4339] gspca_stk1135: Sensor write failed [ 215.346873][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 215.353258][ T4339] gspca_stk1135: Sensor write failed [ 215.358932][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 215.365513][ T4339] gspca_stk1135: Sensor read failed [ 215.370765][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 215.377429][ T4339] gspca_stk1135: Sensor read failed [ 215.382661][ T4339] gspca_stk1135: Detected sensor type unknown (0x0) [ 215.389794][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 215.396465][ T4339] gspca_stk1135: Sensor read failed [ 215.402739][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 215.409476][ T4339] gspca_stk1135: Sensor read failed [ 215.414770][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 215.421992][ T4339] gspca_stk1135: Sensor write failed [ 215.427622][ T4339] gspca_stk1135: serial bus timeout: status=0x00 [ 215.434284][ T4339] gspca_stk1135: Sensor write failed [ 215.439626][ T4339] stk1135: probe of 2-1:0.255 failed with error -110 [ 215.458456][ T6148] netlink: 91 bytes leftover after parsing attributes in process `syz.4.493'. [ 215.482984][ T4339] usb 3-1: USB disconnect, device number 13 [ 215.569742][ T5025] usb 2-1: USB disconnect, device number 8 [ 215.724692][ T6164] FAULT_INJECTION: forcing a failure. [ 215.724692][ T6164] name failslab, interval 1, probability 0, space 0, times 0 [ 215.743407][ T6164] CPU: 1 PID: 6164 Comm: syz.2.495 Not tainted syzkaller #0 [ 215.750740][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.760911][ T6164] Call Trace: [ 215.764201][ T6164] [ 215.767403][ T6164] dump_stack_lvl+0x168/0x22e [ 215.772111][ T6164] ? show_regs_print_info+0x12/0x12 [ 215.777332][ T6164] ? load_image+0x3b0/0x3b0 [ 215.781858][ T6164] ? __might_sleep+0xd0/0xd0 [ 215.786466][ T6164] ? __lock_acquire+0x7c50/0x7c50 [ 215.791508][ T6164] ? mark_lock+0x94/0x320 [ 215.795846][ T6164] should_fail_ex+0x399/0x4d0 [ 215.800529][ T6164] should_failslab+0x5/0x20 [ 215.805098][ T6164] slab_pre_alloc_hook+0x59/0x310 [ 215.810116][ T6164] kmem_cache_alloc_node+0x5a/0x320 [ 215.815386][ T6164] ? __alloc_skb+0xfc/0x7e0 [ 215.819881][ T6164] __alloc_skb+0xfc/0x7e0 [ 215.824199][ T6164] inet_netconf_notify_devconf+0x16f/0x230 [ 215.829999][ T6164] inetdev_event+0x704/0x1410 [ 215.834665][ T6164] ? netdevice_event+0xe6/0x900 [ 215.839506][ T6164] ? devinet_exit_net+0x220/0x220 [ 215.844523][ T6164] ? arp_netdev_event+0xd4/0x320 [ 215.849448][ T6164] raw_notifier_call_chain+0xcb/0x160 [ 215.854814][ T6164] unregister_netdevice_many+0xfdc/0x1840 [ 215.860535][ T6164] ? trace_raw_output_contention_end+0xd0/0xd0 [ 215.866681][ T6164] ? alloc_netdev_mqs+0xf00/0xf00 [ 215.871699][ T6164] ? __mutex_lock+0x19e/0xaf0 [ 215.876378][ T6164] ? memset+0x1e/0x40 [ 215.880369][ T6164] unregister_netdevice_queue+0x31c/0x360 [ 215.886105][ T6164] ? list_netdevice+0x6c0/0x6c0 [ 215.890962][ T6164] ppp_release+0xec/0x1f0 [ 215.895290][ T6164] ? ppp_open+0x70/0x70 [ 215.899438][ T6164] __fput+0x22c/0x920 [ 215.903418][ T6164] task_work_run+0x1ca/0x250 [ 215.908001][ T6164] ? task_work_cancel+0x230/0x230 [ 215.913017][ T6164] ? exit_to_user_mode_loop+0x3b/0x110 [ 215.918466][ T6164] exit_to_user_mode_loop+0xe6/0x110 [ 215.923746][ T6164] exit_to_user_mode_prepare+0xee/0x180 [ 215.929283][ T6164] syscall_exit_to_user_mode+0x16/0x40 [ 215.934786][ T6164] do_syscall_64+0x58/0xa0 [ 215.939187][ T6164] ? clear_bhb_loop+0x60/0xb0 [ 215.943853][ T6164] ? clear_bhb_loop+0x60/0xb0 [ 215.948515][ T6164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.954394][ T6164] RIP: 0033:0x7ffacc98f6c9 [ 215.958795][ T6164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.978390][ T6164] RSP: 002b:00007ffacd82e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 215.986791][ T6164] RAX: 0000000000000000 RBX: 00007ffaccbe5fa0 RCX: 00007ffacc98f6c9 [ 215.994750][ T6164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 216.002707][ T6164] RBP: 00007ffacd82e090 R08: 0000000000000000 R09: 0000000000000000 [ 216.010666][ T6164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.018710][ T6164] R13: 00007ffaccbe6038 R14: 00007ffaccbe5fa0 R15: 00007ffd2b4820a8 [ 216.026679][ T6164] [ 216.534936][ T6178] FAULT_INJECTION: forcing a failure. [ 216.534936][ T6178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.575998][ T4339] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 216.602989][ T6178] CPU: 1 PID: 6178 Comm: syz.1.501 Not tainted syzkaller #0 [ 216.610335][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.620407][ T6178] Call Trace: [ 216.623696][ T6178] [ 216.626674][ T6178] dump_stack_lvl+0x168/0x22e [ 216.631370][ T6178] ? show_regs_print_info+0x12/0x12 [ 216.636590][ T6178] ? load_image+0x3b0/0x3b0 [ 216.641118][ T6178] ? __lock_acquire+0x7c50/0x7c50 [ 216.646172][ T6178] ? verify_lock_unused+0x140/0x140 [ 216.651404][ T6178] should_fail_ex+0x399/0x4d0 [ 216.656118][ T6178] _copy_from_user+0x2c/0x170 [ 216.660824][ T6178] ___sys_sendmsg+0x155/0x290 [ 216.665549][ T6178] ? __sys_sendmsg+0x270/0x270 [ 216.670352][ T6178] ? __lock_acquire+0x7c50/0x7c50 [ 216.675410][ T6178] ? __fdget+0x17c/0x200 [ 216.679676][ T6178] __se_sys_sendmsg+0x19e/0x270 [ 216.684547][ T6178] ? __x64_sys_sendmsg+0x80/0x80 [ 216.689520][ T6178] ? lockdep_hardirqs_on+0x94/0x140 [ 216.694737][ T6178] do_syscall_64+0x4c/0xa0 [ 216.699173][ T6178] ? clear_bhb_loop+0x60/0xb0 [ 216.703870][ T6178] ? clear_bhb_loop+0x60/0xb0 [ 216.708568][ T6178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.714497][ T6178] RIP: 0033:0x7f132458f6c9 [ 216.718938][ T6178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.738549][ T6178] RSP: 002b:00007f13253b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.747050][ T6178] RAX: ffffffffffffffda RBX: 00007f13247e5fa0 RCX: 00007f132458f6c9 [ 216.755098][ T6178] RDX: 000000000000c884 RSI: 00002000000000c0 RDI: 0000000000000004 [ 216.763058][ T6178] RBP: 00007f13253b8090 R08: 0000000000000000 R09: 0000000000000000 [ 216.771017][ T6178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.779055][ T6178] R13: 00007f13247e6038 R14: 00007f13247e5fa0 R15: 00007fffd55d3428 [ 216.787049][ T6178] [ 216.902936][ T4339] usb 4-1: Using ep0 maxpacket: 16 [ 216.939426][ T6166] loop3: detected capacity change from 0 to 256 [ 217.017531][ T6185] loop0: detected capacity change from 0 to 512 [ 217.026838][ T6166] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x6f1cbdc8, utbl_chksum : 0xe619d30d) [ 217.049304][ T6174] loop2: detected capacity change from 0 to 32768 [ 217.061663][ T6185] EXT4-fs: Ignoring removed oldalloc option [ 217.174504][ T6174] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.499 (6174) [ 217.190515][ T6185] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.503: Parent and EA inode have the same ino 15 [ 217.449959][ T6193] FAULT_INJECTION: forcing a failure. [ 217.449959][ T6193] name failslab, interval 1, probability 0, space 0, times 0 [ 217.477562][ T6174] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 217.519985][ T6174] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 217.550127][ T6174] BTRFS info (device loop2): using free space tree [ 217.570658][ T6195] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 217.661332][ T6193] CPU: 0 PID: 6193 Comm: syz.4.505 Not tainted syzkaller #0 [ 217.668673][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.678733][ T6193] Call Trace: [ 217.682017][ T6193] [ 217.684945][ T6193] dump_stack_lvl+0x168/0x22e [ 217.689644][ T6193] ? show_regs_print_info+0x12/0x12 [ 217.694850][ T6193] ? load_image+0x3b0/0x3b0 [ 217.699369][ T6193] ? __might_sleep+0xd0/0xd0 [ 217.704064][ T6193] ? __lock_acquire+0x7c50/0x7c50 [ 217.709093][ T6193] ? aa_file_perm+0x3ef/0xec0 [ 217.713776][ T6193] should_fail_ex+0x399/0x4d0 [ 217.718481][ T6193] should_failslab+0x5/0x20 [ 217.722990][ T6193] slab_pre_alloc_hook+0x59/0x310 [ 217.728019][ T6193] ? kernfs_fop_write_iter+0x155/0x520 [ 217.733480][ T6193] __kmem_cache_alloc_node+0x4f/0x260 [ 217.738895][ T6193] ? kernfs_fop_write_iter+0x155/0x520 [ 217.744380][ T6193] __kmalloc+0xa0/0x240 [ 217.748732][ T6193] kernfs_fop_write_iter+0x155/0x520 [ 217.754046][ T6193] vfs_write+0x44c/0x960 [ 217.758306][ T6193] ? file_end_write+0x250/0x250 [ 217.763178][ T6193] ? __fget_files+0x44a/0x4d0 [ 217.767872][ T6193] ? __fdget_pos+0x2ae/0x360 [ 217.772477][ T6193] ? ksys_write+0x71/0x240 [ 217.776919][ T6193] ksys_write+0x143/0x240 [ 217.781266][ T6193] ? __ia32_sys_read+0x80/0x80 [ 217.786043][ T6193] ? lockdep_hardirqs_on+0x94/0x140 [ 217.791254][ T6193] do_syscall_64+0x4c/0xa0 [ 217.795772][ T6193] ? clear_bhb_loop+0x60/0xb0 [ 217.800485][ T6193] ? clear_bhb_loop+0x60/0xb0 [ 217.802840][ T6185] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.503: Parent and EA inode have the same ino 15 [ 217.805178][ T6193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.821090][ T6185] EXT4-fs (loop0): 1 orphan inode deleted [ 217.823284][ T6193] RIP: 0033:0x7f612cd8f6c9 [ 217.823308][ T6193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.829144][ T6185] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 217.833407][ T6193] RSP: 002b:00007f612dcd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.872547][ T6193] RAX: ffffffffffffffda RBX: 00007f612cfe5fa0 RCX: 00007f612cd8f6c9 [ 217.880555][ T6193] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000004 [ 217.888557][ T6193] RBP: 00007f612dcd0090 R08: 0000000000000000 R09: 0000000000000000 [ 217.896663][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.904662][ T6193] R13: 