last executing test programs: 2m2.163358059s ago: executing program 0 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x1}) 2m1.541242657s ago: executing program 0 (id=692): r0 = open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0x2, [0x55, 0x5]}, 0x10) creat(&(0x7f0000000040)='./file1\x00', 0x28) 2m0.478499951s ago: executing program 0 (id=693): syz_open_dev$hidraw(0x0, 0x0, 0x14a042) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup(r2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x5, 0x10}, &(0x7f00000001c0)=0xc) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000300)={r5, 0x0, &(0x7f0000000480)=[{{0x80000000, 0x0}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={r7, 0x0, &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{r8, 0x0, 0x0, [0x0, 0x8]}, {r8, r6, 0x0, [0x0, 0x4]}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, r9}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380)=r10, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8], 0xec}}, 0x801) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f0000000440)=""/54, 0x36}], 0x6, 0x8, 0x9) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x48400) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r11, {0x100}}, './file0\x00'}) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r12, &(0x7f0000000040)=[{&(0x7f0000003000)=""/4106, 0x100a}], 0x1, 0x0, 0x0) ioctl$EVIOCGMASK(r12, 0x60b, 0x0) write$char_usb(r11, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r11, 0xc0104811, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r13, 0x0, 0x4, &(0x7f0000000700)="441f0803", 0x4) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x7fe782539b0b) 1m56.795462119s ago: executing program 0 (id=703): r0 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x800) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000300)={0x3, 0x3e710a94, 0x1}) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x52}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@grpid}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x37c, &(0x7f0000000ec0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") truncate(&(0x7f0000000080)='./file1\x00', 0x400000f007) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r1], 0x50) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50008100000003050000000000000000de3b79ff", @ANYRES32=0x0, @ANYBLOB="0100000000000000280012800b0001006d616373656300001800028005000f00020000000c000100feffff7f0000000008000500", @ANYRES32=r10, @ANYBLOB], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000dbc1ee536b13685f000007020000f9ffffffb703000000080000b70400009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r12}, 0x18) writev(r7, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1f0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m53.264128761s ago: executing program 0 (id=711): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x24e, &(0x7f0000000a00)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (fail_nth: 1) 1m50.030051032s ago: executing program 0 (id=717): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328d33, 0x0) r5 = pidfd_getfd(r3, r4, 0x0) readlinkat(r5, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) write$UHID_INPUT(r5, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) r6 = creat(&(0x7f0000000280)='./file0/file0\x00', 0x83) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x8, 0x8, 0x0, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200352158b20000cae300000100002080000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000300"/28], 0x50) listen(0xffffffffffffffff, 0xfffffffc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) socket$packet(0x11, 0x2, 0x300) 1m47.572294527s ago: executing program 32 (id=717): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328d33, 0x0) r5 = pidfd_getfd(r3, r4, 0x0) readlinkat(r5, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) write$UHID_INPUT(r5, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) r6 = creat(&(0x7f0000000280)='./file0/file0\x00', 0x83) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x8, 0x8, 0x0, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200352158b20000cae300000100002080000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000300"/28], 0x50) listen(0xffffffffffffffff, 0xfffffffc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) socket$packet(0x11, 0x2, 0x300) 28.967999776s ago: executing program 6 (id=959): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f024}) 21.462742233s ago: executing program 6 (id=975): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1}, 0x60044084) 21.161557164s ago: executing program 6 (id=978): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x24020400) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x20) creat(&(0x7f0000000300)='./file0\x00', 0x0) 20.792051041s ago: executing program 1 (id=980): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x6) 20.763797313s ago: executing program 6 (id=981): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r3, 0x24, &(0x7f0000000340)={0x24cb5ae99d01c720, 0x0, 0xaee, 0x8000000000000000}) pipe2(&(0x7f00000003c0), 0x80) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) write$P9_RLERRORu(r1, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000380)={0x18}, 0x18) creat(&(0x7f0000000300)='./file0\x00', 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @random, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @private1}}}}}}, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x6) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0xcc67, 0xe0800) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f00000001c0)={0x9, 0x102, 0x2, {0x0, 0x10, 0xfffffffe, 0x6}}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) 19.859543839s ago: executing program 1 (id=984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24040854) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xffffffff, 0x39}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x949450af1135e375}, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, 0x0, 0x7f) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x1, 0x1, "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", 0x2, 0x4, 0x5, 0xf, 0xd, 0x0, 0x6, 0x1}}}, 0x120) socket$nl_route(0x10, 0x3, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) socket(0x28, 0x5, 0x0) 19.517082975s ago: executing program 1 (id=986): syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x3, 0x215}, &(0x7f0000000040), &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) writev(r1, &(0x7f0000000c40)=[{&(0x7f0000000b40)="0b8e", 0x2}], 0x1) 14.811967593s ago: executing program 5 (id=993): openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003880)="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", 0x1000}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f", 0x8c}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690b4", 0x5}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 12.636330867s ago: executing program 4 (id=995): openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000a40)}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 12.595594756s ago: executing program 6 (id=997): r0 = socket$l2tp(0x2, 0x2, 0x73) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000640)=ANY=[@ANYBLOB='gid=forget,iocharset=cp1255,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f7672732c696f636861727365743d6d6163696e7569742c73686f727461642c7569643d666f726765742c696f636861727365743d63703836312c008ab2fd0c6148ca20e181888224b0af7127bc6ef9202c31a762c7170f7c3b36e2a424b7cdae71259a9f3d7b27c613181a4dd120ba579a34781edc84fa324a09d4a1fa90e0d72feaf60572b0573d65d05ca70b180dd5411edebbc2636b7cca49a8fc0e895794b51ea1a75d9f743cec5f1a179049f7193394ae98115399acf9d8edfa03abf0815e2730e17c53211aa69eee105f1776429dea37162e3c59710d29cb1c8db05275f97c529ee98f0e9d54d80d4a6000fc"], 0x1, 0xc4f, &(0x7f0000000f40)="$eJzs3UFsHNd9B+D/Gy3FpdxWTJwqThoHm7ZIZcZyZUkxFatwVzXNNoAsE6GYWwCuREpdmCIJkm5kIy2YXnroIUBR9JATgdYokKKB0RRBj0zrAsnFhyJAgZ6IFjaCoge2CBCgQMBgZt+KS4q0ZZGUKPn7bOq3M/PezHsz6xlZ0JsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDE77108fSzaYcNRx5AYwCA++Ly+FdOn9np+Q8APLKu7Pb//wAAAAAAAAAAAAAAwGGRoojHI8X85fU0WS131C+1+167NTEyunO1gVTVPFKVL3/qz545e+6Lzw2f7+al9uz71N9vn45Xxq9cbLw4d3N+YXpxcXqqMTHbvjY3NX3Xe9hr/e2GqhPQuPnqa1PXry82zjxzdsvmW4Pv9T92YvDC8FOnnuyWnRgZHR3fLFLvLV+754Z07DbC42gUcSpSPP3dn6RWRBSx93NRv7/XfruBqhNDVScmRkarjsy0W7NL5cax7okoIho9lZrdc7TztYha333tw+6aEctl88sGD5XdG59vLbSuzkw3xloLS+2l9tzsWOq0tuxPI4o4nyJWImKt/87d9UURtUjx7ePr6Wp+60d1Hr5QDQzevR3FAfbxLpTtbPRFrBQPwTU7xPqjiJcjxU/fPhnX8n2mutd8PuLlMr8f8WaZL0Sk8otxLuLdHb5HPJxqUcSfl9f/wnqaqu4H3fvKpa82vjx7fa6nbPe+8iGfD3fcKR7Q82FgW94fh/zeVI8iWtUdfz3d+292AAAAAAAAAAAAAAAAANhvA1HEpyLFS//2R9W44qjGpR+/MPz7g7/cO2b8iQ/YT1n2mYhYLu5uTO7RPDBwLI2l9IDHEn+U1aOIP87j/775oBsDAAAAAAAAAAAAAAAAAADwkVbEjyPF8++cTCvRO6d4e/ZG40rr6kxnVtju3L/dOdM3NjY2GqmTzZyTOZdzruRczbmWM4pcP2cz52TO5ZwrOVdzruWMI7l+zmbOyZzLOVdyruZcyxm1XD9nM+dkzuWcKzlXc67ljEMydy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKOkiCJ+Him+9fX1FCkimhGT0cnV/gfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg1J+K+F6kaPxB8/a6WkSk6t+Ok+Uv56J5tMyPR3O4zBeieTFnq8pa85sPoP3sTV8q4keRor/+1u0Lnq9/X2fp9tcg3vzG5tKna5080t04+F7/YyeOXxge/ewTu31OOzVg6FJ79rVbjYmR0dHxntW1fPSP96wbzMct9qfrRMTi62+82pqZmV649w/lV+Aeq3ev5B6Ofj8/pNpD01Qf9uND1A5FMx5M37eoP4ibEweufP6/Gyl++53/6D7wO8//evxSZ+n2Ez5+9iebz//nt+/oLp//te318vO/fBLs9Px/vGfd8/l3I321iPrSzfm+ExH1xdffONW+2boxfWN69tzp018aHv7S2dN9RyPq19sz0z2f9uV0AQAAAAAAAAAAAAAAANw/qYjfjRStH62nRkTcqsZrDV4YfurUk0fiSDXeasu47VfGr1xsvDh3c35henFxeqoxMdu+Njc1fbeHq1fDvSZGRg+kMx9o4IDbP1B/cW7+9YX2jT9c2nH7sfrFq4tLC61rO2+OgSgimr1rhqoGT4yMVo2eabdmq6pjOw6m//D6UhH/GSmunWukz+V1efz/9hH+W8b/L2/f0T6O///ssc3xfx/rKVoeM6UifhYpfusvnojPVe08Fnecs1zubyLF0PnP5HJxtCzXbUPnvQKdkYFl2f+NFP/w861lu+MhH98s++yHOrkPgfL6H48U3/uz78Sv53Vb3/+w8/U/tn1HB/T+h0/0rDu25X0Fe+46+fqfihQvPP5W/Ea15v/f9/0f3Tc2nOwU3nw/xwFd/1/tWTeYj/ub+9V5AAAAAAAAAACAh1hfKuJvI8UPRmvpubzubv7+39T2HR3Q3//6ZM+6qf2Zr+gDP+z5pAIAAADAIdGXivhxpLix9NbtMdRbx3/3jP/8nc3xnyNp29bqz/l+pXpvwH7++V+vwXzcyb13GwAAAAAAAAAAAAAAAAAAAA6VlIp4Ls+nPlmN55/adT711Ujx0n8/nculE2W57jzwg9Wv9ctzs6cuzszM1WOpdXVmujE+37o2Xdb9RKRY/+vP5LpFNb96d775zhzvm3OxL0SK0b/rlu3Mxd6dm7wzH3h9YyPi2bLsxyLFf/391rJ5auo8d3S13zNl2b+KFF/7p53Lntgse7Ys+51I8cOvNbplj5Vlu+9H/eRm2WeuzRUHcFUAAAAAAAAAAAAAAAAAAAD4qOlLRfxppPifmyu3x/Ln+f/7ehYrb36jZ77/bW5V8/wPVvP/7/b5Xub/r94rsLzbUQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NGUoog3IsX85fW02l8ud9QvtWdfuzUxMrpztYFU1TxSlS9/6s+eOXvui88Nn+/m+9ffb5+KV8avXGy8OHdzfmF6cXF6qjEx2742NzV913vYa/3thqoT8O/HI6auX19snHnm7JbNtwbf63/sxOCF4adOPZnLNiZGRkfHe8rU+u756HdIu6w/GkX8ZaR4+rs/ST/ojyhi7+fiA747B22g6sRQ1YmJkdGqIzPt1uxSuXGseyKKiEZPpWb3HN2Ha7EnzYjlsvllg4fK7o3PtxZaV2emG2OthaX2Untudix1Wlv2pxFFnE8RKxGx1n/n7vqiiFcjxbePr6d/7o840j0PX7g8/pXTZ3ZvR3GAfbwLZTsbfRErxUNwzQ6x/ijiHyPFT98+Gf/SH1GLzk98PuLlMr8f8WZ0rncqvxjnIt7d4XvEw6kWRfxfef0vrKe3+8v7Qfe+cumrjS/PXp/rKdu9rzz0z4f76ZDfm+pRxA+rO/56+lf/XQMAAAAAAAAAAAAAAAAcIkX8WqR4/p2TqRoffHtMcXv2RuNK6+pMZ1hfd+xfd8z0xsbGRiN1spmzntcv5+WVnKs513JGkevnbJZZ39iYzMvLOVdyruZcyxlHcv2czZyTOZdzruRczbmWM2q5fs5mzsmcyzlXcq7mXMsZh2TsHgAAAAAAAAAAAAAAAAAA8Ggpqn9SfOvr62mjvzO/9GR0ctV8oI+8XwQAAP//6gL1LQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv6_newroute={0x20, 0x18, 0x1, 0x70bd28, 0x25dfdbff, {0xa, 0x14, 0x0, 0x5, 0x0, 0x1, 0x0, 0x8, 0x1500}, [@RTA_METRICS={0x4, 0x1e}]}, 0x20}}, 0x404c040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffe82) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 12.391860472s ago: executing program 5 (id=998): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000d096cf2aa98e831d4c30081a3b3c"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(0x0, 0x71) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) 12.225044897s ago: executing program 4 (id=999): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x457, &(0x7f00000006c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r7, 0xc040ff0b, 0x110c2300fe) 11.399842292s ago: executing program 1 (id=1001): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000fb00000000000000a200000040000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000100000000000000000000000000000000000f00"], 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000d096cf2aa98e831d4c30081a3b3c"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(0x0, 0x71) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x5, 0x10408, 0x3c, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) 10.998596696s ago: executing program 5 (id=1002): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) 10.507516284s ago: executing program 4 (id=1003): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000340)={0x24cb5ae99d01c720, 0x0, 0xaee, 0x8000000000000000}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RLERRORu(r1, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000380)={0x18}, 0x18) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x6) 8.379695962s ago: executing program 4 (id=1005): socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f00000019c0)=""/4097, 0x1001) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c8, 0x0, 0x2d, [{{0x6, 0x2, 0x3, 0x1, 0xe, 0x5, {0x80000000000006, 0x9, 0xcb, 0x1, 0x80000001, 0x8, 0xe629, 0x5, 0x7fffffff, 0x8000, 0xfffffff3, r8, r9, 0xc3, 0x1}}, {0x0, 0x8000000000000001, 0x1, 0x6e4bd64b, '\x00'}}, {{0x6, 0x2, 0x3, 0x10000007, 0x10000, 0xa, {0x8000000, 0x5, 0x10, 0x5, 0x2000005, 0x80, 0x6e, 0x33, 0x13, 0x8000, 0x40010000, r8, 0xee01, 0xd0, 0x7fff}}, {0x6, 0x80000000, 0x7b, 0x8, '\x00\xd9\x89\xaf:!`\xc5I\x02|\xf3d\xa7_\'\xa4\xff\xba\xd9\xa2\x11g\xa3\xb4\xd6\xb0M\xa6\x94\x18\xd4\x87\xc6\xcd\x81\xbf\xbfT\xa1?w\xe4\xb4q\x9b\x14\x8fIJ\xf5\xbc\xeb\xa8\x01`G\x13\xcb\x1e\x11`oq\xe5\xda\x81\x95f.\"\x8a\xe7\xe1Z+\xefqs\xe8\xc2E\x95\xcc\x8e9\x9c\xbb\'%t0\xf6\xa5G&l\xb7\xca\x13\xe4\xe3\x166m\xbenh\xe59sI\xfd\xe0\x1ey\xeb%\x9b\xe8T\x99H'}}]}, 0x0, 0x0, 0x0}) getdents64(r10, 0x0, 0x18) 6.94543621s ago: executing program 4 (id=1007): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1020410, &(0x7f0000001000)={[{@acl}, {@data_err_abort}, {@stripe={'stripe', 0x3d, 0x10000}}], [{@obj_user}, {@measure}]}, 0x21, 0x4a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) brk(0x55555ede6001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001c80)="b1", 0x1) syz_clone3(&(0x7f0000000540)={0x2011e280, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0xc}, &(0x7f0000000f00)=""/245, 0xf5, &(0x7f00000003c0)=""/32, &(0x7f0000000400)}, 0x58) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000480), 0x1001) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40, 0x13, 0x0, 0x528, 0x4, 0x0, 0x0, 0x8, 0xffff}}, 0x50) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e30342dcfc54e13b2dd711", "4ee400", "07deb79f8c96bff4"}, 0x3a) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000500040900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a3000279fade2000000050a05000000000000000000050000060c00024000000000000000010900010073797a3000000000140000001100010000000000000000000000000a00"], 0xa0}}, 0x0) 6.88115578s ago: executing program 2 (id=1009): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x221809, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)='-', 0x1}, 0x68) 6.879323681s ago: executing program 1 (id=1010): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0x90000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x2) close(r1) 5.50768109s ago: executing program 4 (id=1012): r0 = socket$l2tp(0x2, 0x2, 0x73) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000640)=ANY=[@ANYBLOB='gid=forget,iocharset=cp1255,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f7672732c696f636861727365743d6d6163696e7569742c73686f727461642c7569643d666f726765742c696f636861727365743d63703836312c008ab2fd0c6148ca20e181888224b0af7127bc6ef9202c31a762c7170f7c3b36e2a424b7cdae71259a9f3d7b27c613181a4dd120ba579a34781edc84fa324a09d4a1fa90e0d72feaf60572b0573d65d05ca70b180dd5411edebbc2636b7cca49a8fc0e895794b51ea1a75d9f743cec5f1a179049f7193394ae98115399acf9d8edfa03abf0815e2730e17c53211aa69eee105f1776429dea37162e3c59710d29cb1c8db05275f97c529ee98f0e9d54d80d4a6000fc"], 0x1, 0xc4f, &(0x7f0000000f40)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv6_newroute={0x20, 0x18, 0x1, 0x70bd28, 0x25dfdbff, {0xa, 0x14, 0x0, 0x5, 0x0, 0x1, 0x0, 0x8, 0x1500}, [@RTA_METRICS={0x4, 0x1e}]}, 0x20}}, 0x404c040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffe82) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 4.98003987s ago: executing program 2 (id=1013): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) 4.373534939s ago: executing program 2 (id=1014): prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @local, @local, @local, @private1}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000800000000a801400070000031700010014000200fc020000000000000000000000000001050016003200e8ff130001"], 0x4c}}, 0x40000) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00') write$P9_ROPEN(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB='dno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 4.356715917s ago: executing program 3 (id=1015): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x457, &(0x7f00000006c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r7, 0xc040ff0b, 0x110c2300fe) 4.100001468s ago: executing program 5 (id=1016): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40000040) socket(0x10, 0x803, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001dc00)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='befs\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x2}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 3.005821561s ago: executing program 3 (id=1017): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r2], 0x0, &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) 2.470877897s ago: executing program 5 (id=1018): r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, 0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 2.366217869s ago: executing program 3 (id=1019): creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x6) 2.247271989s ago: executing program 2 (id=1020): socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) gettid() timer_create(0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000019c0)=""/4097, 0x1001) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c8, 0x0, 0x2d, [{{0x6, 0x2, 0x3, 0x1, 0xe, 0x5, {0x80000000000006, 0x9, 0xcb, 0x1, 0x80000001, 0x8, 0xe629, 0x5, 0x7fffffff, 0x8000, 0xfffffff3, r8, r9, 0xc3, 0x1}}, {0x0, 0x8000000000000001, 0x1, 0x6e4bd64b, '\x00'}}, {{0x6, 0x2, 0x3, 0x10000007, 0x10000, 0xa, {0x8000000, 0x5, 0x10, 0x5, 0x2000005, 0x80, 0x6e, 0x33, 0x13, 0x8000, 0x40010000, r8, 0xee01, 0xd0, 0x7fff}}, {0x6, 0x80000000, 0x7b, 0x8, '\x00\xd9\x89\xaf:!`\xc5I\x02|\xf3d\xa7_\'\xa4\xff\xba\xd9\xa2\x11g\xa3\xb4\xd6\xb0M\xa6\x94\x18\xd4\x87\xc6\xcd\x81\xbf\xbfT\xa1?w\xe4\xb4q\x9b\x14\x8fIJ\xf5\xbc\xeb\xa8\x01`G\x13\xcb\x1e\x11`oq\xe5\xda\x81\x95f.