last executing test programs: 10.25864831s ago: executing program 1 (id=697): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000700)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f00000007c0)="feb50e01bd970e881d8a3fde1c56f1f5e54f258e8ae9621c3b9b30920093b6147f6c6965ea7a3c5ea2fa64da3bc1d6e00b72fe5d6d749d07a6617f18c4506257a3386220eb8d5b46078bed1b0a9504aeed10c87e"}) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz1\x00', {0x7f, 0x3, 0x2, 0x5}, 0x22, [0xffffffff, 0x9d, 0x4, 0x7fff, 0x8, 0x5, 0x9, 0x4, 0xa, 0x2, 0x2db4b0ef, 0xfffffffd, 0x3, 0xfffffff6, 0x3ff, 0x1, 0xfb5, 0x0, 0xfffffffc, 0x71, 0xd, 0x3, 0x8, 0xe200, 0x3, 0x1, 0xffffffff, 0xb, 0x52, 0xffffffff, 0xe473, 0x6, 0x9, 0x10, 0x6, 0x9, 0x8, 0x7, 0x0, 0x1, 0x9, 0x5, 0x4, 0x4, 0x7, 0x6, 0xfffffff9, 0x8, 0xe, 0x2, 0x100, 0xfffffeff, 0x5, 0x6, 0x7, 0xf1, 0x2, 0x4, 0x8, 0xfffffffe, 0x3, 0x8, 0x723338dd, 0x8], [0x2858, 0x0, 0x401, 0xf317, 0x240, 0x9, 0x0, 0xf, 0x9, 0x7ed8, 0x3, 0x4, 0x7, 0x4, 0x0, 0x209, 0x6, 0x3, 0x4, 0x3, 0xe, 0x3ff, 0x7, 0x78000, 0x9, 0x2, 0x0, 0xe, 0xffffffff, 0x100, 0x5, 0x7fff, 0x4, 0xc, 0x1, 0x3cf94756, 0x3, 0x2, 0x5, 0x0, 0x2, 0x7, 0xd, 0x3, 0xfff, 0x8, 0x6, 0x80000001, 0x7fffffff, 0x0, 0x10000, 0x5, 0xff, 0x0, 0x2, 0x3, 0xb199, 0x2, 0x3b, 0x3, 0x200, 0x1, 0x5, 0x4], [0xfffffff8, 0x2, 0x56d, 0x0, 0x2, 0x5, 0x1, 0x101, 0xeee000f8, 0x5, 0xff, 0x7f, 0x8, 0x3ff, 0xffff, 0x4, 0x1, 0x8, 0x62f0, 0x0, 0x22, 0x1, 0x80000001, 0x5, 0x6, 0x1, 0xffffffff, 0x8000, 0x3, 0x2, 0x10, 0x680e, 0x7, 0x9, 0x1, 0xc4a8, 0x79, 0x677e, 0x3, 0x8, 0x0, 0x400, 0x4, 0x1000, 0x5, 0x101, 0x80, 0x0, 0xa, 0x6, 0x3, 0x8, 0x21, 0x0, 0xfffff9de, 0x6, 0x5, 0x0, 0x7, 0x3, 0xf6, 0x83, 0x9a, 0x3ff], [0x2, 0x10001, 0x0, 0xb9e, 0x0, 0x8, 0x7, 0x3, 0x7, 0x1, 0x3, 0x7, 0x20000, 0x4, 0xff, 0x0, 0xe, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x5, 0x1000, 0x9, 0xa6c, 0x795213b9, 0x6, 0xcc5, 0x8000000, 0xfff, 0x7fffffff, 0xffff, 0xffff, 0x1, 0x2, 0x1, 0x9, 0x3, 0xb23, 0x4970853b, 0xb, 0x62c, 0x7, 0x2, 0x3, 0x9, 0x1, 0x6, 0x1, 0xe, 0x4, 0x8, 0x5, 0x7, 0xfffff920, 0x8, 0x4, 0x8000, 0x1, 0xa283, 0x0, 0x1]}, 0x45c) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x5}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) 9.894712907s ago: executing program 3 (id=701): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 9.71078855s ago: executing program 3 (id=703): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff18", @ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000001185b0000010000000000000000000000186900000b0000", @ANYBLOB="0000000000000000b703000000000000850000000c"], 0x0, 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x8000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.572377298s ago: executing program 1 (id=705): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000700)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f00000007c0)="feb50e01bd970e881d8a3fde1c56f1f5e54f258e8ae9621c3b9b30920093b6147f6c6965ea7a3c5ea2fa64da3bc1d6e00b72fe5d6d749d07a6617f18c4506257a3386220eb8d5b46078bed1b0a9504aeed10c87e"}) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz1\x00', {0x7f, 0x3, 0x2, 0x5}, 0x22, [0xffffffff, 0x9d, 0x4, 0x7fff, 0x8, 0x5, 0x9, 0x4, 0xa, 0x2, 0x2db4b0ef, 0xfffffffd, 0x3, 0xfffffff6, 0x3ff, 0x1, 0xfb5, 0x0, 0xfffffffc, 0x71, 0xd, 0x3, 0x8, 0xe200, 0x3, 0x1, 0xffffffff, 0xb, 0x52, 0xffffffff, 0xe473, 0x6, 0x9, 0x10, 0x6, 0x9, 0x8, 0x7, 0x0, 0x1, 0x9, 0x5, 0x4, 0x4, 0x7, 0x6, 0xfffffff9, 0x8, 0xe, 0x2, 0x100, 0xfffffeff, 0x5, 0x6, 0x7, 0xf1, 0x2, 0x4, 0x8, 0xfffffffe, 0x3, 0x8, 0x723338dd, 0x8], [0x2858, 0x0, 0x401, 0xf317, 0x240, 0x9, 0x0, 0xf, 0x9, 0x7ed8, 0x3, 0x4, 0x7, 0x4, 0x0, 0x209, 0x6, 0x3, 0x4, 0x3, 0xe, 0x3ff, 0x7, 0x78000, 0x9, 0x2, 0x0, 0xe, 0xffffffff, 0x100, 0x5, 0x7fff, 0x4, 0xc, 0x1, 0x3cf94756, 0x3, 0x2, 0x5, 0x0, 0x2, 0x7, 0xd, 0x3, 0xfff, 0x8, 0x6, 0x80000001, 0x7fffffff, 0x0, 0x10000, 0x5, 0xff, 0x0, 0x2, 0x3, 0xb199, 0x2, 0x3b, 0x3, 0x200, 0x1, 0x5, 0x4], [0xfffffff8, 0x2, 0x56d, 0x0, 0x2, 0x5, 0x1, 0x101, 0xeee000f8, 0x5, 0xff, 0x7f, 0x8, 0x3ff, 0xffff, 0x4, 0x1, 0x8, 0x62f0, 0x0, 0x22, 0x1, 0x80000001, 0x5, 0x6, 0x1, 0xffffffff, 0x8000, 0x3, 0x2, 0x10, 0x680e, 0x7, 0x9, 0x1, 0xc4a8, 0x79, 0x677e, 0x3, 0x8, 0x0, 0x400, 0x4, 0x1000, 0x5, 0x101, 0x80, 0x0, 0xa, 0x6, 0x3, 0x8, 0x21, 0x0, 0xfffff9de, 0x6, 0x5, 0x0, 0x7, 0x3, 0xf6, 0x83, 0x9a, 0x3ff], [0x2, 0x10001, 0x0, 0xb9e, 0x0, 0x8, 0x7, 0x3, 0x7, 0x1, 0x3, 0x7, 0x20000, 0x4, 0xff, 0x0, 0xe, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x5, 0x1000, 0x9, 0xa6c, 0x795213b9, 0x6, 0xcc5, 0x8000000, 0xfff, 0x7fffffff, 0xffff, 0xffff, 0x1, 0x2, 0x1, 0x9, 0x3, 0xb23, 0x4970853b, 0xb, 0x62c, 0x7, 0x2, 0x3, 0x9, 0x1, 0x6, 0x1, 0xe, 0x4, 0x8, 0x5, 0x7, 0xfffff920, 0x8, 0x4, 0x8000, 0x1, 0xa283, 0x0, 0x1]}, 0x45c) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x5}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) 9.546248632s ago: executing program 0 (id=706): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_to_batadv\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan0\x00'}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x280}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.526840503s ago: executing program 0 (id=708): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0xfffffffffffffffe, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = getuid() r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) chroot(0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x8000, &(0x7f0000000740)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@audit}, {@euid_eq={'euid', 0x3d, r7}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x0, 0x33, 0x35, 0x63, 0x38, 0x34, 0x66], 0x2d, [0x30, 0x31, 0x36, 0x32], 0x2d, [0x37, 0x52, 0x63, 0x61], 0x2d, [0x32, 0x62, 0x61, 0x37], 0x2d, [0x32, 0x31, 0x39, 0x36, 0x8471582846d8b77c, 0x62, 0x31, 0x38]}}}]}}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x2}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x26c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r9, &(0x7f0000000300)='%U', 0x2, 0x24000010, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "4225c444"}]}}, 0x0}, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) shutdown(0xffffffffffffffff, 0x1) fcntl$setstatus(r0, 0x4, 0x0) r10 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r10, 0xc034564b, &(0x7f0000000200)={0x7fff, 0x32315241, 0x500, 0x2d0, 0x3, @stepwise={{0x5, 0x5}, {0x3, 0x8}, {0x2, 0x2}}}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x3, 0x0, 'syz1\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 8.525854693s ago: executing program 3 (id=709): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x0, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x298b768d, @private1, 0x5}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r1, 0x1, 0x9}, 0x8) removexattr(&(0x7f00000004c0)='./file0\x00', 0x0) set_mempolicy(0x2002, 0x0, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x7, &(0x7f0000000140)=[{0x7, 0x9, 0x81, 0xd}, {0x80, 0xb, 0x3, 0x2}, {0x7, 0x3a, 0x2, 0x192}, {0x381, 0x9, 0x2, 0xfffeffff}, {0x1, 0x6, 0x80, 0x1}, {0xfe2a, 0x9, 0x14, 0xffffe44b}, {0xea, 0x2, 0x50, 0x603}]}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000800), 0x1, 0x975c, &(0x7f000001c600)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f00000001c0)={0xffffffff, 0x100000000, 0x0, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2$watch_queue(&(0x7f0000000200), 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) dup3(r4, r2, 0x80000) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB=',fsmagic=0x0000000000000002,smackfsf^oor=smackfstrans-ute,fowner>', @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYBLOB="10af9b9320e74f2badb1d4f1bf657d6e613c701d8c5846d8803fc0d4f31e0c79e44ce9044721ca748ec42f07aea4364f36ff75c213c05cfcae7d9a22289f08efffb486ace97445aaf1541ba1fc8a8f20a31dfd675975db1599d3b57a2c97d8598d7729eddf33ea3504f1779e77a3ac0655cd593e710b8f5b076c38a60ee40c06bb60956c6bd72b80348f70ccb438f549f555d0567cbbf840569f1102d47be18af8b21f48c88dcc9ad10e24f851a3642197ab2acbb330d969d01a7bc3977faf2c369f47a693654742ab"], 0xa, 0xc35, &(0x7f0000001000)="$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") 8.461413271s ago: executing program 2 (id=710): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0), 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c00028005"], 0x3c}, 0x1, 0x0, 0x0, 0x4004045}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x10bc1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.220123792s ago: executing program 1 (id=711): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 8.125801724s ago: executing program 2 (id=712): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x23}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000000400018008000740000004004c000e8014000180080001000a010101080002006401"], 0xc0}}, 0x200000b0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x7fff, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0x0, 0x1d, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8], 0x0, 0x302000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.984005213s ago: executing program 1 (id=713): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 6.482370916s ago: executing program 1 (id=714): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0x4, 0x1b, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x70, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b08"}, @generic={0x80}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x400]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @rthdr={{0x18}}], 0x170}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.364537611s ago: executing program 2 (id=715): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000700)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f00000007c0)="feb50e01bd970e881d8a3fde1c56f1f5e54f258e8ae9621c3b9b30920093b6147f6c6965ea7a3c5ea2fa64da3bc1d6e00b72fe5d6d749d07a6617f18c4506257a3386220eb8d5b46078bed1b0a9504aeed10c87e"}) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz1\x00', {0x7f, 0x3, 0x2, 0x5}, 0x22, [0xffffffff, 0x9d, 0x4, 0x7fff, 0x8, 0x5, 0x9, 0x4, 0xa, 0x2, 0x2db4b0ef, 0xfffffffd, 0x3, 0xfffffff6, 0x3ff, 0x1, 0xfb5, 0x0, 0xfffffffc, 0x71, 0xd, 0x3, 0x8, 0xe200, 0x3, 0x1, 0xffffffff, 0xb, 0x52, 0xffffffff, 0xe473, 0x6, 0x9, 0x10, 0x6, 0x9, 0x8, 0x7, 0x0, 0x1, 0x9, 0x5, 0x4, 0x4, 0x7, 0x6, 0xfffffff9, 0x8, 0xe, 0x2, 0x100, 0xfffffeff, 0x5, 0x6, 0x7, 0xf1, 0x2, 0x4, 0x8, 0xfffffffe, 0x3, 0x8, 0x723338dd, 0x8], [0x2858, 0x0, 0x401, 0xf317, 0x240, 0x9, 0x0, 0xf, 0x9, 0x7ed8, 0x3, 0x4, 0x7, 0x4, 0x0, 0x209, 0x6, 0x3, 0x4, 0x3, 0xe, 0x3ff, 0x7, 0x78000, 0x9, 0x2, 0x0, 0xe, 0xffffffff, 0x100, 0x5, 0x7fff, 0x4, 0xc, 0x1, 0x3cf94756, 0x3, 0x2, 0x5, 0x0, 0x2, 0x7, 0xd, 0x3, 0xfff, 0x8, 0x6, 0x80000001, 0x7fffffff, 0x0, 0x10000, 0x5, 0xff, 0x0, 0x2, 0x3, 0xb199, 0x2, 0x3b, 0x3, 0x200, 0x1, 0x5, 0x4], [0xfffffff8, 0x2, 0x56d, 0x0, 0x2, 0x5, 0x1, 0x101, 0xeee000f8, 0x5, 0xff, 0x7f, 0x8, 0x3ff, 0xffff, 0x4, 0x1, 0x8, 0x62f0, 0x0, 0x22, 0x1, 0x80000001, 0x5, 0x6, 0x1, 0xffffffff, 0x8000, 0x3, 0x2, 0x10, 0x680e, 0x7, 0x9, 0x1, 0xc4a8, 0x79, 0x677e, 0x3, 0x8, 0x0, 0x400, 0x4, 0x1000, 0x5, 0x101, 0x80, 0x0, 0xa, 0x6, 0x3, 0x8, 0x21, 0x0, 0xfffff9de, 0x6, 0x5, 0x0, 0x7, 0x3, 0xf6, 0x83, 0x9a, 0x3ff], [0x2, 0x10001, 0x0, 0xb9e, 0x0, 0x8, 0x7, 0x3, 0x7, 0x1, 0x3, 0x7, 0x20000, 0x4, 0xff, 0x0, 0xe, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x5, 0x1000, 0x9, 0xa6c, 0x795213b9, 0x6, 0xcc5, 0x8000000, 0xfff, 0x7fffffff, 0xffff, 0xffff, 0x1, 0x2, 0x1, 0x9, 0x3, 0xb23, 0x4970853b, 0xb, 0x62c, 0x7, 0x2, 0x3, 0x9, 0x1, 0x6, 0x1, 0xe, 0x4, 0x8, 0x5, 0x7, 0xfffff920, 0x8, 0x4, 0x8000, 0x1, 0xa283, 0x0, 0x1]}, 0x45c) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x5}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) 5.711988025s ago: executing program 3 (id=716): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_to_batadv\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan0\x00'}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x280}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.28589872s ago: executing program 3 (id=717): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r4, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 4.074022566s ago: executing program 2 (id=718): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan0\x00'}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000ec2800000034000000040000000000000014000000000000002900000034000000fdffffff00000000d0000000000000002900000004000000041600000000000007100000000102099f000800000000000000fe53f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4"], 0x280}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.04443046s ago: executing program 0 (id=719): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x3, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x0) 4.0435374s ago: executing program 3 (id=720): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0), 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c00028005"], 0x3c}, 0x1, 0x0, 0x0, 0x4004045}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.918743075s ago: executing program 0 (id=721): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000700)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f00000007c0)="feb50e01bd970e881d8a3fde1c56f1f5e54f258e8ae9621c3b9b30920093b6147f6c6965ea7a3c5ea2fa64da3bc1d6e00b72fe5d6d749d07a6617f18c4506257a3386220eb8d5b46078bed1b0a9504aeed10c87e"}) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz1\x00', {0x7f, 0x3, 0x2, 0x5}, 0x22, [0xffffffff, 0x9d, 0x4, 0x7fff, 0x8, 0x5, 0x9, 0x4, 0xa, 0x2, 0x2db4b0ef, 0xfffffffd, 0x3, 0xfffffff6, 0x3ff, 0x1, 0xfb5, 0x0, 0xfffffffc, 0x71, 0xd, 0x3, 0x8, 0xe200, 0x3, 0x1, 0xffffffff, 0xb, 0x52, 0xffffffff, 0xe473, 0x6, 0x9, 0x10, 0x6, 0x9, 0x8, 0x7, 0x0, 0x1, 0x9, 0x5, 0x4, 0x4, 0x7, 0x6, 0xfffffff9, 0x8, 0xe, 0x2, 0x100, 0xfffffeff, 0x5, 0x6, 0x7, 0xf1, 0x2, 0x4, 0x8, 0xfffffffe, 0x3, 0x8, 0x723338dd, 0x8], [0x2858, 0x0, 0x401, 0xf317, 0x240, 0x9, 0x0, 0xf, 0x9, 0x7ed8, 0x3, 0x4, 0x7, 0x4, 0x0, 0x209, 0x6, 0x3, 0x4, 0x3, 0xe, 0x3ff, 0x7, 0x78000, 0x9, 0x2, 0x0, 0xe, 0xffffffff, 0x100, 0x5, 0x7fff, 0x4, 0xc, 0x1, 0x3cf94756, 0x3, 0x2, 0x5, 0x0, 0x2, 0x7, 0xd, 0x3, 0xfff, 0x8, 0x6, 0x80000001, 0x7fffffff, 0x0, 0x10000, 0x5, 0xff, 0x0, 0x2, 0x3, 0xb199, 0x2, 0x3b, 0x3, 0x200, 0x1, 0x5, 0x4], [0xfffffff8, 0x2, 0x56d, 0x0, 0x2, 0x5, 0x1, 0x101, 0xeee000f8, 0x5, 0xff, 0x7f, 0x8, 0x3ff, 0xffff, 0x4, 0x1, 0x8, 0x62f0, 0x0, 0x22, 0x1, 0x80000001, 0x5, 0x6, 0x1, 0xffffffff, 0x8000, 0x3, 0x2, 0x10, 0x680e, 0x7, 0x9, 0x1, 0xc4a8, 0x79, 0x677e, 0x3, 0x8, 0x0, 0x400, 0x4, 0x1000, 0x5, 0x101, 0x80, 0x0, 0xa, 0x6, 0x3, 0x8, 0x21, 0x0, 0xfffff9de, 0x6, 0x5, 0x0, 0x7, 0x3, 0xf6, 0x83, 0x9a, 0x3ff], [0x2, 0x10001, 0x0, 0xb9e, 0x0, 0x8, 0x7, 0x3, 0x7, 0x1, 0x3, 0x7, 0x20000, 0x4, 0xff, 0x0, 0xe, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x5, 0x1000, 0x9, 0xa6c, 0x795213b9, 0x6, 0xcc5, 0x8000000, 0xfff, 0x7fffffff, 0xffff, 0xffff, 0x1, 0x2, 0x1, 0x9, 0x3, 0xb23, 0x4970853b, 0xb, 0x62c, 0x7, 0x2, 0x3, 0x9, 0x1, 0x6, 0x1, 0xe, 0x4, 0x8, 0x5, 0x7, 0xfffff920, 0x8, 0x4, 0x8000, 0x1, 0xa283, 0x0, 0x1]}, 0x45c) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x5}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) 2.807046589s ago: executing program 2 (id=722): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) (fail_nth: 1) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 1.488009719s ago: executing program 2 (id=723): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x23}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000000400018008000740000004004c000e8014000180080001000a010101080002006401"], 0xc0}}, 0x200000b0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xa0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x7fff, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0x0, 0x1d, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8], 0x0, 0x302000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.219684944s ago: executing program 0 (id=724): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus/file0\x00', 0x40000, 0x5) fdatasync(r4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 1.109073588s ago: executing program 1 (id=725): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_to_batadv\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan0\x00'}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x280}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 0 (id=726): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f00000006c0), 0x4) (fail_nth: 1) kernel console output (not intermixed with test programs): cing a failure. [ 175.815821][ T6910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.847739][ T6910] CPU: 1 PID: 6910 Comm: syz.1.311 Not tainted syzkaller #0 [ 175.855086][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.865160][ T6910] Call Trace: [ 175.868445][ T6910] [ 175.871375][ T6910] dump_stack_lvl+0x16c/0x230 [ 175.876059][ T6910] ? show_regs_print_info+0x20/0x20 [ 175.881259][ T6910] ? load_image+0x3b0/0x3b0 [ 175.885772][ T6910] ? __might_fault+0xaa/0x120 [ 175.890452][ T6910] ? __lock_acquire+0x7c80/0x7c80 [ 175.895475][ T6910] should_fail_ex+0x39d/0x4d0 [ 175.900155][ T6910] _copy_from_user+0x2f/0xe0 [ 175.904834][ T6910] ___sys_sendmsg+0x159/0x290 [ 175.909515][ T6910] ? __sys_sendmsg+0x270/0x270 [ 175.914820][ T6910] ? __lock_acquire+0x7c80/0x7c80 [ 175.919949][ T6910] __se_sys_sendmsg+0x1a5/0x270 [ 175.924832][ T6910] ? __x64_sys_sendmsg+0x80/0x80 [ 175.929792][ T6910] ? lockdep_hardirqs_on+0x98/0x150 [ 175.935047][ T6910] do_syscall_64+0x55/0xb0 [ 175.939500][ T6910] ? clear_bhb_loop+0x40/0x90 [ 175.944269][ T6910] ? clear_bhb_loop+0x40/0x90 [ 175.949046][ T6910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.955030][ T6910] RIP: 0033:0x7f169cf8f749 [ 175.959455][ T6910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.979174][ T6910] RSP: 002b:00007f169ddc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.987606][ T6910] RAX: ffffffffffffffda RBX: 00007f169d1e5fa0 RCX: 00007f169cf8f749 [ 175.995669][ T6910] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 176.003653][ T6910] RBP: 00007f169ddc5090 R08: 0000000000000000 R09: 0000000000000000 [ 176.011673][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.019648][ T6910] R13: 00007f169d1e6038 R14: 00007f169d1e5fa0 R15: 00007ffc112125f8 [ 176.027631][ T6910] [ 176.065339][ T6914] program syz.0.309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.472560][ T6920] macvlan0: entered allmulticast mode [ 177.480134][ T6920] veth1_vlan: entered allmulticast mode [ 177.867610][ T787] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 178.110620][ T787] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 178.120910][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.141413][ T787] usb 2-1: Product: syz [ 178.145642][ T787] usb 2-1: Manufacturer: syz [ 178.159602][ T787] usb 2-1: SerialNumber: syz [ 178.178708][ T787] usb 2-1: config 0 descriptor?? [ 178.195665][ T787] gspca_main: sq930x-2.14.0 probing 2770:930c [ 178.665628][ T6934] loop0: detected capacity change from 0 to 40427 [ 178.718894][ T6934] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 178.749771][ T6934] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 178.817363][ T6934] F2FS-fs (loop0): Found nat_bits in checkpoint [ 178.893810][ T6934] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 178.914215][ T6934] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 178.994719][ T6944] program syz.2.