last executing test programs: 3m30.7339927s ago: executing program 2 (id=668): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x0, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) setpgid(r1, 0x0) 3m30.61919107s ago: executing program 2 (id=670): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi3\x00', 0x8000, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r2, 0x3, 0x40000, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000001300)={0x6, 0xe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x2c800}, 0xc000044) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) sendto$inet(r6, &(0x7f0000000080)="9a3607edf5578870b2039df792c8d2b0dc6134f0dc1fd8114ed034de7fd9c063e56dd6478555150b59e1ee80528af4773c35d6dfdd755b1cae44df6f7d6ea30ac3", 0x41, 0x20048010, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c643c, &(0x7f0000000300)) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000001c0)={0x8, 0x30000, 0x4, 0x1, 0x20, 0x5, 0x1, 0x7f, 0xffffffff, 0x5, 0x80, 0x1c, 0x0, 0x0, 0x0}) 3m30.517968966s ago: executing program 2 (id=672): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x119000) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000080)=0x1) 3m30.059341444s ago: executing program 2 (id=677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003440)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x4, 0x80]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0501ffffffff0a0000002e07000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000040008010800c900ee1600000400cc"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) mount(&(0x7f0000001400)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, 0x0) 3m30.034505848s ago: executing program 2 (id=679): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x4) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10021, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x7, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20044454) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r6, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) write$UHID_INPUT(r2, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x237}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, r9, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x4, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}]}, 0xbc}}, 0x40005) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCSSOFTCAR(r10, 0x5453, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000300)={r2, 0x1, 0x1000, 0x1000}) r11 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r11, 0x40c, &(0x7f00000000c0)=0x2) 3m29.950239147s ago: executing program 2 (id=680): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7e, 0x9) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) r3 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f0000000940)=""/255, 0xff}, {&(0x7f0000002fc0)=""/4067, 0xfe3}, {&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f0000000740)=""/225, 0xe}], 0x6}, 0xe68e}], 0x4, 0x10100, 0x0) writev(r0, &(0x7f0000000140), 0x0) 3m14.871016254s ago: executing program 32 (id=680): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7e, 0x9) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) r3 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f0000000940)=""/255, 0xff}, {&(0x7f0000002fc0)=""/4067, 0xfe3}, {&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f0000000740)=""/225, 0xe}], 0x6}, 0xe68e}], 0x4, 0x10100, 0x0) writev(r0, &(0x7f0000000140), 0x0) 34.743303453s ago: executing program 4 (id=1722): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x9, 0x1, {0xa, @raw_data="5ffa86489f50d1966bab2e5b171221ab7e81ae6f4f984ad4054d687db8f4e65559c7313e83a88a5c2625d612aa249f7b984be80f875ada965fe0cba043486e15d5dd39963f60307e5a65be4123a8666f5d6c8e28ece85dc8dba32f23925023243cf9fa8d3666cda826bfce01d8f78b4b75f6b34d0e5a9dd2599f1635ba7a3188eadde1500ed7a452cbfac5bd9030077851257d7c3ec646daa0229a154fd71b757f209fdfc95265f9f783bd77cf5f34aec548e4d40727fdae4f9d60b82992b03eb72728120079587d"}, 0x1}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000300)={0x21, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) sendfile(r1, r0, 0x0, 0x7ffff002) 34.543489352s ago: executing program 4 (id=1723): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x11d, 0xf, 0x0, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000480", @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf255100000008000300", @ANYRES32=r5, @ANYBLOB="05008a00040000000a000600ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendfile(r0, r0, 0x0, 0x7ffff000) 33.531194336s ago: executing program 4 (id=1728): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000180)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x80, 