00007f612cfe6038 R14: 00007f612cfe5fa0 R15: 00007fffe967b4c8 [ 217.912674][ T6193] [ 217.987789][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 218.313408][ T6174] BTRFS info (device loop2): enabling ssd optimizations [ 218.410111][ T6220] FAULT_INJECTION: forcing a failure. [ 218.410111][ T6220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.413623][ T26] audit: type=1800 audit(1762785810.215:23): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.499" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 218.478919][ T6220] CPU: 1 PID: 6220 Comm: syz.1.509 Not tainted syzkaller #0 [ 218.486268][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 218.496344][ T6220] Call Trace: [ 218.499730][ T6220] [ 218.502675][ T6220] dump_stack_lvl+0x168/0x22e [ 218.507368][ T6220] ? show_regs_print_info+0x12/0x12 [ 218.512589][ T6220] ? load_image+0x3b0/0x3b0 [ 218.517118][ T6220] ? __lock_acquire+0x7c50/0x7c50 [ 218.522171][ T6220] should_fail_ex+0x399/0x4d0 [ 218.526877][ T6220] _copy_from_user+0x2c/0x170 [ 218.531635][ T6220] __sys_bpf+0x265/0x6d0 [ 218.535901][ T6220] ? bpf_link_show_fdinfo+0x340/0x340 [ 218.541389][ T6220] ? lock_chain_count+0x20/0x20 [ 218.546268][ T6220] __x64_sys_bpf+0x78/0x90 [ 218.550703][ T6220] do_syscall_64+0x4c/0xa0 [ 218.555141][ T6220] ? clear_bhb_loop+0x60/0xb0 [ 218.559829][ T6220] ? clear_bhb_loop+0x60/0xb0 [ 218.564523][ T6220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.570452][ T6220] RIP: 0033:0x7f132458f6c9 [ 218.574884][ T6220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.594504][ T6220] RSP: 002b:00007f13253b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.603277][ T6220] RAX: ffffffffffffffda RBX: 00007f13247e5fa0 RCX: 00007f132458f6c9 [ 218.611284][ T6220] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000022 [ 218.619696][ T6220] RBP: 00007f13253b8090 R08: 0000000000000000 R09: 0000000000000000 [ 218.627663][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.636241][ T6220] R13: 00007f13247e6038 R14: 00007f13247e5fa0 R15: 00007fffd55d3428 [ 218.644218][ T6220] [ 218.734695][ T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 219.069680][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 219.076999][ T14] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 219.147267][ T14] usb 5-1: config 0 has no interface number 0 [ 219.198241][ T4339] usb 4-1: unable to get BOS descriptor or descriptor too short [ 219.220017][ T14] usb 5-1: too many endpoints for config 0 interface 255 altsetting 213: 81, using maximum allowed: 30 [ 219.231917][ T4339] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 219.248369][ T4339] usb 4-1: can't read configurations, error -71 [ 219.255933][ T14] usb 5-1: config 0 interface 255 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 219.293203][ T14] usb 5-1: config 0 interface 255 has no altsetting 0 [ 219.333853][ T14] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 219.367680][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.390237][ T14] usb 5-1: Product: syz [ 219.394448][ T14] usb 5-1: Manufacturer: syz [ 219.455328][ T14] usb 5-1: SerialNumber: syz [ 219.501127][ T14] usb 5-1: config 0 descriptor?? [ 