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.015229][ T6926] macvlan0: entered allmulticast mode [ 179.021453][ T27] audit: type=1800 audit(1768327914.166:9): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.320" name="file1" dev="loop0" ino=11 res=0 errno=0 [ 179.057385][ T6926] veth1_vlan: entered allmulticast mode [ 179.069845][ T787] gspca_sq930x: ucbus_write failed -71 [ 179.087494][ T787] sq930x: probe of 2-1:0.0 failed with error -71 [ 179.097495][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 179.109273][ T787] usb 2-1: USB disconnect, device number 4 [ 179.156585][ T5760] syz-executor: attempt to access beyond end of device [ 179.156585][ T5760] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 179.195454][ T5760] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 179.287814][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 179.305391][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 179.324023][ T9] usb 4-1: config 0 has no interface number 0 [ 179.331653][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 179.343275][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 179.356100][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 179.377312][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 179.387377][ T9] usb 4-1: Product: syz [ 179.391620][ T9] usb 4-1: SerialNumber: syz [ 179.412985][ T9] usb 4-1: config 0 descriptor?? [ 179.430520][ T9] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 179.441328][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5 [ 181.215294][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 181.215372][ T5766] usb 4-1: USB disconnect, device number 2 [ 181.228534][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 181.261954][ T5766] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 183.505489][ T6977] FAULT_INJECTION: forcing a failure. [ 183.505489][ T6977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.558467][ T6977] CPU: 1 PID: 6977 Comm: syz.0.333 Not tainted syzkaller #0 [ 183.565820][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.575925][ T6977] Call Trace: [ 183.579219][ T6977] [ 183.582200][ T6977] dump_stack_lvl+0x16c/0x230 [ 183.586919][ T6977] ? show_regs_print_info+0x20/0x20 [ 183.592140][ T6977] ? load_image+0x3b0/0x3b0 [ 183.596677][ T6977] ? __might_fault+0xaa/0x120 [ 183.601380][ T6977] ? __lock_acquire+0x7c80/0x7c80 [ 183.606429][ T6977] should_fail_ex+0x39d/0x4d0 [ 183.611136][ T6977] _copy_from_user+0x2f/0xe0 [ 183.615747][ T6977] ___sys_sendmsg+0x159/0x290 [ 183.620463][ T6977] ? __sys_sendmsg+0x270/0x270 [ 183.625353][ T6977] ? __lock_acquire+0x7c80/0x7c80 [ 183.630482][ T6977] __se_sys_sendmsg+0x1a5/0x270 [ 183.635336][ T6977] ? __x64_sys_sendmsg+0x80/0x80 [ 183.640304][ T6977] ? lockdep_hardirqs_on+0x98/0x150 [ 183.645521][ T6977] do_syscall_64+0x55/0xb0 [ 183.649949][ T6977] ? clear_bhb_loop+0x40/0x90 [ 183.654627][ T6977] ? clear_bhb_loop+0x40/0x90 [ 183.659308][ T6977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.665225][ T6977] RIP: 0033:0x7f7d5238f749 [ 183.669649][ T6977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.689257][ T6977] RSP: 002b:00007f7d532f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.697676][ T6977] RAX: ffffffffffffffda RBX: 00007f7d525e5fa0 RCX: 00007f7d5238f749 [ 183.705666][ T6977] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 183.713671][ T6977] RBP: 00007f7d532f0090 R08: 0000000000000000 R09: 0000000000000000 [ 183.721652][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.729626][ T6977] R13: 00007f7d525e6038 R14: 00007f7d525e5fa0 R15: 00007fffa1f0e948 [ 183.737609][ T6977] [ 183.853475][ T6979] loop3: detected capacity change from 0 to 4096 [ 183.873441][ T6979] NILFS (loop3): invalid segment: Checksum error in segment payload [ 183.895564][ T6979] NILFS (loop3): trying rollback from an earlier position [ 183.984606][ T6979] NILFS (loop3): recovery complete [ 183.997661][ T6985] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.032981][ T27] audit: type=1800 audit(1768327919.176:10): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.334" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 184.128107][ T6986] FAULT_INJECTION: forcing a failure. [ 184.128107][ T6986] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 184.176340][ T6989] program syz.1.331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.194861][ T6986] CPU: 1 PID: 6986 Comm: syz.2.335 Not tainted syzkaller #0 [ 184.202206][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.212287][ T6986] Call Trace: [ 184.215569][ T6986] [ 184.218501][ T6986] dump_stack_lvl+0x16c/0x230 [ 184.223361][ T6986] ? show_regs_print_info+0x20/0x20 [ 184.228560][ T6986] ? load_image+0x3b0/0x3b0 [ 184.233071][ T6986] ? __lock_acquire+0x7c80/0x7c80 [ 184.238101][ T6986] should_fail_ex+0x39d/0x4d0 [ 184.242787][ T6986] prepare_alloc_pages+0x1e2/0x5f0 [ 184.247914][ T6986] __alloc_pages+0x127/0x460 [ 184.252513][ T6986] ? zone_statistics+0x170/0x170 [ 184.257461][ T6986] ? handle_mm_fault+0xd1/0x4920 [ 184.262413][ T6986] __folio_alloc+0x10/0x20 [ 184.266838][ T6986] vma_alloc_folio+0x47a/0x8f0 [ 184.271614][ T6986] handle_mm_fault+0x1a38/0x4920 [ 184.276561][ T6986] ? handle_mm_fault+0xd1/0x4920 [ 184.281515][ T6986] ? lock_vma_under_rcu+0x526/0x650 [ 184.286722][ T6986] ? numa_migrate_prep+0x350/0x350 [ 184.291853][ T6986] ? do_user_addr_fault+0x1c3/0x12e0 [ 184.297152][ T6986] do_user_addr_fault+0xad0/0x12e0 [ 184.302273][ T6986] ? rcu_is_watching+0x15/0xb0 [ 184.307047][ T6986] exc_page_fault+0x67/0x110 [ 184.311665][ T6986] ? clear_bhb_loop+0x40/0x90 [ 184.316346][ T6986] asm_exc_page_fault+0x26/0x30 [ 184.321198][ T6986] RIP: 0033:0x7f44920569ca [ 184.325619][ T6986] Code: b2 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 bf 00 00 c0 fe 41 56 41 55 41 54 45 31 e4 55 53 48 81 ec 08 1b 00 00 <48> 89 7c 24 78 48 8d 9c 24 f0 06 00 00 48 89 74 24 70 48 89 54 24 [ 184.345227][ T6986] RSP: 002b:00007f44930694f0 EFLAGS: 00010206 [ 184.351309][ T6986] RAX: 00007f44920569b0 RBX: 00007f44923e6090 RCX: 0000200000000140 [ 184.359283][ T6986] RDX: 0000200000000000 RSI: 0000000000000007 RDI: ffffffffffffffff [ 184.367262][ T6986] RBP: 00007f449306b090 R08: 0000000000000001 R09: 0000000000000074 [ 184.375240][ T6986] R10: ffffffffffffffff R11: 0000200000000000 R12: 0000000000000000 [ 184.383212][ T6986] R13: 00007f44923e6128 R14: 00007f44923e6090 R15: 00000000fec00000 [ 184.391199][ T6986] [ 184.416839][ T6986] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 185.883329][ T6992] loop1: detected capacity change from 0 to 2048 [ 186.448313][ T7012] FAULT_INJECTION: forcing a failure. [ 186.448313][ T7012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.486230][ T7011] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 186.507428][ T7012] CPU: 1 PID: 7012 Comm: syz.3.343 Not tainted syzkaller #0 [ 186.514783][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.524869][ T7012] Call Trace: [ 186.528171][ T7012] [ 186.531126][ T7012] dump_stack_lvl+0x16c/0x230 [ 186.535841][ T7012] ? show_regs_print_info+0x20/0x20 [ 186.541081][ T7012] ? load_image+0x3b0/0x3b0 [ 186.545628][ T7012] ? __might_fault+0xaa/0x120 [ 186.550337][ T7012] ? __lock_acquire+0x7c80/0x7c80 [ 186.555507][ T7012] should_fail_ex+0x39d/0x4d0 [ 186.560233][ T7012] _copy_from_user+0x2f/0xe0 [ 186.564860][ T7012] ___sys_sendmsg+0x159/0x290 [ 186.569576][ T7012] ? __sys_sendmsg+0x270/0x270 [ 186.574397][ T7012] ? __lock_acquire+0x7c80/0x7c80 [ 186.579568][ T7012] __se_sys_sendmsg+0x1a5/0x270 [ 186.584467][ T7012] ? __x64_sys_sendmsg+0x80/0x80 [ 186.589552][ T7012] ? lockdep_hardirqs_on+0x98/0x150 [ 186.594803][ T7012] do_syscall_64+0x55/0xb0 [ 186.599258][ T7012] ? clear_bhb_loop+0x40/0x90 [ 186.603967][ T7012] ? clear_bhb_loop+0x40/0x90 [ 186.608682][ T7012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.614612][ T7012] RIP: 0033:0x7f44ba58f749 [ 186.619060][ T7012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.638693][ T7012] RSP: 002b:00007f44bb4f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.647138][ T7012] RAX: ffffffffffffffda RBX: 00007f44ba7e6090 RCX: 00007f44ba58f749 [ 186.655136][ T7012] RDX: 0000000004040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 186.663311][ T7012] RBP: 00007f44bb4f5090 R08: 0000000000000000 R09: 0000000000000000 [ 186.671321][ T7012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.679337][ T7012] R13: 00007f44ba7e6128 R14: 00007f44ba7e6090 R15: 00007ffe6e8ab8f8 [ 186.687362][ T7012] [ 186.946591][ T7014] loop2: detected capacity change from 0 to 8192 [ 186.994309][ T7014] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 187.004699][ T7016] loop3: detected capacity change from 0 to 4096 [ 187.011361][ T7014] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 187.024786][ T7014] REISERFS (device loop2): using ordered data mode [ 187.032124][ T7014] reiserfs: using flush barriers [ 187.047859][ T7014] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 187.072732][ T7014] REISERFS (device loop2): checking transaction log (loop2) [ 187.111217][ T7016] NILFS (loop3): invalid segment: Checksum error in segment payload [ 188.442573][ T7016] NILFS (loop3): trying rollback from an earlier position [ 188.518583][ T7016] NILFS (loop3): recovery complete [ 188.544839][ T7022] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.601958][ T27] audit: type=1800 audit(1768327923.746:11): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.345" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 188.695229][ T7014] REISERFS (device loop2): Using tea hash to sort names [ 188.726939][ T7014] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 188.980750][ T7028] program syz.3.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.909404][ T7040] FAULT_INJECTION: forcing a failure. [ 190.909404][ T7040] name failslab, interval 1, probability 0, space 0, times 0 [ 190.937494][ T7040] CPU: 0 PID: 7040 Comm: syz.2.353 Not tainted syzkaller #0 [ 190.940798][ T7042] program syz.0.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.944924][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.944939][ T7040] Call Trace: [ 190.944946][ T7040] [ 190.944953][ T7040] dump_stack_lvl+0x16c/0x230 [ 190.944980][ T7040] ? show_regs_print_info+0x20/0x20 [ 190.980489][ T7040] ? load_image+0x3b0/0x3b0 [ 190.985035][ T7040] ? __might_sleep+0xe0/0xe0 [ 190.989653][ T7040] ? __lock_acquire+0x7c80/0x7c80 [ 190.994688][ T7040] should_fail_ex+0x39d/0x4d0 [ 190.999377][ T7040] should_failslab+0x9/0x20 [ 191.003885][ T7040] slab_pre_alloc_hook+0x59/0x310 [ 191.008916][ T7040] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 191.014636][ T7040] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 191.020360][ T7040] __kmem_cache_alloc_node+0x53/0x260 [ 191.025750][ T7040] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 191.031514][ T7040] __kmalloc+0xa4/0x240 [ 191.035684][ T7040] tomoyo_realpath_from_path+0xe3/0x5d0 [ 191.041246][ T7040] tomoyo_path_number_perm+0x1ea/0x590 [ 191.046717][ T7040] ? tomoyo_path_number_perm+0x1ba/0x590 [ 191.052389][ T7040] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 191.057858][ T7040] ? proc_fail_nth_write+0x1bf/0x240 [ 191.063248][ T7040] ? proc_fail_nth_read+0x250/0x250 [ 191.068486][ T7040] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 191.074512][ T7040] security_file_ioctl+0x70/0xa0 [ 191.079554][ T7040] __se_sys_ioctl+0x48/0x170 [ 191.084148][ T7040] do_syscall_64+0x55/0xb0 [ 191.088566][ T7040] ? clear_bhb_loop+0x40/0x90 [ 191.093273][ T7040] ? clear_bhb_loop+0x40/0x90 [ 191.097978][ T7040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.103914][ T7040] RIP: 0033:0x7f449218f749 [ 191.108338][ T7040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.127950][ T7040] RSP: 002b:00007f449308c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.136367][ T7040] RAX: ffffffffffffffda RBX: 00007f44923e5fa0 RCX: 00007f449218f749 [ 191.144346][ T7040] RDX: 0000200000000080 RSI: 0000000040045010 RDI: 0000000000000003 [ 191.152356][ T7040] RBP: 00007f449308c090 R08: 0000000000000000 R09: 0000000000000000 [ 191.160350][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.168323][ T7040] R13: 00007f44923e6038 R14: 00007f44923e5fa0 R15: 00007ffc1ff8c968 [ 191.176308][ T7040] [ 191.183735][ T7040] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.511369][ T7047] loop0: detected capacity change from 0 to 2048 [ 191.550309][ T7047] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 191.590258][ T7053] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.414385][ T7059] loop1: detected capacity change from 0 to 4096 [ 192.476359][ T5761] Bluetooth: hci1: command 0x0406 tx timeout [ 192.482617][ T5767] Bluetooth: hci0: command 0x0406 tx timeout [ 192.489834][ T5761] Bluetooth: hci2: command 0x0406 tx timeout [ 193.139956][ T7057] loop3: detected capacity change from 0 to 4096 [ 193.159253][ T7061] program syz.0.