0x5) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x200000000000000) 33.405422097s ago: executing program 4 (id=1731): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) (async) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, ','}, {0x20, '/dev/rnullb0\x00'}, {0x20, 'gfs2\x00'}], 0xa, "82f8f381e5b60ca4e69515ffd042272aea7cf5c5a4e85069094543d7c4bf4548c0b74e9cc272e55c45c738755ffc96bc4b5d475c464dd14c9ccce2edd34d3426c20c6975989ca6356714511ae16a38ed586eeaaf2790537e648df7200ff3af7a86"}, 0x82) 33.257005401s ago: executing program 4 (id=1735): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000180)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x80, 0x5) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) (fail_nth: 15) 32.62713168s ago: executing program 4 (id=1736): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000cc0)={0x1, &(0x7f0000000c80)=[{}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) removexattr(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='system.tran{=fd,']) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x3000, 0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000140)={0x80, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}]}}) writev(r0, 0x0, 0x0) 17.38814761s ago: executing program 33 (id=1736): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000cc0)={0x1, &(0x7f0000000c80)=[{}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) removexattr(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='system.tran{=fd,']) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x3000, 0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000140)={0x80, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}]}}) writev(r0, 0x0, 0x0) 5.192886151s ago: executing program 3 (id=1872): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ncpfs\x00', 0x8000, 0x0) gettid() 4.855159885s ago: executing program 1 (id=1873): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0x910d0000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'dvmrp1\x00', {0x8}, 0x5}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x5a, 0xa, 0x0, "b75cbb1844038d2cd97c945462f31638b5394c00"}) fanotify_mark(0xffffffffffffffff, 0x631, 0x40000000, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000904000/0x1000)=nil, 0x1000) mlock(&(0x7f00007c0000/0x1000)=nil, 0x1000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f00005c9000/0x4000)=nil, 0x4000, 0x5, 0x12, r0, 0x910d0000) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'dvmrp1\x00', {0x8}, 0x5}) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x5a, 0xa, 0x0, "b75cbb1844038d2cd97c945462f31638b5394c00"}) (async) fanotify_mark(0xffffffffffffffff, 0x631, 0x40000000, 0xffffffffffffffff, 0x0) (async) mlock(&(0x7f0000904000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f00007c0000/0x1000)=nil, 0x1000) (async) 4.854496384s ago: executing program 3 (id=1874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=@random={'system.', '\x00'}, &(0x7f0000000480)=""/144, 0x90) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x2, {0x1, 0x4, 0x4, 0x9, 0xa, 0x14d5, {0x4, 0x1, 0x800a, 0x2, 0xfffffffffffffffe, 0x6, 0xd89, 0x4, 0x353, 0x8000, 0xfffff000, r5, r6, 0x9b7cb67, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000008200000040"], 0x8082) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xcb) 4.78658276s ago: executing program 1 (id=1875): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) syz_emit_vhci(&(0x7f0000002040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9d}, "151526914b25cf056535f2b8950884546db69fa28205363c3b31b0fc6d689c8c1fd911c605e778d8d3b03db91258af49efd03ff4447ac943040b8b9d646b8eecfb43bf314b2d4fd0af7ed24c140c8ca12c910b9abf1e7b1a322692119e3c24df88e5d875253cc2b62a1c27172524caf8fc55607ce5e8dbbd76c7260fb64b577bd518eefe721b7188c92c4a68586cc30e016c44b5dfb141880f7916c46a"}, 0xa1) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000002540)={0x0, &(0x7f0000002100)=[@code={0x1, 0x3b, {"0f01c2400f20d10fb054ac0064660fd7c4c402a509c30fc7f60f017f07410f01c3c4e3716dc88c0f01d1"}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x2, 0x18, {0xfffffffe, 0xc53}}, @uexit={0x0, 0x18, 0x6}, @code={0x1, 0x5e, {"6565f3440f09b9aa0b0000b800000080ba000000000f30263666410f388014d98f0808ed39f366baf80cb84c55688bef66bafc0cedc4817951ad08000000440f01c5f3a4470f2c736c0f4a51ec"}}, @uexit={0x0, 0x18, 0x1a71}, @cpuid={0x2, 0x18, {0xa, 0x1}}, @code={0x1, 0x5a, {"c74424009f000000c744240200000000ff2c24d844f03a8f09c001e5410f01c30fc7b9bfef0000b8010000000f01d966b872000f00d00f521d036c7bc30f2262f2420f512de6a81a0e"}}, @cpuid={0x2, 0x18, {0x4e, 0x3}}, @code={0x1, 