\"\x8a\xe7\xe1Z+\xefqs\xe8\xc2E\x95\xcc\x8e9\x9c\xbb\'%t0\xf6\xa5G&l\xb7\xca\x13\xe4\xe3\x166m\xbenh\xe59sI\xfd\xe0\x1ey\xeb%\x9b\xe8T\x99H'}}]}, 0x0, 0x0, 0x0}) getdents64(r10, 0x0, 0x18) 2.004073497s ago: executing program 5 (id=1021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x404000000000008b}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 762.00353ms ago: executing program 2 (id=1022): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x84, r4, 0x5, 0x0, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @val, @val={0x3, 0x1, 0xab}, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa70a}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r6 = epoll_create1(0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x0, r7) r10 = epoll_create1(0x0) setsockopt$sock_int(r7, 0x1, 0x3, &(0x7f0000000140)=0x4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f00000000c0)={0x2000}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) llistxattr(0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x800004, 0x870}}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) 715.63464ms ago: executing program 3 (id=1023): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="030038f790f8b44006ea37c500000000"]) syz_open_dev$sg(0x0, 0x0, 0x101a02) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r2, 0x1376d000) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 511.70176ms ago: executing program 6 (id=1024): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1020410, &(0x7f0000001000)={[{@acl}, {@data_err_abort}, {@stripe={'stripe', 0x3d, 0x10000}}], [{@obj_user}, {@measure}]}, 0x21, 0x4a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) brk(0x55555ede6001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001c80)="b1", 0x1) syz_clone3(&(0x7f0000000540)={0x2011e280, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0xc}, &(0x7f0000000f00)=""/245, 0xf5, &(0x7f00000003c0)=""/32, &(0x7f0000000400)}, 0x58) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000480), 0x1001) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40, 0x13, 0x0, 0x528, 0x4, 0x0, 0x0, 0x8, 0xffff}}, 0x50) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e30342dcfc54e13b2dd711", "4ee400", "07deb79f8c96bff4"}, 0x3a) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000500040900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a3000279fade2000000050a05000000000000000000050000060c00024000000000000000010900010073797a3000000000140000001100010000000000000000000000000a00"], 0xa0}}, 0x0) 225.749593ms ago: executing program 3 (id=1025): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "c57ec9fba9622a6f4f9ae77fe20997d5f5972b74feab4310", "6a5023d5ae2f27c13885e8604916931321ea27967673958081f49b163bbd21e8"}}}}}}, 0x0) (fail_nth: 1) 105.829261ms ago: executing program 2 (id=1026): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) 777.531µs ago: executing program 3 (id=1027): openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea437d95cb3096af980c02d7c228cc0fcd139de0c5787c6a09f430de0c391e8d48f4601f42e50c3247201ff179e204923a8d4c6d57af9f48b8069be567e24c9045dd750e47e4acf8e33696473ec0690766ec8c6bd63758c22c1ad988a2b9eaf393e5bb0940e70740617b2435879d7c7263c81bcfee090f32f1336db0f6222bbc", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000a40)}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 1 (id=1028): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc1, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000340), r2, r1}}, 0x18) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) waitid$P_PIDFD(0x3, r3, 0x0, 0x4, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): read/64, error -71 [ 352.071239][ T5924] usb usb2-port1: attempt power cycle [ 352.323006][ T8222] loop4: detected capacity change from 0 to 40427 [ 352.356907][ T8222] F2FS-fs (loop4): invalid crc value [ 352.463959][ T8222] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 352.485549][ T8222] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 352.618488][ T8228] netlink: 32 bytes leftover after parsing attributes in process `syz.5.660'. [ 352.656498][ T8228] openvswitch: netlink: Flow actions attr not present in new flow. [ 352.664860][ T8222] syz.4.659: attempt to access beyond end of device [ 352.664860][ T8222] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 353.012085][ T8222] syz.4.659: attempt to access beyond end of device [ 353.012085][ T8222] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 353.021149][ T5924] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 353.352218][ T8223] f2fs_ckpt-7:4: attempt to access beyond end of device [ 353.352218][ T8223] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 353.391481][ T5924] usb 2-1: device descriptor read/8, error -71 [ 353.416178][ T8223] CPU: 1 UID: 0 PID: 8223 Comm: f2fs_ckpt-7:4 Not tainted syzkaller #0 PREEMPT(full) [ 353.416206][ T8223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.416221][ T8223] Call Trace: [ 353.416230][ T8223] [ 353.416240][ T8223] dump_stack_lvl+0x189/0x250 [ 353.416272][ T8223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.416297][ T8223] ? __pfx_queue_work_on+0x10/0x10 [ 353.416317][ T8223] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 353.416347][ T8223] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 353.416386][ T8223] f2fs_handle_critical_error+0x37c/0x540 [ 353.416420][ T8223] f2fs_write_end_io+0x886/0xb60 [ 353.416456][ T8223] __submit_merged_bio+0x27a/0x6a0 [ 353.416490][ T8223] __submit_merged_write_cond+0x255/0x530 [ 353.416524][ T8223] f2fs_write_data_pages+0x261d/0x3000 [ 353.416572][ T8223] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 353.416631][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.416671][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.416691][ T8223] ? __lock_acquire+0xab9/0xd20 [ 353.416718][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.416738][ T8223] ? do_raw_spin_lock+0x121/0x290 [ 353.416769][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.416792][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.416813][ T8223] ? do_raw_spin_unlock+0x122/0x240 [ 353.416840][ T8223] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 353.416859][ T8223] do_writepages+0x32e/0x550 [ 353.416888][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.416911][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.416931][ T8223] ? do_raw_spin_unlock+0x122/0x240 [ 353.416961][ T8223] filemap_fdatawrite+0x199/0x240 [ 353.416999][ T8223] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 353.417080][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.417106][ T8223] ? do_raw_spin_unlock+0x122/0x240 [ 353.417136][ T8223] f2fs_sync_dirty_inodes+0x31f/0x830 [ 353.417171][ T8223] f2fs_write_checkpoint+0x95a/0x1df0 [ 353.417212][ T8223] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 353.417266][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.417285][ T8223] ? down_write+0x162/0x1f0 [ 353.417306][ T8223] ? __pfx_down_write+0x10/0x10 [ 353.417328][ T8223] ? __pfx___schedule+0x10/0x10 [ 353.417363][ T8223] __checkpoint_and_complete_reqs+0xd9/0x3b0 [ 353.417389][ T8223] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 353.417426][ T8223] issue_checkpoint_thread+0xd9/0x260 [ 353.417451][ T8223] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 353.417473][ T8223] ? __pfx_autoremove_wake_function+0x10/0x10 [ 353.417501][ T8223] ? __kthread_parkme+0x7b/0x200 [ 353.417523][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.417543][ T8223] ? __kthread_parkme+0x1a1/0x200 [ 353.417571][ T8223] kthread+0x711/0x8a0 [ 353.417599][ T8223] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 353.417621][ T8223] ? __pfx_kthread+0x10/0x10 [ 353.417643][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.417667][ T8223] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.417694][ T8223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.417714][ T8223] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.417731][ T8223] ? __pfx_kthread+0x10/0x10 [ 353.417758][ T8223] ret_from_fork+0x439/0x7d0 [ 353.417782][ T8223] ? __pfx_ret_from_fork+0x10/0x10 [ 353.417808][ T8223] ? __switch_to_asm+0x39/0x70 [ 353.417834][ T8223] ? __switch_to_asm+0x33/0x70 [ 353.417858][ T8223] ? __pfx_kthread+0x10/0x10 [ 353.417884][ T8223] ret_from_fork_asm+0x1a/0x30 [ 353.417925][ T8223] [ 354.037017][ T8223] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 354.698835][ T8234] loop5: detected capacity change from 0 to 2048 [ 354.917217][ T8234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.988719][ T8242] netlink: 'syz.5.661': attribute type 30 has an invalid length. [ 356.409199][ T8244] loop1: detected capacity change from 0 to 2048 [ 356.534777][ T8244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.773990][ T8246] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 357.019339][ T8249] loop2: detected capacity change from 0 to 40427 [ 357.063821][ T8249] F2FS-fs (loop2): invalid crc value [ 357.135952][ T8246] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 357.201342][ T8249] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 357.234573][ T8249] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 357.290628][ T8249] syz.2.668: attempt to access beyond end of device [ 357.290628][ T8249] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 357.707358][ T8247] exFAT-fs (loop0): unable to read boot sector [ 357.797719][ T8247] exFAT-fs (loop0): failed to read boot sector [ 357.852545][ T8249] syz.2.668: attempt to access beyond end of device [ 357.852545][ T8249] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 357.888890][ T8247] exFAT-fs (loop0): failed to recognize exfat type [ 357.967267][ T5855] syz-executor: attempt to access beyond end of device [ 357.967267][ T5855] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 357.968621][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 357.968651][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 357.968666][ T5855] Call Trace: [ 357.968675][ T5855] [ 357.968686][ T5855] dump_stack_lvl+0x189/0x250 [ 357.968728][ T5855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.968761][ T5855] ? __pfx_queue_work_on+0x10/0x10 [ 357.968790][ T5855] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 357.968829][ T5855] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 357.968882][ T5855] f2fs_handle_critical_error+0x37c/0x540 [ 357.968930][ T5855] f2fs_write_end_io+0x886/0xb60 [ 357.968985][ T5855] __submit_merged_bio+0x27a/0x6a0 [ 357.969031][ T5855] __submit_merged_write_cond+0x255/0x530 [ 357.969079][ T5855] f2fs_write_data_pages+0x261d/0x3000 [ 357.969104][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.969132][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.969160][ T5855] ? __kasan_check_byte+0x12/0x40 [ 357.969231][ T5855] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 357.969256][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.969338][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.969366][ T5855] ? __lock_acquire+0xab9/0xd20 [ 357.969416][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.969443][ T5855] ? __lock_acquire+0xab9/0xd20 [ 357.969477][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.969505][ T5855] ? do_raw_spin_lock+0x121/0x290 [ 357.969547][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.969579][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.969607][ T5855] ? do_raw_spin_unlock+0x122/0x240 [ 357.969643][ T5855] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 357.969671][ T5855] do_writepages+0x32e/0x550 [ 357.969709][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.969742][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.969769][ T5855] ? do_raw_spin_unlock+0x122/0x240 [ 357.969810][ T5855] filemap_fdatawrite+0x199/0x240 [ 357.969844][ T5855] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 357.969944][ T5855] f2fs_sync_dirty_inodes+0x31f/0x830 [ 357.969996][ T5855] f2fs_write_checkpoint+0x95a/0x1df0 [ 357.970054][ T5855] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 357.970139][ T5855] ? kill_f2fs_super+0x298/0x6c0 [ 357.970174][ T5855] kill_f2fs_super+0x2c3/0x6c0 [ 357.970210][ T5855] ? __pfx_kill_f2fs_super+0x10/0x10 [ 357.970235][ T5855] ? radix_tree_delete_item+0x2b6/0x400 [ 357.970283][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.970310][ T5855] ? shrinker_free+0x2ce/0x3e0 [ 357.970339][ T5855] deactivate_locked_super+0xbc/0x130 [ 357.970368][ T5855] cleanup_mnt+0x425/0x4c0 [ 357.970392][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.970419][ T5855] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.970447][ T5855] task_work_run+0x1d4/0x260 [ 357.970488][ T5855] ? __pfx_task_work_run+0x10/0x10 [ 357.970523][ T5855] ? __x64_sys_umount+0x122/0x160 [ 357.970560][ T5855] ? exit_to_user_mode_loop+0x40/0x110 [ 357.970590][ T5855] exit_to_user_mode_loop+0xe9/0x110 [ 357.970616][ T5855] do_syscall_64+0x2bd/0x3b0 [ 357.970641][ T5855] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.970665][ T5855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.970689][ T5855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.970720][ T5855] ? exc_page_fault+0x9f/0xf0 [ 357.970747][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.970771][ T5855] RIP: 0033:0x7f97841901f7 [ 357.970792][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 357.970813][ T5855] RSP: 002b:00007ffd14f8c088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 357.970839][ T5855] RAX: 0000000000000000 RBX: 00007f9784211d7d RCX: 00007f97841901f7 [ 357.970857][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd14f8c140 [ 357.970873][ T5855] RBP: 00007ffd14f8c140 R08: 0000000000000000 R09: 0000000000000000 [ 357.970889][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd14f8d1d0 [ 357.970906][ T5855] R13: 00007f9784211d7d R14: 00000000000575e1 R15: 00007ffd14f8d210 [ 357.970946][ T5855] [ 358.011196][ T5855] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 358.493905][ T8262] loop5: detected capacity change from 0 to 64 [ 358.529266][ T8265] FAULT_INJECTION: forcing a failure. [ 358.529266][ T8265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.529302][ T8265] CPU: 0 UID: 0 PID: 8265 Comm: syz.3.674 Not tainted syzkaller #0 PREEMPT(full) [ 358.529329][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 358.529344][ T8265] Call Trace: [ 358.529354][ T8265] [ 358.529363][ T8265] dump_stack_lvl+0x189/0x250 [ 358.529400][ T8265] ? __pfx____ratelimit+0x10/0x10 [ 358.529426][ T8265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.529458][ T8265] ? __pfx__printk+0x10/0x10 [ 358.529482][ T8265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.529527][ T8265] should_fail_ex+0x414/0x560 [ 358.529569][ T8265] _copy_from_user+0x2d/0xb0 [ 358.529601][ T8265] do_ipv6_setsockopt+0x23e/0x2eb0 [ 358.529628][ T8265] ? aa_label_sk_perm+0x4cd/0x630 [ 358.529672][ T8265] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 358.529697][ T8265] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 358.529736][ T8265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.529772][ T8265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.529801][ T8265] ? vfs_write+0x956/0xb30 [ 358.529837][ T8265] ? __pfx___might_resched+0x10/0x10 [ 358.529866][ T8265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.529905][ T8265] ? __lock_acquire+0xab9/0xd20 [ 358.529935][ T8265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.529963][ T8265] ? aa_sk_perm+0x81e/0x950 [ 358.530010][ T8265] ? __pfx_aa_sk_perm+0x10/0x10 [ 358.530043][ T8265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.530075][ T8265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.530103][ T8265] ? aa_sock_opt_perm+0xff/0x1b0 [ 358.530145][ T8265] ipv6_setsockopt+0x59/0x170 [ 358.530173][ T8265] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 358.530217][ T8265] do_sock_setsockopt+0x17c/0x1b0 [ 358.530252][ T8265] __x64_sys_setsockopt+0x13f/0x1b0 [ 358.530288][ T8265] do_syscall_64+0xfa/0x3b0 [ 358.530313][ T8265] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.530338][ T8265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.530361][ T8265] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.530388][ T8265] ? exc_page_fault+0x9f/0xf0 [ 358.530415][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.530439][ T8265] RIP: 0033:0x7f505c58eec9 [ 358.530459][ T8265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.530480][ T8265] RSP: 002b:00007f505d423038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 358.530506][ T8265] RAX: ffffffffffffffda RBX: 00007f505c7e5fa0 RCX: 00007f505c58eec9 [ 358.530524][ T8265] RDX: 0000000000000048 RSI: 0000000000000029 RDI: 0000000000000003 [ 358.530539][ T8265] RBP: 00007f505d423090 R08: 0000000000000008 R09: 0000000000000000 [ 358.530555][ T8265] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 358.530572][ T8265] R13: 00007f505c7e6038 R14: 00007f505c7e5fa0 R15: 00007ffe566f45c8 [ 358.530610][ T8265] [ 358.564702][ T8266] netlink: 32 bytes leftover after parsing attributes in process `syz.1.673'. [ 359.193188][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.231021][ T5909] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 359.237336][ T8266] openvswitch: netlink: Flow actions attr not present in new flow. [ 359.417918][ T5909] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.451059][ T5965] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 359.473237][ T5909] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.499633][ T5909] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.513218][ T5909] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.550863][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.583773][ T5909] usbtmc 4-1:16.0: bulk endpoints not found [ 359.660916][ T5965] usb 1-1: Using ep0 maxpacket: 8 [ 359.677514][ T5965] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 359.707486][ T5965] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 359.726739][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.744105][ T5965] usb 1-1: Product: syz [ 359.752534][ T5965] usb 1-1: Manufacturer: syz [ 359.762466][ T5965] usb 1-1: SerialNumber: syz [ 359.788777][ T5965] usb 1-1: config 0 descriptor?? [ 359.811625][ T5965] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 359.837129][ T5965] usb 1-1: setting power ON [ 359.854513][ T5965] dvb-usb: bulk message failed: -22 (2/0) [ 359.875943][ T5965] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 359.898472][ T5965] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 359.920662][ T5965] usb 1-1: media controller created [ 360.026378][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.041437][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.093294][ T5965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.176930][ T5965] usb 1-1: selecting invalid altsetting 6 [ 360.194528][ T5965] usb 1-1: digital interface selection failed (-22) [ 360.311319][ T8293] loop2: detected capacity change from 0 to 256 [ 360.324650][ T8293] vfat: Unknown parameter 'time_ofset' [ 361.121506][ T8293] loop2: detected capacity change from 0 to 131072 [ 361.561371][ T8293] F2FS-fs (loop2): Test dummy encryption mode enabled [ 361.572510][ T8293] F2FS-fs (loop2): invalid crc value [ 361.657265][ T8293] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 361.669596][ T8293] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 361.704972][ T8293] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 362.120644][ T5965] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 362.141101][ T5965] usb 1-1: setting power OFF [ 362.150867][ T5965] dvb-usb: bulk message failed: -22 (2/0) [ 362.156696][ T5965] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 362.173002][ T8300] loop4: detected capacity change from 0 to 64 [ 362.210923][ T5965] (NULL device *): no alternate interface [ 362.412090][ T8301] netlink: 'syz.4.682': attribute type 10 has an invalid length. [ 362.772505][ T9] usb 4-1: USB disconnect, device number 11 [ 362.918456][ T8303] loop5: detected capacity change from 0 to 40427 [ 363.047659][ T8303] F2FS-fs (loop5): invalid crc value [ 363.091001][ T5965] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 363.141127][ T8303] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 363.156290][ T8303] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 363.168665][ T8303] syz.5.683: attempt to access beyond end of device [ 363.168665][ T8303] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 