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.823753][ T7057] NILFS (loop3): invalid segment: Checksum error in segment payload [ 193.916116][ T7057] NILFS (loop3): trying rollback from an earlier position [ 195.268484][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.274852][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.306485][ T7057] NILFS (loop3): recovery complete [ 195.338297][ T7057] NILFS (loop3): error -4 creating segctord thread [ 195.545309][ T7068] loop1: detected capacity change from 0 to 2048 [ 195.553875][ T7070] program syz.3.363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.665613][ T7068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.669532][ T7072] FAULT_INJECTION: forcing a failure. [ 195.669532][ T7072] name failslab, interval 1, probability 0, space 0, times 0 [ 195.691081][ T7072] CPU: 1 PID: 7072 Comm: syz.2.364 Not tainted syzkaller #0 [ 195.698406][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.708493][ T7072] Call Trace: [ 195.711792][ T7072] [ 195.714817][ T7072] dump_stack_lvl+0x16c/0x230 [ 195.719523][ T7072] ? show_regs_print_info+0x20/0x20 [ 195.724757][ T7072] ? load_image+0x3b0/0x3b0 [ 195.729276][ T7072] ? __might_sleep+0xe0/0xe0 [ 195.733876][ T7072] ? __lock_acquire+0x7c80/0x7c80 [ 195.738969][ T7072] should_fail_ex+0x39d/0x4d0 [ 195.743660][ T7072] should_failslab+0x9/0x20 [ 195.748190][ T7072] slab_pre_alloc_hook+0x59/0x310 [ 195.753400][ T7072] kmem_cache_alloc+0x5a/0x2e0 [ 195.758183][ T7072] ? vm_area_dup+0x27/0x270 [ 195.762786][ T7072] vm_area_dup+0x27/0x270 [ 195.767147][ T7072] __split_vma+0x19f/0xc00 [ 195.771667][ T7072] ? mmap_write_unlock+0x160/0x160 [ 195.776787][ T7072] ? split_vma+0x8f/0x110 [ 195.781125][ T7072] mprotect_fixup+0xaad/0xc90 [ 195.785815][ T7072] ? change_protection+0x3220/0x3220 [ 195.791105][ T7072] ? apparmor_file_mprotect+0xfe/0x120 [ 195.796564][ T7072] ? bpf_lsm_file_mprotect+0x9/0x10 [ 195.801768][ T7072] do_mprotect_pkey+0x76e/0xc30 [ 195.806809][ T7072] ? prot_none_test+0x10/0x10 [ 195.811502][ T7072] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 195.818031][ T7072] __x64_sys_mprotect+0x80/0x90 [ 195.822982][ T7072] do_syscall_64+0x55/0xb0 [ 195.827403][ T7072] ? clear_bhb_loop+0x40/0x90 [ 195.832089][ T7072] ? clear_bhb_loop+0x40/0x90 [ 195.836781][ T7072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.842760][ T7072] RIP: 0033:0x7f449218f749 [ 195.847265][ T7072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.866976][ T7072] RSP: 002b:00007f449308c038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 195.875568][ T7072] RAX: ffffffffffffffda RBX: 00007f44923e5fa0 RCX: 00007f449218f749 [ 195.883567][ T7072] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000000000 [ 195.891540][ T7072] RBP: 00007f449308c090 R08: 0000000000000000 R09: 0000000000000000 [ 195.899607][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.907577][ T7072] R13: 00007f44923e6038 R14: 00007f44923e5fa0 R15: 00007ffc1ff8c968 [ 195.915566][ T7072] [ 195.937728][ T7068] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.975393][ T7078] loop3: detected capacity change from 0 to 256 [ 195.999360][ T7078] exfat: Deprecated parameter 'utf8' [ 196.044610][ T7078] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 196.098098][ T7079] overlay: Bad value for 'uuid' [ 196.303253][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.539191][ T7087] program syz.3.368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.648255][ T7085] loop1: detected capacity change from 0 to 4096 [ 196.702841][ T7085] NILFS (loop1): invalid segment: Checksum error in segment payload [ 196.718406][ T7085] NILFS (loop1): trying rollback from an earlier position [ 196.816631][ T7085] NILFS (loop1): recovery complete [ 196.852079][ T7097] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.908671][ T27] audit: type=1800 audit(1768327932.056:12): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.367" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 196.923980][ T7096] loop2: detected capacity change from 0 to 4096 [ 196.959992][ T7096] NILFS (loop2): invalid segment: Checksum error in segment payload [ 197.107545][ T7096] NILFS (loop2): trying rollback from an earlier position [ 197.142003][ T7096] NILFS (loop2): recovery complete [ 197.685272][ T7102] loop3: detected capacity change from 0 to 4096 [ 197.994944][ T7104] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.281700][ T27] audit: type=1800 audit(1768327933.406:13): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.371" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 198.842992][ T7108] program syz.0.373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.753248][ T7118] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 201.023097][ T7118] loop2: detected capacity change from 0 to 4096 [ 204.823496][ T7144] program syz.3.384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.872751][ T7140] loop2: detected capacity change from 0 to 4096 [ 204.898431][ T7146] program syz.1.378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.934406][ T7140] NILFS (loop2): invalid segment: Checksum error in segment payload [ 204.957773][ T7140] NILFS (loop2): trying rollback from an earlier position [ 205.011357][ T7140] NILFS (loop2): recovery complete [ 205.036714][ T7151] FAULT_INJECTION: forcing a failure. [ 205.036714][ T7151] name failslab, interval 1, probability 0, space 0, times 0 [ 205.083526][ T7152] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.114672][ T7151] CPU: 0 PID: 7151 Comm: syz.3.385 Not tainted syzkaller #0 [ 205.122022][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.132103][ T7151] Call Trace: [ 205.135476][ T7151] [ 205.138451][ T7151] dump_stack_lvl+0x16c/0x230 [ 205.143140][ T7151] ? show_regs_print_info+0x20/0x20 [ 205.148432][ T7151] ? load_image+0x3b0/0x3b0 [ 205.152945][ T7151] ? __might_sleep+0xe0/0xe0 [ 205.157544][ T7151] ? __lock_acquire+0x7c80/0x7c80 [ 205.162749][ T7151] should_fail_ex+0x39d/0x4d0 [ 205.167435][ T7151] should_failslab+0x9/0x20 [ 205.171958][ T7151] slab_pre_alloc_hook+0x59/0x310 [ 205.176991][ T7151] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 205.182715][ T7151] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 205.188444][ T7151] __kmem_cache_alloc_node+0x53/0x260 [ 205.193825][ T7151] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 205.199547][ T7151] __kmalloc+0xa4/0x240 [ 205.203711][ T7151] tomoyo_realpath_from_path+0xe3/0x5d0 [ 205.209263][ T7151] tomoyo_path_number_perm+0x1ea/0x590 [ 205.214816][ T7151] ? tomoyo_path_number_perm+0x1ba/0x590 [ 205.220453][ T7151] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 205.225922][ T7151] ? ksys_write+0x1c1/0x250 [ 205.230540][ T7151] ? __fget_files+0x28/0x4d0 [ 205.235148][ T7151] security_file_ioctl+0x70/0xa0 [ 205.240098][ T7151] __se_sys_ioctl+0x48/0x170 [ 205.244700][ T7151] do_syscall_64+0x55/0xb0 [ 205.249125][ T7151] ? clear_bhb_loop+0x40/0x90 [ 205.253807][ T7151] ? clear_bhb_loop+0x40/0x90 [ 205.258490][ T7151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.264389][ T7151] RIP: 0033:0x7f44ba58f749 [ 205.268814][ T7151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.288421][ T7151] RSP: 002b:00007f44bb516038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.296840][ T7151] RAX: ffffffffffffffda RBX: 00007f44ba7e5fa0 RCX: 00007f44ba58f749 [ 205.304824][ T7151] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000003 [ 205.312810][ T7151] RBP: 00007f44bb516090 R08: 0000000000000000 R09: 0000000000000000 [ 205.320984][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.329227][ T7151] R13: 00007f44ba7e6038 R14: 00007f44ba7e5fa0 R15: 00007ffe6e8ab8f8 [ 205.337216][ T7151] [ 205.397462][ T27] audit: type=1800 audit(1768327940.516:14): pid=7140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.383" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 205.422616][ T7154] loop1: detected capacity change from 0 to 512 [ 205.430103][ T7154] EXT4-fs: Ignoring removed oldalloc option [ 205.432171][ T7151] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.443383][ T7154] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 205.507720][ T7154] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2852: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 205.527609][ T7154] EXT4-fs (loop1): 1 truncate cleaned up [ 205.534492][ T7154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.609128][ T7130] loop0: detected capacity change from 0 to 32768 [ 205.723434][ T7130] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 205.824571][ T7130] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 206.495275][ T7172] process 'syz.3.390' launched '/dev/fd/8' with NULL argv: empty string added [ 206.495524][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.734378][ T7179] FAULT_INJECTION: forcing a failure. [ 206.734378][ T7179] name failslab, interval 1, probability 0, space 0, times 0 [ 206.770837][ T7179] CPU: 1 PID: 7179 Comm: syz.3.391 Not tainted syzkaller #0 [ 206.778192][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.788273][ T7179] Call Trace: [ 206.791576][ T7179] [ 206.794519][ T7179] dump_stack_lvl+0x16c/0x230 [ 206.799225][ T7179] ? show_regs_print_info+0x20/0x20 [ 206.804454][ T7179] ? load_image+0x3b0/0x3b0 [ 206.808997][ T7179] ? __lock_acquire+0x7c80/0x7c80 [ 206.814052][ T7179] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 206.819808][ T7179] should_fail_ex+0x39d/0x4d0 [ 206.824528][ T7179] should_failslab+0x9/0x20 [ 206.829061][ T7179] slab_pre_alloc_hook+0x59/0x310 [ 206.834126][ T7179] kmem_cache_alloc+0x5a/0x2e0 [ 206.838894][ T7179] ? getname_flags+0xbb/0x500 [ 206.843584][ T7179] getname_flags+0xbb/0x500 [ 206.848269][ T7179] __x64_sys_execveat+0xad/0xe0 [ 206.853130][ T7179] do_syscall_64+0x55/0xb0 [ 206.857547][ T7179] ? clear_bhb_loop+0x40/0x90 [ 206.862223][ T7179] ? clear_bhb_loop+0x40/0x90 [ 206.866905][ T7179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.872805][ T7179] RIP: 0033:0x7f44ba58f749 [ 206.877237][ T7179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.896854][ T7179] RSP: 002b:00007f44bb516038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 206.905272][ T7179] RAX: ffffffffffffffda RBX: 00007f44ba7e5fa0 RCX: 00007f44ba58f749 [ 206.913679][ T7179] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 206.921657][ T7179] RBP: 00007f44bb516090 R08: 0000000000001000 R09: 0000000000000000 [ 206.929628][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.937598][ T7179] R13: 00007f44ba7e6038 R14: 00007f44ba7e5fa0 R15: 00007ffe6e8ab8f8 [ 206.945587][ T7179] [ 206.957414][ T3065] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 207.162180][ T3065] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.172329][ T3065] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 207.194248][ T3065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.225515][ T3065] usb 3-1: config 0 descriptor?? [ 207.238127][ T7189] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaa [ 207.242518][ T7193] program syz.1.393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.442283][ T7197] program syz.1.394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.600085][ T5760] ocfs2: Unmounting device (7,0) on (node local) [ 209.097100][ T3065] razer 0003:1532:010E.0001: unknown main item tag 0x0 [ 209.120661][ T3065] razer 0003:1532:010E.0001: unknown main item tag 0x0 [ 209.138950][ T3065] razer 0003:1532:010E.0001: unknown main item tag 0x0 [ 209.145897][ T3065] razer 0003:1532:010E.0001: unknown main item tag 0x0 [ 209.178060][ T3065] razer 0003:1532:010E.0001: unknown main item tag 0x0 [ 211.065897][ T3065] razer 0003:1532:010E.0001: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 211.160846][ T5843] usb 3-1: USB disconnect, device number 3 [ 211.244335][ T7218] fido_id[7218]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 211.479274][ T7221] program syz.3.401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.682010][ T7224] program syz.2.402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.819421][ T7225] loop3: detected capacity change from 0 to 4096 [ 211.827537][ T7227] program syz.2.404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.878191][ T7225] NILFS (loop3): invalid segment: Checksum error in segment payload [ 211.886425][ T7225] NILFS (loop3): trying rollback from an earlier position [ 211.951692][ T7225] NILFS (loop3): recovery complete [ 212.012919][ T7229] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.143113][ T27] audit: type=1800 audit(1768327947.286:15): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.403" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 212.248557][ T7234] FAULT_INJECTION: forcing a failure. [ 212.248557][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 212.279836][ T7234] CPU: 1 PID: 7234 Comm: syz.2.405 Not tainted syzkaller #0 [ 212.287184][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.297257][ T7234] Call Trace: [ 212.300549][ T7234] [ 212.303491][ T7234] dump_stack_lvl+0x16c/0x230 [ 212.308193][ T7234] ? show_regs_print_info+0x20/0x20 [ 212.313420][ T7234] ? load_image+0x3b0/0x3b0 [ 212.317956][ T7234] ? __might_sleep+0xe0/0xe0 [ 212.322574][ T7234] ? __lock_acquire+0x7c80/0x7c80 [ 212.327620][ T7234] should_fail_ex+0x39d/0x4d0 [ 212.332333][ T7234] should_failslab+0x9/0x20 [ 212.336881][ T7234] slab_pre_alloc_hook+0x59/0x310 [ 212.341978][ T7234] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 212.347734][ T7234] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 212.353455][ T7234] __kmem_cache_alloc_node+0x53/0x260 [ 212.358838][ T7234] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 212.364564][ T7234] __kmalloc+0xa4/0x240 [ 212.368726][ T7234] tomoyo_realpath_from_path+0xe3/0x5d0 [ 212.374282][ T7234] tomoyo_path_number_perm+0x1ea/0x590 [ 212.379745][ T7234] ? tomoyo_path_number_perm+0x1ba/0x590 [ 212.385389][ T7234] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 212.390856][ T7234] ? ksys_write+0x1c1/0x250 [ 212.395398][ T7234] ? __fget_files+0x28/0x4d0 [ 212.400005][ T7234] security_file_ioctl+0x70/0xa0 [ 212.404951][ T7234] __se_sys_ioctl+0x48/0x170 [ 212.409546][ T7234] do_syscall_64+0x55/0xb0 [ 212.413961][ T7234] ? clear_bhb_loop+0x40/0x90 [ 212.418638][ T7234] ? clear_bhb_loop+0x40/0x90 [ 212.423497][ T7234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.429404][ T7234] RIP: 0033:0x7f449218f749 [ 212.434341][ T7234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.454041][ T7234] RSP: 002b:00007f449306a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.462546][ T7234] RAX: ffffffffffffffda RBX: 00007f44923e6090 RCX: 00007f449218f749 [ 212.470604][ T7234] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 212.478575][ T7234] RBP: 00007f449306a090 R08: 0000000000000000 R09: 0000000000000000 [ 212.486545][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.494517][ T7234] R13: 00007f44923e6128 R14: 00007f44923e6090 R15: 00007ffc1ff8c968 [ 212.502502][ T7234] [ 212.520150][ T7234] ERROR: Out of memory at tomoyo_realpath_from_path. [ 212.715579][ T7237] loop0: detected capacity change from 0 to 4096 [ 212.723344][ T7239] netlink: 68 bytes leftover after parsing attributes in process `syz.3.406'. [ 212.776815][ T7237] NILFS (loop0): invalid segment: Checksum error in segment payload [ 212.790174][ T7239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.406'. [ 212.827492][ T7237] NILFS (loop0): trying rollback from an earlier position [ 212.838744][ T7239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.406'. [ 212.875044][ T7237] NILFS (loop0): recovery complete [ 212.880579][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 214.203545][ T7246] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.214938][ T7233] FAULT_INJECTION: forcing a failure. [ 214.214938][ T7233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.228449][ T7233] CPU: 1 PID: 7233 Comm: syz.1.399 Not tainted syzkaller #0 [ 214.235763][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.245926][ T7233] Call Trace: [ 214.249231][ T7233] [ 214.252216][ T7233] dump_stack_lvl+0x16c/0x230 [ 214.256915][ T7233] ? show_regs_print_info+0x20/0x20 [ 214.262167][ T7233] ? load_image+0x3b0/0x3b0 [ 214.266706][ T7233] ? __lock_acquire+0x7c80/0x7c80 [ 214.271759][ T7233] ? snprintf+0xdb/0x120 [ 214.276032][ T7233] should_fail_ex+0x39d/0x4d0 [ 214.280763][ T7233] _copy_to_user+0x2f/0xa0 [ 214.285203][ T7233] simple_read_from_buffer+0xe7/0x150 [ 214.290591][ T7233] proc_fail_nth_read+0x1e3/0x250 [ 214.295627][ T7233] ? proc_fault_inject_write+0x340/0x340 [ 214.301278][ T7233] ? fsnotify_perm+0x271/0x5e0 [ 214.306052][ T7233] ? proc_fault_inject_write+0x340/0x340 [ 214.311686][ T7233] vfs_read+0x27e/0x920 [ 214.315860][ T7233] ? kernel_read+0x1e0/0x1e0 [ 214.320458][ T7233] ? __fget_files+0x28/0x4d0 [ 214.325053][ T7233] ? __fget_files+0x44a/0x4d0 [ 214.329769][ T7233] ? __fdget_pos+0x2a3/0x330 [ 214.334361][ T7233] ? ksys_read+0x75/0x250 [ 214.338695][ T7233] ksys_read+0x147/0x250 [ 214.342957][ T7233] ? vfs_write+0x940/0x940 [ 214.347376][ T7233] ? lockdep_hardirqs_on+0x98/0x150 [ 214.352579][ T7233] do_syscall_64+0x55/0xb0 [ 214.357026][ T7233] ? clear_bhb_loop+0x40/0x90 [ 214.361710][ T7233] ? clear_bhb_loop+0x40/0x90 [ 214.366400][ T7233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.372306][ T7233] RIP: 0033:0x7f169cf8e15c [ 214.376729][ T7233] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 214.396340][ T7233] RSP: 002b:00007f169ddc5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.404756][ T7233] RAX: ffffffffffffffda RBX: 00007f169d1e5fa0 RCX: 00007f169cf8e15c [ 214.412729][ T7233] RDX: 000000000000000f RSI: 00007f169ddc50a0 RDI: 0000000000000004 [ 214.420714][ T7233] RBP: 00007f169ddc5090 R08: 0000000000000000 R09: 0000000000000000 [ 214.428688][ T7233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.436663][ T7233] R13: 00007f169d1e6038 R14: 00007f169d1e5fa0 R15: 00007ffc112125f8 [ 214.444651][ T7233] [ 214.619785][ T27] audit: type=1800 audit(1768327949.766:16): pid=7237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.400" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 214.761596][ T7251] FAULT_INJECTION: forcing a failure. [ 214.761596][ T7251] name failslab, interval 1, probability 0, space 0, times 0 [ 214.786953][ T7251] CPU: 0 PID: 7251 Comm: syz.1.410 Not tainted syzkaller #0 [ 214.794302][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.804388][ T7251] Call Trace: [ 214.807688][ T7251] [ 214.810634][ T7251] dump_stack_lvl+0x16c/0x230 [ 214.815336][ T7251] ? show_regs_print_info+0x20/0x20 [ 214.820648][ T7251] ? load_image+0x3b0/0x3b0 [ 214.825191][ T7251] ? __might_sleep+0xe0/0xe0 [ 214.829816][ T7251] ? __lock_acquire+0x7c80/0x7c80 [ 214.834871][ T7251] should_fail_ex+0x39d/0x4d0 [ 214.839576][ T7251] should_failslab+0x9/0x20 [ 214.844093][ T7251] slab_pre_alloc_hook+0x59/0x310 [ 214.849131][ T7251] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 214.854898][ T7251] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 214.860616][ T7251] __kmem_cache_alloc_node+0x53/0x260 [ 214.866098][ T7251] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 214.871819][ T7251] __kmalloc+0xa4/0x240 [ 214.875986][ T7251] tomoyo_realpath_from_path+0xe3/0x5d0 [ 214.881556][ T7251] tomoyo_path_number_perm+0x1ea/0x590 [ 214.887028][ T7251] ? tomoyo_path_number_perm+0x1ba/0x590 [ 214.892670][ T7251] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 214.898143][ T7251] ? ksys_write+0x1c1/0x250 [ 214.902675][ T7251] ? __fget_files+0x28/0x4d0 [ 214.907278][ T7251] security_file_ioctl+0x70/0xa0 [ 214.912227][ T7251] __se_sys_ioctl+0x48/0x170 [ 214.916824][ T7251] do_syscall_64+0x55/0xb0 [ 214.921243][ T7251] ? clear_bhb_loop+0x40/0x90 [ 214.925925][ T7251] ? clear_bhb_loop+0x40/0x90 [ 214.930609][ T7251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.936511][ T7251] RIP: 0033:0x7f169cf8f749 [ 214.940931][ T7251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.960640][ T7251] RSP: 002b:00007f169ddc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.969163][ T7251] RAX: ffffffffffffffda RBX: 00007f169d1e5fa0 RCX: 00007f169cf8f749 [ 214.977147][ T7251] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 214.985132][ T7251] RBP: 00007f169ddc5090 R08: 0000000000000000 R09: 0000000000000000 [ 214.993156][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.001228][ T7251] R13: 00007f169d1e6038 R14: 00007f169d1e5fa0 R15: 00007ffc112125f8 [ 215.009228][ T7251] [ 215.022439][ T7251] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.200892][ T7255] program syz.0.411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.386316][ T7259] program syz.3.413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.397977][ T7258] program syz.0.412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.404172][ T7261] input: syz0 as /devices/virtual/input/input6 [ 215.458660][ T7261] FAULT_INJECTION: forcing a failure. [ 215.458660][ T7261] name failslab, interval 1, probability 0, space 0, times 0 [ 215.508581][ T7261] CPU: 0 PID: 7261 Comm: syz.1.414 Not tainted syzkaller #0 [ 215.516021][ T7261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.526117][ T7261] Call Trace: [ 215.529423][ T7261] [ 215.532374][ T7261] dump_stack_lvl+0x16c/0x230 [ 215.537161][ T7261] ? show_regs_print_info+0x20/0x20 [ 215.542387][ T7261] ? load_image+0x3b0/0x3b0 [ 215.546923][ T7261] ? __might_sleep+0xe0/0xe0 [ 215.551633][ T7261] ? __lock_acquire+0x7c80/0x7c80 [ 215.556776][ T7261] should_fail_ex+0x39d/0x4d0 [ 215.561565][ T7261] should_failslab+0x9/0x20 [ 215.566094][ T7261] slab_pre_alloc_hook+0x59/0x310 [ 215.571138][ T7261] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 215.577046][ T7261] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 215.582775][ T7261] __kmem_cache_alloc_node+0x53/0x260 [ 215.588160][ T7261] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 215.593972][ T7261] __kmalloc+0xa4/0x240 [ 215.598140][ T7261] tomoyo_realpath_from_path+0xe3/0x5d0 [ 215.603789][ T7261] tomoyo_path_number_perm+0x1ea/0x590 [ 215.609259][ T7261] ? tomoyo_path_number_perm+0x1ba/0x590 [ 215.614917][ T7261] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 215.620392][ T7261] ? ksys_write+0x1c1/0x250 [ 215.625009][ T7261] ? __fget_files+0x28/0x4d0 [ 215.629612][ T7261] security_file_ioctl+0x70/0xa0 [ 215.634561][ T7261] __se_sys_ioctl+0x48/0x170 [ 215.639156][ T7261] do_syscall_64+0x55/0xb0 [ 215.643662][ T7261] ? clear_bhb_loop+0x40/0x90 [ 215.648428][ T7261] ? clear_bhb_loop+0x40/0x90 [ 215.653287][ T7261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.659273][ T7261] RIP: 0033:0x7f169cf8f749 [ 215.663693][ T7261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.683477][ T7261] RSP: 002b:00007f169ddc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.691901][ T7261] RAX: ffffffffffffffda RBX: 00007f169d1e5fa0 RCX: 00007f169cf8f749 [ 215.699985][ T7261] RDX: 0000000000000000 RSI: 0000000000008982 RDI: 0000000000000003 [ 215.708004][ T7261] RBP: 00007f169ddc5090 R08: 0000000000000000 R09: 0000000000000000 [ 215.716154][ T7261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.724237][ T7261] R13: 00007f169d1e6038 R14: 00007f169d1e5fa0 R15: 00007ffc112125f8 [ 215.732351][ T7261] [ 215.817645][ T7261] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.860225][ T7267] loop2: detected capacity change from 0 to 4096 [ 215.971618][ T7274] FAULT_INJECTION: forcing a failure. [ 215.971618][ T7274] name failslab, interval 1, probability 0, space 0, times 0 [ 216.002291][ T7274] CPU: 1 PID: 7274 Comm: syz.1.417 Not tainted syzkaller #0 [ 216.009730][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.019809][ T7274] Call Trace: [ 216.023112][ T7274] [ 216.026068][ T7274] dump_stack_lvl+0x16c/0x230 [ 216.030873][ T7274] ? show_regs_print_info+0x20/0x20 [ 216.036081][ T7274] ? load_image+0x3b0/0x3b0 [ 216.040597][ T7274] ? __lock_acquire+0x7c80/0x7c80 [ 216.045630][ T7274] should_fail_ex+0x39d/0x4d0 [ 216.050332][ T7274] should_failslab+0x9/0x20 [ 216.054880][ T7274] slab_pre_alloc_hook+0x59/0x310 [ 216.060000][ T7274] ? alloc_pipe_info+0xe8/0x4c0 [ 216.064858][ T7274] __kmem_cache_alloc_node+0x53/0x260 [ 216.070241][ T7274] ? alloc_pipe_info+0xe8/0x4c0 [ 216.075101][ T7274] kmalloc_trace+0x2a/0xe0 [ 216.079527][ T7274] alloc_pipe_info+0xe8/0x4c0 [ 216.084212][ T7274] splice_direct_to_actor+0x6d2/0x870 [ 216.089598][ T7274] ? aa_file_perm+0x120/0xec0 [ 216.094291][ T7274] ? aa_file_perm+0x3e8/0xec0 [ 216.098973][ T7274] ? direct_file_splice_eof+0xb0/0xb0 [ 216.105151][ T7274] ? end_current_label_crit_section+0x149/0x170 [ 216.112014][ T7274] ? warn_unsupported+0xc0/0xc0 [ 216.116875][ T7274] ? common_file_perm+0x198/0x1f0 [ 216.121905][ T7274] ? fsnotify_perm+0x5d/0x5e0 [ 216.126675][ T7274] ? security_file_permission+0x79/0xa0 [ 216.132231][ T7274] do_splice_direct+0x1b7/0x2c0 [ 216.137099][ T7274] ? splice_direct_to_actor+0x870/0x870 [ 216.142655][ T7274] ? do_splice_direct+0x2c0/0x2c0 [ 216.147684][ T7274] ? common_file_perm+0x198/0x1f0 [ 216.152741][ T7274] ? fsnotify_perm+0x5d/0x5e0 [ 216.157424][ T7274] ? security_file_permission+0x79/0xa0 [ 216.162984][ T7274] do_sendfile+0x5dc/0xf70 [ 216.167628][ T7274] ? do_pwritev+0x340/0x340 [ 216.172153][ T7274] __se_sys_sendfile64+0x13f/0x190 [ 216.177279][ T7274] ? lock_chain_count+0x20/0x20 [ 216.182134][ T7274] ? __x64_sys_sendfile64+0xb0/0xb0 [ 216.187355][ T7274] ? lockdep_hardirqs_on+0x98/0x150 [ 216.192569][ T7274] do_syscall_64+0x55/0xb0 [ 216.196988][ T7274] ? clear_bhb_loop+0x40/0x90 [ 216.201672][ T7274] ? clear_bhb_loop+0x40/0x90 [ 216.206366][ T7274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.212285][ T7274] RIP: 0033:0x7f169cf8f749 [ 216.216745][ T7274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.236451][ T7274] RSP: 002b:00007f169ddc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 216.244871][ T7274] RAX: ffffffffffffffda RBX: 00007f169d1e5fa0 RCX: 00007f169cf8f749 [ 216.252846][ T7274] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 216.260819][ T7274] RBP: 00007f169ddc5090 R08: 0000000000000000 R09: 0000000000000000 [ 216.268794][ T7274] R10: 0000000002000081 R11: 0000000000000246 R12: 0000000000000001 [ 216.276766][ T7274] R13: 00007f169d1e6038 R14: 00007f169d1e5fa0 R15: 00007ffc112125f8 [ 216.284784][ T7274] [ 216.288002][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.472855][ T7280] loop0: detected capacity change from 0 to 4096 [ 218.621164][ T5753] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.861297][ T7295] program syz.1.423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.005368][ T7297] program syz.3.424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.333362][ T7307] FAULT_INJECTION: forcing a failure. [ 219.333362][ T7307] name failslab, interval 1, probability 0, space 0, times 0 [ 219.351820][ T7307] CPU: 0 PID: 7307 Comm: syz.2.426 Not tainted syzkaller #0 [ 219.359170][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.369246][ T7307] Call Trace: [ 219.372519][ T7307] [ 219.375458][ T7307] dump_stack_lvl+0x16c/0x230 [ 219.380257][ T7307] ? show_regs_print_info+0x20/0x20 [ 219.385560][ T7307] ? load_image+0x3b0/0x3b0 [ 219.390061][ T7307] ? __might_sleep+0xe0/0xe0 [ 219.394641][ T7307] ? __lock_acquire+0x7c80/0x7c80 [ 219.399659][ T7307] should_fail_ex+0x39d/0x4d0 [ 219.404344][ T7307] should_failslab+0x9/0x20 [ 219.408942][ T7307] slab_pre_alloc_hook+0x59/0x310 [ 219.414071][ T7307] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 219.419793][ T7307] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 219.425506][ T7307] __kmem_cache_alloc_node+0x53/0x260 [ 219.430878][ T7307] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 219.436591][ T7307] __kmalloc+0xa4/0x240 [ 219.440835][ T7307] tomoyo_realpath_from_path+0xe3/0x5d0 [ 219.446384][ T7307] tomoyo_path_number_perm+0x1ea/0x590 [ 219.451957][ T7307] ? tomoyo_path_number_perm+0x1ba/0x590 [ 219.457591][ T7307] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 219.463094][ T7307] ? ksys_write+0x1c1/0x250 [ 219.467615][ T7307] ? __fget_files+0x28/0x4d0 [ 219.472243][ T7307] security_file_ioctl+0x70/0xa0 [ 219.477184][ T7307] __se_sys_ioctl+0x48/0x170 [ 219.481774][ T7307] do_syscall_64+0x55/0xb0 [ 219.486196][ T7307] ? clear_bhb_loop+0x40/0x90 [ 219.490980][ T7307] ? clear_bhb_loop+0x40/0x90 [ 219.495671][ T7307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.501572][ T7307] RIP: 0033:0x7f449218f749 [ 219.505990][ T7307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.525594][ T7307] RSP: 002b:00007f449306b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.534015][ T7307] RAX: ffffffffffffffda RBX: 00007f44923e6090 RCX: 00007f449218f749 [ 219.542088][ T7307] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 219.550080][ T7307] RBP: 00007f449306b090 R08: 0000000000000000 R09: 0000000000000000 [ 219.558494][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.566468][ T7307] R13: 00007f44923e6128 R14: 00007f44923e6090 R15: 00007ffc1ff8c968 [ 219.574446][ T7307] [ 219.609253][ T7307] ERROR: Out of memory at tomoyo_realpath_from_path. [ 219.762454][ T7314] program syz.0.422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.931240][ T7316] comedi comedi1: dt2801: I/O port conflict (0x4,2) [ 221.617346][ T787] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 221.836403][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.867374][ T787] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 221.876326][ T787] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 221.895439][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.923454][ T787] usb 1-1: config 0 descriptor?? [ 221.935234][ T787] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 221.953940][ T787] dvb-usb: bulk message failed: -22 (3/0) [ 222.004981][ T787] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 222.015292][ T787] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 222.024776][ T787] usb 1-1: media controller created [ 222.072883][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.109314][ T787] dvb-usb: bulk message failed: -22 (6/0) [ 222.136318][ T7318] dibusb: i2c wr: len=8192 is too big! [ 222.136318][ T7318] [ 222.146707][ T787] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 222.168116][ T7335] program syz.3.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.177629][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 222.197067][ T787] dvb-usb: schedule remote query interval to 150 msecs. [ 222.205057][ T787] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 222.220256][ T787] usb 1-1: USB disconnect, device number 4 [ 222.244406][ T787] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 222.352480][ T7337] program syz.3.437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.539838][ T7341] FAULT_INJECTION: forcing a failure. [ 222.539838][ T7341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.588505][ T7341] CPU: 1 PID: 7341 Comm: syz.3.438 Not tainted syzkaller #0 [ 222.595946][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.606023][ T7341] Call Trace: [ 222.609332][ T7341] [ 222.612392][ T7341] dump_stack_lvl+0x16c/0x230 [ 222.617103][ T7341] ? show_regs_print_info+0x20/0x20 [ 222.622352][ T7341] ? load_image+0x3b0/0x3b0 [ 222.626906][ T7341] ? __lock_acquire+0x7c80/0x7c80 [ 222.631975][ T7341] ? snprintf+0xdb/0x120 [ 222.636267][ T7341] should_fail_ex+0x39d/0x4d0 [ 222.640986][ T7341] _copy_to_user+0x2f/0xa0 [ 222.645446][ T7341] simple_read_from_buffer+0xe7/0x150 [ 222.650891][ T7341] proc_fail_nth_read+0x1e3/0x250 [ 222.655957][ T7341] ? proc_fault_inject_write+0x340/0x340 [ 222.661633][ T7341] ? fsnotify_perm+0x271/0x5e0 [ 222.666464][ T7341] ? proc_fault_inject_write+0x340/0x340 [ 222.672172][ T7341] vfs_read+0x27e/0x920 [ 222.676380][ T7341] ? kernel_read+0x1e0/0x1e0 [ 222.681011][ T7341] ? __fget_files+0x28/0x4d0 [ 222.685642][ T7341] ? __fget_files+0x44a/0x4d0 [ 222.690380][ T7341] ? __fdget_pos+0x2a3/0x330 [ 222.695021][ T7341] ? ksys_read+0x75/0x250 [ 222.699414][ T7341] ksys_read+0x147/0x250 [ 222.703701][ T7341] ? vfs_write+0x940/0x940 [ 222.708154][ T7341] ? lockdep_hardirqs_on+0x98/0x150 [ 222.713484][ T7341] do_syscall_64+0x55/0xb0 [ 222.717938][ T7341] ? clear_bhb_loop+0x40/0x90 [ 222.722658][ T7341] ? clear_bhb_loop+0x40/0x90 [ 222.727421][ T7341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.733467][ T7341] RIP: 0033:0x7f44ba58e15c [ 222.738052][ T7341] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 222.758038][ T7341] RSP: 002b:00007f44bb4f5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.766501][ T7341] RAX: ffffffffffffffda RBX: 00007f44ba7e6090 RCX: 00007f44ba58e15c [ 222.774519][ T7341] RDX: 000000000000000f RSI: 00007f44bb4f50a0 RDI: 0000000000000004 [ 222.782611][ T7341] RBP: 00007f44bb4f5090 R08: 0000000000000000 R09: 0000000000000000 [ 222.790620][ T7341] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 222.798641][ T7341] R13: 00007f44ba7e6128 R14: 00007f44ba7e6090 R15: 00007ffe6e8ab8f8 [ 222.806662][ T7341] [ 222.862779][ T7345] loop2: detected capacity change from 0 to 4096 [ 222.903644][ T7345] NILFS (loop2): invalid segment: Checksum error in segment payload [ 222.937333][ T7345] NILFS (loop2): trying rollback from an earlier position [ 222.992055][ T7345] NILFS (loop2): recovery complete [ 223.018277][ T7348] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.065147][ T27] audit: type=1800 audit(1768327958.206:17): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.434" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 223.104243][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 223.179146][ T7352] program syz.1.441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.187997][ T7347] loop3: detected capacity change from 0 to 4096 [ 223.208962][ T7347] ntfs3: Unknown parameter '' [ 223.278567][ T6683] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 223.666379][ T7358] loop3: detected capacity change from 0 to 8192 [ 223.687557][ T7358] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 223.687716][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 223.700654][ T7358] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 223.700783][ T7358] REISERFS (device loop3): using ordered data mode [ 224.484760][ T7358] reiserfs: using flush barriers [ 224.558946][ T7358] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.589525][ T7363] loop1: detected capacity change from 0 to 32768 [ 224.632156][ T7358] REISERFS (device loop3): checking transaction log (loop3) [ 224.690629][ T7361] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 224.690629][ T7361] [ 224.708363][ T7361] ERROR: (device loop1): remounting filesystem as read-only [ 224.716168][ T7361] ERROR: (device loop1): jfs_unlink: [ 224.716168][ T7361] [ 224.797693][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 224.830887][ T8] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 224.906587][ T8] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.975510][ T8] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.053073][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 225.104462][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 225.155376][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.230556][ T7358] REISERFS (device loop3): Using tea hash to sort names [ 225.241016][ T8] usb 3-1: config 0 descriptor?? [ 225.284761][ T7371] program syz.0.446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.294546][ T7358] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 225.510689][ T5765] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 225.510689][ T5765] [ 225.519010][ T7347] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 225.569091][ T7373] program syz.0.447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.585571][ T7360] loop2: detected capacity change from 0 to 2048 [ 225.676089][ T7360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.411189][ T8] usb 3-1: string descriptor 0 read error: -71 [ 227.429839][ T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 227.508842][ T7384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.547469][ T5123] bcm5974 3-1:0.0: could not read from device [ 227.687177][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.137592][ T5123] bcm5974 3-1:0.0: could not read from device [ 228.170494][ T8] usb 3-1: USB disconnect, device number 4 [ 228.179979][ T5123] bcm5974 3-1:0.0: could not read from device [ 228.432904][ T6687] udevd[6687]: Error opening device "/dev/input/event4": No such device [ 228.461342][ T6687] udevd[6687]: Unable to EVIOCGABS device "/dev/input/event4" [ 228.496990][ T6687] udevd[6687]: Unable to EVIOCGABS device "/dev/input/event4" [ 228.527830][ T6687] udevd[6687]: Unable to EVIOCGABS device "/dev/input/event4" [ 228.536152][ T6687] udevd[6687]: Unable to EVIOCGABS device "/dev/input/event4" [ 228.574345][ T7388] loop2: detected capacity change from 0 to 4096 [ 228.630023][ T7388] NILFS (loop2): invalid segment: Checksum error in segment payload [ 228.671843][ T7388] NILFS (loop2): trying rollback from an earlier position [ 228.766379][ T7388] NILFS (loop2): recovery complete [ 228.807462][ T7391] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.878805][ T27] audit: type=1800 audit(1768327964.026:18): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.451" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 228.902385][ T7393] program syz.3.