219.548063][ T14] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 219.841982][ T4265] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 219.860511][ C0] hrtimer: interrupt took 59761 ns [ 219.880951][ T6238] FAULT_INJECTION: forcing a failure. [ 219.880951][ T6238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.997643][ T6238] CPU: 1 PID: 6238 Comm: syz.1.516 Not tainted syzkaller #0 [ 220.004999][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.015069][ T6238] Call Trace: [ 220.018370][ T6238] [ 220.021316][ T6238] dump_stack_lvl+0x168/0x22e [ 220.026016][ T6238] ? show_regs_print_info+0x12/0x12 [ 220.031239][ T6238] ? load_image+0x3b0/0x3b0 [ 220.035761][ T6238] ? __lock_acquire+0x7c50/0x7c50 [ 220.040807][ T6238] should_fail_ex+0x399/0x4d0 [ 220.045520][ T6238] _copy_from_user+0x2c/0x170 [ 220.050215][ T6238] __sys_bpf+0x265/0x6d0 [ 220.054476][ T6238] ? bpf_link_show_fdinfo+0x340/0x340 [ 220.059892][ T6238] ? lock_chain_count+0x20/0x20 [ 220.064788][ T6238] __x64_sys_bpf+0x78/0x90 [ 220.069237][ T6238] do_syscall_64+0x4c/0xa0 [ 220.073684][ T6238] ? clear_bhb_loop+0x60/0xb0 [ 220.078398][ T6238] ? clear_bhb_loop+0x60/0xb0 [ 220.083270][ T6238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.089183][ T6238] RIP: 0033:0x7f132458f6c9 [ 220.093618][ T6238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.113250][ T6238] RSP: 002b:00007f13253b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.121685][ T6238] RAX: ffffffffffffffda RBX: 00007f13247e5fa0 RCX: 00007f132458f6c9 [ 220.129670][ T6238] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 000000000000000f [ 220.137653][ T6238] RBP: 00007f13253b8090 R08: 0000000000000000 R09: 0000000000000000 [ 220.145632][ T6238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.153438][ T14] gspca_stk1135: reg_w 0x2 err -110 [ 220.153596][ T6238] R13: 00007f13247e6038 R14: 00007f13247e5fa0 R15: 00007fffd55d3428 [ 220.159895][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 220.167126][ T6238] [ 221.630131][ T14] gspca_stk1135: Sensor write failed [ 221.635888][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 221.642389][ T14] gspca_stk1135: Sensor write failed [ 221.649695][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 221.656086][ T14] gspca_stk1135: Sensor read failed [ 221.661460][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 221.667873][ T14] gspca_stk1135: Sensor read failed [ 221.673198][ T14] gspca_stk1135: Detected sensor type unknown (0x0) [ 221.679861][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 221.686332][ T14] gspca_stk1135: Sensor read failed [ 221.691694][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 221.698562][ T14] gspca_stk1135: Sensor read failed [ 221.704117][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 221.710592][ T14] gspca_stk1135: Sensor write failed [ 221.715989][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 221.722394][ T14] gspca_stk1135: Sensor write failed [ 221.727940][ T14] stk1135: probe of 5-1:0.255 failed with error -110 [ 221.827714][ T6244] loop1: detected capacity change from 0 to 128 [ 221.889815][ T4344] usb 5-1: USB disconnect, device number 10 [ 222.029636][ T6249] [ 