363.334522][ T8310] loop3: detected capacity change from 0 to 512 [ 363.488901][ T5965] usb 1-1: USB disconnect, device number 9 [ 363.612606][ T8303] syz.5.683: attempt to access beyond end of device [ 363.612606][ T8303] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 363.645438][ T8310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.680866][ T8310] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.856428][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.685'. [ 364.372853][ T8321] FAULT_INJECTION: forcing a failure. [ 364.372853][ T8321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.431157][ T8321] CPU: 0 UID: 0 PID: 8321 Comm: syz.0.687 Not tainted syzkaller #0 PREEMPT(full) [ 364.431190][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 364.431209][ T8321] Call Trace: [ 364.431219][ T8321] [ 364.431230][ T8321] dump_stack_lvl+0x189/0x250 [ 364.431268][ T8321] ? __pfx____ratelimit+0x10/0x10 [ 364.431292][ T8321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.431325][ T8321] ? __pfx__printk+0x10/0x10 [ 364.431349][ T8321] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.431394][ T8321] should_fail_ex+0x414/0x560 [ 364.431437][ T8321] _copy_from_user+0x2d/0xb0 [ 364.431469][ T8321] ___sys_recvmsg+0x12e/0x510 [ 364.431510][ T8321] ? __pfx____sys_recvmsg+0x10/0x10 [ 364.431572][ T8321] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.431601][ T8321] ? __fget_files+0x3a0/0x420 [ 364.431643][ T8321] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.431677][ T8321] do_recvmmsg+0x307/0x770 [ 364.431719][ T8321] ? __pfx_do_recvmmsg+0x10/0x10 [ 364.431767][ T8321] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 364.431816][ T8321] __x64_sys_recvmmsg+0x190/0x240 [ 364.431853][ T8321] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 364.431883][ T8321] ? rcu_is_watching+0x15/0xb0 [ 364.431919][ T8321] ? do_syscall_64+0xbe/0x3b0 [ 364.431952][ T8321] do_syscall_64+0xfa/0x3b0 [ 364.431982][ T8321] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.432007][ T8321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.432030][ T8321] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.432058][ T8321] ? exc_page_fault+0x9f/0xf0 [ 364.432084][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.432108][ T8321] RIP: 0033:0x7fc3d5d8eec9 [ 364.432129][ T8321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.432149][ T8321] RSP: 002b:00007fc3d6c62038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 364.432174][ T8321] RAX: ffffffffffffffda RBX: 00007fc3d5fe5fa0 RCX: 00007fc3d5d8eec9 [ 364.432193][ T8321] RDX: 0000000000000002 RSI: 0000200000000a00 RDI: 0000000000000004 [ 364.432209][ T8321] RBP: 00007fc3d6c62090 R08: 0000000000000000 R09: 0000000000000000 [ 364.432225][ T8321] R10: 0000000000002101 R11: 0000000000000246 R12: 0000000000000001 [ 364.432240][ T8321] R13: 00007fc3d5fe6038 R14: 00007fc3d5fe5fa0 R15: 00007fffaeb55738 [ 364.432278][ T8321] [ 365.830166][ T8331] loop2: detected capacity change from 0 to 64 [ 366.113683][ T8334] netlink: 'syz.2.690': attribute type 10 has an invalid length. [ 366.374532][ T8337] fuse: Bad value for 'fd' [ 366.903666][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 366.916962][ T8334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.103358][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 367.134145][ T9] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 367.167209][ T9] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 367.204681][ T9] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.250376][ T8344] program syz.5.688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.260992][ T5924] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 367.268696][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 367.285286][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 367.307390][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.326117][ T9] usb 1-1: Product: syz [ 367.377660][ T9] usb 1-1: Manufacturer: syz [ 367.404050][ T9] usb 1-1: SerialNumber: syz [ 367.582817][ T5924] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 367.683183][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 367.709793][ T5924] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 367.737821][ T8347] FAULT_INJECTION: forcing a failure. [ 367.737821][ T8347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.737869][ T8347] CPU: 0 UID: 0 PID: 8347 Comm: syz.2.696 Not tainted syzkaller #0 PREEMPT(full) [ 367.737890][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.737901][ T8347] Call Trace: [ 367.737908][ T8347] [ 367.737915][ T8347] dump_stack_lvl+0x189/0x250 [ 367.737943][ T8347] ? __pfx____ratelimit+0x10/0x10 [ 367.737963][ T8347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.737986][ T8347] ? __pfx__printk+0x10/0x10 [ 367.738004][ T8347] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.738038][ T8347] should_fail_ex+0x414/0x560 [ 367.738069][ T8347] _copy_to_iter+0x1de/0x1790 [ 367.738099][ T8347] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 367.738125][ T8347] ? __pfx__copy_to_iter+0x10/0x10 [ 367.738141][ T8347] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.738163][ T8347] ? __pfx_woken_wake_function+0x10/0x10 [ 367.738191][ T8347] ? __pfx_aa_file_perm+0x10/0x10 [ 367.738219][ T8347] tty_read+0x29b/0x690 [ 367.738238][ T8347] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.738265][ T8347] ? __pfx_tty_read+0x10/0x10 [ 367.738287][ T8347] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.738307][ T8347] ? common_file_perm+0x1b5/0x230 [ 367.738338][ T8347] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.738358][ T8347] ? security_file_permission+0x75/0x290 [ 367.738389][ T8347] vfs_read+0x55a/0xa30 [ 367.738419][ T8347] ? __pfx_vfs_read+0x10/0x10 [ 367.738451][ T8347] ? __fget_files+0x2a/0x420 [ 367.738480][ T8347] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.738505][ T8347] ksys_read+0x145/0x250 [ 367.738529][ T8347] ? __pfx_ksys_read+0x10/0x10 [ 367.738549][ T8347] ? rcu_is_watching+0x15/0xb0 [ 367.738576][ T8347] ? do_syscall_64+0xbe/0x3b0 [ 367.738600][ T8347] do_syscall_64+0xfa/0x3b0 [ 367.738621][ T8347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.738638][ T8347] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 367.738661][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.738679][ T8347] RIP: 0033:0x7f978418eec9 [ 367.738695][ T8347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.738711][ T8347] RSP: 002b:00007f9784fdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.738730][ T8347] RAX: ffffffffffffffda RBX: 00007f97843e5fa0 RCX: 00007f978418eec9 [ 367.738749][ T8347] RDX: 0000000000002020 RSI: 0000200000002080 RDI: 0000000000000005 [ 367.738761][ T8347] RBP: 00007f9784fdd090 R08: 0000000000000000 R09: 0000000000000000 [ 367.738772][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.738784][ T8347] R13: 00007f97843e6038 R14: 00007f97843e5fa0 R15: 00007ffd14f8cdf8 [ 367.738817][ T8347] [ 367.836410][ T5924] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 367.836469][ T5924] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 367.836497][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.901453][ T5924] usbtmc 5-1:16.0: bulk endpoints not found [ 368.866095][ T8367] loop5: detected capacity change from 0 to 512 [ 368.900437][ T8365] binder: BINDER_SET_CONTEXT_MGR already set [ 368.906619][ T8365] binder: 8362:8365 ioctl 4018620d 200000000040 returned -16 [ 368.937308][ T8365] syz.2.699 (8365): drop_caches: 2 [ 369.097104][ T8367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.137841][ T8367] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.068335][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.137550][ T43] usb 1-1: USB disconnect, device number 10 [ 370.151259][ T43] usblp0: removed [ 370.551902][ T5902] usb 5-1: USB disconnect, device number 6 [ 371.074997][ T8379] loop0: detected capacity change from 0 to 512 [ 371.164225][ T8388] netlink: 68 bytes leftover after parsing attributes in process `syz.1.704'. [ 371.278140][ T8388] loop1: detected capacity change from 0 to 256 [ 371.291374][ T8388] exfat: Unknown parameter 'y4|¤®UŽÙOÍÛgnd' [ 371.821835][ T8379] EXT4-fs: Ignoring removed orlov option [ 371.925603][ T8379] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 371.975586][ T8379] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 372.024632][ T8379] EXT4-fs (loop0): 1 orphan inode deleted [ 372.065498][ T8395] overlayfs: missing 'lowerdir' [ 372.105441][ T8395] loop1: detected capacity change from 0 to 8 [ 372.106181][ T8379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.148369][ T8395] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 372.161011][ T5902] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 372.289398][ T8379] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.703: iget: bad extra_isize 46 (inode size 256) [ 372.374949][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 372.394214][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.421556][ T5909] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 372.459669][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.511452][ T8398] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.703: iget: bad extra_isize 46 (inode size 256) [ 372.530321][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 372.616104][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.652133][ T5909] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 372.711119][ T5909] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 372.730301][ T5902] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 372.775608][ T5909] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 372.791395][ T8398] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.703: iget: bad extra_isize 46 (inode size 256) [ 372.800676][ T5902] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 372.817465][ T5902] usb 5-1: Manufacturer: syz [ 372.823892][ T5909] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 372.833285][ T5909] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 372.844461][ T5902] usb 5-1: config 0 descriptor?? [ 372.849490][ T5909] usb 4-1: Manufacturer: syz [ 372.854458][ T5909] usb 4-1: SerialNumber: syz [ 373.083369][ T8401] overlayfs: failed to set xattr on upper [ 373.104892][ T5924] usb 5-1: USB disconnect, device number 7 [ 373.114378][ T8404] FAULT_INJECTION: forcing a failure. [ 373.114378][ T8404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.139713][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.157783][ T8401] overlayfs: ...falling back to redirect_dir=nofollow. [ 373.167031][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.234595][ T8401] overlayfs: ...falling back to index=off. [ 373.271481][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.294953][ T8401] overlayfs: ...falling back to uuid=null. [ 373.348471][ T8404] CPU: 1 UID: 0 PID: 8404 Comm: syz.1.709 Not tainted syzkaller #0 PREEMPT(full) [ 373.348502][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.348518][ T8404] Call Trace: [ 373.348527][ T8404] [ 373.348537][ T8404] dump_stack_lvl+0x189/0x250 [ 373.348574][ T8404] ? __pfx____ratelimit+0x10/0x10 [ 373.348599][ T8404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.348631][ T8404] ? __pfx__printk+0x10/0x10 [ 373.348669][ T8404] should_fail_ex+0x414/0x560 [ 373.348710][ T8404] _copy_to_user+0x31/0xb0 [ 373.348749][ T8404] simple_read_from_buffer+0xe1/0x170 [ 373.348787][ T8404] proc_fail_nth_read+0x1b3/0x220 [ 373.348819][ T8404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.348849][ T8404] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.348877][ T8404] ? rw_verify_area+0x2a6/0x4d0 [ 373.348906][ T8404] ? __lock_acquire+0xab9/0xd20 [ 373.348928][ T8404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.348956][ T8404] vfs_read+0x200/0xa30 [ 373.348985][ T8404] ? fdget_pos+0x247/0x320 [ 373.349026][ T8404] ? __pfx___mutex_lock+0x10/0x10 [ 373.349057][ T8404] ? __pfx_vfs_read+0x10/0x10 [ 373.349089][ T8404] ? __fget_files+0x2a/0x420 [ 373.349128][ T8404] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.349155][ T8404] ? __fget_files+0x3a0/0x420 [ 373.349188][ T8404] ? __fget_files+0x2a/0x420 [ 373.349227][ T8404] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.349260][ T8404] ksys_read+0x145/0x250 [ 373.349293][ T8404] ? __pfx_ksys_read+0x10/0x10 [ 373.349330][ T8404] ? do_syscall_64+0xbe/0x3b0 [ 373.349362][ T8404] do_syscall_64+0xfa/0x3b0 [ 373.349387][ T8404] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.349411][ T8404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.349434][ T8404] ? srso_alias_return_thunk+0x5/0xfbef5 [ 373.349466][ T8404] ? exc_page_fault+0x9f/0xf0 [ 373.349492][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.349515][ T8404] RIP: 0033:0x7fbb97b8d8dc [ 373.349535][ T8404] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 373.349556][ T8404] RSP: 002b:00007fbb98a69030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 373.349581][ T8404] RAX: ffffffffffffffda RBX: 00007fbb97de6090 RCX: 00007fbb97b8d8dc [ 373.349600][ T8404] RDX: 000000000000000f RSI: 00007fbb98a690a0 RDI: 0000000000000003 [ 373.349616][ T8404] RBP: 00007fbb98a69090 R08: 0000000000000000 R09: 0000000000000000 [ 373.349632][ T8404] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 373.349647][ T8404] R13: 00007fbb97de6128 R14: 00007fbb97de6090 R15: 00007ffe1988e948 [ 373.349686][ T8404] [ 373.351025][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.677939][ T5836] EXT4-fs error (device loop0): __ext4_iget:5464: inode #11: block 458766: comm syz-executor: invalid block [ 373.712658][ T5909] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 373.744516][ T5836] EXT4-fs error (device loop0): __ext4_iget:5464: inode #11: block 458766: comm syz-executor: invalid block [ 373.756283][ T5909] usb 4-1: USB disconnect, device number 12 [ 374.316814][ T8409] loop1: detected capacity change from 0 to 512 [ 374.331540][ T8409] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 374.372699][ T8409] EXT4-fs (loop1): 1 truncate cleaned up [ 374.380050][ T8409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.804153][ T8416] FAULT_INJECTION: forcing a failure. [ 374.804153][ T8416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.087265][ T8416] CPU: 0 UID: 0 PID: 8416 Comm: syz.3.714 Not tainted syzkaller #0 PREEMPT(full) [ 375.087296][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.087312][ T8416] Call Trace: [ 375.087321][ T8416] [ 375.087331][ T8416] dump_stack_lvl+0x189/0x250 [ 375.087368][ T8416] ? __pfx____ratelimit+0x10/0x10 [ 375.087393][ T8416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.087425][ T8416] ? __pfx__printk+0x10/0x10 [ 375.087448][ T8416] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.087493][ T8416] should_fail_ex+0x414/0x560 [ 375.087534][ T8416] _copy_from_user+0x2d/0xb0 [ 375.087566][ T8416] ___sys_sendmsg+0x158/0x2a0 [ 375.087601][ T8416] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.087640][ T8416] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.087701][ T8416] ? __fget_files+0x2a/0x420 [ 375.087745][ T8416] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.087771][ T8416] ? __fget_files+0x3a0/0x420 [ 375.087817][ T8416] __x64_sys_sendmsg+0x19b/0x260 [ 375.087851][ T8416] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.087893][ T8416] ? __pfx_ksys_write+0x10/0x10 [ 375.087921][ T8416] ? rcu_is_watching+0x15/0xb0 [ 375.087958][ T8416] ? do_syscall_64+0xbe/0x3b0 [ 375.087988][ T8416] do_syscall_64+0xfa/0x3b0 [ 375.088013][ T8416] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.088038][ T8416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.088060][ T8416] ? srso_alias_return_thunk+0x5/0xfbef5 [ 375.088088][ T8416] ? exc_page_fault+0x9f/0xf0 [ 375.088119][ T8416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.088144][ T8416] RIP: 0033:0x7f505c58eec9 [ 375.088164][ T8416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.088185][ T8416] RSP: 002b:00007f505d423038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.088213][ T8416] RAX: ffffffffffffffda RBX: 00007f505c7e5fa0 RCX: 00007f505c58eec9 [ 375.088230][ T8416] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000a [ 375.088242][ T8416] RBP: 00007f505d423090 R08: 0000000000000000 R09: 0000000000000000 [ 375.088254][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.088265][ T8416] R13: 00007f505c7e6038 R14: 00007f505c7e5fa0 R15: 00007ffe566f45c8 [ 375.088293][ T8416] [ 375.514233][ T8420] loop2: detected capacity change from 0 to 512 [ 375.543156][ T8420] EXT4-fs (loop2): Invalid log cluster size: 2048 [ 375.583295][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.599898][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.405795][ T6013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.421792][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.679479][ T8424] loop3: detected capacity change from 0 to 2048 [ 376.922199][ T8424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.935466][ T8429] loop1: detected capacity change from 0 to 4096 [ 377.573051][ T8439] netlink: 'syz.3.718': attribute type 30 has an invalid length. [ 378.546874][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.559864][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.970480][ T8443] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.128397][ T6013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.325539][ T6013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.614846][ T8455] loop5: detected capacity change from 0 to 64 [ 379.649648][ T6013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.781661][ T5924] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 379.811121][ T118] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 380.086542][ T118] usb 4-1: config 0 has an invalid interface number: 139 but max is 0 [ 380.176425][ T5924] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 380.200575][ T118] usb 4-1: config 0 has no interface number 0 [ 380.259251][ T118] usb 4-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.280837][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.288834][ T5924] usb 3-1: Product: syz [ 380.297387][ T118] usb 4-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 380.319479][ T5924] usb 3-1: Manufacturer: syz [ 380.328411][ T5924] usb 3-1: SerialNumber: syz [ 380.338346][ T118] usb 4-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 380.354719][ T8460] loop4: detected capacity change from 0 to 64 [ 380.566917][ T118] usb 4-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 380.912825][ T118] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 380.960853][ T118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.020633][ T118] usb 4-1: Product: syz [ 381.025337][ T118] usb 4-1: Manufacturer: syz [ 381.029960][ T118] usb 4-1: SerialNumber: syz [ 381.107239][ T118] usb 4-1: config 0 descriptor?? [ 381.146306][ T8453] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 381.216075][ T8453] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 381.291438][ T6013] bridge_slave_1: left allmulticast mode [ 381.322309][ T6013] bridge_slave_1: left promiscuous mode [ 381.362468][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.405978][ T8465] FAULT_INJECTION: forcing a failure. [ 381.405978][ T8465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.461482][ T6013] bridge_slave_0: left allmulticast mode [ 381.485090][ T8465] CPU: 1 UID: 0 PID: 8465 Comm: syz.4.730 Not tainted syzkaller #0 PREEMPT(full) [ 381.485122][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.485137][ T8465] Call