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.299047][ T7401] program syz.3.456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.492695][ T7406] program syz.3.457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.826097][ T7409] FAULT_INJECTION: forcing a failure. [ 229.826097][ T7409] name failslab, interval 1, probability 0, space 0, times 0 [ 229.847686][ T7409] CPU: 1 PID: 7409 Comm: syz.3.458 Not tainted syzkaller #0 [ 229.855040][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.865111][ T7409] Call Trace: [ 229.868395][ T7409] [ 229.871324][ T7409] dump_stack_lvl+0x16c/0x230 [ 229.876010][ T7409] ? show_regs_print_info+0x20/0x20 [ 229.881214][ T7409] ? load_image+0x3b0/0x3b0 [ 229.885725][ T7409] ? __might_sleep+0xe0/0xe0 [ 229.890320][ T7409] ? __lock_acquire+0x7c80/0x7c80 [ 229.895351][ T7409] should_fail_ex+0x39d/0x4d0 [ 229.900042][ T7409] should_failslab+0x9/0x20 [ 229.904553][ T7409] slab_pre_alloc_hook+0x59/0x310 [ 229.909587][ T7409] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 229.915311][ T7409] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 229.921033][ T7409] __kmem_cache_alloc_node+0x53/0x260 [ 229.926416][ T7409] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 229.932142][ T7409] __kmalloc+0xa4/0x240 [ 229.936337][ T7409] tomoyo_realpath_from_path+0xe3/0x5d0 [ 229.941898][ T7409] tomoyo_path_number_perm+0x1ea/0x590 [ 229.947365][ T7409] ? tomoyo_path_number_perm+0x1ba/0x590 [ 229.953178][ T7409] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 229.958650][ T7409] ? ksys_write+0x1c1/0x250 [ 229.963222][ T7409] ? __fget_files+0x28/0x4d0 [ 229.967826][ T7409] security_file_ioctl+0x70/0xa0 [ 229.972781][ T7409] __se_sys_ioctl+0x48/0x170 [ 229.977462][ T7409] do_syscall_64+0x55/0xb0 [ 229.981880][ T7409] ? clear_bhb_loop+0x40/0x90 [ 229.986562][ T7409] ? clear_bhb_loop+0x40/0x90 [ 229.991255][ T7409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.997158][ T7409] RIP: 0033:0x7f44ba58f749 [ 230.001577][ T7409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.021449][ T7409] RSP: 002b:00007f44bb516038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.029868][ T7409] RAX: ffffffffffffffda RBX: 00007f44ba7e5fa0 RCX: 00007f44ba58f749 [ 230.037847][ T7409] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 230.045821][ T7409] RBP: 00007f44bb516090 R08: 0000000000000000 R09: 0000000000000000 [ 230.053797][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.061771][ T7409] R13: 00007f44ba7e6038 R14: 00007f44ba7e5fa0 R15: 00007ffe6e8ab8f8 [ 230.069928][ T7409] [ 230.097620][ T7409] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.019105][ T7424] loop1: detected capacity change from 0 to 4096 [ 232.035830][ T7426] program syz.2.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.044728][ T7424] NILFS (loop1): invalid segment: Checksum error in segment payload [ 232.061745][ T7424] NILFS (loop1): trying rollback from an earlier position [ 232.142282][ T7424] NILFS (loop1): recovery complete [ 232.149171][ T7427] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.203858][ T7429] program syz.3.465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.217591][ T27] audit: type=1800 audit(1768327967.366:19): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.463" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 233.772380][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 233.797485][ T7441] dummy0: Device is already in use. [ 234.121658][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 234.317391][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 234.336079][ T8] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 234.353816][ T8] usb 3-1: config 179 has no interface number 0 [ 234.367511][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 234.408456][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 234.445344][ T7451] loop3: detected capacity change from 0 to 4096 [ 234.471517][ T7451] NILFS (loop3): invalid segment: Checksum error in segment payload [ 234.479975][ T7451] NILFS (loop3): trying rollback from an earlier position [ 234.479990][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 234.540880][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 234.559570][ T7451] NILFS (loop3): recovery complete [ 234.562746][ T8] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 234.587746][ T8] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 234.596957][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.608537][ T7453] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.747639][ T7439] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.789561][ T27] audit: type=1800 audit(1768327969.936:20): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.469" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 235.126594][ T23] usb 3-1: USB disconnect, device number 5 [ 235.126604][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 235.141942][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 236.762308][ T7471] program syz.2.474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.911458][ T7473] program syz.1.475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.932723][ T7475] program syz.2.477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.651792][ T7509] program syz.2.486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.842473][ T7511] program syz.2.487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.911468][ T7513] loop0: detected capacity change from 0 to 4096 [ 241.953084][ T7513] NILFS (loop0): invalid segment: Checksum error in segment payload [ 241.965572][ T7513] NILFS (loop0): trying rollback from an earlier position [ 241.998756][ T7513] NILFS (loop0): recovery complete [ 242.017917][ T7516] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.087341][ T27] audit: type=1800 audit(1768327977.226:21): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.481" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 242.305959][ T7519] FAULT_INJECTION: forcing a failure. [ 242.305959][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 242.343958][ T7519] CPU: 0 PID: 7519 Comm: syz.1.489 Not tainted syzkaller #0 [ 242.351315][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.361407][ T7519] Call Trace: [ 242.364793][ T7519] [ 242.367739][ T7519] dump_stack_lvl+0x16c/0x230 [ 242.372440][ T7519] ? show_regs_print_info+0x20/0x20 [ 242.377768][ T7519] ? load_image+0x3b0/0x3b0 [ 242.382410][ T7519] ? __might_sleep+0xe0/0xe0 [ 242.387019][ T7519] ? __lock_acquire+0x7c80/0x7c80 [ 242.392064][ T7519] should_fail_ex+0x39d/0x4d0 [ 242.396778][ T7519] should_failslab+0x9/0x20 [ 242.401349][ T7519] slab_pre_alloc_hook+0x59/0x310 [ 242.406843][ T7519] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 242.412584][ T7519] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 242.418324][ T7519] __kmem_cache_alloc_node+0x53/0x260 [ 242.423737][ T7519] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 242.429478][ T7519] __kmalloc+0xa4/0x240 [ 242.433643][ T7519] tomoyo_realpath_from_path+0xe3/0x5d0 [ 242.439194][ T7519] tomoyo_path_number_perm+0x1ea/0x590 [ 242.444663][ T7519] ? tomoyo_path_number_perm+0x1ba/0x590 [ 242.450298][ T7519] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 242.455764][ T7519] ? ksys_write+0x1c1/0x250 [ 242.460290][ T7519] ? __fget_files+0x28/0x4d0 [ 242.464886][ T7519] security_file_ioctl+0x70/0xa0 [ 242.469828][ T7519] __se_sys_ioctl+0x48/0x170 [ 242.474859][ T7519] do_syscall_64+0x55/0xb0 [ 242.479269][ T7519] ? clear_bhb_loop+0x40/0x90 [ 242.483941][ T7519] ? clear_bhb_loop+0x40/0x90 [ 242.488620][ T7519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.494513][ T7519] RIP: 0033:0x7f169cf8f749 [ 242.498927][ T7519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.518631][ T7519] RSP: 002b:00007f169ddc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.527049][ T7519] RAX: ffffffffffffffda RBX: 00007f169d1e5fa0 RCX: 00007f169cf8f749 [ 242.535029][ T7519] RDX: 0000200000000000 RSI: 000000004048aecb RDI: 0000000000000005 [ 242.543001][ T7519] RBP: 00007f169ddc5090 R08: 0000000000000000 R09: 0000000000000000 [ 242.550988][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.559394][ T7519] R13: 00007f169d1e6038 R14: 00007f169d1e5fa0 R15: 00007ffc112125f8 [ 242.567558][ T7519] [ 242.601006][ T7519] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.620680][ T7524] program syz.0.490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.680777][ T7523] loop2: detected capacity change from 0 to 4096 [ 242.714507][ T7523] NILFS (loop2): invalid segment: Checksum error in segment payload [ 242.767374][ T7523] NILFS (loop2): trying rollback from an earlier position [ 242.829682][ T7523] NILFS (loop2): recovery complete [ 242.874049][ T7528] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.140370][ T27] audit: type=1800 audit(1768327978.266:22): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.491" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 243.195264][ T7537] program syz.0.495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.010238][ T7546] Unsupported ieee802154 address type: 0 [ 245.037878][ T7547] Unsupported ieee802154 address type: 0 [ 245.154936][ T7556] program syz.3.500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.191395][ T7549] loop1: detected capacity change from 0 to 4096 [ 245.225310][ T7549] NILFS (loop1): invalid segment: Checksum error in segment payload [ 245.245330][ T7549] NILFS (loop1): trying rollback from an earlier position [ 246.611231][ T7549] NILFS (loop1): recovery complete [ 246.664854][ T7562] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.681006][ T7563] netlink: 44 bytes leftover after parsing attributes in process `syz.3.502'. [ 246.722752][ T7565] FAULT_INJECTION: forcing a failure. [ 246.722752][ T7565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.736723][ T27] audit: type=1800 audit(1768327981.866:23): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.498" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 246.775868][ T7565] CPU: 1 PID: 7565 Comm: syz.0.504 Not tainted syzkaller #0 [ 246.783325][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.793492][ T7565] Call Trace: [ 246.796785][ T7565] [ 246.799735][ T7565] dump_stack_lvl+0x16c/0x230 [ 246.804421][ T7565] ? show_regs_print_info+0x20/0x20 [ 246.809624][ T7565] ? load_image+0x3b0/0x3b0 [ 246.814136][ T7565] ? __might_fault+0xaa/0x120 [ 246.818824][ T7565] ? __lock_acquire+0x7c80/0x7c80 [ 246.823858][ T7565] should_fail_ex+0x39d/0x4d0 [ 246.828549][ T7565] _copy_from_user+0x2f/0xe0 [ 246.833144][ T7565] ___sys_sendmsg+0x159/0x290 [ 246.837832][ T7565] ? __sys_sendmsg+0x270/0x270 [ 246.842612][ T7565] ? __lock_acquire+0x7c80/0x7c80 [ 246.847659][ T7565] __se_sys_sendmsg+0x1a5/0x270 [ 246.852520][ T7565] ? __x64_sys_sendmsg+0x80/0x80 [ 246.857467][ T7565] ? lockdep_hardirqs_on+0x98/0x150 [ 246.862702][ T7565] do_syscall_64+0x55/0xb0 [ 246.867120][ T7565] ? clear_bhb_loop+0x40/0x90 [ 246.871844][ T7565] ? clear_bhb_loop+0x40/0x90 [ 246.876524][ T7565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.882425][ T7565] RIP: 0033:0x7f7d5238f749 [ 246.886846][ T7565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.906461][ T7565] RSP: 002b:00007f7d532f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.914880][ T7565] RAX: ffffffffffffffda RBX: 00007f7d525e5fa0 RCX: 00007f7d5238f749 [ 246.922885][ T7565] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 246.930969][ T7565] RBP: 00007f7d532f0090 R08: 0000000000000000 R09: 0000000000000000 [ 246.939021][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.947024][ T7565] R13: 00007f7d525e6038 R14: 00007f7d525e5fa0 R15: 00007fffa1f0e948 [ 246.955042][ T7565] [ 247.063124][ T7567] program syz.3.505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.247185][ T7571] program syz.3.508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.507087][ T7578] program syz.3.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.173643][ T7579] binder: 7574:7579 ioctl c0306201 200000000180 returned -14 [ 249.969636][ T7592] loop0: detected capacity change from 0 to 4096 [ 250.019612][ T7592] NILFS (loop0): invalid segment: Checksum error in segment payload [ 250.019638][ T7592] NILFS (loop0): trying rollback from an earlier position [ 250.069699][ T7592] NILFS (loop0): recovery complete [ 250.080518][ T7598] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.122308][ T27] audit: type=1800 audit(1768327985.266:24): pid=7592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.514" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 250.125146][ T7597] binder: 7594:7597 ioctl c0306201 200000000180 returned -14 [ 250.125838][ T7597] FAULT_INJECTION: forcing a failure. [ 250.125838][ T7597] name failslab, interval 1, probability 0, space 0, times 0 [ 250.125862][ T7597] CPU: 0 PID: 7597 Comm: syz.2.516 Not tainted syzkaller #0 [ 250.125879][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.125889][ T7597] Call Trace: [ 250.125896][ T7597] [ 250.125904][ T7597] dump_stack_lvl+0x16c/0x230 [ 250.125931][ T7597] ? show_regs_print_info+0x20/0x20 [ 250.125948][ T7597] ? load_image+0x3b0/0x3b0 [ 250.125973][ T7597] ? __might_sleep+0xe0/0xe0 [ 250.125994][ T7597] ? __lock_acquire+0x7c80/0x7c80 [ 250.126018][ T7597] should_fail_ex+0x39d/0x4d0 [ 250.126046][ T7597] should_failslab+0x9/0x20 [ 250.126067][ T7597] slab_pre_alloc_hook+0x59/0x310 [ 250.126092][ T7597] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 250.126110][ T7597] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 250.126127][ T7597] __kmem_cache_alloc_node+0x53/0x260 [ 250.126153][ T7597] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 250.126170][ T7597] __kmalloc+0xa4/0x240 [ 250.126194][ T7597] tomoyo_realpath_from_path+0xe3/0x5d0 [ 250.126223][ T7597] tomoyo_path_number_perm+0x1ea/0x590 [ 250.126245][ T7597] ? tomoyo_path_number_perm+0x1ba/0x590 [ 250.126268][ T7597] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 250.126293][ T7597] ? ksys_write+0x1c1/0x250 [ 250.126348][ T7597] ? __fget_files+0x28/0x4d0 [ 250.126382][ T7597] security_file_ioctl+0x70/0xa0 [ 250.126406][ T7597] __se_sys_ioctl+0x48/0x170 [ 250.126425][ T7597] do_syscall_64+0x55/0xb0 [ 250.126439][ T7597] ? clear_bhb_loop+0x40/0x90 [ 250.126455][ T7597] ? clear_bhb_loop+0x40/0x90 [ 250.126472][ T7597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.126489][ T7597] RIP: 0033:0x7f449218f749 [ 250.126504][ T7597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.126516][ T7597] RSP: 002b:00007f449306b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.126536][ T7597] RAX: ffffffffffffffda RBX: 00007f44923e6090 RCX: 00007f449218f749 [ 250.126549][ T7597] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000006 [ 250.126560][ T7597] RBP: 00007f449306b090 R08: 0000000000000000 R09: 0000000000000000 [ 250.126572][ T7597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.126582][ T7597] R13: 00007f44923e6128 R14: 00007f44923e6090 R15: 00007ffc1ff8c968 [ 250.126616][ T7597] [ 250.126623][ T7597] ERROR: Out of memory at tomoyo_realpath_from_path. [ 251.913484][ T7609] program syz.0.518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.115538][ T7613] syz_tun: entered allmulticast mode [ 252.183471][ T7614] syz_tun: left allmulticast mode [ 252.259105][ T7596] tty tty23: ldisc open failed (-12), clearing slot 22 [ 252.293042][ T7599] tty tty23: ldisc open failed (-12), clearing slot 22 [ 252.302220][ T7600] tty tty23: ldisc open failed (-12), clearing slot 22 [ 253.136931][ T7620] FAULT_INJECTION: forcing a failure. [ 253.136931][ T7620] name failslab, interval 1, probability 0, space 0, times 0 [ 253.180665][ T7620] CPU: 1 PID: 7620 Comm: syz.1.523 Not tainted syzkaller #0 [ 253.188028][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.198212][ T7620] Call Trace: [ 253.201518][ T7620] [ 253.204475][ T7620] dump_stack_lvl+0x16c/0x230 [ 253.209191][ T7620] ? show_regs_print_info+0x20/0x20 [ 253.214437][ T7620] ? load_image+0x3b0/0x3b0 [ 253.218979][ T7620] ? __might_sleep+0xe0/0xe0 [ 253.223611][ T7620] ? __lock_acquire+0x7c80/0x7c80 [ 253.228692][ T7620] should_fail_ex+0x39d/0x4d0 [ 253.233414][ T7620] should_failslab+0x9/0x20 [ 253.237949][ T7620] slab_pre_alloc_hook+0x59/0x310 [ 253.243113][ T7620] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 253.248863][ T7620] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 253.254612][ T7620] __kmem_cache_alloc_node+0x53/0x260 [ 253.260063][ T7620] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 253.265814][ T7620] __kmalloc+0xa4/0x240 [ 253.270014][ T7620] tomoyo_realpath_from_path+0xe3/0x5d0 [ 253.273197][ T7622] loop2: detected capacity change from 0 to 128 [ 253.275590][ T7620] tomoyo_path_number_perm+0x1ea/0x590 [ 253.287364][ T7620] ? tomoyo_path_number_perm+0x1ba/0x590 [ 253.293036][ T7620] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 253.298531][ T7620] ? ksys_write+0x1c1/0x250 [ 253.303103][ T7620] ? __fget_files+0x28/0x4d0 [ 253.307746][ T7620] security_file_ioctl+0x70/0xa0 [ 253.312725][ T7620] __se_sys_ioctl+0x48/0x170 [ 253.317439][ T7620] do_syscall_64+0x55/0xb0 [ 253.321879][ T7620] ? clear_bhb_loop+0x40/0x90 [ 253.326583][ T7620] ? clear_bhb_loop+0x40/0x90 [ 253.331293][ T7620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.337212][ T7620] RIP: 0033:0x7f169cf8f749 [ 253.341652][ T7620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.361373][ T7620] RSP: 002b:00007f169ddc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.369814][ T7620] RAX: ffffffffffffffda RBX: 00007f169d1e5fa0 RCX: 00007f169cf8f749 [ 253.377812][ T7620] RDX: 0000000000000000 RSI: 0000000040084146 RDI: 0000000000000005 [ 253.385863][ T7620] RBP: 00007f169ddc5090 R08: 0000000000000000 R09: 0000000000000000 [ 253.394035][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.402034][ T7620] R13: 00007f169d1e6038 R14: 00007f169d1e5fa0 R15: 00007ffc112125f8 [ 253.410063][ T7620] [ 253.413211][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.468415][ T7620] ERROR: Out of memory at tomoyo_realpath_from_path. [ 253.515505][ T7622] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.592086][ T7622] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 253.752761][ T7622] fuse: Unknown parameter 'f' [ 253.790912][ T7631] loop3: detected capacity change from 0 to 4096 [ 253.853620][ T7631] NILFS (loop3): invalid segment: Checksum error in segment payload [ 253.884608][ T7631] NILFS (loop3): trying rollback from an earlier position [ 253.908014][ T5763] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.922391][ T7631] NILFS (loop3): recovery complete [ 253.930882][ T7618] loop0: detected capacity change from 0 to 40427 [ 253.938983][ T7635] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.968436][ T27] audit: type=1800 audit(1768327989.116:25): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.525" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 254.001697][ T7618] F2FS-fs (loop0): invalid crc value [ 254.049559][ T7618] F2FS-fs (loop0): Found nat_bits in checkpoint [ 254.227669][ T7618] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 254.305304][ T7644] program syz.3.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.354915][ T7618] mmap: syz.0.522 (7618) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 254.447605][ T5766] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 254.457170][ T5760] syz-executor: attempt to access beyond end of device [ 254.457170][ T5760] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.484074][ T5760] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 254.669257][ T5766] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.871365][ T5766] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 254.881979][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.893569][ T5766] usb 3-1: config 0 descriptor?? [ 254.905101][ T5766] pwc: Askey VC010 type 2 USB webcam detected. [ 255.660625][ T5766] pwc: recv_control_msg error -32 req 02 val 2b00 [ 257.416160][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.431202][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.831099][ T7665] program syz.3.535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.849308][ T5766] pwc: recv_control_msg error -71 req 02 val 2c00 [ 259.879936][ T5766] pwc: recv_control_msg error -71 req 04 val 1000 [ 259.908917][ T5766] pwc: recv_control_msg error -71 req 04 val 1300 [ 259.924321][ T5766] pwc: recv_control_msg error -71 req 04 val 1400 [ 259.978906][ T5766] pwc: recv_control_msg error -71 req 02 val 2000 [ 260.011585][ T5766] pwc: recv_control_msg error -71 req 02 val 2100 [ 260.046402][ T5766] pwc: recv_control_msg error -71 req 04 val 1500 [ 260.057931][ T7667] program syz.2.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.066342][ T5766] pwc: recv_control_msg error -71 req 02 val 2500 [ 260.075071][ T5766] pwc: recv_control_msg error -71 req 02 val 2400 [ 260.097552][ T5766] pwc: recv_control_msg error -71 req 02 val 2600 [ 260.114482][ T5766] pwc: recv_control_msg error -71 req 02 val 2900 [ 260.125871][ T5766] pwc: recv_control_msg error -71 req 02 val 2800 [ 260.162870][ T5766] pwc: recv_control_msg error -71 req 04 val 1100 [ 260.179765][ T5766] pwc: recv_control_msg error -71 req 04 val 1200 [ 260.232873][ T5766] pwc: Registered as video103. [ 260.279615][ T5766] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 260.376888][ T5766] usb 3-1: USB disconnect, device number 6 [ 261.160386][ T7683] netlink: 80 bytes leftover after parsing attributes in process `syz.3.541'. [ 261.447420][ T5766] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 261.687413][ T5766] usb 3-1: Using ep0 maxpacket: 8 [ 261.699515][ T5766] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 261.713793][ T5766] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.745426][ T5766] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.774600][ T5766] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.805489][ T5766] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.857346][ T5766] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.866535][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.002205][ T7692] loop0: detected capacity change from 0 to 4096 [ 262.087564][ T7692] NILFS (loop0): invalid segment: Checksum error in segment payload [ 262.108983][ T7692] NILFS (loop0): trying rollback from an earlier position [ 262.237387][ T5766] usb 3-1: GET_CAPABILITIES returned 0 [ 262.255686][ T5766] usbtmc 3-1:16.0: can't read capabilities [ 262.274023][ T7692] NILFS (loop0): recovery complete [ 262.338939][ T7696] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.951474][ T27] audit: type=1800 audit(1768327998.036:26): pid=7692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.537" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 263.038152][ T7672] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 263.045191][ T23] usb 3-1: USB disconnect, device number 7 [ 263.183471][ T7703] loop1: detected capacity change from 0 to 256 [ 263.329847][ T7703] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 263.377506][ T7710] program syz.3.547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.429266][ T27] audit: type=1800 audit(1768327998.566:27): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.544" name="file1" dev="loop1" ino=1048598 res=0 errno=0 [ 263.476744][ T7713] program syz.3.548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.781705][ T7715] loop3: detected capacity change from 0 to 4096 [ 263.872285][ T7715] NILFS (loop3): invalid segment: Checksum error in segment payload [ 263.949333][ T7715] NILFS (loop3): trying rollback from an earlier position [ 264.087770][ T27] audit: type=1800 audit(1768327999.226:28): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.544" name="file1" dev="loop1" ino=1048598 res=0 errno=0 [ 264.088654][ T7715] NILFS (loop3): recovery complete [ 264.165335][ T7719] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.226164][ T27] audit: type=1800 audit(1768327999.366:29): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.549" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 264.879004][ T7732] program syz.0.554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.896052][ T7718] loop2: detected capacity change from 0 to 40427 [ 264.911282][ T7718] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 264.921103][ T7718] F2FS-fs (loop2): Image doesn't support compression [ 264.930476][ T7718] F2FS-fs (loop2): Image doesn't support compression [ 264.984432][ T7718] F2FS-fs (loop2): invalid crc value [ 265.158516][ T7718] F2FS-fs (loop2): Found nat_bits in checkpoint [ 265.670609][ T7718] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 265.721765][ T7740] program syz.3.556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.774158][ T7718] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of __insert_extent_tree+0x200/0x650 [ 265.813601][ T7718] syz.2.550: attempt to access beyond end of device [ 265.813601][ T7718] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 265.821404][ T7741] loop0: detected capacity change from 0 to 4096 [ 265.906931][ T7741] NILFS (loop0): invalid segment: Checksum error in segment payload [ 265.911538][ T7718] syz.2.550: attempt to access beyond end of device [ 265.911538][ T7718] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 265.942180][ T7744] program syz.3.557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.947738][ T7741] NILFS (loop0): trying rollback from an earlier position [ 266.006996][ T7741] NILFS (loop0): recovery complete [ 266.024642][ T7747] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.087364][ T27] audit: type=1800 audit(1768328001.226:30): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.555" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 266.140214][ T5763] syz-executor: attempt to access beyond end of device [ 266.140214][ T5763] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 266.187413][ T5763] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 266.524145][ T7753] loop0: detected capacity change from 0 to 4096 [ 266.611344][ T7753] NILFS (loop0): invalid segment: Checksum error in segment payload [ 266.660293][ T7753] NILFS (loop0): trying rollback from an earlier position [ 266.701211][ T7753] NILFS (loop0): recovery complete [ 266.731420][ T7754] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.764678][ T27] audit: type=1800 audit(1768328001.906:31): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.561" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 266.823236][ T7746] loop1: detected capacity change from 0 to 32768 [ 266.887450][ T7746] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.558 (7746) [ 266.975490][ T7746] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 267.017447][ T7746] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 267.049407][ T7746] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 267.097320][ T7746] BTRFS info (device loop1): use lzo compression, level 0 [ 267.104513][ T7746] BTRFS info (device loop1): force clearing of disk cache [ 267.142476][ T7746] BTRFS info (device loop1): using free space tree [ 267.176378][ T7758] syz.2.560 uses obsolete (PF_INET,SOCK_PACKET) [ 267.238559][ T7758] netlink: 'syz.2.560': attribute type 14 has an invalid length. [ 267.340708][ T7746] BTRFS info (device loop1): enabling ssd optimizations [ 267.362226][ T7746] BTRFS info (device loop1): auto enabling async discard [ 267.374959][ T7758] loop2: detected capacity change from 0 to 512 [ 267.393647][ T7758] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 267.399156][ T7746] BTRFS info (device loop1): rebuilding free space tree [ 267.472439][ T7758] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 267.516804][ T7758] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 267.676414][ T7758] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 267.712255][ T7758] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 267.732964][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 267.747867][ T7758] EXT4-fs (loop2): orphan cleanup on readonly fs [ 267.760882][ T7758] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.560: bg 0: block 34: padding at end of block bitmap is not set [ 267.921446][ T7758] Quota error (device loop2): write_blk: dquota write failed [ 268.039811][ T7758] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 268.168256][ T7758] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.560: Failed to acquire dquot type 1 [ 268.377643][ T7758] EXT4-fs (loop2): 1 truncate cleaned up [ 268.389272][ T7758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.497566][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 268.509203][ T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 268.525166][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.538985][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.549952][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.560878][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.574734][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.584964][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.625645][ T7787] loop0: detected capacity change from 0 to 1024 [ 268.673839][ T7787] EXT4-fs: inline encryption not supported [ 268.695873][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.701589][ T7787] EXT4-fs: Ignoring removed nobh option [ 268.729458][ T7787] EXT4-fs: Ignoring removed bh option [ 268.762303][ T7787] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 268.824834][ T7787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.896584][ T23] usb 4-1: GET_CAPABILITIES returned 0 [ 268.915967][ T23] usbtmc 4-1:16.0: can't read capabilities [ 269.053808][ T5760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.259937][ T7798] program syz.0.567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.492477][ T5765] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 269.614796][ T7803] netlink: 'syz.3.563': attribute type 13 has an invalid length. [ 269.666846][ T7776] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 269.673580][ T23] usb 4-1: USB disconnect, device number 3 [ 270.294811][ T7808] loop1: detected capacity change from 0 to 4096 [ 270.334232][ T7808] NILFS (loop1): invalid segment: Checksum error in segment payload [ 270.348644][ T7808] NILFS (loop1): trying rollback from an earlier position [ 270.381977][ T7808] NILFS (loop1): recovery complete [ 270.401115][ T7812] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.461391][ T27] audit: type=1800 audit(1768328005.596:32): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.569" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 270.837906][ T7805] loop0: detected capacity change from 0 to 40427 [ 270.863892][ T7805] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 270.896302][ T7805] F2FS-fs (loop0): Image doesn't support compression [ 270.920150][ T7805] F2FS-fs (loop0): Image doesn't support compression [ 270.964526][ T7805] F2FS-fs (loop0): invalid crc value [ 271.111259][ T7805] F2FS-fs (loop0): Found nat_bits in checkpoint [ 271.776162][ T7805] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 271.926105][ T7805] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of __insert_extent_tree+0x200/0x650 [ 273.270082][ T7805] syz.0.570: attempt to access beyond end of device [ 273.270082][ T7805] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 273.377773][ T7838] netlink: 'syz.1.578': attribute type 1 has an invalid length. [ 273.388208][ T7834] syz.0.570: attempt to access beyond end of device [ 273.388208][ T7834] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 273.403021][ T7837] loop1: detected capacity change from 0 to 128 [ 273.438214][ T7837] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 273.504921][ T7837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.531483][ T5760] syz-executor: attempt to access beyond end of device [ 273.531483][ T5760] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 273.577671][ T5760] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 273.874645][ T7841] loop2: detected capacity change from 0 to 4096 [ 273.920213][ T7841] NILFS (loop2): invalid segment: Checksum error in segment payload [ 273.954939][ T7841] NILFS (loop2): trying rollback from an earlier position [ 274.021723][ T7841] NILFS (loop2): recovery complete [ 274.037498][ T7847] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.095939][ T27] audit: type=1800 audit(1768328009.236:33): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.580" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 274.445481][ T7853] program syz.3.