0x63, {"410f01cf460f3066400fc4e80066420f38809b0900000066baf80cb89499138fef66bafc0c66ed642e0f30c744240045000000c7442402774e0000ff1c24c401b22adc67650fc79c84921d000026460f2087"}}, @cpuid={0x2, 0x18, {0xfffffffc, 0xbfb}}, @code={0x1, 0x58, {"c4e2cd4704ccc422513d1ab805000000b9940000000f01c1b9800000c00f3235000100000f3066430f650e420f01c9440f20c03506000000440f22c00fc76f900f3026470f20c5"}}, @cpuid={0x2, 0x18, {0x6, 0x26b}}, @cpuid={0x2, 0x18, {0x4, 0x9}}, @uexit={0x0, 0x18, 0x662bb711}, @code={0x1, 0x7b, {"c4e181ec2c4f660f3881b30600000026670f1b1148b8005e0000000000000f23c80f21f8350000f0000f23f8c4c1191228450fc7b84300000066baf80cb8fc869f80ef66bafc0cb801000000ef48b800000000008000000f23c80f21f835080020000f23f8659f670f07"}}, @uexit={0x0, 0x18, 0xb5ff}, @cpuid={0x2, 0x18, {0x80000001, 0xe}}, @code={0x1, 0x67, {"c4e178287a0a6767670f07c744240031000000c744240203000000ff2c2466baf80cb83a67ab8bef66bafc0cb00cee26420fc7b69e0000000f20c035010000000f22c00f017ea9f242c069d700440f01c264f2430f07"}}, @cpuid={0x2, 0x18, {0x1000, 0x7}}, @code={0x1, 0x3e, {"67470f01c50f35650f0f80462f0000b7f042ff47cc650f01f8c422d9b91066b817000f00d8fb0f01c34b0fc72f"}}], 0x406}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000002600)={0x9, &(0x7f0000002580)=[{0x8, 0xe, 0x8, 0x1}, {0xffff, 0x40, 0x0, 0x8}, {0x4f1, 0x5, 0x3, 0x2}, {0xf873, 0xc, 0x7, 0x8}, {0x1, 0xd, 0x9e, 0x4}, {0xc74, 0x5}, {0x3, 0x1, 0xf9, 0x1}, {0x2b5a, 0x40, 0x56, 0xf}, {0xa, 0x3, 0x1, 0x1}]}) r2 = creat(&(0x7f0000002640)='./file0\x00', 0x84) getuid() ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000002680)={0x7, 0x0, [{0x1, 0x3, 0x0, 0x0, @msi={0xfff, 0x401, 0x9, 0x7fff}}, {0x80000001, 0x2, 0x0, 0x0, @sint={0x8}}, {0x1, 0x0, 0x1, 0x0, @irqchip={0x3, 0x45c}}, {0x6, 0x1, 0x1, 0x0, @irqchip={0x6, 0x4}}, {0x80, 0x1, 0x1, 0x0, @sint={0x62be, 0x8001}}, {0x21e3, 0x2, 0x1, 0x0, @sint={0x4, 0x101}}, {0xd, 0x2, 0x1, 0x0, @msi={0x0, 0x40, 0x101, 0x4}}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002840)={0x0, 0x1c, &(0x7f0000002800)=[@in6={0xa, 0x4e22, 0x2, @loopback, 0x3}]}, &(0x7f0000002880)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000028c0)={r3, @in6={{0xa, 0x4e20, 0xc9d, @empty, 0xcf0}}, 0x80, 0x4, 0x0, 0xa, 0x6}, &(0x7f0000002980)=0x98) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000029c0)={&(0x7f0000edb000/0x11000)=nil, &(0x7f0000e34000/0x7000)=nil, 0x11000, 0x1}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000002a00)={r2, 0x5, 0x1, r2}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002a40), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000002a80)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000002ac0)=r5) read$eventfd(r2, &(0x7f0000002b00), 0x8) ioctl(r2, 0x10200, &(0x7f0000002b40)="8ec0d0a720bd16a5e1d03793d75f14be7e84df741fb5ff0f646e6b6fcaea8319b920f89f17de96ecd685112746844b1f403486845265c2") r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002b80), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002cc0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000002c80)={0xffffffffffffffff}, 0x13d, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000002d00)={0xb, 0x10, 0xfa00, {&(0x7f0000002bc0), r7, 0x4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000002d40)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e21, 0x0, @private0, 0x8}, r7}}, 0x48) bind$isdn_base(r2, &(0x7f0000002dc0)={0x22, 0x4, 0x3e, 0x3, 0x10}, 0x6) madvise(&(0x7f0000fc5000/0x2000)=nil, 0x2000, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000002e00)={r3, 0xb, "85dcbf8a2120296066c720"}, &(0x7f0000002e40)=0x13) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000002e80)={0x1c80000000000000, 0x100000, 0x9, 0x0, 0x6}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000002ec0)={r8, 0xf8, "6c33a7f973ee810e1eac4dc351f549a343bef98ac4dc3aedfc1924ddbffa02fba337579abe8473bfe699c6ea2cd04772db5e5ed761027f2b8f20a2107475ac85d89d7b8817de5694cdd3ba9d2c3a9f7216e49ca1207c82ac3d533f78f138d826b0ca7caced539001364d647eae976d92d0861a4da91e8e50978c13b0d10df2bee6350416d79d474ad79b46db77e3a21eb8d588a2deb8e9181afbfb3ab4d7679e800f5b9fcd7416c5a606107b4664f6b577b0c5a2a9cc6404fa9d403f6577fd916dca338757ad2ca2e9a7bf3a2800514f61ef5420008f0dcd324f555655bdfc33b6629c2abed6d475768b39662a8383ab4e8f9322ea454c77"}, &(0x7f0000002fc0)=0x100) getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000003000)={r10, 0x5, 0x1, 0xfffffff9, 0x42, 0x9}, &(0x7f0000003040)=0x14) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000003080)={r3, 0x1000, 0x3, 0x7, 0x6, 0xff}, 0x14) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000030c0)={0x7}, 0x4) 4.523310792s ago: executing program 1 (id=1877): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001d002106000000000000000007d5"], 