Trace: [ 381.485147][ T8465] [ 381.485157][ T8465] dump_stack_lvl+0x189/0x250 [ 381.485198][ T8465] ? __pfx____ratelimit+0x10/0x10 [ 381.485223][ T8465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.485255][ T8465] ? __pfx__printk+0x10/0x10 [ 381.485279][ T8465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.485323][ T8465] should_fail_ex+0x414/0x560 [ 381.485365][ T8465] _copy_from_user+0x2d/0xb0 [ 381.485397][ T8465] ___sys_recvmsg+0x12e/0x510 [ 381.485436][ T8465] ? __pfx____sys_recvmsg+0x10/0x10 [ 381.485497][ T8465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.485525][ T8465] ? __fget_files+0x3a0/0x420 [ 381.485567][ T8465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.485600][ T8465] do_recvmmsg+0x307/0x770 [ 381.485642][ T8465] ? __pfx_do_recvmmsg+0x10/0x10 [ 381.485689][ T8465] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 381.485738][ T8465] __x64_sys_recvmmsg+0x190/0x240 [ 381.485782][ T8465] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 381.485812][ T8465] ? rcu_is_watching+0x15/0xb0 [ 381.485850][ T8465] ? do_syscall_64+0xbe/0x3b0 [ 381.485881][ T8465] do_syscall_64+0xfa/0x3b0 [ 381.485906][ T8465] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.485930][ T8465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.485953][ T8465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.485981][ T8465] ? exc_page_fault+0x9f/0xf0 [ 381.486006][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.486030][ T8465] RIP: 0033:0x7f9bea58eec9 [ 381.486050][ T8465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.486071][ T8465] RSP: 002b:00007f9beb4da038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 381.486097][ T8465] RAX: ffffffffffffffda RBX: 00007f9bea7e5fa0 RCX: 00007f9bea58eec9 [ 381.486116][ T8465] RDX: 0000000000000062 RSI: 0000200000000800 RDI: 0000000000000003 [ 381.486132][ T8465] RBP: 00007f9beb4da090 R08: 0000000000000000 R09: 0000000000000000 [ 381.486148][ T8465] R10: 0000000000012141 R11: 0000000000000246 R12: 0000000000000001 [ 381.486163][ T8465] R13: 00007f9bea7e6038 R14: 00007f9bea7e5fa0 R15: 00007fff255dba68 [ 381.486201][ T8465] [ 381.717904][ T6013] bridge_slave_0: left promiscuous mode [ 381.731421][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.856979][ T5924] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 382.890095][ T8459] loop1: detected capacity change from 0 to 32768 [ 382.926613][ T5924] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 382.940088][ T8459] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.728 (8459) [ 382.961497][ T5924] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 383.014147][ T5924] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 383.057230][ T8459] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 383.090835][ T5924] usb 3-1: USB disconnect, device number 7 [ 383.111635][ T8459] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 383.207543][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.226416][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.241091][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.249762][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.258240][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.270442][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.281373][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.289659][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.290197][ T8459] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 383.302639][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.312866][ T8459] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 383.330492][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.404573][ T5201] udevd[5201]: worker [6455] terminated by signal 33 (Unknown signal 33) [ 383.420437][ T5201] udevd[5201]: worker [6455] failed while handling '/devices/virtual/block/loop1' [ 383.522424][ T8459] BTRFS error (device loop1): open_ctree failed: -12 [ 384.493241][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.790276][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.881598][ T6013] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 384.929233][ T6013] bond0 (unregistering): Released all slaves [ 385.971938][ T5838] Bluetooth: hci0: command tx timeout [ 386.393050][ T118] mct_u232 4-1:0.139: MCT U232 converter detected [ 386.417706][ T118] usb 4-1: MCT U232 converter now attached to ttyUSB0 [ 386.532072][ T5965] usb 4-1: USB disconnect, device number 13 [ 386.578045][ T5965] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 386.631509][ T5965] mct_u232 4-1:0.139: device disconnected [ 386.871356][ T8527] fuse: Bad value for 'fd' [ 387.021302][ T8531] loop4: detected capacity change from 0 to 16 [ 387.103527][ T8531] erofs (device loop4): mounted with root inode @ nid 36. [ 387.152955][ T8530] loop3: detected capacity change from 0 to 2048 [ 387.160279][ T6013] tipc: Disabling bearer [ 387.232612][ T8530] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.260049][ T8530] netlink: 'syz.3.742': attribute type 30 has an invalid length. [ 387.272944][ T6013] tipc: Left network mode [ 387.485116][ T8539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.744'. [ 387.586031][ T8539] openvswitch: netlink: Flow actions attr not present in new flow. [ 388.015453][ T5838] Bluetooth: hci0: command tx timeout [ 388.237590][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 388.404666][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 388.417791][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 388.461425][ T43] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 388.496915][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.571234][ T43] usb 5-1: Product: syz [ 388.591002][ T43] usb 5-1: Manufacturer: syz [ 388.615382][ T43] usb 5-1: SerialNumber: syz [ 388.702212][ T8566] FAULT_INJECTION: forcing a failure. [ 388.702212][ T8566] name failslab, interval 1, probability 0, space 0, times 0 [ 388.714935][ T8566] CPU: 0 UID: 0 PID: 8566 Comm: syz.5.749 Not tainted syzkaller #0 PREEMPT(full) [ 388.714967][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.714983][ T8566] Call Trace: [ 388.714993][ T8566] [ 388.715010][ T8566] dump_stack_lvl+0x189/0x250 [ 388.715047][ T8566] ? __pfx____ratelimit+0x10/0x10 [ 388.715072][ T8566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.715105][ T8566] ? __pfx__printk+0x10/0x10 [ 388.715135][ T8566] ? __pfx___might_resched+0x10/0x10 [ 388.715163][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.715200][ T8566] should_fail_ex+0x414/0x560 [ 388.715241][ T8566] should_failslab+0xa8/0x100 [ 388.715282][ T8566] __kmalloc_cache_noprof+0x70/0x3d0 [ 388.715314][ T8566] ? io_uring_alloc_task_context+0xa0/0x570 [ 388.715357][ T8566] io_uring_alloc_task_context+0xa0/0x570 [ 388.715394][ T8566] ? rcu_is_watching+0x15/0xb0 [ 388.715426][ T8566] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 388.715463][ T8566] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 388.715502][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.715532][ T8566] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 388.715577][ T8566] __io_uring_add_tctx_node+0x33e/0x4e0 [ 388.715615][ T8566] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 388.715647][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.715675][ T8566] ? __rcu_read_unlock+0x84/0xe0 [ 388.715713][ T8566] ? __fget_files+0x2a/0x420 [ 388.715746][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.715779][ T8566] __io_uring_add_tctx_node_from_submit+0x91/0x120 [ 388.715816][ T8566] __se_sys_io_uring_enter+0x24fc/0x2b20 [ 388.715873][ T8566] ? ksys_write+0x1cb/0x250 [ 388.715909][ T8566] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 388.715941][ T8566] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 388.715968][ T8566] ? __pfx_vfs_write+0x10/0x10 [ 388.716010][ T8566] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 388.716042][ T8566] ? __fget_files+0x3a0/0x420 [ 388.716084][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.716112][ T8566] ? fput+0xa0/0xd0 [ 388.716134][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.716162][ T8566] ? ksys_write+0x22a/0x250 [ 388.716195][ T8566] ? __pfx_ksys_write+0x10/0x10 [ 388.716231][ T8566] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.716259][ T8566] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 388.716297][ T8566] do_syscall_64+0xfa/0x3b0 [ 388.716325][ T8566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.716348][ T8566] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 388.716379][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.716403][ T8566] RIP: 0033:0x7f500438eec9 [ 388.716423][ T8566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.716444][ T8566] RSP: 002b:00007f5005222038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 388.716469][ T8566] RAX: ffffffffffffffda RBX: 00007f50045e6180 RCX: 00007f500438eec9 [ 388.716488][ T8566] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000004 [ 388.716503][ T8566] RBP: 00007f5005222090 R08: 0000000000000000 R09: 0000000000000000 [ 388.716519][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.716534][ T8566] R13: 00007f50045e6218 R14: 00007f50045e6180 R15: 00007ffe2595b798 [ 388.716572][ T8566] [ 389.109187][ T43] usb 5-1: config 0 descriptor?? [ 389.131660][ T8545] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 389.140311][ T8545] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 389.386059][ T8545] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 389.430959][ T8545] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 389.507905][ T8573] loop5: detected capacity change from 0 to 256 [ 389.515485][ T8573] vfat: Unknown parameter 'time_ofset' [ 390.439601][ T8573] loop5: detected capacity change from 0 to 131072 [ 390.448165][ T5838] Bluetooth: hci0: command tx timeout [ 390.473682][ T8573] F2FS-fs (loop5): Test dummy encryption mode enabled [ 390.519975][ T8573] F2FS-fs (loop5): invalid crc value [ 390.604284][ T8573] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 390.639320][ T8579] loop1: detected capacity change from 0 to 16 [ 390.655511][ T8573] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 390.676463][ T8579] erofs: Unknown parameter '' [ 390.691152][ T43] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 390.718148][ T8573] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 390.905591][ T8545] loop4: detected capacity change from 0 to 1024 [ 390.931927][ T8545] EXT4-fs: Ignoring removed bh option [ 390.998631][ T8545] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 391.118361][ T8545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.202448][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.278787][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.339084][ T6013] hsr_slave_0: left promiscuous mode [ 391.357815][ T8545] EXT4-fs (loop4): shut down requested (1) [ 391.387961][ T6013] hsr_slave_1: left promiscuous mode [ 391.410299][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.480805][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.513107][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.520513][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.833642][ T8590] loop5: detected capacity change from 0 to 40427 [ 391.844946][ T43] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 391.862141][ T43] usb 5-1: USB disconnect, device number 8 [ 391.926882][ T6013] veth1_macvtap: left promiscuous mode [ 391.937056][ T8590] F2FS-fs (loop5): invalid crc value [ 392.021831][ T6013] veth0_macvtap: left promiscuous mode [ 392.032278][ T8590] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 392.042628][ T6013] veth1_vlan: left promiscuous mode [ 392.048322][ T6013] veth0_vlan: left promiscuous mode [ 392.053608][ T8590] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 392.074331][ T8590] syz.5.753: attempt to access beyond end of device [ 392.074331][ T8590] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 392.459413][ T8590] syz.5.753: attempt to access beyond end of device [ 392.459413][ T8590] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 392.489960][ T8591] f2fs_ckpt-7:5: attempt to access beyond end of device [ 392.489960][ T8591] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 392.539473][ T5838] Bluetooth: hci0: command tx timeout [ 392.550839][ T8591] CPU: 0 UID: 0 PID: 8591 Comm: f2fs_ckpt-7:5 Not tainted syzkaller #0 PREEMPT(full) [ 392.550868][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.550883][ T8591] Call Trace: [ 392.550892][ T8591] [ 392.550902][ T8591] dump_stack_lvl+0x189/0x250 [ 392.550938][ T8591] ? preempt_schedule_thunk+0x16/0x30 [ 392.550968][ T8591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.551001][ T8591] ? __pfx_queue_work_on+0x10/0x10 [ 392.551038][ T8591] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 392.551078][ T8591] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 392.551135][ T8591] f2fs_handle_critical_error+0x37c/0x540 [ 392.551186][ T8591] f2fs_write_end_io+0x886/0xb60 [ 392.551246][ T8591] __submit_merged_bio+0x27a/0x6a0 [ 392.551295][ T8591] __submit_merged_write_cond+0x255/0x530 [ 392.551344][ T8591] f2fs_write_data_pages+0x261d/0x3000 [ 392.551421][ T8591] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 392.551551][ T8591] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.551581][ T8591] ? __lock_acquire+0xab9/0xd20 [ 392.551619][ T8591] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.551646][ T8591] ? do_raw_spin_lock+0x121/0x290 [ 392.551690][ T8591] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.551723][ T8591] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.551751][ T8591] ? do_raw_spin_unlock+0x122/0x240 [ 392.551787][ T8591] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 392.551816][ T8591] do_writepages+0x32e/0x550 [ 392.551856][ T8591] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.551890][ T8591] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.551918][ T8591] ? do_raw_spin_unlock+0x122/0x240 [ 392.551960][ T8591] filemap_fdatawrite+0x199/0x240 [ 392.551994][ T8591] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 392.552101][ T8591] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.552136][ T8591] ? do_raw_spin_unlock+0x122/0x240 [ 392.552185][ T8591] f2fs_sync_dirty_inodes+0x31f/0x830 [ 392.552237][ T8591] f2fs_write_checkpoint+0x95a/0x1df0 [ 392.552304][ T8591] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 392.552389][ T8591] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.552417][ T8591] ? down_write+0x162/0x1f0 [ 392.552447][ T8591] ? __pfx_down_write+0x10/0x10 [ 392.552477][ T8591] ? __pfx___schedule+0x10/0x10 [ 392.552528][ T8591] __checkpoint_and_complete_reqs+0xd9/0x3b0 [ 392.552565][ T8591] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 392.552620][ T8591] issue_checkpoint_thread+0xd9/0x260 [ 392.552656][ T8591] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 392.552688][ T8591] ? __pfx_autoremove_wake_function+0x10/0x10 [ 392.552726][ T8591] ? __kthread_parkme+0x7b/0x200 [ 392.552756][ T8591] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.552780][ T8591] ? __kthread_parkme+0x1a1/0x200 [ 392.552820][ T8591] kthread+0x711/0x8a0 [ 392.552860][ T8591] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 392.552890][ T8591] ? __pfx_kthread+0x10/0x10 [ 392.552921][ T8591] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.552954][ T8591] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.552991][ T8591] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.553024][ T8591] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.553047][ T8591] ? __pfx_kthread+0x10/0x10 [ 392.553084][ T8591] ret_from_fork+0x439/0x7d0 [ 392.553119][ T8591] ? __pfx_ret_from_fork+0x10/0x10 [ 392.553158][ T8591] ? __switch_to_asm+0x39/0x70 [ 392.553193][ T8591] ? __switch_to_asm+0x33/0x70 [ 392.553227][ T8591] ? __pfx_kthread+0x10/0x10 [ 392.553265][ T8591] ret_from_fork_asm+0x1a/0x30 [ 392.553326][ T8591] [ 392.730768][ T8591] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 393.041192][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.488065][ T8604] loop3: detected capacity change from 0 to 1024 [ 393.592209][ T8607] netlink: 32 bytes leftover after parsing attributes in process `syz.2.758'. [ 393.841290][ T8610] loop4: detected capacity change from 0 to 16 [ 393.854587][ T8610] erofs (device loop4): mounted with root inode @ nid 36. [ 393.970925][ T8607] openvswitch: netlink: Flow actions attr not present in new flow. [ 394.044734][ T8604] hfsplus: bad catalog entry type [ 394.350812][ T6030] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 394.620762][ T6030] usb 4-1: Using ep0 maxpacket: 16 [ 394.627811][ T6030] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 394.646497][ T6030] usb 4-1: config 0 has no interface number 0 [ 394.665735][ T6030] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 394.683114][ T6030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.723874][ T8615] loop4: detected capacity change from 0 to 256 [ 394.730129][ T6030] usb 4-1: Product: syz [ 394.744797][ T6030] usb 4-1: Manufacturer: syz [ 394.749388][ T6030] usb 4-1: SerialNumber: syz [ 394.786467][ T6030] usb 4-1: config 0 descriptor?? [ 394.801064][ T6030] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 394.912855][ T8615] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 395.299668][ T6030] gspca_spca1528: reg_w err -71 [ 395.355862][ T6030] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 395.395170][ T6030] usb 4-1: USB disconnect, device number 14 [ 395.600138][ T6013] team0 (unregistering): Port device team_slave_1 removed [ 395.679602][ T6013] team0 (unregistering): Port device team_slave_0 removed [ 395.794102][ T6519] hfsplus: b-tree write err: -5, ino 4 [ 395.898560][ T8631] loop3: detected capacity change from 0 to 1024 [ 395.919499][ T8631] ext4: Unknown parameter 'seclabel' [ 395.979878][ T8633] loop4: detected capacity change from 0 to 1024 [ 397.238082][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 397.441112][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 397.455358][ T43] usb 5-1: config 6 has an invalid interface number: 51 but max is 1 [ 397.502893][ T43] usb 5-1: config 6 has no interface number 1 [ 397.509588][ T43] usb 5-1: config 6 interface 0 has no altsetting 0 [ 397.521429][ T43] usb 5-1: config 6 interface 51 has no altsetting 0 [ 397.655347][ T43] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 397.665339][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.679956][ T43] usb 5-1: Product: syz [ 397.687497][ T43] usb 5-1: Manufacturer: syz [ 397.697138][ T43] usb 5-1: SerialNumber: syz [ 398.238372][ T8638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.247377][ T8638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.653911][ T3528] hfsplus: b-tree write err: -5, ino 4 [ 399.676003][ T43] xr_serial 5-1:6.51: xr_serial converter detected [ 399.704780][ T43] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 399.746125][ T43] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 399.790281][ T43] usb 5-1: USB disconnect, device number 9 [ 399.883528][ T43] xr_serial 5-1:6.0: device disconnected [ 399.944754][ T5902] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 400.018106][ T30] audit: type=1326 audit(1759353533.021:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978418eec9 code=0x7ffc0000 [ 400.110114][ T30] audit: type=1326 audit(1759353533.061:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f978418eec9 code=0x7ffc0000 [ 400.167888][ T5902] usb 6-1: config 0 has no interfaces? [ 400.183895][ T8483] chnl_net:caif_netlink_parms(): no params data found [ 400.198946][ T30] audit: type=1326 audit(1759353533.061:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978418eec9 code=0x7ffc0000 [ 400.234572][ T5902] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 400.277268][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 400.282874][ T30] audit: type=1326 audit(1759353533.061:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f978418d97f code=0x7ffc0000 [ 400.314209][ T5902] usb 6-1: Product: syz [ 400.324311][ T5902] usb 6-1: Manufacturer: syz [ 400.338669][ T5902] usb 6-1: SerialNumber: syz [ 400.947234][ T5902] usb 6-1: config 0 descriptor?? [ 400.953076][ T30] audit: type=1326 audit(1759353533.061:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978418eec9 code=0x7ffc0000 [ 401.041750][ T30] audit: type=1326 audit(1759353533.091:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f978418eec9 code=0x7ffc0000 [ 401.067553][ T30] audit: type=1326 audit(1759353533.091:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978418eec9 code=0x7ffc0000 [ 401.146152][ T30] audit: type=1326 audit(1759353533.091:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f978418eec9 code=0x7ffc0000 [ 401.171063][ T8666] sctp: [Deprecated]: syz.4.776 (pid 8666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.171063][ T8666] Use struct sctp_sack_info instead [ 401.225482][ T5902] usb 6-1: USB disconnect, device number 10 [ 401.264178][ T30] audit: type=1326 audit(1759353533.091:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f978418eec9 code=0x7ffc0000 [ 401.375611][ T30] audit: type=1326 audit(1759353533.091:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.2.