222.032006][ T6249] ====================================================== [ 222.039023][ T6249] WARNING: possible circular locking dependency detected [ 222.046037][ T6249] syzkaller #0 Not tainted [ 222.050442][ T6249] ------------------------------------------------------ [ 222.057446][ T6249] syz.1.518/6249 is trying to acquire lock: [ 222.063323][ T6249] ffff888075d9c598 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x5c/0x1080 [ 222.072115][ T6249] [ 222.072115][ T6249] but task is already holding lock: [ 222.079499][ T6249] ffff888055d07528 (&tty->write_wait){-.-.}-{2:2}, at: __wake_up+0xf4/0x190 [ 222.088203][ T6249] [ 222.088203][ T6249] which lock already depends on the new lock. [ 222.088203][ T6249] [ 222.098949][ T6249] [ 222.098949][ T6249] the existing dependency chain (in reverse order) is: [ 222.107976][ T6249] [ 222.107976][ T6249] -> #4 (&tty->write_wait){-.-.}-{2:2}: [ 222.115704][ T6249] _raw_spin_lock_irqsave+0xa4/0xf0 [ 222.121422][ T6249] __wake_up+0xf4/0x190 [ 222.126120][ T6249] tty_port_default_wakeup+0x9e/0xf0 [ 222.132007][ T6249] serial8250_tx_chars+0x629/0x830 [ 222.137631][ T6249] serial8250_handle_irq+0x516/0x6d0 [ 222.143426][ T6249] serial8250_default_handle_irq+0xb4/0x1a0 [ 222.149829][ T6249] serial8250_interrupt+0x9b/0x1c0 [ 222.155450][ T6249] __handle_irq_event_percpu+0x298/0xa30 [ 222.161597][ T6249] handle_irq_event+0x87/0x1e0 [ 222.166874][ T6249] handle_edge_irq+0x243/0xb20 [ 222.172235][ T6249] __common_interrupt+0xd7/0x1e0 [ 222.177690][ T6249] common_interrupt+0xb0/0xd0 [ 222.182882][ T6249] asm_common_interrupt+0x22/0x40 [ 222.188415][ T6249] default_idle+0xb/0x10 [ 222.193167][ T6249] default_idle_call+0x84/0xc0 [ 222.198439][ T6249] do_idle+0x1fc/0x570 [ 222.203021][ T6249] cpu_startup_entry+0x3f/0x60 [ 222.208380][ T6249] start_secondary+0xe4/0xf0 [ 222.213483][ T6249] secondary_startup_64_no_verify+0xcf/0xdb [ 222.219893][ T6249] [ 222.219893][ T6249] -> #3 (&port_lock_key){-.-.}-{2:2}: [ 222.227439][ T6249] _raw_spin_lock_irqsave+0xa4/0xf0 [ 222.233147][ T6249] serial8250_console_write+0x169/0x17a0 [ 222.239289][ T6249] console_emit_next_record+0x947/0xc90 [ 222.245349][ T6249] console_unlock+0x223/0x630 [ 222.250531][ T6249] vprintk_emit+0x489/0x680 [ 222.255553][ T6249] _printk+0xcc/0x110 [ 222.260046][ T6249] register_console+0x6c6/0x9c0 [ 222.265536][ T6249] univ8250_console_init+0x41/0x43 [ 222.271154][ T6249] console_init+0x1bc/0x78e [ 222.276163][ T6249] start_kernel+0x303/0x539 [ 222.281266][ T6249] secondary_startup_64_no_verify+0xcf/0xdb [ 222.287681][ T6249] [ 222.287681][ T6249] -> #2 (console_owner){-.-.}-{0:0}: [ 222.295138][ T6249] console_emit_next_record+0x84c/0xc90 [ 222.301199][ T6249] console_unlock+0x223/0x630 [ 222.306387][ T6249] vprintk_emit+0x489/0x680 [ 222.311422][ T6249] _printk+0xcc/0x110 [ 222.315926][ T6249] should_fail_ex+0x37a/0x4d0 [ 222.321126][ T6249] strncpy_from_user+0x32/0x350 [ 222.326574][ T6249] strncpy_from_user_nofault+0x6d/0x140 [ 222.332644][ T6249] bpf_bprintf_prepare+0xba0/0x13d0 [ 222.338354][ T6249] bpf_trace_printk+0xd8/0x190 [ 222.343635][ T6249] 0xffffffffa0000995 [ 222.348134][ T6249] bpf_trace_run2+0x1cd/0x3b0 [ 222.353376][ T6249] trace_contention_begin+0x142/0x190 [ 222.359262][ T6249] __pv_queued_spin_lock_slowpath+0xdc/0x9c0 [ 222.365748][ T6249] queued_spin_lock_slowpath+0x43/0x50 [ 222.371720][ T6249] do_raw_spin_lock+0x217/0x280 [ 222.377082][ T6249] raw_spin_rq_lock_nested+0xa5/0x140 [ 222.382958][ T6249] __schedule+0x2ed/0x40b0 [ 222.387882][ T6249] schedule+0xb9/0x180 [ 222.392457][ T6249] exit_to_user_mode_loop+0x47/0x110 [ 222.398696][ T6249] exit_to_user_mode_prepare+0xee/0x180 [ 222.404759][ T6249] syscall_exit_to_user_mode+0x16/0x40 [ 222.410732][ T6249] do_syscall_64+0x58/0xa0 [ 222.415663][ T6249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.422061][ T6249] [ 222.422061][ T6249] -> #1 (&rq->__lock){-.-.}-{2:2}: [ 222.429380][ T6249] _raw_spin_lock_nested+0x2e/0x40 [ 222.434999][ T6249] raw_spin_rq_lock_nested+0x26/0x140 [ 222.440877][ T6249] task_fork_fair+0x5c/0x350 [ 222.445973][ T6249] sched_cgroup_fork+0x32c/0x3c0 [ 222.451418][ T6249] copy_process+0x24b8/0x4020 [ 222.456598][ T6249] kernel_clone+0x225/0x8b0 [ 222.461602][ T6249] user_mode_thread+0xda/0x130 [ 222.466870][ T6249] rest_init+0x23/0x300 [ 222.471536][ T6249] start_kernel+0x0/0x539 [ 222.476378][ T6249] start_kernel+0x490/0x539 [ 222.481388][ T6249] secondary_startup_64_no_verify+0xcf/0xdb [ 222.487792][ T6249] [ 222.487792][ T6249] -> #0 (&p->pi_lock){-.-.}-{2:2}: [ 222.495078][ T6249] __lock_acquire+0x2cf8/0x7c50 [ 222.500445][ T6249] lock_acquire+0x1b4/0x490 [ 222.505555][ T6249] _raw_spin_lock_irqsave+0xa4/0xf0 [ 222.511266][ T6249] try_to_wake_up+0x5c/0x1080 [ 222.516451][ T6249] __wake_up_common+0x2a4/0x4e0 [ 222.521819][ T6249] __wake_up+0x10e/0x190 [ 222.526569][ T6249] pty_unthrottle+0x38/0x60 [ 222.531576][ T6249] tty_unthrottle_safe+0x109/0x160 [ 222.537225][ T6249] n_tty_receive_buf_common+0x1068/0x13f0 [ 222.543484][ T6249] tiocsti+0x1f6/0x280 [ 222.548073][ T6249] tty_ioctl+0x34e/0xba0 [ 222.552831][ T6249] __se_sys_ioctl+0xfa/0x170 [ 222.557927][ T6249] do_syscall_64+0x4c/0xa0 [ 222.562858][ T6249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.569274][ T6249] [ 222.569274][ T6249] other info that might help us debug this: [ 222.569274][ T6249] [ 222.579578][ T6249] Chain exists of: [ 222.579578][ T6249] &p->pi_lock --> &port_lock_key --> &tty->write_wait [ 222.579578][ T6249] [ 222.592261][ T6249] Possible unsafe locking scenario: [ 222.592261][ T6249] [ 222.599699][ T6249] CPU0 CPU1 [ 222.605109][ T6249] ---- ---- [ 222.610544][ T6249] lock(&tty->write_wait); [ 222.615034][ T6249] lock(&port_lock_key); [ 222.621876][ T6249] lock(&tty->write_wait); [ 222.628967][ T6249] lock(&p->pi_lock); [ 222.633017][ T6249] [ 222.633017][ T6249] *** DEADLOCK *** [ 222.633017][ T6249] [ 222.641234][ T6249] 5 locks held by syz.1.518/6249: [ 222.646239][ T6249] #0: ffff888028f3e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 222.655979][ T6249] #1: ffff88805499c8b8 (&buf->lock/1){+.+.}-{3:3}, at: tiocsti+0x18e/0x280 [ 222.664672][ T6249] #2: ffff888028f3e2e8 (&tty->termios_rwsem/1){++++}-{3:3}, at: n_tty_receive_buf_common+0x82/0x13f0 [ 222.675621][ T6249] #3: ffff888028f3e250 (&tty->throttle_mutex){+.+.}-{3:3}, at: tty_unthrottle_safe+0x2d/0x160 [ 222.685962][ T6249] #4: ffff888055d07528 (&tty->write_wait){-.