0x34}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) 4.463118242s ago: executing program 3 (id=1879): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efs\x00', 0x88100, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfff}}, './cgroup\x00'}) 4.324856186s ago: executing program 1 (id=1882): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x1, 0x111100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x606440, 0x40) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 3.484198753s ago: executing program 3 (id=1889): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000f11000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r0, 0xf648e000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x73e37000) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040)=0x2c, 0x798, 0x0) 3.043126142s ago: executing program 3 (id=1893): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x110080, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040890}, 0x44080) socket$xdp(0x2c, 0x3, 0x0) 2.902162902s ago: executing program 3 (id=1894): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="21082cbd7000e1dbdf2d2e0900009a14b8a9799f6980023011319a566bde2bb556cbb78d33f77e97cca3ccd9e37d08a1d004b9ae3b8c1989"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x80) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xf648e000) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180100001f00010000000080000096000601008014000320fc010000000000000000000000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x4081}, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async, rerun: 32) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902a300030100c0000904000000010100000a24010000030201020d240600000300000a0000000008240800000000500c240200000003000000000013240600060600000700090000000000000000052403"], 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000200)=0x4) (async) shutdown(r6, 0x0) close_range(r6, r6, 0x0) (async) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r7, 0x40384708, &(0x7f0000000040)={0xa9, 0x8b, 0x9, 0x200, 0x1a, "3eccd2000500"}) (async) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="0b010005f90000000c02000008000000d00000000100000000000000000000009629bcde40164ab220189555b4e4d4f9214c312987673eb4e1169a3485745c46926e266f2ffab606d6152b5f2ae0a746e8fbbb4ebd5a64f0134af072e6862ac05a4c1526e72d02a897358f07b002dc1cf44bec98f110701e0953424cdab088035a097f7566d2b899a7d1ce0c68194a61bce2e63e3a48c94b505a17fef470eb7e5160e3fd6f5d09a1d1dec6effc24216ab1e21453aa09e98678d177405b7d0790ab721a0f8e7004c2bdc411a597e4a1006f37bd0480aa7659364aeac5f1dcab36036f1c298b5d88848577590f14fe5d7d17ee3dd0f2faa58660131d5bf04f525796e3626d67ecb410056443000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a4775efd158dc481c956da567f074b82e9aeda1d5ecd9e36d053b67c"], 0x204) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.031116649s ago: executing program 1 (id=1900): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000380)={{0x3, 0x0, 0xe, 0x80000000, 'syz0\x00', 0x10001}, 0x3, 0x10000044, 0x3, 0x0, 0x1, 0x10000, 'syz1\x00', &(0x7f0000000100)=['cpuset.effective_mems\x00'], 0x16}) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0c240201060201400a000c0509040100000102000009040101010102000009050109758b06200107250100060d000904020000010200000904020101010200001124020106040803000000000033bbf813072401160501100905"], 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000081c0)={&(0x7f0000008180)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0xffffffffffffffb8}, 0x1, 0x0, 0x0, 0x4004010}, 0x20008050) syz_emit_vhci(&(0x7f0000008280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xcf, 0x1, 0x2043}}}, 0x7) poll(&(0x7f0000000080), 0x0, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 1.936169937s ago: executing program 0 (id=1901): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20504) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r1}) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r4, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa018101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000001180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={r6, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 1.283495686s ago: executing program 5 (id=1902): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) 1.135034368s ago: executing program 5 (id=1903): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*\xd4$s\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}], 0x1}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = getgid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) mount$fuse(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x808080, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@allow_other}, {}], [{@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, ')*,*'}}, {@uid_gt={'uid>', r3}}]}}) r4 