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.163413][ T7882] loop3: detected capacity change from 0 to 4096 [ 277.212797][ T7882] NILFS (loop3): invalid segment: Checksum error in segment payload [ 277.237557][ T7882] NILFS (loop3): trying rollback from an earlier position [ 277.332246][ T7882] NILFS (loop3): recovery complete [ 277.352735][ T7884] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.378585][ T27] audit: type=1800 audit(1768328012.526:34): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.592" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 277.406961][ T7886] program syz.0.593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.710765][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 278.875759][ T7890] loop1: detected capacity change from 0 to 40427 [ 278.897122][ T7890] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 278.928465][ T7890] F2FS-fs (loop1): Image doesn't support compression [ 278.945848][ T7890] F2FS-fs (loop1): Image doesn't support compression [ 278.966353][ T7890] F2FS-fs (loop1): invalid crc value [ 278.983156][ T7900] loop3: detected capacity change from 0 to 40427 [ 278.992362][ T7900] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 278.999472][ T7900] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 279.001552][ T7890] F2FS-fs (loop1): Found nat_bits in checkpoint [ 279.017549][ T7900] F2FS-fs (loop3): invalid crc value [ 279.055318][ T7900] F2FS-fs (loop3): Found nat_bits in checkpoint [ 279.112325][ T7900] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 279.119620][ T7900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 279.372192][ T7890] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 280.233785][ T7910] loop2: detected capacity change from 0 to 4096 [ 280.353570][ T7890] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of __insert_extent_tree+0x200/0x650 [ 280.367920][ T7910] NILFS (loop2): invalid segment: Checksum error in segment payload [ 280.375967][ T7910] NILFS (loop2): trying rollback from an earlier position [ 280.436976][ T7890] syz.1.589: attempt to access beyond end of device [ 280.436976][ T7890] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 280.475818][ T7910] NILFS (loop2): recovery complete [ 280.485119][ T7918] syz.1.589: attempt to access beyond end of device [ 280.485119][ T7918] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 280.508638][ T7920] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.608747][ T5765] syz-executor: attempt to access beyond end of device [ 280.608747][ T5765] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 280.637343][ T5765] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 280.665127][ T7919] kvm: pic: non byte write [ 280.749155][ T27] audit: type=1800 audit(1768328015.896:35): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.598" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 280.909830][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 281.181716][ T7928] program syz.2.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.773268][ T7932] loop2: detected capacity change from 0 to 4096 [ 282.821448][ T7932] NILFS (loop2): invalid segment: Checksum error in segment payload [ 282.845771][ T7932] NILFS (loop2): trying rollback from an earlier position [ 282.909393][ T7932] NILFS (loop2): recovery complete [ 282.951105][ T7940] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.001570][ T27] audit: type=1800 audit(1768328018.146:36): pid=7932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.603" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 284.052239][ T7951] syzkaller0: entered promiscuous mode [ 284.060295][ T7951] syzkaller0: entered allmulticast mode [ 284.203828][ T7958] loop1: detected capacity change from 0 to 2048 [ 284.292026][ T7958] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 284.331525][ T7958] UDF-fs: Scanning with blocksize 512 failed [ 284.390616][ T7958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.469536][ T7951] bond_slave_1: mtu greater than device maximum [ 284.726286][ T7975] program syz.1.612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.797431][ T7978] program syz.2.613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.345847][ T7986] loop2: detected capacity change from 0 to 4096 [ 286.403045][ T7986] NILFS (loop2): invalid segment: Checksum error in segment payload [ 286.424565][ T7986] NILFS (loop2): trying rollback from an earlier position [ 286.542800][ T7986] NILFS (loop2): recovery complete [ 286.581880][ T7994] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.667263][ T27] audit: type=1800 audit(1768328021.806:37): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.617" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 288.222392][ T8009] loop3: detected capacity change from 0 to 32768 [ 288.240182][ T8009] xfs: Unknown parameter 'obj_type' [ 288.381352][ T8020] 9pnet: p9_errstr2errno: server reported unknown error @câîŠÁ^ à³7» k^ [ 288.632354][ T8024] program syz.3.625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.784176][ T8027] loop1: detected capacity change from 0 to 256 [ 288.832569][ T8027] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa6cf7051, utbl_chksum : 0xe619d30d) [ 288.901534][ T8027] netlink: 96 bytes leftover after parsing attributes in process `syz.1.626'. [ 288.983201][ T27] audit: type=1800 audit(1768328024.116:38): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.626" name="file1" dev="loop1" ino=1048599 res=0 errno=0 [ 289.011810][ T8031] loop3: detected capacity change from 0 to 4096 [ 289.069567][ T8031] NILFS (loop3): invalid segment: Checksum error in segment payload [ 289.113257][ T8031] NILFS (loop3): trying rollback from an earlier position [ 289.157422][ T8031] NILFS (loop3): recovery complete [ 289.177730][ T8036] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.246015][ T27] audit: type=1800 audit(1768328024.376:39): pid=8031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.627" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 290.769334][ T8051] loop1: detected capacity change from 0 to 4096 [ 290.813301][ T8051] NILFS (loop1): invalid segment: Checksum error in segment payload [ 290.844069][ T8051] NILFS (loop1): trying rollback from an earlier position [ 290.890697][ T8051] NILFS (loop1): recovery complete [ 290.911272][ T8060] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.934852][ T8059] FAULT_INJECTION: forcing a failure. [ 290.934852][ T8059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.955049][ T8059] CPU: 1 PID: 8059 Comm: syz.3.634 Not tainted syzkaller #0 [ 290.962420][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.972584][ T8059] Call Trace: [ 290.975882][ T8059] [ 290.978831][ T8059] dump_stack_lvl+0x16c/0x230 [ 290.983538][ T8059] ? show_regs_print_info+0x20/0x20 [ 290.988773][ T8059] ? load_image+0x3b0/0x3b0 [ 290.993339][ T8059] ? __might_fault+0xaa/0x120 [ 290.998047][ T8059] should_fail_ex+0x39d/0x4d0 [ 291.002764][ T8059] copyin+0x1a/0x90 [ 291.006609][ T8059] _copy_from_iter+0x404/0x1290 [ 291.011498][ T8059] ? copyout_mc+0x70/0x70 [ 291.015873][ T8059] tun_get_user+0x1e2/0x3c10 [ 291.017486][ T27] audit: type=1800 audit(1768328026.096:40): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.631" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 291.020483][ T8059] ? aa_file_perm+0x120/0xec0 [ 291.045449][ T8059] ? aa_file_perm+0x3e8/0xec0 [ 291.048020][ T8063] program syz.0.635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.050224][ T8059] ? rcu_read_unlock+0xa0/0xa0 [ 291.064109][ T8059] ? __might_fault+0xaa/0x120 [ 291.068794][ T8059] ? tun_get+0x1c/0x2e0 [ 291.072960][ T8059] ? __lock_acquire+0x7c80/0x7c80 [ 291.077989][ T8059] ? tun_get+0x1c/0x2e0 [ 291.082170][ T8059] tun_chr_write_iter+0x119/0x200 [ 291.087207][ T8059] do_iter_write+0x79a/0xc70 [ 291.091816][ T8059] ? __asan_memset+0x22/0x40 [ 291.096412][ T8059] ? vfs_iter_write+0xa0/0xa0 [ 291.101094][ T8059] ? __import_iovec+0x3fa/0x860 [ 291.105962][ T8059] ? import_iovec+0x73/0xa0 [ 291.110476][ T8059] do_writev+0x252/0x410 [ 291.114743][ T8059] ? do_readv+0x3e0/0x3e0 [ 291.119087][ T8059] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 291.125076][ T8059] ? lock_chain_count+0x20/0x20 [ 291.129933][ T8059] ? lockdep_hardirqs_on+0x98/0x150 [ 291.135155][ T8059] do_syscall_64+0x55/0xb0 [ 291.139572][ T8059] ? clear_bhb_loop+0x40/0x90 [ 291.144282][ T8059] ? clear_bhb_loop+0x40/0x90 [ 291.148961][ T8059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.155121][ T8059] RIP: 0033:0x7f44ba58f749 [ 291.159539][ T8059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.179237][ T8059] RSP: 002b:00007f44bb516038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 291.187653][ T8059] RAX: ffffffffffffffda RBX: 00007f44ba7e5fa0 RCX: 00007f44ba58f749 [ 291.195630][ T8059] RDX: 0000000000000002 RSI: 00002000000005c0 RDI: 0000000000000003 [ 291.203601][ T8059] RBP: 00007f44bb516090 R08: 0000000000000000 R09: 0000000000000000 [ 291.211584][ T8059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.219558][ T8059] R13: 00007f44ba7e6038 R14: 00007f44ba7e5fa0 R15: 00007ffe6e8ab8f8 [ 291.227543][ T8059] [ 291.317429][ T23] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 291.335932][ T8065] loop0: detected capacity change from 0 to 1024 [ 291.376575][ T6683] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 291.519512][ T23] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 291.543294][ T23] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 291.568223][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.606385][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 291.620953][ T23] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 291.632033][ T23] usb 3-1: Product: syz [ 291.636231][ T23] usb 3-1: Manufacturer: syz [ 291.643534][ T23] usb 3-1: SerialNumber: syz [ 291.660026][ T23] usb 3-1: config 0 descriptor?? [ 291.680426][ T23] hub 3-1:0.0: bad descriptor, ignoring hub [ 291.686398][ T23] hub: probe of 3-1:0.0 failed with error -5 [ 291.695566][ T8075] FAULT_INJECTION: forcing a failure. [ 291.695566][ T8075] name failslab, interval 1, probability 0, space 0, times 0 [ 291.699898][ T23] usb 3-1: selecting invalid altsetting 0 [ 291.737310][ T8075] CPU: 0 PID: 8075 Comm: syz.0.639 Not tainted syzkaller #0 [ 291.744738][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.754989][ T8075] Call Trace: [ 291.758385][ T8075] [ 291.761338][ T8075] dump_stack_lvl+0x16c/0x230 [ 291.766139][ T8075] ? show_regs_print_info+0x20/0x20 [ 291.771369][ T8075] ? load_image+0x3b0/0x3b0 [ 291.775907][ T8075] ? __might_sleep+0xe0/0xe0 [ 291.780797][ T8075] ? __lock_acquire+0x7c80/0x7c80 [ 291.785854][ T8075] should_fail_ex+0x39d/0x4d0 [ 291.790697][ T8075] should_failslab+0x9/0x20 [ 291.795222][ T8075] slab_pre_alloc_hook+0x59/0x310 [ 291.800282][ T8075] kmem_cache_alloc+0x5a/0x2e0 [ 291.805090][ T8075] ? fuse_get_req+0x3eb/0xab0 [ 291.809821][ T8075] fuse_get_req+0x3eb/0xab0 [ 291.814362][ T8075] ? fuse_simple_request+0x1bb0/0x1bb0 [ 291.819846][ T8075] ? kernel_text_address+0xa0/0xd0 [ 291.824989][ T8075] ? __kernel_text_address+0xd/0x30 [ 291.830234][ T8075] ? unwind_get_return_address+0x91/0xc0 [ 291.836027][ T8075] ? stack_trace_save+0xe0/0xe0 [ 291.841016][ T8075] fuse_simple_request+0x261/0x1bb0 [ 291.846259][ T8075] ? stack_trace_save+0x9c/0xe0 [ 291.851145][ T8075] ? stack_trace_snprint+0xf0/0xf0 [ 291.856285][ T8075] ? check_noncircular+0x175/0x3c0 [ 291.861437][ T8075] ? fuse_put_request+0x2d0/0x2d0 [ 291.866583][ T8075] ? print_deadlock_bug+0x5d0/0x5d0 [ 291.871904][ T8075] ? lockdep_unlock+0x137/0x2d0 [ 291.876791][ T8075] ? lockdep_lock+0x220/0x220 [ 291.881500][ T8075] ? add_lock_to_list+0x191/0x280 [ 291.886566][ T8075] ? __lock_acquire+0x2b6b/0x7c80 [ 291.891644][ T8075] ? __kernel_text_address+0xd/0x30 [ 291.896890][ T8075] fuse_getxattr+0x2c2/0x450 [ 291.901613][ T8075] ? fuse_setxattr+0x4b0/0x4b0 [ 291.906436][ T8075] ? lockdep_unlock+0x137/0x2d0 [ 291.911329][ T8075] ? add_lock_to_list+0x191/0x280 [ 291.916381][ T8075] fuse_xattr_get+0x80/0xa0 [ 291.920931][ T8075] ? fuse_removexattr+0x340/0x340 [ 291.926070][ T8075] __vfs_getxattr+0x3e8/0x420 [ 291.930779][ T8075] cap_inode_need_killpriv+0x45/0x60 [ 291.936092][ T8075] security_inode_need_killpriv+0x62/0x90 [ 291.941835][ T8075] __file_remove_privs+0x232/0x5c0 [ 291.946970][ T8075] ? file_remove_privs+0x20/0x20 [ 291.952003][ T8075] ? generic_write_checks_count+0x3e0/0x4c0 [ 291.957906][ T8075] ? generic_write_checks+0xc9/0x100 [ 291.963193][ T8075] fuse_file_write_iter+0x2f8/0xf20 [ 291.968401][ T8075] ? fuse_file_read_iter+0x600/0x600 [ 291.973688][ T8075] ? rcu_read_lock_any_held+0xb4/0x120 [ 291.979142][ T8075] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 291.984522][ T8075] vfs_write+0x43b/0x940 [ 291.988768][ T8075] ? file_end_write+0x250/0x250 [ 291.993672][ T8075] ? __fget_files+0x44a/0x4d0 [ 291.998354][ T8075] ? __fdget_pos+0x2a3/0x330 [ 292.002968][ T8075] ? ksys_write+0x75/0x250 [ 292.007399][ T8075] ksys_write+0x147/0x250 [ 292.011725][ T8075] ? __ia32_sys_read+0x90/0x90 [ 292.016485][ T8075] ? lockdep_hardirqs_on+0x98/0x150 [ 292.021700][ T8075] do_syscall_64+0x55/0xb0 [ 292.026127][ T8075] ? clear_bhb_loop+0x40/0x90 [ 292.030797][ T8075] ? clear_bhb_loop+0x40/0x90 [ 292.035474][ T8075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.041362][ T8075] RIP: 0033:0x7f7d5238f749 [ 292.045776][ T8075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.065657][ T8075] RSP: 002b:00007f7d532cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.074158][ T8075] RAX: ffffffffffffffda RBX: 00007f7d525e6090 RCX: 00007f7d5238f749 [ 292.082130][ T8075] RDX: 0000000000000008 RSI: 00002000000006c0 RDI: 0000000000000004 [ 292.090113][ T8075] RBP: 00007f7d532cf090 R08: 0000000000000000 R09: 0000000000000000 [ 292.098082][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.106047][ T8075] R13: 00007f7d525e6128 R14: 00007f7d525e6090 R15: 00007fffa1f0e948 [ 292.114113][ T8075] [ 292.288840][ T5812] usb 3-1: USB disconnect, device number 8 [ 293.506008][ T8097] loop1: detected capacity change from 0 to 4096 [ 293.534875][ T8097] NILFS (loop1): invalid segment: Checksum error in segment payload [ 293.567892][ T8097] NILFS (loop1): trying rollback from an earlier position [ 293.608957][ T8097] NILFS (loop1): recovery complete [ 293.631872][ T8103] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.672882][ T27] audit: type=1800 audit(1768328028.816:41): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.645" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 293.946051][ T8109] netlink: 'syz.1.648': attribute type 10 has an invalid length. [ 293.970682][ T8109] batman_adv: batadv0: Adding interface: team0 [ 293.976905][ T8109] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.023672][ T8109] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 295.145727][ T8122] program syz.3.651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.339452][ T8131] FAULT_INJECTION: forcing a failure. [ 295.339452][ T8131] name failslab, interval 1, probability 0, space 0, times 0 [ 295.377027][ T8131] CPU: 0 PID: 8131 Comm: syz.2.652 Not tainted syzkaller #0 [ 295.384365][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 295.394417][ T8131] Call Trace: [ 295.397698][ T8131] [ 295.400632][ T8131] dump_stack_lvl+0x16c/0x230 [ 295.405303][ T8131] ? show_regs_print_info+0x20/0x20 [ 295.410493][ T8131] ? load_image+0x3b0/0x3b0 [ 295.415033][ T8131] ? __might_sleep+0xe0/0xe0 [ 295.419629][ T8131] ? __lock_acquire+0x7c80/0x7c80 [ 295.424763][ T8131] should_fail_ex+0x39d/0x4d0 [ 295.429477][ T8131] should_failslab+0x9/0x20 [ 295.434005][ T8131] slab_pre_alloc_hook+0x59/0x310 [ 295.439036][ T8131] ? __kernel_text_address+0xd/0x30 [ 295.444410][ T8131] ? unwind_get_return_address+0x91/0xc0 [ 295.450066][ T8131] ? snd_pcm_oss_change_params_locked+0x173/0x3d30 [ 295.456579][ T8131] __kmem_cache_alloc_node+0x53/0x260 [ 295.461963][ T8131] ? snd_pcm_oss_change_params_locked+0x173/0x3d30 [ 295.468519][ T8131] kmalloc_trace+0x2a/0xe0 [ 295.472946][ T8131] snd_pcm_oss_change_params_locked+0x173/0x3d30 [ 295.479298][ T8131] ? __mutex_trylock_common+0x153/0x250 [ 295.484857][ T8131] ? trace_raw_output_contention_end+0xd0/0xd0 [ 295.491026][ T8131] ? task_work_run+0x1ce/0x250 [ 295.495825][ T8131] ? exit_to_user_mode_prepare+0xf6/0x180 [ 295.501571][ T8131] ? trace_contention_end+0x39/0xe0 [ 295.506808][ T8131] ? __mutex_lock+0x304/0xcc0 [ 295.511499][ T8131] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 295.516618][ T8131] ? snd_pcm_oss_make_ready+0xc0/0x330 [ 295.522171][ T8131] ? locks_remove_posix+0x630/0x630 [ 295.527375][ T8131] ? mutex_lock_nested+0x20/0x20 [ 295.532316][ T8131] ? ima_get_current_hash_algo+0x10/0x10 [ 295.537947][ T8131] ? __asan_memset+0x22/0x40 [ 295.542542][ T8131] snd_pcm_oss_make_ready+0x11b/0x330 [ 295.548029][ T8131] snd_pcm_oss_sync+0x198/0xc20 [ 295.552884][ T8131] snd_pcm_oss_release+0x102/0x240 [ 295.558003][ T8131] ? snd_pcm_oss_open+0x1b40/0x1b40 [ 295.563292][ T8131] __fput+0x234/0x970 [ 295.567303][ T8131] task_work_run+0x1ce/0x250 [ 295.571910][ T8131] ? task_work_cancel+0x240/0x240 [ 295.577029][ T8131] ? exit_to_user_mode_loop+0x3b/0x110 [ 295.582580][ T8131] exit_to_user_mode_loop+0xe6/0x110 [ 295.587894][ T8131] exit_to_user_mode_prepare+0xf6/0x180 [ 295.593458][ T8131] syscall_exit_to_user_mode+0x1a/0x50 [ 295.599093][ T8131] do_syscall_64+0x61/0xb0 [ 295.603533][ T8131] ? clear_bhb_loop+0x40/0x90 [ 295.608321][ T8131] ? clear_bhb_loop+0x40/0x90 [ 295.613177][ T8131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.619173][ T8131] RIP: 0033:0x7f449218f749 [ 295.623597][ T8131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.643216][ T8131] RSP: 002b:00007f449304a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 295.651634][ T8131] RAX: 0000000000000000 RBX: 00007f44923e6180 RCX: 00007f449218f749 [ 295.659603][ T8131] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 295.667582][ T8131] RBP: 00007f449304a090 R08: 0000000000000000 R09: 0000000000000000 [ 295.675559][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.683533][ T8131] R13: 00007f44923e6218 R14: 00007f44923e6180 R15: 00007ffc1ff8c968 [ 295.691616][ T8131] [ 296.051509][ T8137] loop0: detected