-.}-{2:2}, at: __wake_up+0xf4/0x190 [ 222.695080][ T6249] [ 222.695080][ T6249] stack backtrace: [ 222.700950][ T6249] CPU: 0 PID: 6249 Comm: syz.1.518 Not tainted syzkaller #0 [ 222.708232][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.718274][ T6249] Call Trace: [ 222.721543][ T6249] [ 222.724461][ T6249] dump_stack_lvl+0x168/0x22e [ 222.729150][ T6249] ? load_image+0x3b0/0x3b0 [ 222.733655][ T6249] ? show_regs_print_info+0x12/0x12 [ 222.738850][ T6249] ? print_circular_bug+0x12b/0x1a0 [ 222.744048][ T6249] check_noncircular+0x274/0x310 [ 222.748997][ T6249] ? add_chain_block+0x940/0x940 [ 222.753944][ T6249] ? lockdep_lock+0xdc/0x1e0 [ 222.758534][ T6249] ? stack_trace_save+0x98/0xe0 [ 222.763372][ T6249] ? _find_first_zero_bit+0xcf/0x100 [ 222.768650][ T6249] __lock_acquire+0x2cf8/0x7c50 [ 222.773490][ T6249] ? add_chain_block+0x940/0x940 [ 222.778419][ T6249] ? lockdep_unlock+0x133/0x2d0 [ 222.783258][ T6249] ? verify_lock_unused+0x140/0x140 [ 222.788449][ T6249] ? verify_lock_unused+0x140/0x140 [ 222.793658][ T6249] lock_acquire+0x1b4/0x490 [ 222.798173][ T6249] ? try_to_wake_up+0x5c/0x1080 [ 222.803027][ T6249] ? n_tty_receive_buf_standard+0x241b/0x4cc0 [ 222.809101][ T6249] ? read_lock_is_recursive+0x10/0x10 [ 222.814479][ T6249] _raw_spin_lock_irqsave+0xa4/0xf0 [ 222.819674][ T6249] ? try_to_wake_up+0x5c/0x1080 [ 222.824516][ T6249] ? _raw_spin_lock+0x40/0x40 [ 222.829180][ T6249] ? do_raw_spin_lock+0x11d/0x280 [ 222.834193][ T6249] ? __rwlock_init+0x140/0x140 [ 222.838948][ T6249] try_to_wake_up+0x5c/0x1080 [ 222.843614][ T6249] __wake_up_common+0x2a4/0x4e0 [ 222.848456][ T6249] ? __mutex_lock+0x19e/0xaf0 [ 222.853119][ T6249] __wake_up+0x10e/0x190 [ 222.857353][ T6249] ? __wake_up_bit+0x1e0/0x1e0 [ 222.862106][ T6249] ? pty_bsd_compat_ioctl+0x30/0x30 [ 222.867295][ T6249] pty_unthrottle+0x38/0x60 [ 222.871783][ T6249] tty_unthrottle_safe+0x109/0x160 [ 222.876887][ T6249] n_tty_receive_buf_common+0x1068/0x13f0 [ 222.882602][ T6249] ? n_tty_poll+0x730/0x730 [ 222.887090][ T6249] tiocsti+0x1f6/0x280 [ 222.891159][ T6249] ? signal_pending+0xa0/0xa0 [ 222.895826][ T6249] tty_ioctl+0x34e/0xba0 [ 222.900148][ T6249] ? security_file_ioctl+0x7c/0xa0 [ 222.905289][ T6249] ? tty_get_icount+0xa0/0xa0 [ 222.909954][ T6249] __se_sys_ioctl+0xfa/0x170 [ 222.914561][ T6249] do_syscall_64+0x4c/0xa0 [ 222.918987][ T6249] ? clear_bhb_loop+0x60/0xb0 [ 222.923664][ T6249] ? clear_bhb_loop+0x60/0xb0 [ 222.928333][ T6249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.934212][ T6249] RIP: 0033:0x7f132458f6c9 [ 222.938622][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.958214][ T6249] RSP: 002b:00007f1325397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.966626][ T6249] RAX: ffffffffffffffda RBX: 00007f13247e6090 RCX: 00007f132458f6c9 [ 222.974591][ T6249] RDX: 0000200000000000 RSI: 0000000000005412 RDI: 0000000000000005 [ 222.982551][ T6249] RBP: 00007f1324611f91 R08: 0000000000000000 R09: 0000000000000000 [ 222.990516][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.998476][ T6249] R13: 00007f13247e6128 R14: 00007f13247e6090 R15: 00007fffd55d3428 [ 223.006530][ T6249]