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a0000}}) setsockopt$inet6_tcp_buf(r4, 0x6, 0x26, &(0x7f0000000380)="4885dcb92b27c225f3f97df7ba403c8691d42d0564a2315419011006e7812ba73e05e67400ff15991f468d4c6af770ca4efa7a1b8f25a6d7726dd5051696fd134b09828efaa34918bf6c001d9833b0cabb9d612f33f92dfdb54bfde42826e657c24ed3cb95450e3acb373428a2aff8a08e", 0x71) 1.027526455s ago: executing program 5 (id=1904): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000180)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x80, 0x5) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) (fail_nth: 32) 970.767448ms ago: executing program 0 (id=1905): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) ioctl$LOOP_SET_FD(r0, 0xc0045003, 0xffffffffffffffff) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 325.101837ms ago: executing program 0 (id=1906): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x11, r0, 0xf648e000) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async, rerun: 32) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) (rerun: 32) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000140)=@e={0xff, 0xb}) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000f80)=[@uexit={0x0, 0x18, 0x2}, @code={0x1, 0x79, {"c74424006724072dc744240200000000c7442406000000000f011c2426660f38820f48b803000000000000000f23d80f21f835c00000800f23f866baf80cb86c39178eef66bafc0ced460f01c226410f01c3410f01c20f01c56766450fc7b006000000c4218ddbd1"}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0xffffffff80000001}, @code={0x1, 0x56, {"f30f09450fc71c3d0d000000f344af2e26430f01d466b831018ec866baf80cb890f1bc8fef66bafc0cb800000100efc4023d3674780f0f01d5410f01c2650f789b81e00000"}}, @code={0x1, 0x71, {"b9800000c00f3235010000000f30c4437d04dc0f6565f30f090f20e035040000000f22e0b9800000c00f3235000800000f30c42225b85d46c4237d06c4cf66b8d3008ed066baf80cb8f9b11986ef66bafc0cecb805000000b96c813b740f01c1"}}, @code={0x1, 0x86, {"b93d030000b800000100ba000000000f3066b8bb000f00d80f3548b8ac530000000000000f23d00f21f835000000050f23f8440f20c03504000000440f22c03e0f01f8c744240015010000c744240256000000ff1c24b9050100400f32440f20c0350a000000440f22c026652e4403b4b900800000"}}], 0x226}) (async, rerun: 32) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0xc, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0xffffffffffffffff, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x20, 0x5f, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x41, 0x0, 0x0, @uid}, @generic="040485721c"]}, 0x20}], 0x1}, 0x0) (async) write(r5, &(0x7f0000000380)="240000001a005f1414f9f407000904000a00000000000008000f0001000000181fa198b0", 0x24) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0xfffffffd, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200040000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x7, 0x80000006, 0x1}) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x73e37000) 321.884107ms ago: executing program 1 (id=1907): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) fgetxattr(r1, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x1c, 0x2, 0x0, "11010100111400000100b64cd11e005c4b7c1500"}) write$6lowpan_enable(r2, &(0x7f0000000040)='1', 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="401197000000970a6256f3061900020000000000003c4f75e171a9056b9e25868bc1e63aadbbf14ba2b408e4c86ebdb3b959e5e1af3ae0efb7b8468c86f91690fe0d6b837c37a989c3db477058b7895b4fb3140c03f7b294906c4992298fec62eb188a95f71fea79bbb4d237229a87dd36a891aae36a9f6b6e5ff17ede6d84f12f9bff48068000497e66d94b72a1f229aa30efd05ccc770ce4b7a37091"], &(0x7f0000000140)={0x0, 0x3, 0xaf, @string={0xaf, 0x3, "7ae43621a480f81a995f55205a4369781da6258c36e74ea4d3b6ac4c517f7ae76b3384ee7bb353597a704789b7157bbea11befa5d0120b107f1ea6aea7c6367baf1cd9506a803c717cb4cf34a2a2693d3fe30f520960002cf6f1f11bd6b3debdebf8140676e1499da3592953fefd1bff93e38f452d1f6ce7882d9658f3fdfd83d75a4e72b0e8102b94dde8504e5905912007bf2a0c389c8917d8224090d2fa4f66a081ca73576e5c6ea6ac59fe"}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x1a, 0x4, "6cb18057", "20d9988a"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x2, 0x3, 0x6, 0x0, 0x81, 0x401}}}, &(0x7f0000000700)={0x84, &(0x7f0000000300)={0x0, 0xf, 0x29, "b70a896ae7cd445d5974b42ea538607655d82995b36e4cb5c942fa26060c98bc9d0e5bdac5974448d3"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x80, 