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f978418d710 code=0x7ffc0000 [ 402.224117][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.239060][ T8683] syz.1.779 (8683): drop_caches: 2 [ 402.250329][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.303255][ T8483] bridge_slave_0: entered allmulticast mode [ 402.346991][ T8483] bridge_slave_0: entered promiscuous mode [ 402.394575][ T8483] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.444550][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.487074][ T8483] bridge_slave_1: entered allmulticast mode [ 402.512888][ T8694] netlink: 32 bytes leftover after parsing attributes in process `syz.5.782'. [ 402.524290][ T8483] bridge_slave_1: entered promiscuous mode [ 402.541664][ T8694] openvswitch: netlink: Flow actions attr not present in new flow. [ 403.105275][ T8483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.328368][ T8483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.523107][ T8714] loop4: detected capacity change from 0 to 2048 [ 403.585565][ T8714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.619326][ T8718] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 403.627381][ T8718] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 403.635307][ T8718] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 403.643204][ T8718] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 403.651112][ T8718] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 403.659714][ T8718] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 403.667637][ T8718] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 403.675540][ T8718] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 403.683450][ T8718] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 403.737310][ T8483] team0: Port device team_slave_0 added [ 403.956799][ T8483] team0: Port device team_slave_1 added [ 404.424767][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.460517][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.538663][ T8483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.572322][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.579265][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.659352][ T8483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.945368][ T8733] netlink: 'syz.2.796': attribute type 30 has an invalid length. [ 405.270140][ T8483] hsr_slave_0: entered promiscuous mode [ 405.301178][ T8483] hsr_slave_1: entered promiscuous mode [ 405.324928][ T8483] debugfs: 'hsr0' already exists in 'hsr' [ 405.332126][ T8745] loop3: detected capacity change from 0 to 1024 [ 405.350912][ T8483] Cannot create hsr debugfs directory [ 405.413435][ T8745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 405.475138][ T8745] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.768029][ T8722] loop5: detected capacity change from 0 to 32768 [ 405.801366][ T8722] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.793 (8722) [ 405.811226][ T5909] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 405.893109][ T8722] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 405.914619][ T8722] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 406.222038][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 406.451290][ T5909] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 406.491137][ T5909] usb 4-1: config 0 has no interface number 0 [ 406.497263][ T5909] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.582781][ T5909] usb 4-1: config 0 interface 85 has no altsetting 0 [ 406.620444][ T5909] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 406.629933][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.630318][ T8722] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 406.740371][ T8722] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 406.789132][ T5909] usb 4-1: Product: syz [ 406.844114][ T8722] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 406.844437][ T8722] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 406.876030][ T5909] usb 4-1: Manufacturer: syz [ 406.891076][ T8750] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 406.906298][ T8722] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 406.906550][ T8722] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 406.922560][ T5909] usb 4-1: SerialNumber: syz [ 406.972741][ T8722] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 406.973099][ T8722] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 407.012739][ T5909] usb 4-1: config 0 descriptor?? [ 407.031357][ T8722] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 407.100984][ T8722] BTRFS error (device loop5): open_ctree failed: -12 [ 407.642361][ T8483] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 407.681952][ T5909] appletouch 4-1:0.85: Geyser mode initialized. [ 407.691399][ T6030] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 407.713599][ T5909] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input9 [ 407.727461][ T8483] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 407.770419][ T8483] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 407.837486][ T8483] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 407.900791][ T6030] usb 2-1: unable to get BOS descriptor or descriptor too short [ 407.956473][ T6030] usb 2-1: not running at top speed; connect to a high speed hub [ 408.017414][ T6030] usb 2-1: config 106 has an invalid interface number: 8 but max is 0 [ 408.064520][ T6030] usb 2-1: config 106 has no interface number 0 [ 408.104639][ T6030] usb 2-1: config 106 interface 8 has no altsetting 0 [ 408.185143][ T6030] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 408.380880][ T6030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.389037][ T6030] usb 2-1: Product: syz [ 408.395690][ T6030] usb 2-1: Manufacturer: syz [ 408.400353][ T6030] usb 2-1: SerialNumber: syz [ 408.432682][ T8807] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.799: lblock 0 mapped to illegal pblock 0 (length 1) [ 408.596501][ T8483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.633417][ T8807] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 408.669373][ T8807] EXT4-fs (loop3): This should not happen!! Data will be lost [ 408.669373][ T8807] [ 408.711971][ T8483] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.733196][ T8807] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.799: lblock 0 mapped to illegal pblock 0 (length 1) [ 408.735539][ T8812] loop5: detected capacity change from 0 to 512 [ 408.815396][ T8813] netlink: 72 bytes leftover after parsing attributes in process `syz.1.807'. [ 409.048962][ T8807] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 409.328736][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.335956][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.384241][ T8807] EXT4-fs (loop3): This should not happen!! Data will be lost [ 409.384241][ T8807] [ 409.419372][ T6030] kalmia 2-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 409.444839][ T6030] kalmia 2-1:106.8: probe with driver kalmia failed with error -22 [ 409.468990][ T6030] usb 2-1: USB disconnect, device number 12 [ 409.471284][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.482042][ T6800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.515759][ T8812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.558795][ T8812] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 409.904336][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.810'. [ 410.274073][ T8834] FAULT_INJECTION: forcing a failure. [ 410.274073][ T8834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.340508][ T8834] CPU: 1 UID: 0 PID: 8834 Comm: syz.4.813 Not tainted syzkaller #0 PREEMPT(full) [ 410.340541][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.340556][ T8834] Call Trace: [ 410.340566][ T8834] [ 410.340576][ T8834] dump_stack_lvl+0x189/0x250 [ 410.340618][ T8834] ? __pfx____ratelimit+0x10/0x10 [ 410.340642][ T8834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.340674][ T8834] ? __pfx__printk+0x10/0x10 [ 410.340701][ T8834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.340746][ T8834] should_fail_ex+0x414/0x560 [ 410.340793][ T8834] _copy_from_iter+0x1de/0x1790 [ 410.340820][ T8834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.340853][ T8834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.340880][ T8834] ? __lock_acquire+0xab9/0xd20 [ 410.340913][ T8834] ? __pfx__copy_from_iter+0x10/0x10 [ 410.340958][ T8834] tun_get_user+0x219/0x3ea0 [ 410.341009][ T8834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.341036][ T8834] ? aa_file_perm+0x44d/0x1550 [ 410.341059][ T8834] ? __pfx_tun_get_user+0x10/0x10 [ 410.341086][ T8834] ? _parse_integer_limit+0x1ae/0x1f0 [ 410.341133][ T8834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.341161][ T8834] ? __lock_acquire+0xab9/0xd20 [ 410.341192][ T8834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.341219][ T8834] ? ref_tracker_alloc+0x318/0x460 [ 410.341254][ T8834] ? __lock_acquire+0xab9/0xd20 [ 410.341281][ T8834] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 410.341325][ T8834] ? tun_get+0x1c/0x2f0 [ 410.341354][ T8834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.341385][ T8834] ? tun_get+0x1c/0x2f0 [ 410.341411][ T8834] ? tun_get+0x1c/0x2f0 [ 410.341437][ T8834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.341470][ T8834] tun_chr_write_iter+0x113/0x200 [ 410.341501][ T8834] vfs_write+0x5c9/0xb30 [ 410.341538][ T8834] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 410.341567][ T8834] ? __pfx_vfs_write+0x10/0x10 [ 410.341610][ T8834] ? __fget_files+0x2a/0x420 [ 410.341649][ T8834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.341682][ T8834] ksys_write+0x145/0x250 [ 410.341716][ T8834] ? __pfx_ksys_write+0x10/0x10 [ 410.341743][ T8834] ? rcu_is_watching+0x15/0xb0 [ 410.341784][ T8834] ? do_syscall_64+0xbe/0x3b0 [ 410.341816][ T8834] do_syscall_64+0xfa/0x3b0 [ 410.341840][ T8834] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.341864][ T8834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.341888][ T8834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.341915][ T8834] ? exc_page_fault+0x9f/0xf0 [ 410.341941][ T8834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.341964][ T8834] RIP: 0033:0x7f9bea58eec9 [ 410.341985][ T8834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.342006][ T8834] RSP: 002b:00007f9beb4b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 410.342030][ T8834] RAX: ffffffffffffffda RBX: 00007f9bea7e6090 RCX: 00007f9bea58eec9 [ 410.342049][ T8834] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 410.342065][ T8834] RBP: 00007f9beb4b9090 R08: 0000000000000000 R09: 0000000000000000 [ 410.342081][ T8834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.342095][ T8834] R13: 00007f9bea7e6128 R14: 00007f9bea7e6090 R15: 00007fff255dba68 [ 410.342133][ T8834] [ 410.989238][ T118] usb 4-1: USB disconnect, device number 15 [ 411.081542][ T8842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.817'. [ 411.111040][ T8842] net_ratelimit: 45 callbacks suppressed [ 411.111058][ T8842] openvswitch: netlink: Flow actions attr not present in new flow. [ 411.378986][ T49] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.575135][ T118] appletouch 4-1:0.85: input: appletouch disconnected [ 411.589195][ T49] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 411.665810][ T49] EXT4-fs (loop3): This should not happen!! Data will be lost [ 411.665810][ T49] [ 411.790321][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 412.067194][ T8483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.851358][ T8857] loop4: detected capacity change from 0 to 4096 [ 412.911838][ T8857] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 413.998041][ T8857] ntfs3(loop4): ino=19, mi_enum_attr [ 414.016244][ T8857] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 414.301578][ T5909] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 414.495017][ T5909] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 414.560229][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.594517][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.610999][ T5909] usb 2-1: Product: syz [ 414.625038][ T5909] usb 2-1: Manufacturer: syz [ 414.629653][ T5909] usb 2-1: SerialNumber: syz [ 414.711860][ T5909] usb 2-1: config 0 descriptor?? [ 414.727967][ T5909] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 414.886492][ T8890] FAULT_INJECTION: forcing a failure. [ 414.886492][ T8890] name failslab, interval 1, probability 0, space 0, times 0 [ 414.940850][ T8890] CPU: 1 UID: 0 PID: 8890 Comm: syz.3.829 Not tainted syzkaller #0 PREEMPT(full) [ 414.940883][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 414.940899][ T8890] Call Trace: [ 414.940908][ T8890] [ 414.940918][ T8890] dump_stack_lvl+0x189/0x250 [ 414.940956][ T8890] ? __pfx____ratelimit+0x10/0x10 [ 414.940980][ T8890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.941013][ T8890] ? __pfx__printk+0x10/0x10 [ 414.941043][ T8890] ? __pfx___might_resched+0x10/0x10 [ 414.941070][ T8890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.941105][ T8890] should_fail_ex+0x414/0x560 [ 414.941145][ T8890] should_failslab+0xa8/0x100 [ 414.941182][ T8890] __kmalloc_noprof+0xcb/0x4f0 [ 414.941211][ T8890] ? kfree+0x4d/0x440 [ 414.941237][ T8890] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 414.941280][ T8890] tomoyo_realpath_from_path+0xe3/0x5d0 [ 414.941320][ T8890] ? tomoyo_domain+0xd9/0x130 [ 414.941349][ T8890] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 414.941379][ T8890] tomoyo_path_number_perm+0x1e8/0x5a0 [ 414.941414][ T8890] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 414.941453][ T8890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.941492][ T8890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.941518][ T8890] ? __lock_acquire+0xab9/0xd20 [ 414.941565][ T8890] ? __fget_files+0x2a/0x420 [ 414.941602][ T8890] ? __fget_files+0x2a/0x420 [ 414.941635][ T8890] ? __fget_files+0x3a0/0x420 [ 414.941667][ T8890] ? __fget_files+0x2a/0x420 [ 414.941704][ T8890] security_file_ioctl+0xcb/0x2d0 [ 414.941737][ T8890] __se_sys_ioctl+0x47/0x170 [ 414.941767][ T8890] do_syscall_64+0xfa/0x3b0 [ 414.941792][ T8890] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.941820][ T8890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.941844][ T8890] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.941871][ T8890] ? exc_page_fault+0x9f/0xf0 [ 414.941899][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.941923][ T8890] RIP: 0033:0x7f505c58eec9 [ 414.941944][ T8890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.941965][ T8890] RSP: 002b:00007f505d423038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.941990][ T8890] RAX: ffffffffffffffda RBX: 00007f505c7e5fa0 RCX: 00007f505c58eec9 [ 414.942010][ T8890] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000006 [ 414.942024][ T8890] RBP: 00007f505d423090 R08: 0000000000000000 R09: 0000000000000000 [ 414.942039][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.942053][ T8890] R13: 00007f505c7e6038 R14: 00007f505c7e5fa0 R15: 00007ffe566f45c8 [ 414.942092][ T8890] [ 414.971413][ T8890] ERROR: Out of memory at tomoyo_realpath_from_path. [ 415.134039][ T8483] veth0_vlan: entered promiscuous mode [ 415.268789][ T8897] netlink: 32 bytes leftover after parsing attributes in process `syz.5.830'. [ 415.336649][ T8897] openvswitch: netlink: Flow actions attr not present in new flow. [ 415.337848][ T8483] veth1_vlan: entered promiscuous mode [ 415.377706][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 415.523949][ T8902] FAULT_INJECTION: forcing a failure. [ 415.523949][ T8902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.547727][ T8483] veth0_macvtap: entered promiscuous mode [ 415.553635][ T8902] CPU: 1 UID: 0 PID: 8902 Comm: syz.3.832 Not tainted syzkaller #0 PREEMPT(full) [ 415.553664][ T8902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.553679][ T8902] Call Trace: [ 415.553689][ T8902] [ 415.553698][ T8902] dump_stack_lvl+0x189/0x250 [ 415.553734][ T8902] ? __pfx____ratelimit+0x10/0x10 [ 415.553759][ T8902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.553801][ T8902] ? __pfx__printk+0x10/0x10 [ 415.553833][ T8902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 415.553877][ T8902] should_fail_ex+0x414/0x560 [ 415.553919][ T8902] _copy_from_user+0x2d/0xb0 [ 415.553950][ T8902] __sys_bpf+0x1e3/0x860 [ 415.553977][ T8902] ? __pfx___sys_bpf+0x10/0x10 [ 415.554019][ T8902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 415.554046][ T8902] ? ksys_write+0x22a/0x250 [ 415.554080][ T8902] ? __pfx_ksys_write+0x10/0x10 [ 415.554107][ T8902] ? rcu_is_watching+0x15/0xb0 [ 415.554146][ T8902] __x64_sys_bpf+0x7c/0x90 [ 415.554183][ T8902] do_syscall_64+0xfa/0x3b0 [ 415.554209][ T8902] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.554232][ T8902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.554255][ T8902] ? srso_alias_return_thunk+0x5/0xfbef5 [ 415.554282][ T8902] ? exc_page_fault+0x9f/0xf0 [ 415.554308][ T8902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.554331][ T8902] RIP: 0033:0x7f505c58eec9 [ 415.554351][ T8902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.554371][ T8902] RSP: 002b:00007f505d423038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.554396][ T8902] RAX: ffffffffffffffda RBX: 00007f505c7e5fa0 RCX: 00007f505c58eec9 [ 415.554414][ T8902] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 415.554430][ T8902] RBP: 00007f505d423090 R08: 0000000000000000 R09: 0000000000000000 [ 415.554446][ T8902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.554461][ T8902] R13: 00007f505c7e6038 R14: 00007f505c7e5fa0 R15: 00007ffe566f45c8 [ 415.554499][ T8902] [ 415.564895][ T5909] usb 2-1: USB disconnect, device number 13 [ 415.807333][ T8483] veth1_macvtap: entered promiscuous mode [ 416.157195][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.256430][ T8913] fuse: Unknown parameter 'user_i00000000000000000000' [ 