capacity change from 0 to 4096 [ 296.211466][ T8137] NILFS (loop0): invalid segment: Checksum error in segment payload [ 296.260283][ T8137] NILFS (loop0): trying rollback from an earlier position [ 296.342298][ T8137] NILFS (loop0): recovery complete [ 296.361495][ T8146] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.410724][ T27] audit: type=1800 audit(1768328031.556:42): pid=8137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.656" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 296.952119][ T8152] FAULT_INJECTION: forcing a failure. [ 296.952119][ T8152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.001426][ T8152] CPU: 0 PID: 8152 Comm: syz.2.661 Not tainted syzkaller #0 [ 297.008861][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 297.019237][ T8152] Call Trace: [ 297.022525][ T8152] [ 297.025463][ T8152] dump_stack_lvl+0x16c/0x230 [ 297.030155][ T8152] ? show_regs_print_info+0x20/0x20 [ 297.035449][ T8152] ? load_image+0x3b0/0x3b0 [ 297.040054][ T8152] ? __might_fault+0xaa/0x120 [ 297.044734][ T8152] ? __lock_acquire+0x7c80/0x7c80 [ 297.049778][ T8152] should_fail_ex+0x39d/0x4d0 [ 297.054470][ T8152] _copy_from_user+0x2f/0xe0 [ 297.059061][ T8152] ___sys_sendmsg+0x159/0x290 [ 297.063747][ T8152] ? __sys_sendmsg+0x270/0x270 [ 297.068529][ T8152] ? __lock_acquire+0x7c80/0x7c80 [ 297.073568][ T8152] __se_sys_sendmsg+0x1a5/0x270 [ 297.078424][ T8152] ? __x64_sys_sendmsg+0x80/0x80 [ 297.083391][ T8152] ? lockdep_hardirqs_on+0x98/0x150 [ 297.088608][ T8152] do_syscall_64+0x55/0xb0 [ 297.093029][ T8152] ? clear_bhb_loop+0x40/0x90 [ 297.097753][ T8152] ? clear_bhb_loop+0x40/0x90 [ 297.102454][ T8152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.108368][ T8152] RIP: 0033:0x7f449218f749 [ 297.112791][ T8152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.132831][ T8152] RSP: 002b:00007f449308c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.141247][ T8152] RAX: ffffffffffffffda RBX: 00007f44923e5fa0 RCX: 00007f449218f749 [ 297.149240][ T8152] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 297.157232][ T8152] RBP: 00007f449308c090 R08: 0000000000000000 R09: 0000000000000000 [ 297.165297][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.173357][ T8152] R13: 00007f44923e6038 R14: 00007f44923e5fa0 R15: 00007ffc1ff8c968 [ 297.181779][ T8152] [ 297.825887][ T8160] program syz.2.662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.050663][ T8170] loop0: detected capacity change from 0 to 128 [ 298.065148][ T8170] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 298.088590][ T8172] program syz.3.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.115128][ T8171] syz_tun: entered allmulticast mode [ 298.239117][ T8171] syz_tun: left allmulticast mode [ 298.905376][ T8191] program syz.0.672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.514334][ T8204] program syz.0.674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.718863][ T8208] program syz.0.677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.236246][ T8214] loop0: detected capacity change from 0 to 4096 [ 300.301547][ T8214] NILFS (loop0): invalid segment: Checksum error in segment payload [ 300.328296][ T8214] NILFS (loop0): trying rollback from an earlier position [ 300.375771][ T8214] NILFS (loop0): recovery complete [ 300.417477][ T8218] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.503115][ T27] audit: type=1800 audit(1768328035.646:43): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.679" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 304.090602][ T8261] program syz.2.692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.626973][ T8267] loop1: detected capacity change from 0 to 4096 [ 304.659468][ T8267] NILFS (loop1): invalid segment: Checksum error in segment payload [ 304.671955][ T8267] NILFS (loop1): trying rollback from an earlier position [ 304.719226][ T8267] NILFS (loop1): recovery complete [ 304.835718][ T8270] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.906650][ T27] audit: type=1800 audit(1768328040.046:44): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.688" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 305.829549][ T8282] loop1: detected capacity change from 0 to 4096 [ 305.882479][ T8282] NILFS (loop1): invalid segment: Checksum error in segment payload [ 305.937325][ T8282] NILFS (loop1): trying rollback from an earlier position [ 306.004696][ T8282] NILFS (loop1): recovery complete [ 306.029928][ T8295] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.048531][ T8293] program syz.3.701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.082521][ T27] audit: type=1800 audit(1768328041.226:45): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.697" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 306.242763][ T8301] program syz.2.704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.512789][ T8309] loop1: detected capacity change from 0 to 4096 [ 306.612667][ T8309] NILFS (loop1): invalid segment: Checksum error in segment payload [ 306.638243][ T8309] NILFS (loop1): trying rollback from an earlier position [ 307.377322][ T8309] NILFS (loop1): recovery complete [ 307.390364][ T8314] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.449657][ T27] audit: type=1800 audit(1768328042.596:46): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.705" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 307.769044][ T8323] program syz.1.711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.847315][ T5812] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 308.480371][ T8329] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 308.490305][ T8329] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 309.357437][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 309.372281][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.397397][ T5812] usb 1-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 309.406495][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.430767][ T8317] loop3: detected capacity change from 0 to 32768 [ 309.457582][ T5812] usb 1-1: config 0 descriptor?? [ 309.506060][ T8317] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 309.603306][ T8317] XFS (loop3): Ending clean mount [ 310.084258][ T5764] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 310.101040][ T8341] loop2: detected capacity change from 0 to 4096 [ 310.143978][ T5812] apple 0003:05AC:026C.0002: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.0-1/input0 [ 310.195094][ T8341] NILFS (loop2): invalid segment: Checksum error in segment payload [ 310.258274][ T8341] NILFS (loop2): trying rollback from an earlier position [ 310.299871][ T787] usb 1-1: USB disconnect, device number 5 [ 310.334970][ T8341] NILFS (loop2): recovery complete [ 310.370021][ T8347] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.461368][ T27] audit: type=1800 audit(1768328045.596:47): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.715" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 313.022089][ T8362] loop0: detected capacity change from 0 to 4096 [ 313.066906][ T8362] NILFS (loop0): invalid segment: Checksum error in segment payload [ 313.089071][ T8362] NILFS (loop0): trying rollback from an earlier position [ 314.337307][ T8362] NILFS (loop0): recovery complete [ 314.367251][ T8371] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.450763][ T27] audit: type=1800 audit(1768328049.596:48): pid=8362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.721" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 314.834779][ T8375] loop0: detected capacity change from 0 to 128 [ 314.863708][ T8375] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 315.827630][ T8383] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 315.843044][ T8383] ------------[ cut here ]------------ [ 315.849254][ T8383] WARNING: CPU: 0 PID: 8383 at fs/udf/truncate.c:224 udf_truncate_extents+0xd46/0xeb0 [ 315.858872][ T8383] Modules linked in: [ 315.862806][ T8383] CPU: 0 PID: 8383 Comm: syz.0.724 Not tainted syzkaller #0 [ 315.870119][ T8383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 315.880409][ T8383] RIP: 0010:udf_truncate_extents+0xd46/0xeb0 [ 315.886403][ T8383] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 70 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5a 7f 8d fe <0f> 0b eb 8e 44 89 e9 80 e1 07 38 c1 0f 8c ec f3 ff ff 4c 89 ef e8 [ 315.906199][ T8383] RSP: 0000:ffffc90018b8eee0 EFLAGS: 00010293 [ 315.912393][ T8383] RAX: ffffffff82f82ba6 RBX: 1ffff1100a5840d5 RCX: ffff88802d9e5a00 [ 315.920517][ T8383] RDX: 0000000000000000 RSI: 0000000000000120 RDI: 0000000000000000 [ 315.928548][ T8383] RBP: ffffc90018b8f0c0 R08: ffff88802d9e5a00 R09: 0000000000000002 [ 315.936520][ T8383] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 315.944914][ T8383] R13: 0000000000000000 R14: 0000000000000120 R15: 0000000000000120 [ 315.953016][ T8383] FS: 00007f7d532f06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 315.962047][ T8383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.968667][ T8383] CR2: 00007fbf7a46e000 CR3: 000000007661e000 CR4: 00000000003526f0 [ 315.976667][ T8383] Call Trace: [ 315.980021][ T8383] [ 315.982960][ T8383] ? udf_discard_prealloc+0x570/0x570 [ 315.988386][ T8383] ? udf_write_failed+0x178/0x1b0 [ 315.993412][ T8383] ? __lock_acquire+0x7c80/0x7c80 [ 315.998471][ T8383] ? __rwlock_init+0x80/0x150 [ 316.003140][ T8383] ? down_write+0x162/0x1f0 [ 316.007666][ T8383] ? do_raw_spin_unlock+0x121/0x230 [ 316.012862][ T8383] udf_write_failed+0x180/0x1b0 [ 316.017772][ T8383] udf_write_begin+0x21f/0x430 [ 316.022541][ T8383] generic_perform_write+0x2fb/0x5b0 [ 316.027900][ T8383] ? generic_file_direct_write+0x3e0/0x3e0 [ 316.033702][ T8383] ? __mnt_drop_write_file+0xc3/0x100 [ 316.039208][ T8383] ? __generic_file_write_iter+0xf7/0x230 [ 316.045350][ T8383] ? udf_file_write_iter+0x2b1/0x620 [ 316.051047][ T8383] udf_file_write_iter+0x2c0/0x620 [ 316.056159][ T8383] __kernel_write_iter+0x274/0x670 [ 316.061318][ T8383] ? vfs_read+0x920/0x920 [ 316.065673][ T8383] ? __asan_memset+0x22/0x40 [ 316.070563][ T8383] ? iov_iter_kvec+0xd4/0x1b0 [ 316.075245][ T8383] __kernel_write+0xf0/0x140 [ 316.079910][ T8383] ? __kernel_write_iter+0x670/0x670 [ 316.085291][ T8383] __dump_emit+0x206/0x310 [ 316.089738][ T8383] ? __dump_skip+0x240/0x240 [ 316.094326][ T8383] ? dump_emit+0xa6/0xe0 [ 316.098624][ T8383] ? elf_core_dump+0x2b1c/0x36e0 [ 316.103567][ T8383] elf_core_dump+0x2b53/0x36e0 [ 316.108369][ T8383] ? load_elf_binary+0x2700/0x2700 [ 316.113483][ T8383] ? __lock_acquire+0x7c80/0x7c80 [ 316.118559][ T8383] ? verify_lock_unused+0x140/0x140 [ 316.123755][ T8383] ? mas_next_slot+0x94f/0x980 [ 316.128548][ T8383] ? up_write+0x1c3/0x410 [ 316.132918][ T8383] ? rcu_read_lock_any_held+0xb4/0x120 [ 316.138485][ T8383] do_coredump+0x1755/0x2480 [ 316.143090][ T8383] ? nfs_ssc_unregister+0x30/0x30 [ 316.148501][ T8383] ? lock_chain_count+0x20/0x20 [ 316.153368][ T8383] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.158727][ T8383] ? lockdep_hardirqs_on+0x98/0x150 [ 316.164034][ T8383] get_signal+0x1133/0x1400 [ 316.168640][ T8383] arch_do_signal_or_restart+0x9c/0x7b0 [ 316.174219][ T8383] ? get_sigframe_size+0x20/0x20 [ 316.179285][ T8383] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 316.185391][ T8383] ? exit_to_user_mode_loop+0x3b/0x110 [ 316.191026][ T8383] exit_to_user_mode_loop+0x70/0x110 [ 316.196319][ T8383] exit_to_user_mode_prepare+0xf6/0x180 [ 316.201932][ T8383] irqentry_exit_to_user_mode+0x9/0x40 [ 316.207427][ T8383] exc_page_fault+0x8f/0x110 [ 316.212027][ T8383] asm_exc_page_fault+0x26/0x30 [ 316.216887][ T8383] RIP: 0033:0x7f7d5238f751 [ 316.221373][ T8383] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 316.241190][ T8383] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 316.247293][ T8383] RAX: 0000000000000000 RBX: 00007f7d525e5fa0 RCX: 00007f7d5238f749 [ 316.255632][ T8383] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 316.263716][ T8383] RBP: 00007f7d52413f91 R08: 0000000000000000 R09: 0000000000000000 [ 316.271734][ T8383] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 316.279830][ T8383] R13: 00007f7d525e6038 R14: 00007f7d525e5fa0 R15: 00007fffa1f0e948 [ 316.287842][ T8383] [ 316.290855][ T8383] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 316.298138][ T8383] CPU: 0 PID: 8383 Comm: syz.0.724 Not tainted syzkaller #0 [ 316.305407][ T8383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.315484][ T8383] Call Trace: [ 316.318755][ T8383] [ 316.321672][ T8383] dump_stack_lvl+0x16c/0x230 [ 316.326342][ T8383] ? show_regs_print_info+0x20/0x20 [ 316.331527][ T8383] ? load_image+0x3b0/0x3b0 [ 316.336024][ T8383] panic+0x2c0/0x710 [ 316.339913][ T8383] ? bpf_jit_dump+0xd0/0xd0 [ 316.344429][ T8383] __warn+0x2e0/0x470 [ 316.348404][ T8383] ? udf_truncate_extents+0xd46/0xeb0 [ 316.353770][ T8383] ? udf_truncate_extents+0xd46/0xeb0 [ 316.359133][ T8383] report_bug+0x2be/0x4f0 [ 316.363450][ T8383] ? udf_truncate_extents+0xd46/0xeb0 [ 316.368860][ T8383] ? udf_truncate_extents+0xd46/0xeb0 [ 316.374230][ T8383] ? udf_truncate_extents+0xd48/0xeb0 [ 316.379587][ T8383] handle_bug+0xcf/0x120 [ 316.383819][ T8383] exc_invalid_op+0x1a/0x50 [ 316.388308][ T8383] asm_exc_invalid_op+0x1a/0x20 [ 316.393151][ T8383] RIP: 0010:udf_truncate_extents+0xd46/0xeb0 [ 316.399121][ T8383] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 70 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5a 7f 8d fe <0f> 0b eb 8e 44 89 e9 80 e1 07 38 c1 0f 8c ec f3 ff ff 4c 89 ef e8 [ 316.418720][ T8383] RSP: 0000:ffffc90018b8eee0 EFLAGS: 00010293 [ 316.424794][ T8383] RAX: ffffffff82f82ba6 RBX: 1ffff1100a5840d5 RCX: ffff88802d9e5a00 [ 316.432759][ T8383] RDX: 0000000000000000 RSI: 0000000000000120 RDI: 0000000000000000 [ 316.440720][ T8383] RBP: ffffc90018b8f0c0 R08: ffff88802d9e5a00 R09: 0000000000000002 [ 316.448678][ T8383] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 316.456640][ T8383] R13: 0000000000000000 R14: 0000000000000120 R15: 0000000000000120 [ 316.464611][ T8383] ? udf_truncate_extents+0xd46/0xeb0 [ 316.470013][ T8383] ? udf_discard_prealloc+0x570/0x570 [ 316.475377][ T8383] ? udf_write_failed+0x178/0x1b0 [ 316.480394][ T8383] ? __lock_acquire+0x7c80/0x7c80 [ 316.485415][ T8383] ? __rwlock_init+0x80/0x150 [ 316.490082][ T8383] ? down_write+0x162/0x1f0 [ 316.494578][ T8383] ? do_raw_spin_unlock+0x121/0x230 [ 316.499796][ T8383] udf_write_failed+0x180/0x1b0 [ 316.504643][ T8383] udf_write_begin+0x21f/0x430 [ 316.509422][ T8383] generic_perform_write+0x2fb/0x5b0 [ 316.514711][ T8383] ? generic_file_direct_write+0x3e0/0x3e0 [ 316.520522][ T8383] ? __mnt_drop_write_file+0xc3/0x100 [ 316.525936][ T8383] ? __generic_file_write_iter+0xf7/0x230 [ 316.531659][ T8383] ? udf_file_write_iter+0x2b1/0x620 [ 316.536940][ T8383] udf_file_write_iter+0x2c0/0x620 [ 316.542054][ T8383] __kernel_write_iter+0x274/0x670 [ 316.547196][ T8383] ? vfs_read+0x920/0x920 [ 316.551535][ T8383] ? __asan_memset+0x22/0x40 [ 316.556126][ T8383] ? iov_iter_kvec+0xd4/0x1b0 [ 316.560827][ T8383] __kernel_write+0xf0/0x140 [ 316.565426][ T8383] ? __kernel_write_iter+0x670/0x670 [ 316.570731][ T8383] __dump_emit+0x206/0x310 [ 316.575156][ T8383] ? __dump_skip+0x240/0x240 [ 316.579750][ T8383] ? dump_emit+0xa6/0xe0 [ 316.583984][ T8383] ? elf_core_dump+0x2b1c/0x36e0 [ 316.588919][ T8383] elf_core_dump+0x2b53/0x36e0 [ 316.593689][ T8383] ? load_elf_binary+0x2700/0x2700 [ 316.598793][ T8383] ? __lock_acquire+0x7c80/0x7c80 [ 316.603806][ T8383] ? verify_lock_unused+0x140/0x140 [ 316.608994][ T8383] ? mas_next_slot+0x94f/0x980 [ 316.613756][ T8383] ? up_write+0x1c3/0x410 [ 316.618087][ T8383] ? rcu_read_lock_any_held+0xb4/0x120 [ 316.623560][ T8383] do_coredump+0x1755/0x2480 [ 316.628161][ T8383] ? nfs_ssc_unregister+0x30/0x30 [ 316.633199][ T8383] ? lock_chain_count+0x20/0x20 [ 316.638389][ T8383] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.643580][ T8383] ? lockdep_hardirqs_on+0x98/0x150 [ 316.648794][ T8383] get_signal+0x1133/0x1400 [ 316.653302][ T8383] arch_do_signal_or_restart+0x9c/0x7b0 [ 316.658847][ T8383] ? get_sigframe_size+0x20/0x20 [ 316.663953][ T8383] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 316.669928][ T8383] ? exit_to_user_mode_loop+0x3b/0x110 [ 316.675378][ T8383] exit_to_user_mode_loop+0x70/0x110 [ 316.680656][ T8383] exit_to_user_mode_prepare+0xf6/0x180 [ 316.686190][ T8383] irqentry_exit_to_user_mode+0x9/0x40 [ 316.691642][ T8383] exc_page_fault+0x8f/0x110 [ 316.696223][ T8383] asm_exc_page_fault+0x26/0x30 [ 316.701065][ T8383] RIP: 0033:0x7f7d5238f751 [ 316.705469][ T8383] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 316.725143][ T8383] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 316.731215][ T8383] RAX: 0000000000000000 RBX: 00007f7d525e5fa0 RCX: 00007f7d5238f749 [ 316.739272][ T8383] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 316.747257][ T8383] RBP: 00007f7d52413f91 R08: 0000000000000000 R09: 0000000000000000 [ 316.755234][ T8383] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 316.763210][ T8383] R13: 00007f7d525e6038 R14: 00007f7d525e5fa0 R15: 00007fffa1f0e948 [ 316.771192][ T8383] [ 316.774600][ T8383] Kernel Offset: disabled [ 316.779068][ T8383] Rebooting in 86400 seconds..