0x20}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "f46a"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xfffe}, &(0x7f0000000540)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "18ae"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xa01}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xde}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x5}}) 321.268703ms ago: executing program 0 (id=1908): creat(&(0x7f0000001380)='./file0\x00', 0x78) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x78) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) (async) 317.958339ms ago: executing program 0 (id=1909): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x14, 0xddfe}, 0x8) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10240, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 317.130857ms ago: executing program 5 (id=1910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x2, {0x1, 0x4, 0x4, 0x9, 0xa, 0x14d5, {0x4, 0x1, 0x800a, 0x2, 0xfffffffffffffffe, 0x6, 0xd89, 0x4, 0x353, 0x8000, 0xfffff000, r5, r6, 0x9b7cb67, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000008200000040"], 0x8082) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xcb) 190.676771ms ago: executing program 0 (id=1911): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x276001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d080000000000000000070a000a000900142603600e1208001e0000050401a8000900027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x2, @multicast}, 0x10) r8 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r8, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000001080008001d000000", 0x24) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000080)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000001680)={r7, 0x1, 0x6, @link_local}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x40, 0x9f9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x80, 0x3ff, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001740)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000016c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="c4120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES16=r10, @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1401000000000000006e30000200000000050800030003001f00080003001b0000000800030003000000000000005ba3b9743902dc0ff21edeff076e6adc745756f56f94fac9f93cfcc3a78cd2f6aa0dbb856c30332b9fd5ed7f0000", @ANYRES32=r7, @ANYBLOB="d400028000000400ab62472629148d4bf4f7604fd5077108a33fdf89d69799c96ec436ed5f6a32d482ab4d171996ff929598b9af125725f21baf97c8c4c6df95adbac947533181f08bd4c6f7a547d77f59bc1845e1cf5dd11ea3147f3eec46b3695125820f657299a9e37e6cd3e4c56837f99041f4398177177609be5349c52e9440f004e50fca6927fd7ccc317378e35ec07f2f533667a91548ab11e579f0458fd45ea6bab9c6246ae53630748bbceefd47001e17054eb25c062ea957b6ee6a19a0f5e756466c293e4d46a8a931c5aa8fbebaa1f90c526c39e06feab7f0504ae113df0007cacf7dceb4621d6f7ccd630bfa1700b000040050a53136c1a124fd228cb886fa80286b6330358b1372430f57eba3b5c11928312eb968f58653d716268976e36fbf26c435be2f7abb1df9718f4f118e33406e551e65840d92de121c884c97076724dfcca7ddc01ac41b2c1176cd2bba6663ecb862741a4fa048c1ba264f37d4cc7ba475dd2cc97f953314f8fadad8efea6e84a8f8498e45e3390dd386d5b76c9350573f20df3b62a1237030cf8001e197701aeecb87f3f54aaddb72225b8fdd19000500ed114fab9c9cb43fcaf67916710db9d1cb0d1ff75a00000065000180140002007866726d30000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="100002800400010008000200fdffffff28000180080003000300000008000100", @ANYRES32=r11, @ANYBLOB="1400020070696d36726567310000000000000000"], 0x12c4}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001780)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r13, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fddbdf2531000000080001000500000099bea2460104000000000000"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 52.642826ms ago: executing program 5 (id=1912): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) ptrace(0x10, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xc, 0x6, [0x4, 0x3, 0x0, 0xa, 0x5, 0x570]}, &(0x7f0000000080)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002b000b002abd70000000dfff040000000800030000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 0s ago: executing program 5 (id=1913): r0 = creat(&(0x7f0000000940)='./file0\x00', 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0xd) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r4, &(0x7f0000006d80)={0xa0, 0xfffffffffffffffe, r5, {{0x3, 0x3, 0x8000, 0x2806, 0x9, 0x80000001, {0x2, 0xf, 0x7, 0x2, 0x7, 0x2, 0x2, 0x2, 0x8000, 0x4000, 0x3, 0x0, r6, 0x5, 0x4}}, {0x0, 0xd}}}, 0xa0) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000006e40)={0x14}, 0x14) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000002300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r7) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xbdf) ioctl$NBD_SET_SOCK(r1, 