416.490108][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.608407][ T997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.969746][ T6519] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.041855][ T6519] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.128117][ T6519] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.206843][ T8908] sctp: [Deprecated]: syz.3.835 (pid 8908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.206843][ T8908] Use struct sctp_sack_info instead [ 417.287408][ T8926] loop5: detected capacity change from 0 to 512 [ 417.380094][ T8926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.440238][ T8931] loop1: detected capacity change from 0 to 512 [ 417.471048][ T8926] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.500868][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.508701][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.674685][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.839'. [ 417.983794][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.035793][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.122912][ T8931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.192820][ T8931] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 418.286273][ T8941] loop4: detected capacity change from 0 to 512 [ 418.333273][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.503500][ T8941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.593591][ T8947] loop3: detected capacity change from 0 to 16 [ 419.185722][ T8947] erofs (device loop3): mounted with root inode @ nid 36. [ 419.295177][ T8941] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.246183][ T8952] loop3: detected capacity change from 0 to 1024 [ 420.403008][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.498131][ T8960] netlink: 32 bytes leftover after parsing attributes in process `syz.5.847'. [ 420.515535][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.520065][ T8960] openvswitch: netlink: Flow actions attr not present in new flow. [ 420.617134][ T8961] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 420.659283][ T8961] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 420.692024][ T8952] hfsplus: b-tree write err: -5, ino 3 [ 420.725391][ T8961] exFAT-fs (loop6): unable to read boot sector [ 420.768808][ T8965] loop4: detected capacity change from 0 to 512 [ 420.817210][ T8961] exFAT-fs (loop6): failed to read boot sector [ 420.860432][ T8961] exFAT-fs (loop6): failed to recognize exfat type [ 420.871853][ T5909] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 421.181981][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.848'. [ 421.297273][ T8972] fuse: Unknown parameter 'user_i00000000000000000000' [ 421.311234][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 421.318746][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.350210][ T5909] usb 4-1: config 0 has no interfaces? [ 421.404927][ T5909] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 421.421636][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.429647][ T5909] usb 4-1: Product: syz [ 421.473149][ T8975] FAULT_INJECTION: forcing a failure. [ 421.473149][ T8975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.500780][ T5909] usb 4-1: Manufacturer: syz [ 421.505396][ T5909] usb 4-1: SerialNumber: syz [ 421.517309][ T8975] CPU: 1 UID: 0 PID: 8975 Comm: syz.6.852 Not tainted syzkaller #0 PREEMPT(full) [ 421.517337][ T8975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.517352][ T8975] Call Trace: [ 421.517361][ T8975] [ 421.517371][ T8975] dump_stack_lvl+0x189/0x250 [ 421.517408][ T8975] ? __pfx____ratelimit+0x10/0x10 [ 421.517432][ T8975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.517470][ T8975] ? __pfx__printk+0x10/0x10 [ 421.517509][ T8975] should_fail_ex+0x414/0x560 [ 421.517551][ T8975] _copy_to_user+0x31/0xb0 [ 421.517582][ T8975] ? __pfx_virtio_read+0x10/0x10 [ 421.517611][ T8975] rng_dev_read+0x3f2/0x770 [ 421.517639][ T8975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.517675][ T8975] ? __pfx_rng_dev_read+0x10/0x10 [ 421.517701][ T8975] ? common_file_perm+0x1b5/0x230 [ 421.517743][ T8975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.517770][ T8975] ? security_file_permission+0x75/0x290 [ 421.517808][ T8975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.517834][ T8975] ? rw_verify_area+0x2a6/0x4d0 [ 421.517863][ T8975] ? __lock_acquire+0xab9/0xd20 [ 421.517886][ T8975] ? __pfx_rng_dev_read+0x10/0x10 [ 421.517916][ T8975] vfs_read+0x200/0xa30 [ 421.517957][ T8975] ? __pfx_vfs_read+0x10/0x10 [ 421.517983][ T8975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.518015][ T8975] ? __fget_files+0x2a/0x420 [ 421.518053][ T8975] ? __fget_files+0x2a/0x420 [ 421.518086][ T8975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.518113][ T8975] ? __fget_files+0x3a0/0x420 [ 421.518146][ T8975] ? __fget_files+0x2a/0x420 [ 421.518185][ T8975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.518217][ T8975] ksys_read+0x145/0x250 [ 421.518250][ T8975] ? __pfx_ksys_read+0x10/0x10 [ 421.518276][ T8975] ? rcu_is_watching+0x15/0xb0 [ 421.518313][ T8975] ? do_syscall_64+0xbe/0x3b0 [ 421.518344][ T8975] do_syscall_64+0xfa/0x3b0 [ 421.518368][ T8975] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.518392][ T8975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.518415][ T8975] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.518443][ T8975] ? exc_page_fault+0x9f/0xf0 [ 421.518469][ T8975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.518492][ T8975] RIP: 0033:0x7fbda378eec9 [ 421.518512][ T8975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.518531][ T8975] RSP: 002b:00007fbda46b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.518556][ T8975] RAX: ffffffffffffffda RBX: 00007fbda39e5fa0 RCX: 00007fbda378eec9 [ 421.518575][ T8975] RDX: 00000000fffffdb2 RSI: 0000200000002c80 RDI: 0000000000000003 [ 421.518591][ T8975] RBP: 00007fbda46b9090 R08: 0000000000000000 R09: 0000000000000000 [ 421.518607][ T8975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.518622][ T8975] R13: 00007fbda39e6038 R14: 00007fbda39e5fa0 R15: 00007ffe734388a8 [ 421.518660][ T8975] [ 421.532768][ T5909] usb 4-1: config 0 descriptor?? [ 422.103416][ T8982] overlayfs: failed to resolve './file2': -2 [ 422.270901][ T8952] hfsplus: b-tree write err: -5, ino 3 [ 423.894195][ T8998] loop4: detected capacity change from 0 to 16 [ 423.968050][ T8998] erofs (device loop4): mounted with root inode @ nid 36. [ 424.603458][ T9] usb 4-1: USB disconnect, device number 16 [ 425.059971][ T9006] loop6: detected capacity change from 0 to 40427 [ 425.070058][ T9008] FAULT_INJECTION: forcing a failure. [ 425.070058][ T9008] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 425.083376][ T9008] CPU: 0 UID: 0 PID: 9008 Comm: syz.5.861 Not tainted syzkaller #0 PREEMPT(full) [ 425.083405][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 425.083421][ T9008] Call Trace: [ 425.083430][ T9008] [ 425.083441][ T9008] dump_stack_lvl+0x189/0x250 [ 425.083479][ T9008] ? __pfx____ratelimit+0x10/0x10 [ 425.083504][ T9008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.083538][ T9008] ? __pfx__printk+0x10/0x10 [ 425.083564][ T9008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.083606][ T9008] should_fail_ex+0x414/0x560 [ 425.083649][ T9008] prepare_alloc_pages+0x213/0x610 [ 425.083697][ T9008] __alloc_frozen_pages_noprof+0x123/0x370 [ 425.083736][ T9008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.083770][ T9008] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 425.083815][ T9008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.083843][ T9008] ? __lock_acquire+0xab9/0xd20 [ 425.083870][ T9008] ? policy_nodemask+0x27c/0x720 [ 425.083911][ T9008] alloc_pages_mpol+0x232/0x4a0 [ 425.083953][ T9008] alloc_pages_noprof+0xa9/0x190 [ 425.083990][ T9008] get_free_pages_noprof+0xf/0x80 [ 425.084029][ T9008] environ_read+0xbc/0x3e0 [ 425.084085][ T9008] vfs_readv+0x5aa/0x850 [ 425.084124][ T9008] ? __pfx_environ_read+0x10/0x10 [ 425.084165][ T9008] ? __pfx_vfs_readv+0x10/0x10 [ 425.084217][ T9008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.084249][ T9008] ? __fget_files+0x2a/0x420 [ 425.084290][ T9008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.084317][ T9008] ? __fget_files+0x3a0/0x420 [ 425.084351][ T9008] ? __fget_files+0x2a/0x420 [ 425.084391][ T9008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.084426][ T9008] __x64_sys_preadv+0x197/0x2a0 [ 425.084464][ T9008] ? __pfx___x64_sys_preadv+0x10/0x10 [ 425.084495][ T9008] ? rcu_is_watching+0x15/0xb0 [ 425.084532][ T9008] ? do_syscall_64+0xbe/0x3b0 [ 425.084564][ T9008] do_syscall_64+0xfa/0x3b0 [ 425.084589][ T9008] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.084614][ T9008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.084638][ T9008] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.084665][ T9008] ? exc_page_fault+0x9f/0xf0 [ 425.084692][ T9008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.084717][ T9008] RIP: 0033:0x7f500438eec9 [ 425.084737][ T9008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.084758][ T9008] RSP: 002b:00007f500522f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 425.084785][ T9008] RAX: ffffffffffffffda RBX: 00007f50045e6180 RCX: 00007f500438eec9 [ 425.084803][ T9008] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000005 [ 425.084819][ T9008] RBP: 00007f500522f090 R08: 0000000000000000 R09: 0000000000000000 [ 425.084835][ T9008] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000001 [ 425.084851][ T9008] R13: 00007f50045e6218 R14: 00007f50045e6180 R15: 00007ffe2595b798 [ 425.084889][ T9008] [ 425.425832][ T9006] F2FS-fs (loop6): invalid crc value [ 425.793067][ T9003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.862'. [ 425.843082][ T9013] FAULT_INJECTION: forcing a failure. [ 425.843082][ T9013] name failslab, interval 1, probability 0, space 0, times 0 [ 425.856075][ T9003] openvswitch: netlink: Flow actions attr not present in new flow. [ 425.894672][ T9006] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 425.908097][ T9006] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 426.075182][ T9013] CPU: 0 UID: 0 PID: 9013 Comm: syz.1.864 Not tainted syzkaller #0 PREEMPT(full) [ 426.075216][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 426.075231][ T9013] Call Trace: [ 426.075241][ T9013] [ 426.075251][ T9013] dump_stack_lvl+0x189/0x250 [ 426.075291][ T9013] ? __pfx____ratelimit+0x10/0x10 [ 426.075319][ T9013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.075352][ T9013] ? __pfx__printk+0x10/0x10 [ 426.075383][ T9013] ? __pfx___might_resched+0x10/0x10 [ 426.075417][ T9013] should_fail_ex+0x414/0x560 [ 426.075458][ T9013] ? seq_read_iter+0x1fd/0xe10 [ 426.075483][ T9013] should_failslab+0xa8/0x100 [ 426.075519][ T9013] __kvmalloc_node_noprof+0x161/0x5f0 [ 426.075553][ T9013] ? seq_read_iter+0x1fd/0xe10 [ 426.075586][ T9013] seq_read_iter+0x1fd/0xe10 [ 426.075612][ T9013] ? _parse_integer_limit+0x1ae/0x1f0 [ 426.075653][ T9013] ? look_up_lock_class+0x74/0x170 [ 426.075681][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.075709][ T9013] ? __asan_memset+0x22/0x50 [ 426.075743][ T9013] seq_read+0x369/0x480 [ 426.075781][ T9013] ? __pfx_seq_read+0x10/0x10 [ 426.075813][ T9013] ? __pfx___mutex_trylock_common+0x10/0x10 [ 426.075866][ T9013] ? __pfx_seq_read+0x10/0x10 [ 426.075889][ T9013] proc_reg_read+0x1e9/0x2e0 [ 426.075921][ T9013] ? __pfx_proc_reg_read+0x10/0x10 [ 426.075953][ T9013] vfs_read+0x200/0xa30 [ 426.075982][ T9013] ? fdget_pos+0x247/0x320 [ 426.076022][ T9013] ? __pfx___mutex_lock+0x10/0x10 [ 426.076048][ T9013] ? __pfx_vfs_read+0x10/0x10 [ 426.076079][ T9013] ? __fget_files+0x2a/0x420 [ 426.076118][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.076145][ T9013] ? __fget_files+0x3a0/0x420 [ 426.076181][ T9013] ? __fget_files+0x2a/0x420 [ 426.076218][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.076252][ T9013] ksys_read+0x145/0x250 [ 426.076286][ T9013] ? __pfx_ksys_read+0x10/0x10 [ 426.076312][ T9013] ? rcu_is_watching+0x15/0xb0 [ 426.076349][ T9013] ? do_syscall_64+0xbe/0x3b0 [ 426.076381][ T9013] do_syscall_64+0xfa/0x3b0 [ 426.076406][ T9013] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.076429][ T9013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.076452][ T9013] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.076479][ T9013] ? exc_page_fault+0x9f/0xf0 [ 426.076504][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.076527][ T9013] RIP: 0033:0x7fbb97b8eec9 [ 426.076548][ T9013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.076569][ T9013] RSP: 002b:00007fbb98a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.076594][ T9013] RAX: ffffffffffffffda RBX: 00007fbb97de5fa0 RCX: 00007fbb97b8eec9 [ 426.076612][ T9013] RDX: 0000000000002020 RSI: 00002000000028c0 RDI: 0000000000000005 [ 426.076628][ T9013] RBP: 00007fbb98a8a090 R08: 0000000000000000 R09: 0000000000000000 [ 426.076644][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.076659][ T9013] R13: 00007fbb97de6038 R14: 00007fbb97de5fa0 R15: 00007ffe1988e948 [ 426.076698][ T9013] [ 426.706903][ T9006] syz.6.863: attempt to access beyond end of device [ 426.706903][ T9006] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 427.114777][ T9022] loop5: detected capacity change from 0 to 256 [ 427.122328][ T9022] exfat: Unknown parameter 'y4|¤®UŽÙOÍÛgnd' [ 428.096378][ T9023] netlink: 72 bytes leftover after parsing attributes in process `syz.3.865'. [ 428.137066][ T9006] syz.6.863: attempt to access beyond end of device [ 428.137066][ T9006] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 428.163015][ T9006] F2FS-fs (loop6): Stopped filesystem due to reason: 0 [ 428.182531][ T9023] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 428.225879][ T9030] loop3: detected capacity change from 0 to 128 [ 428.335679][ T9032] 9pnet_fd: Insufficient options for proto=fd [ 428.345730][ T9030] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 428.393935][ T9030] hpfs: filesystem error: improperly stopped [ 428.399963][ T9030] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 428.492788][ T9030] hpfs: You really don't want any checks? You are crazy... [ 428.517700][ T9030] hpfs: hpfs_map_sector(): read error [ 428.770918][ T9030] hpfs: code page support is disabled [ 428.776483][ T9030] hpfs: hpfs_map_4sectors(): unaligned read [ 428.873903][ T9030] hpfs: hpfs_map_4sectors(): unaligned read [ 428.879826][ T9030] hpfs: filesystem error: unable to find root dir [ 429.264996][ T9048] loop5: detected capacity change from 0 to 16 [ 429.308284][ T9048] erofs (device loop5): mounted with root inode @ nid 36. [ 430.260451][ T9061] loop4: detected capacity change from 0 to 512 [ 430.291366][ T9062] binder: 9053:9062 ioctl 4018620d 0 returned -22 [ 430.402823][ T9061] EXT4-fs: Ignoring removed oldalloc option [ 430.560130][ T9062] syz.3.877 (9062): drop_caches: 2 [ 430.598178][ T9061] EXT4-fs (loop4): 1 truncate cleaned up [ 430.952226][ T9070] sctp: [Deprecated]: syz.5.880 (pid 9070) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.952226][ T9070] Use struct sctp_sack_info instead [ 431.162880][ T9061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.349673][ T9075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.881'. [ 431.422531][ T9075] openvswitch: netlink: Flow actions attr not present in new flow. [ 431.922479][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.678148][ T9107] netlink: 32 bytes leftover after parsing attributes in process `syz.1.888'. [ 433.741034][ T9107] openvswitch: netlink: Flow actions attr not present in new flow. [ 434.384116][ T9121] FAULT_INJECTION: forcing a failure. [ 434.384116][ T9121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.453606][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.1.893 Not tainted syzkaller #0 PREEMPT(full) [ 434.453637][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.453653][ T9121] Call Trace: [ 434.453663][ T9121] [ 434.453673][ T9121] dump_stack_lvl+0x189/0x250 [ 434.453711][ T9121] ? __pfx____ratelimit+0x10/0x10 [ 434.453736][ T9121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.453768][ T9121] ? __pfx__printk+0x10/0x10 [ 434.453792][ T9121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.453842][ T9121] should_fail_ex+0x414/0x560 [ 434.453884][ T9121] _copy_from_user+0x2d/0xb0 [ 434.453915][ T9121] __sys_bpf+0x1e3/0x860 [ 434.453941][ T9121] ? __pfx___sys_bpf+0x10/0x10 [ 434.453981][ T9121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.454008][ T9121] ? ksys_write+0x22a/0x250 [ 434.454043][ T9121] ? __pfx_ksys_write+0x10/0x10 [ 434.454069][ T9121] ? rcu_is_watching+0x15/0xb0 [ 434.454108][ T9121] __x64_sys_bpf+0x7c/0x90 [ 434.454143][ T9121] do_syscall_64+0xfa/0x3b0 [ 434.454168][ T9121] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.454192][ T9121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.454215][ T9121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.454241][ T9121] ? exc_page_fault+0x9f/0xf0 [ 434.454266][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.454290][ T9121] RIP: 0033:0x7fbb97b8eec9 [ 434.454309][ T9121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.454330][ T9121] RSP: 002b:00007fbb98a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.454355][ T9121] RAX: ffffffffffffffda RBX: 00007fbb97de5fa0 RCX: 00007fbb97b8eec9 [ 434.454373][ T9121] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000004 [ 434.454389][ T9121] RBP: 00007fbb98a8a090 R08: 0000000000000000 R09: 0000000000000000 [ 434.454404][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.454419][ T9121] R13: 00007fbb97de6038 R14: 00007fbb97de5fa0 R15: 00007ffe1988e948 [ 434.454457][ T9121] [ 435.046504][ T9126] loop5: detected capacity change from 0 to 1024 [ 435.981261][ T9126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.033636][ T9130] sctp: [Deprecated]: syz.1.896 (pid 9130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.033636][ T9130] Use struct sctp_sack_info instead [ 436.291853][ T9124] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 437.165369][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.202663][ T9159] binder: BINDER_SET_CONTEXT_MGR already set [ 437.208698][ T9159] binder: 9152:9159 ioctl 4018620d 200000000040 returned -16 [ 437.218822][ T9159] binder: 9152:9159 ioctl c0306201 0 returned -14 [ 437.237662][ T9159] syz.3.903 (9159): drop_caches: 2 [ 437.579075][ T9166] mmap: syz.1.904 (9166) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 439.308406][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.327467][ T9187] loop5: detected capacity change from 0 to 512 [ 439.344114][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.381767][ T9150] loop4: detected capacity change from 0 to 32768 [ 439.430745][ T9187] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 439.571035][ T9150] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.901 (9150) [ 439.679780][ T9187] EXT4-fs (loop5): 1 truncate cleaned up [ 439.689321][ T9187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.220854][ T5965] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 441.272605][ T6338] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by udevd (6338) [ 441.455760][ T5965] usb 6-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 441.560136][ T5965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.688743][ T5965] ums-cypress 6-1:1.0: USB Mass Storage device detected [ 441.689184][ T9211] loop1: detected capacity change from 0 to 256 [ 441.955061][ T9216] sctp: [Deprecated]: syz.4.916 (pid 9216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.955061][ T9216] Use struct sctp_sack_info instead [ 442.262224][ T9211] exfat: Deprecated parameter 'utf8' [ 442.369684][ T9211] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 442.493394][ T5965] usb 6-1: USB disconnect, device number 11 [ 443.045227][ T9233] loop6: detected capacity change from 0 to 256 [ 443.622024][ T9233] FAT-fs (loop6): count of clusters too big (178174) [ 443.629028][ T9233] FAT-fs (loop6): Can't find a valid FAT filesystem [ 443.675991][ T9225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.708648][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.911034][ T118] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 443.981162][ T6030] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 444.115652][ T118] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.162594][ T118] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 444.186805][ T6030] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.403946][ T6030] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 444.733495][ T118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.741592][ T6030] usb 4-1: New USB device strings: Mfr=180, Product=92, SerialNumber=0 [ 444.780994][ T9249] ceph: No mds server is up or the cluster is laggy [ 444.789231][ T9] libceph: connect (1)[c::]:6789 error -101 [ 444.793103][ T118] usb 7-1: config 0 descriptor?? [ 444.798867][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 444.964119][ T6030] usb 4-1: Product: syz [ 444.968312][ T6030] usb 4-1: Manufacturer: syz [ 445.005605][ T118] rndis_host 7-1:0.0: probe with driver rndis_host failed with error -22 [ 445.036675][ T6030] usb 4-1: config 0 descriptor?? [ 445.215375][ T9254] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 445.251701][ T9254] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 445.412214][ T9224] loop6: detected capacity change from 0 to 256 [ 445.497878][ T9224] FAT-fs (loop6): count of clusters too big (178174) [ 445.504625][ T9224] FAT-fs (loop6): Can't find a valid FAT filesystem [ 445.621176][ T5909] usb 7-1: USB disconnect, device number 2 [ 446.415837][ T6030] usb 4-1: USB disconnect, device number 17 [ 447.021054][ T5924] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 447.241721][ T5924] usb 6-1: Using ep0 maxpacket: 8 [ 447.285878][ T5924] usb 6-1: config 0 has an invalid interface number: 72 but max is 0 [ 447.352176][ T5924] usb 6-1: config 0 has no interface number 0 [ 447.424228][ T5924] usb 6-1: New USB device found, idVendor=0403, idProduct=7151, bcdDevice=1b.16 [ 447.470943][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.471970][ T9281] loop6: detected capacity change from 0 to 1024 [ 447.478957][ T5924] usb 6-1: Product: syz [ 447.478980][ T5924] usb 6-1: Manufacturer: syz [ 447.478999][ T5924] usb 6-1: SerialNumber: syz [ 447.587844][ T5924] usb 6-1: config 0 descriptor?? [ 447.836048][ T5924] hub 6-1:0.72: bad descriptor, ignoring hub [ 447.854955][ T5924] hub 6-1:0.72: probe with driver hub failed with error -5 [ 447.972346][ T5909] IPVS: starting estimator thread 0... [ 448.096540][ T9290] IPVS: using max 22 ests per chain, 52800 per kthread [ 448.495607][ T997] hfsplus: b-tree write err: -5, ino 4 [ 448.728671][ T9291] loop5: detected capacity change from 0 to 32768 [ 448.737014][ T9291] btrfs: Bad value for 'max_inline' [ 448.835332][ T9291] loop5: detected capacity change from 0 to 512 [ 448.855536][ T5924] ftdi_sio 6-1:0.72: FTDI USB Serial Device converter detected [ 448.908415][ T5924] ftdi_sio ttyUSB0: unknown device type: 0x1b16 [ 449.301803][ T5902] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 449.505011][ T5902] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.579131][ T5902] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.632292][ T5902] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 449.778021][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.363616][ T5902] usb 5-1: usb_control_msg returned -32 [ 450.684116][ T5902] usbtmc 5-1:16.0: can't read capabilities [ 450.695883][ T118] usb 6-1: USB disconnect, device number 12 [ 450.749081][ T118] ftdi_sio 6-1:0.72: device disconnected [ 451.322975][ T9321] FAULT_INJECTION: forcing a failure. [ 451.322975][ T9321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.358575][ T9321] CPU: 0 UID: 0 PID: 9321 Comm: syz.5.940 Not tainted syzkaller #0 PREEMPT(full) [ 451.358607][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.358622][ T9321] Call Trace: [ 451.358631][ T9321] [ 451.358641][ T9321] dump_stack_lvl+0x189/0x250 [ 451.358678][ T9321] ? __pfx____ratelimit+0x10/0x10 [ 451.358703][ T9321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.358736][ T9321] ? __pfx__printk+0x10/0x10 [ 451.358763][ T9321] ? rcu_read_lock_any_held+0xb3/0x120 [ 451.358805][ T9321] should_fail_ex+0x414/0x560 [ 451.358857][ T9321] strncpy_from_user+0x36/0x290 [ 451.358896][ T9321] __x64_sys_lgetxattr+0x153/0x210 [ 451.358942][ T9321] ? __pfx___x64_sys_lgetxattr+0x10/0x10 [ 451.359015][ T9321] ? __pfx_ksys_write+0x10/0x10 [ 451.359044][ T9321] ? rcu_is_watching+0x15/0xb0 [ 451.359087][ T9321] ? do_syscall_64+0xbe/0x3b0 [ 451.359118][ T9321] do_syscall_64+0xfa/0x3b0 [ 451.359142][ T9321] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.359166][ T9321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.359189][ T9321] ? srso_alias_return_thunk+0x5/0xfbef5 [ 451.359216][ T9321] ? exc_page_fault+0x9f/0xf0 [ 451.359242][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.359265][ T9321] RIP: 0033:0x7f500438eec9 [ 451.359285][ T9321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.359305][ T9321] RSP: 002b:00007f5005271038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 451.359329][ T9321] RAX: ffffffffffffffda RBX: 00007f50045e5fa0 RCX: 00007f500438eec9 [ 451.359347][ T9321] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000001500 [ 451.359365][ T9321] RBP: 00007f5005271090 R08: 0000000000000000 R09: 0000000000000000 [ 451.359380][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.359394][ T9321] R13: 00007f50045e6038 R14: 00007f50045e5fa0 R15: 00007ffe2595b798 [ 451.359431][ T9321] [ 451.551995][ C0] vkms_vblank_simulate: vblank timer overrun [ 452.283641][ T9334] loop3: detected capacity change from 0 to 64 [ 452.530366][ T9335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.543398][ T5924] usb 5-1: USB disconnect, device number 10 [ 453.160458][ T9346] loop5: detected capacity change from 0 to 512 [ 455.349669][ T9367] FAULT_INJECTION: forcing a failure. [ 455.349669][ T9367] name failslab, interval 1, probability 0, space 0, times 0 [ 455.362727][ T9367] CPU: 1 UID: 0 PID: 9367 Comm: syz.5.951 Not tainted syzkaller #0 PREEMPT(full) [ 455.362758][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 455.362774][ T9367] Call Trace: [ 455.362783][ T9367] [ 455.362793][ T9367] dump_stack_lvl+0x189/0x250 [ 455.362829][ T9367] ? __pfx____ratelimit+0x10/0x10 [ 455.362861][ T9367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.362893][ T9367] ? __pfx__printk+0x10/0x10 [ 455.362924][ T9367] ? __pfx___might_resched+0x10/0x10 [ 455.362950][ T9367] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.362987][ T9367] should_fail_ex+0x414/0x560 [ 455.363029][ T9367] should_failslab+0xa8/0x100 [ 455.363064][ T9367] kmem_cache_alloc_noprof+0x73/0x3c0 [ 455.363095][ T9367] ? getname_flags+0xb8/0x540 [ 455.363137][ T9367] getname_flags+0xb8/0x540 [ 455.363183][ T9367] do_sys_openat2+0xbc/0x1c0 [ 455.363211][ T9367] ? __pfx_do_sys_openat2+0x10/0x10 [ 455.363233][ T9367] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.363264][ T9367] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.363306][ T9367] __x64_sys_openat+0x138/0x170 [ 455.363337][ T9367] do_syscall_64+0xfa/0x3b0 [ 455.363365][ T9367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.363388][ T9367] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 455.363418][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.363441][ T9367] RIP: 0033:0x7f500438d710 [ 455.363461][ T9367] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 455.363483][ T9367] RSP: 002b:00007f500522eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 455.363509][ T9367] RAX: ffffffffffffffda RBX: 000000000086a305 RCX: 00007f500438d710 [ 455.363527][ T9367] RDX: 000000000086a305 RSI: 00007f500522ec10 RDI: 00000000ffffff9c [ 455.363545][ T9367] RBP: 00007f500522ec10 R08: 0000000000000000 R09: 0000000000000000 [ 455.363561][ T9367] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 455.363577][ T9367] R13: 00007f50045e6218 R14: 00007f50045e6180 R15: 00007ffe2595b798 [ 455.363616][ T9367] [ 456.040798][ T5902] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 456.293125][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.954'. [ 456.333129][ T5902] usb 7-1: config index 0 descriptor too short (expected 69, got 36) [ 456.359702][ T5902] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.451204][ T5902] usb 7-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 456.940824][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.979838][ T5902] usb 7-1: Product: syz [ 457.004337][ T5902] usb 7-1: Manufacturer: syz [ 457.031697][ T5902] usb 7-1: SerialNumber: syz [ 457.059013][ T5902] usb 7-1: config 0 descriptor?? [ 457.087050][ T5902] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 457.773714][ T5902] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 457.843632][ T5902] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 457.953643][ T6030] usb 7-1: USB disconnect, device number 3 [ 458.149732][ T9390] loop1: detected capacity change from 0 to 4096 [ 458.199416][ T9390] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 458.317743][ T9395] binder: BINDER_SET_CONTEXT_MGR already set [ 458.330418][ T9395] binder: 9392:9395 ioctl 4018620d 200000000040 returned -16 [ 458.382979][ T9395] syz.6.959 (9395): drop_caches: 2 [ 458.562310][ T9390] ntfs3(loop1): ino=19, mi_enum_attr [ 458.578065][ T9390] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 459.106421][ T9399] loop3: detected capacity change from 0 to 2048 [ 459.315588][ T9399] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 459.573567][ T9408] netlink: 'syz.3.960': attribute type 30 has an invalid length. [ 462.182609][ T9423] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 462.407956][ T9427] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 464.273319][ T9441] loop3: detected capacity change from 0 to 8 [ 464.357596][ T9441] SQUASHFS error: zlib decompression failed, data probably corrupt [ 464.385941][ T9441] SQUASHFS error: Failed to read block 0x9b: -5 [ 464.430900][ T9441] SQUASHFS error: Unable to read metadata cache entry [99] [ 464.479974][ T9443] loop1: detected capacity change from 0 to 64 [ 464.491545][ T9441] SQUASHFS error: Unable to read inode 0x127 [ 464.849522][ T9444] netlink: 'syz.1.973': attribute type 10 has an invalid length. [ 465.464211][ T9445] loop3: detected capacity change from 0 to 4096 [ 465.524880][ T9445] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 465.656751][ T9444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.727317][ T9445] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 466.993014][ T9470] binder: 9469:9470 ioctl c0306201 2000000001c0 returned -14 [ 467.059270][ T9470] binder: 9469:9470 ioctl c0286405 200000000400 returned -22 [ 467.179279][ T9470] binder: 9469:9470 ioctl 8903 200000000440 returned -22 [ 467.227787][ T9473] loop4: detected capacity change from 0 to 512 [ 467.241932][ T9448] loop5: detected capacity change from 0 to 32768 [ 467.289732][ T9448] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.974 (9448) [ 467.379278][ T9473] EXT4-fs (loop4): Invalid log cluster size: 2048 [ 467.454879][ T9448] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 467.490955][ T9448] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 467.658330][ T9479] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 468.338846][ T9448] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 468.339666][ T9448] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 468.733947][ T9448] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 468.744508][ T9448] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 468.754152][ T9448] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 469.691774][ T9448] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 469.887864][ T9448] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 469.933523][ T9448] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 470.179541][ T9498] loop4: detected capacity change from 0 to 512 [ 470.249808][ T9498] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 470.304742][ T9448] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 470.305127][ T9448] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 470.500998][ T9448] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 470.650511][ T9448] BTRFS error (device loop5): open_ctree failed: -12 [ 471.061284][ T9498] TCP: TCP_TX_DELAY enabled [ 471.629439][ T9516] FAULT_INJECTION: forcing a failure. [ 471.629439][ T9516] name failslab, interval 1, probability 0, space 0, times 0 [ 471.720156][ T9516] CPU: 0 UID: 0 PID: 9516 Comm: syz.5.991 Not tainted syzkaller #0 PREEMPT(full) [ 471.720191][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 471.720207][ T9516] Call Trace: [ 471.720217][ T9516] [ 471.720228][ T9516] dump_stack_lvl+0x189/0x250 [ 471.720266][ T9516] ? __pfx____ratelimit+0x10/0x10 [ 471.720291][ T9516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.720324][ T9516] ? __pfx__printk+0x10/0x10 [ 471.720355][ T9516] ? __pfx___might_resched+0x10/0x10 [ 471.720383][ T9516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.720420][ T9516] should_fail_ex+0x414/0x560 [ 471.720463][ T9516] should_failslab+0xa8/0x100 [ 471.720500][ T9516] __kmalloc_noprof+0xcb/0x4f0 [ 471.720529][ T9516] ? kfree+0x4d/0x440 [ 471.720555][ T9516] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 471.720600][ T9516] tomoyo_realpath_from_path+0xe3/0x5d0 [ 471.720642][ T9516] ? tomoyo_domain+0xd9/0x130 [ 471.720675][ T9516] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 471.720710][ T9516] tomoyo_path_number_perm+0x1e8/0x5a0 [ 471.720751][ T9516] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 471.720792][ T9516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.720831][ T9516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.720859][ T9516] ? __lock_acquire+0xab9/0xd20 [ 471.720908][ T9516] ? __fget_files+0x2a/0x420 [ 471.720948][ T9516] ? __fget_files+0x2a/0x420 [ 471.720982][ T9516] ? __fget_files+0x3a0/0x420 [ 471.721015][ T9516] ? __fget_files+0x2a/0x420 [ 471.721055][ T9516] security_file_ioctl+0xcb/0x2d0 [ 471.721089][ T9516] __se_sys_ioctl+0x47/0x170 [ 471.721125][ T9516] do_syscall_64+0xfa/0x3b0 [ 471.721151][ T9516] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.721175][ T9516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.721198][ T9516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.721225][ T9516] ? exc_page_fault+0x9f/0xf0 [ 471.721251][ T9516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.721276][ T9516] RIP: 0033:0x7f500438eec9 [ 471.721296][ T9516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.721318][ T9516] RSP: 002b:00007f5005250038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.721344][ T9516] RAX: ffffffffffffffda RBX: 00007f50045e6090 RCX: 00007f500438eec9 [ 471.721363][ T9516] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 471.721378][ T9516] RBP: 00007f5005250090 R08: 0000000000000000 R09: 0000000000000000 [ 471.721394][ T9516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.721408][ T9516] R13: 00007f50045e6128 R14: 00007f50045e6090 R15: 00007ffe2595b798 [ 471.721447][ T9516] [ 471.991509][ T9516] ERROR: Out of memory at tomoyo_realpath_from_path. [ 472.600457][ T9518] loop4: detected capacity change from 0 to 256 [ 472.686011][ T9518] vfat: Unknown parameter 'time_ofset' [ 474.126487][ T9525] binder: 9519:9525 ioctl 4018620d 0 returned -22 [ 474.504127][ T9525] syz.3.994 (9525): drop_caches: 2 [ 475.264344][ T9531] netlink: 'syz.2.996': attribute type 30 has an invalid length. [ 475.397891][ T9538] loop4: detected capacity change from 0 to 512 [ 475.468696][ T9538] EXT4-fs (loop4): Invalid log cluster size: 2048 [ 475.501127][ T9539] loop6: detected capacity change from 0 to 2048 [ 476.555639][ T9539] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 477.049358][ T9546] 9pnet_fd: Insufficient options for proto=fd [ 478.558662][ T9554] netlink: 'syz.6.997': attribute type 30 has an invalid length. [ 478.731226][ T9558] syz.5.1002 (9558): drop_caches: 2 [ 478.804996][ T9560] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 480.203134][ T9570] loop3: detected capacity change from 0 to 256 [ 480.241709][ T9570] vfat: Unknown parameter 'time_ofset' [ 481.057291][ T9570] loop3: detected capacity change from 0 to 131072 [ 481.095088][ T9572] loop4: detected capacity change from 0 to 512 [ 481.105065][ T9570] F2FS-fs (loop3): Test dummy encryption mode enabled [ 481.118353][ T9570] F2FS-fs (loop3): invalid crc value [ 481.196355][ T9570] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 481.211359][ T9570] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 481.221882][ T9570] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 481.434812][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'. [ 481.952646][ T9585] loop4: detected capacity change from 0 to 2048 [ 482.023386][ T9585] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 482.192604][ T9588] netlink: 'syz.4.1012': attribute type 30 has an invalid length. [ 482.852752][ T9593] loop3: detected capacity change from 0 to 512 [ 482.872381][ T9595] 9pnet_fd: Insufficient options for proto=fd [ 482.908231][ T9593] EXT4-fs (loop3): Invalid log cluster size: 2048 [ 486.673354][ T9622] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 486.912335][ T9624] loop6: detected capacity change from 0 to 512 [ 487.195095][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1024'. [ 500.733888][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.740220][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.933901][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 592.990650][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 592.997605][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9583/1:b..l P5947/1:b..l [ 593.007193][ C0] rcu: (detected by 0, t=10502 jiffies, g=32401, q=309 ncpus=2) [ 593.014897][ C0] task:kworker/u8:7 state:R running task stack:19816 pid:5947 tgid:5947 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 593.029218][ C0] Workqueue: bat_events batadv_nc_worker [ 593.034873][ C0] Call Trace: [ 593.038131][ C0] [ 593.041045][ C0] __schedule+0x1798/0x4cc0 [ 593.045564][ C0] ? __pfx___schedule+0x10/0x10 [ 593.050424][ C0] ? do_raw_spin_lock+0x121/0x290 [ 593.055441][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.061061][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 593.066251][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 593.071516][ C0] preempt_schedule_irq+0xb5/0x150 [ 593.076606][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 593.082311][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.087925][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 593.093735][ C0] irqentry_exit+0x6f/0x90 [ 593.098135][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 593.104102][ C0] RIP: 0010:__kasan_check_byte+0xa/0x40 [ 593.109646][ C0] Code: ff 48 ff c8 49 89 c4 e9 cf fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 56 53 48 89 f3 <49> 89 fe e8 5e 14 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 [ 593.129235][ C0] RSP: 0018:ffffc90004d7f968 EFLAGS: 00000202 [ 593.135287][ C0] RAX: 0000000000000001 RBX: ffffffff8b054fff RCX: 6c1ea1fd4485a100 [ 593.143239][ C0] RDX: 0000000000000000 RSI: ffffffff8b054fff RDI: ffffffff8dd3a960 [ 593.151188][ C0] RBP: ffffffff8b054fe2 R08: 0000000000000000 R09: 0000000000000000 [ 593.159153][ C0] R10: dffffc0000000000 R11: ffffffff8b054f10 R12: 0000000000000002 [ 593.167105][ C0] R13: ffffffff8dd3a960 R14: 0000000000000000 R15: 0000000000000000 [ 593.175058][ C0] ? batadv_nc_worker+0xd2/0x610 [ 593.179983][ C0] ? batadv_nc_worker+0xef/0x610 [ 593.184911][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 593.190276][ C0] ? batadv_nc_worker+0xef/0x610 [ 593.195207][ C0] lock_acquire+0x8d/0x360 [ 593.199613][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.205235][ C0] ? batadv_nc_worker+0xd2/0x610 [ 593.210164][ C0] ? batadv_nc_worker+0xd2/0x610 [ 593.215095][ C0] batadv_nc_worker+0xef/0x610 [ 593.219846][ C0] ? batadv_nc_worker+0xd2/0x610 [ 593.224776][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 593.230479][ C0] process_scheduled_works+0xae1/0x17b0 [ 593.236032][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 593.242001][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.247632][ C0] worker_thread+0x8a0/0xda0 [ 593.252227][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 593.258563][ C0] ? __kthread_parkme+0x7b/0x200 [ 593.263502][ C0] kthread+0x711/0x8a0 [ 593.267565][ C0] ? __pfx_worker_thread+0x10/0x10 [ 593.272661][ C0] ? __pfx_kthread+0x10/0x10 [ 593.277236][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.282854][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 593.288042][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.293655][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.298849][ C0] ? __pfx_kthread+0x10/0x10 [ 593.303454][ C0] ret_from_fork+0x439/0x7d0 [ 593.308059][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 593.313162][ C0] ? __switch_to_asm+0x39/0x70 [ 593.317916][ C0] ? __switch_to_asm+0x33/0x70 [ 593.322688][ C0] ? __pfx_kthread+0x10/0x10 [ 593.327268][ C0] ret_from_fork_asm+0x1a/0x30 [ 593.332053][ C0] [ 593.335055][ C0] task:syz.2.1009 state:R running task stack:21608 pid:9583 tgid:9583 ppid:5855 task_flags:0x400640 flags:0x00080001 [ 593.348968][ C0] Call Trace: [ 593.352240][ C0] [ 593.355156][ C0] __schedule+0x1798/0x4cc0 [ 593.359674][ C0] ? __pfx___schedule+0x10/0x10 [ 593.364523][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 593.371112][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 593.376380][ C0] preempt_schedule_irq+0xb5/0x150 [ 593.381478][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 593.387187][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.392802][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 593.398594][ C0] irqentry_exit+0x6f/0x90 [ 593.402997][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 593.408965][ C0] RIP: 0010:unwind_next_frame+0x131f/0x2390 [ 593.414844][ C0] Code: 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 <48> 0f 46 e9 49 8d 47 fc 48 0f 47 d8 4d 0f 46 ef 48 39 dd 76 a2 e9 [ 593.434436][ C0] RSP: 0018:ffffc9000eab5e58 EFLAGS: 00000283 [ 593.440486][ C0] RAX: ffffffff8168f968 RBX: ffffffff8f6f725c RCX: ffffffff8f6f7260 [ 593.448437][ C0] RDX: ffffffff8f6f725c RSI: ffffffff8fe94dd6 RDI: ffffffff8b9ec280 [ 593.456389][ C0] RBP: ffffffff8f6f725c R08: 0000000000000007 R09: ffffffff81725d05 [ 593.464338][ C0] R10: dffffc0000000000 R11: fffff52001d56bfd R12: ffffffff8168fa43 [ 593.472292][ C0] R13: ffffffff8f6f725c R14: ffffc9000eab5f88 R15: ffffffff8f6f725c [ 593.480255][ C0] ? arch_stack_walk+0xe3/0x150 [ 593.485099][ C0] ? unwind_next_frame+0xa5/0x2390 [ 593.490196][ C0] ? arch_stack_walk+0x8/0x150 [ 593.494954][ C0] ? unwind_next_frame+0xd4/0x2390 [ 593.500061][ C0] ? unwind_next_frame+0xa5/0x2390 [ 593.505159][ C0] ? arch_stack_walk+0xe4/0x150 [ 593.510001][ C0] __unwind_start+0x5b9/0x760 [ 593.514669][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 593.520812][ C0] arch_stack_walk+0xe4/0x150 [ 593.525479][ C0] ? arch_stack_walk+0xe4/0x150 [ 593.530317][ C0] stack_trace_save+0x9c/0xe0 [ 593.534981][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 593.540344][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.545986][ C0] save_stack+0xf5/0x1f0 [ 593.550215][ C0] ? __pfx_save_stack+0x10/0x10 [ 593.555066][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 593.561296][ C0] __set_page_owner+0x8d/0x4a0 [ 593.566048][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 593.571410][ C0] post_alloc_hook+0x240/0x2a0 [ 593.576165][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 593.581699][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.587317][ C0] ? percpu_ref_get_many+0x19/0x140 [ 593.592508][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.598129][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.603761][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.609380][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 593.615265][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.620878][ C0] ? prepare_alloc_pages+0x213/0x610 [ 593.626159][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 593.631958][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 593.638300][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.643941][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.649574][ C0] alloc_pages_mpol+0x232/0x4a0 [ 593.654423][ C0] alloc_pages_noprof+0xa9/0x190 [ 593.659361][ C0] folio_alloc_noprof+0x1e/0x30 [ 593.664209][ C0] filemap_alloc_folio_noprof+0xdf/0x470 [ 593.669836][ C0] ? filemap_get_entry+0xad/0x2f0 [ 593.674846][ C0] ? filemap_get_entry+0xad/0x2f0 [ 593.679948][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.685567][ C0] ? filemap_get_entry+0x28f/0x2f0 [ 593.690671][ C0] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 593.696922][ C0] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 593.702983][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.708604][ C0] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 593.714832][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 593.721414][ C0] __filemap_get_folio+0x3f2/0xaf0 [ 593.726527][ C0] simple_write_begin+0x61/0x500 [ 593.731455][ C0] generic_perform_write+0x2c5/0x900 [ 593.736733][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 593.742520][ C0] ? file_update_time+0x2da/0x490 [ 593.747529][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.753145][ C0] ? __generic_file_write_iter+0xf9/0x230 [ 593.758845][ C0] ? generic_file_write_iter+0x103/0x550 [ 593.764462][ C0] generic_file_write_iter+0x117/0x550 [ 593.769926][ C0] ? __pfx_generic_file_write_iter+0x10/0x10 [ 593.775886][ C0] ? follow_page_pte+0xd03/0x13e0 [ 593.780905][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 593.786174][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.791791][ C0] ? vma_is_secretmem+0xd/0x50 [ 593.796539][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.802160][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.807776][ C0] ? __get_user_pages+0x2a5c/0x2ce0 [ 593.812974][ C0] ? __pfx_generic_file_write_iter+0x10/0x10 [ 593.818940][ C0] __kernel_write_iter+0x428/0x910 [ 593.824038][ C0] ? __pfx_generic_file_write_iter+0x10/0x10 [ 593.830008][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 593.835627][ C0] ? __up_read+0x280/0x680 [ 593.840041][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.845655][ C0] ? __asan_memset+0x22/0x50 [ 593.850231][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.855849][ C0] ? iov_iter_bvec+0xb8/0x180 [ 593.860514][ C0] dump_user_range+0x8a0/0xc90 [ 593.865277][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 593.870548][ C0] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 593.876780][ C0] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 593.883358][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 593.888110][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.893727][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.899346][ C0] ? dump_emit+0xa6/0xe0 [ 593.903573][ C0] ? elf_core_dump+0x2ccb/0x3960 [ 593.908501][ C0] elf_core_dump+0x3364/0x3960 [ 593.913270][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 593.918374][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.923989][ C0] ? kasan_save_track+0x4f/0x80 [ 593.928833][ C0] ? kasan_save_track+0x3e/0x80 [ 593.933669][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 593.938416][ C0] ? __kvmalloc_node_noprof+0x30d/0x5f0 [ 593.943945][ C0] ? coredump_write+0x340/0x1900 [ 593.948877][ C0] ? vfs_coredump+0x1daa/0x2a50 [ 593.953716][ C0] ? get_signal+0x1108/0x1340 [ 593.958376][ C0] ? arch_do_signal_or_restart+0xa0/0x790 [ 593.964078][ C0] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 593.969867][ C0] ? exc_page_fault+0x9f/0xf0 [ 593.974523][ C0] ? asm_exc_page_fault+0x26/0x30 [ 593.979534][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.985186][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.990809][ C0] ? 0xffffffffff600000 [ 593.995038][ C0] ? up_write+0x1c4/0x420 [ 593.999359][ C0] coredump_write+0x1169/0x1900 [ 594.004214][ C0] ? __pfx_coredump_write+0x10/0x10 [ 594.009414][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.015030][ C0] ? unshare_files+0xa9/0x140 [ 594.019701][ C0] vfs_coredump+0x1daa/0x2a50 [ 594.024389][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 594.029408][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.035034][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.040659][ C0] ? __lock_acquire+0xab9/0xd20 [ 594.045512][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.051136][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.056753][ C0] ? __lock_acquire+0xab9/0xd20 [ 594.061591][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.067213][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.072846][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 594.078045][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.083662][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 594.088927][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 594.094111][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.099760][ C0] ? kernel_text_address+0xa5/0xe0 [ 594.104868][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.110488][ C0] ? __kernel_text_address+0xd/0x40 [ 594.115677][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.121302][ C0] ? unwind_get_return_address+0x4d/0x90 [ 594.126922][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 594.133078][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.138695][ C0] ? arch_stack_walk+0xfc/0x150 [ 594.143542][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.149157][ C0] ? stack_trace_save+0x9c/0xe0 [ 594.153999][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.159618][ C0] ? stack_depot_save_flags+0x40/0x860 [ 594.165072][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.170688][ C0] ? kasan_save_track+0x4f/0x80 [ 594.175518][ C0] ? kasan_save_track+0x3e/0x80 [ 594.180347][ C0] ? kasan_save_free_info+0x46/0x50 [ 594.185519][ C0] ? __kasan_slab_free+0x5b/0x80 [ 594.190442][ C0] ? kmem_cache_free+0x18f/0x400 [ 594.195362][ C0] ? get_signal+0xa4b/0x1340 [ 594.199937][ C0] ? arch_do_signal_or_restart+0xa0/0x790 [ 594.205638][ C0] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 594.211423][ C0] ? exc_page_fault+0x9f/0xf0 [ 594.216076][ C0] ? asm_exc_page_fault+0x26/0x30 [ 594.221120][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.226745][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 594.231932][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.237546][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 594.242729][ C0] get_signal+0x1108/0x1340 [ 594.247234][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 594.252764][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 594.258896][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.264513][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.270127][ C0] ? __bad_area_nosemaphore+0x3fb/0x780 [ 594.275666][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 594.281539][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.287156][ C0] irqentry_exit_to_user_mode+0x7e/0x110 [ 594.292770][ C0] exc_page_fault+0x9f/0xf0 [ 594.297260][ C0] asm_exc_page_fault+0x26/0x30 [ 594.302090][ C0] RIP: 0033:0x7f978404f987 [ 594.306485][ C0] RSP: 002b:00007f9784fbe120 EFLAGS: 00010202 [ 594.312551][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f978418eec9 [ 594.320500][ C0] RDX: 00007f9784fbe140 RSI: 00007f9784fbe270 RDI: 000000000000000b [ 594.328449][ C0] RBP: 00007f9784211f91 R08: 0000000000000000 R09: 0000000000000000 [ 594.336411][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 594.344377][ C0] R13: 00007f97843e6038 R14: 00007f97843e5fa0 R15: 00007ffd14f8cdf8 [ 594.352349][ C0] [ 594.355347][ C0] rcu: rcu_preempt kthread starved for 10266 jiffies! g32401 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 594.366516][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 594.376481][ C0] rcu: RCU grace-period kthread stack dump: [ 594.382361][ C0] task:rcu_preempt state:R running task stack:26128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 594.395842][ C0] Call Trace: [ 594.399104][ C0] [ 594.402020][ C0] __schedule+0x1798/0x4cc0 [ 594.406540][ C0] ? __pfx___schedule+0x10/0x10 [ 594.411397][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.417018][ C0] ? schedule+0x91/0x360 [ 594.421254][ C0] schedule+0x165/0x360 [ 594.425405][ C0] schedule_timeout+0x12b/0x270 [ 594.430244][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 594.435599][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 594.441489][ C0] ? __pfx_process_timeout+0x10/0x10 [ 594.446770][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.452388][ C0] ? prepare_to_swait_event+0x341/0x380 [ 594.457928][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 594.462772][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 594.467951][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 594.474093][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 594.479358][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 594.484549][ C0] ? finish_swait+0xcd/0x1f0 [ 594.489129][ C0] rcu_gp_kthread+0x99/0x390 [ 594.493702][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 594.498884][ C0] ? __kthread_parkme+0x7b/0x200 [ 594.503827][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.509459][ C0] ? __kthread_parkme+0x1a1/0x200 [ 594.514497][ C0] kthread+0x711/0x8a0 [ 594.518565][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 594.523746][ C0] ? __pfx_kthread+0x10/0x10 [ 594.528325][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.533946][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 594.539138][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 594.544754][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 594.549933][ C0] ? __pfx_kthread+0x10/0x10 [ 594.554516][ C0] ret_from_fork+0x439/0x7d0 [ 594.559098][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 594.564198][ C0] ? __switch_to_asm+0x39/0x70 [ 594.568949][ C0] ? __switch_to_asm+0x33/0x70 [ 594.573701][ C0] ? __pfx_kthread+0x10/0x10 [ 594.578280][ C0] ret_from_fork_asm+0x1a/0x30 [ 594.583047][ C0] [ 594.586057][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 594.592352][ C0] Sending NMI from CPU 0 to CPUs 1: [ 594.597547][ C1] NMI backtrace for cpu 1 [ 594.597562][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 594.597587][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 594.597600][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 594.597625][ C1] Code: 7e db d8 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 be 10 00 f3 0f 1e fa fb f4 53 db d8 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 594.597644][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 594.597663][ C1] RAX: 363cc7c5eadb4b00 RBX: ffffffff81953917 RCX: 363cc7c5eadb4b00 [ 594.597681][ C1] RDX: 0000000000000001 RSI: ffffffff8d53a1aa RDI: ffffffff8b9ec2e0 [ 594.597697][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 594.597714][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f5cd530 [ 594.597730][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003958b58 [ 594.597747][ C1] FS: 0000000000000000(0000) GS:ffff888126473000(0000) knlGS:0000000000000000 [ 594.597766][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.597781][ C1] CR2: 000020000000c000 CR3: 0000000032fe9000 CR4: 0000000000350ef0 [ 594.597798][ C1] Call Trace: [ 594.597807][ C1] [ 594.597815][ C1] default_idle+0x13/0x20 [ 594.597841][ C1] default_idle_call+0x73/0xb0 [ 594.597867][ C1] do_idle+0x1e7/0x510 [ 594.597897][ C1] ? __pfx_do_idle+0x10/0x10 [ 594.597934][ C1] cpu_startup_entry+0x44/0x60 [ 594.597960][ C1] start_secondary+0x101/0x110 [ 594.597982][ C1] common_startup_64+0x13e/0x147 [ 594.598027][ C1] [ 595.661499][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 595.921570][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=568 sent=0 n=-1 (errno 32: Broken pipe) [ 596.672322][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 596.709184][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 596.750998][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 596.762861][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 596.784303][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 598.083289][ T3528] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.559010][ T3528] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.906497][ T3528] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.102718][ T3528] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.433039][ T3528] bridge_slave_1: left allmulticast mode [ 599.450688][ T3528] bridge_slave_1: left promiscuous mode [ 599.456704][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.472369][ T3528] bridge_slave_0: left allmulticast mode [ 599.478017][ T3528] bridge_slave_0: left promiscuous mode [ 599.489326][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.307691][ T3528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.326701][ T3528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.338025][ T3528] bond0 (unregistering): Released all slaves [ 600.665856][ T3528] hsr_slave_0: left promiscuous mode [ 600.673743][ T3528] hsr_slave_1: left promiscuous mode [ 600.679786][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.690726][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.700853][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.708230][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.738084][ T3528] veth1_macvtap: left promiscuous mode [ 600.743958][ T3528] veth0_macvtap: left promiscuous mode [ 600.749603][ T3528] veth1_vlan: left promiscuous mode [ 600.763174][ T3528] veth0_vlan: left promiscuous mode [ 601.283543][ T3528] team0 (unregistering): Port device team_slave_1 removed [ 601.318760][ T3528] team0 (unregistering): Port device team_slave_0 removed [ 601.856215][ T3528] IPVS: stop unused estimator thread 0... [ 601.976001][ T3528] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.051509][ T3528] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.128403][ T3528] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.235626][ T3528] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.474061][ T3528] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.570406][ T3528] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.629324][ T3528] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.736494][ T3528] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.922714][ T3528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0