0xab00, r7) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x7, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x1000000, &(0x7f00000006c0)='U'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000100)={0x0, 0x8e0, 0x1, [0x5, 0x564, 0x40, 0x6], [0x7fff, 0x8000000000000001, 0x3b2, 0x2, 0x5, 0x4000000000, 0xa80, 0x100000001, 0x4, 0x500000000000000, 0xfffffffffffffffb, 0x7, 0xfffffffffffffff9, 0x0, 0x1ff, 0x100, 0x8, 0x101, 0x101, 0xdc8, 0x472b, 0x6, 0xca, 0xffffffffffffffff, 0x4, 0x7f, 0x6040, 0x8, 0xa, 0x1, 0x0, 0x1, 0x5, 0x6, 0x80000, 0x3, 0x5c, 0x7, 0xd, 0x7fffffffffffffff, 0x800, 0x7fff, 0x200, 0xfffffffffffffff7, 0x5, 0x101, 0x0, 0x1, 0xce54, 0xe, 0x80000001, 0x6ac, 0x8, 0x2, 0x7ff, 0xe25, 0x100000001, 0x100000000, 0x6, 0x9, 0xa8, 0x278d, 0xa704, 0x0, 0xffffffff00000000, 0x6, 0x2, 0x1, 0x8000000000000000, 0x7ff, 0x992, 0x3, 0x57, 0x3, 0x401, 0x3, 0x6, 0x7fffffff, 0x8, 0xb4, 0x72f70037, 0x0, 0x4, 0x4, 0x6e, 0xf78, 0x8, 0x9, 0xfffffffffffffffe, 0x800, 0x7fff, 0x9, 0x5348000, 0x2, 0x5, 0xb, 0x198140c9, 0xff, 0x1, 0x7, 0x8000000000000001, 0x1, 0x1, 0x0, 0x4, 0xb035, 0x3aae, 0x1, 0x1, 0x7, 0x6, 0x7fffffffffffffff, 0x2, 0x9, 0x4, 0x401, 0x4, 0x0, 0x40, 0x8, 0x1]}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000540)={r10, 0x0, 0x232f18e9}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) kernel console output (not intermixed with test programs): 218967][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 378.265259][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 378.330528][ T24] usb 5-1: USB disconnect, device number 37 [ 378.432868][T11472] afs: Unknown parameter 'euid>00000000000000032896' [ 378.442987][T11472] ./file0: Can't lookup blockdev [ 378.554380][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.560763][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.646895][T11482] /dev/rnullb0: Can't open blockdev [ 378.744261][T11489] /dev/rnullb0: Can't open blockdev [ 378.806473][T11490] netlink: 'syz.4.1714': attribute type 1 has an invalid length. [ 378.814371][T11490] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1714'. [ 378.840292][T11492] FAULT_INJECTION: forcing a failure. [ 378.840292][T11492] name failslab, interval 1, probability 0, space 0, times 0 [ 378.852999][T11492] CPU: 1 UID: 0 PID: 11492 Comm: syz.3.1715 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 378.853016][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.853025][T11492] Call Trace: [ 378.853031][T11492] [ 378.853037][T11492] dump_stack_lvl+0x189/0x250 [ 378.853060][T11492] ? __pfx____ratelimit+0x10/0x10 [ 378.853080][T11492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.853100][T11492] ? __pfx__printk+0x10/0x10 [ 378.853127][T11492] ? __pfx___might_resched+0x10/0x10 [ 378.853151][T11492] ? fs_reclaim_acquire+0x7d/0x100 [ 378.853181][T11492] should_fail_ex+0x414/0x560 [ 378.853227][T11492] should_failslab+0xa8/0x100 [ 378.853246][T11492] __kmalloc_noprof+0xcb/0x4f0 [ 378.853260][T11492] ? __d_alloc+0x36/0x7a0 [ 378.853273][T11492] ? __d_alloc+0xb5/0x7a0 [ 378.853290][T11492] __d_alloc+0xb5/0x7a0 [ 378.853308][T11492] d_alloc_parallel+0xe5/0x15e0 [ 378.853345][T11492] ? stack_depot_save_flags+0x40/0x900 [ 378.853374][T11492] ? __pfx_d_alloc_parallel+0x10/0x10 [ 378.853393][T11492] ? __raw_spin_lock_init+0x45/0x100 [ 378.853414][T11492] ? __init_waitqueue_head+0xa9/0x150 [ 378.853439][T11492] __lookup_slow+0x116/0x3d0 [ 378.853455][T11492] ? __pfx___lookup_slow+0x10/0x10 [ 378.853480][T11492] ? down_read+0x1ad/0x2e0 [ 378.853496][T11492] lookup_one_unlocked+0x127/0x250 [ 378.853510][T11492] ? ovl_lookup_index+0x1d4/0x790 [ 378.853532][T11492] lookup_one_positive_unlocked+0x26/0xb0 [ 378.853549][T11492] ovl_lookup_index+0x27a/0x790 [ 378.853573][T11492] ? ovl_lookup_layer+0x377/0x450 [ 378.853592][T11492] ? __pfx_ovl_lookup_index+0x10/0x10 [ 378.853613][T11492] ? trace_kmalloc+0x1f/0xd0 [ 378.853625][T11492] ? ovl_lookup+0x5f7/0x1bc0 [ 378.853647][T11492] ovl_lookup+0x13f1/0x1bc0 [ 378.853688][T11492] ? __pfx_ovl_lookup+0x10/0x10 [ 378.853706][T11492] ? ovl_permission+0x182/0x2c0 [ 378.853726][T11492] ? __pfx_ovl_permission+0x10/0x10 [ 378.853742][T11492] ? from_kgid+0x1b0/0x650 [ 378.853756][T11492] ? make_vfsgid+0x49/0xa0 [ 378.853770][T11492] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 378.853785][T11492] ? inode_permission+0x149/0x470 [ 378.853796][T11492] ? __pfx_ovl_permission+0x10/0x10 [ 378.853812][T11492] ? bpf_lsm_inode_create+0x9/0x20 [ 378.853832][T11492] path_openat+0x10fe/0x3830 [ 378.853847][T11492] ? arch_stack_walk+0xfc/0x150 [ 378.853888][T11492] ? __pfx_path_openat+0x10/0x10 [ 378.853902][T11492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.853951][T11492] do_filp_open+0x1fa/0x410 [ 378.853967][T11492] ? __lock_acquire+0xab9/0xd20 [ 378.853985][T11492] ? __pfx_do_filp_open+0x10/0x10 [ 378.854020][T11492] ? _raw_spin_unlock+0x28/0x50 [ 378.854041][T11492] ? alloc_fd+0x64c/0x6c0 [ 378.854071][T11492] do_sys_openat2+0x121/0x1c0 [ 378.854091][T11492] ? __pfx_do_sys_openat2+0x10/0x10 [ 378.854108][T11492] ? ksys_write+0x22a/0x250 [ 378.854128][T11492] ? __pfx_ksys_write+0x10/0x10 [ 378.854144][T11492] ? rcu_is_watching+0x15/0xb0 [ 378.854167][T11492] __x64_sys_open+0x11e/0x150 [ 378.854185][T11492] do_syscall_64+0xfa/0x3b0 [ 378.854206][T11492] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.854234][T11492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.854254][T11492] ? clear_bhb_loop+0x60/0xb0 [ 378.854280][T11492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.854300][T11492] RIP: 0033:0x7f0a28f8e9a9 [ 378.854313][T11492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.854326][T11492] RSP: 002b:00007f0a29ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 378.854347][T11492] RAX: ffffffffffffffda RBX: 00007f0a291b5fa0 RCX: 00007f0a28f8e9a9 [ 378.854358][T11492] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 378.854368][T11492] RBP: 00007f0a29ec8090 R08: 0000000000000000 R09: 0000000000000000 [ 378.854377][T11492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.854385][T11492] R13: 0000000000000000 R14: 00007f0a291b5fa0 R15: 00007fff74c2fb18 [ 378.854408][T11492] [ 378.854651][T11492] overlayfs: failed inode index lookup (ino=2706, key=00fb210001b3cb6958681242309bf8e10b1c033b7e5d89d438920a000000000000, err=-12); [ 378.854651][T11492] overlayfs: mount with '-o index=off' to disable inodes index. [ 378.977657][ T981] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 379.437956][ T981] usb 2-1: Using ep0 maxpacket: 32 [ 379.468967][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.494533][ T981] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 379.510373][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.527401][ T981] usb 2-1: config 0 descriptor?? [ 379.542404][ T30] audit: type=1804 audit(1753086736.813:41): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1718" name="/newroot/402/bus/bus" dev="overlay" ino=2299 res=1 errno=0 [ 379.988177][ T981] mcp2200 0003:04D8:00DF.0017: item fetching failed at offset 0/2 [ 379.996762][ T981] mcp2200 0003:04D8:00DF.0017: can't parse reports [ 380.017647][ T981] mcp2200 0003:04D8:00DF.0017: probe with driver mcp2200 failed with error -22 [ 380.026555][T11513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.197798][ T981] usb 2-1: USB disconnect, device number 87 [ 380.362853][T11517] FAULT_INJECTION: forcing a failure. [ 380.362853][T11517] name failslab, interval 1, probability 0, space 0, times 0 [ 380.412470][T11517] CPU: 1 UID: 0 PID: 11517 Comm: syz.3.1724 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 380.412497][T11517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.412508][T11517] Call Trace: [ 380.412516][T11517] [ 380.412524][T11517] dump_stack_lvl+0x189/0x250 [ 380.412554][T11517] ? __pfx____ratelimit+0x10/0x10 [ 380.412582][T11517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.412609][T11517] ? __pfx__printk+0x10/0x10 [ 380.412638][T11517] ? __pfx___might_resched+0x10/0x10 [ 380.412661][T11517] ? fs_reclaim_acquire+0x7d/0x100 [ 380.412690][T11517] should_fail_ex+0x414/0x560 [ 380.412719][T11517] should_failslab+0xa8/0x100 [ 380.412744][T11517] __kmalloc_noprof+0xcb/0x4f0 [ 380.412762][T11517] ? __d_alloc+0x36/0x7a0 [ 380.412779][T11517] ? __d_alloc+0xb5/0x7a0 [ 380.412801][T11517] __d_alloc+0xb5/0x7a0 [ 380.412826][T11517] d_alloc_parallel+0xe5/0x15e0 [ 380.412850][T11517] ? stack_depot_save_flags+0x40/0x900 [ 380.412892][T11517] ? __pfx_d_alloc_parallel+0x10/0x10 [ 380.412918][T11517] ? __raw_spin_lock_init+0x45/0x100 [ 380.412949][T11517] ? __init_waitqueue_head+0xa9/0x150 [ 380.412990][T11517] __lookup_slow+0x116/0x3d0 [ 380.413013][T11517] ? __pfx___lookup_slow+0x10/0x10 [ 380.413050][T11517] ? down_read+0x1ad/0x2e0 [ 380.413071][T11517] lookup_one_unlocked+0x127/0x250 [ 380.413091][T11517] ? ovl_lookup_index+0x1d4/0x790 [ 380.413121][T11517] lookup_one_positive_unlocked+0x26/0xb0 [ 380.413145][T11517] ovl_lookup_index+0x27a/0x790 [ 380.413179][T11517] ? ovl_lookup_layer+0x377/0x450 [ 380.413206][T11517] ? __pfx_ovl_lookup_index+0x10/0x10 [ 380.413234][T11517] ? trace_kmalloc+0x1f/0xd0 [ 380.413252][T11517] ? ovl_lookup+0x5f7/0x1bc0 [ 380.413283][T11517] ovl_lookup+0x13f1/0x1bc0 [ 380.413341][T11517] ? __pfx_ovl_lookup+0x10/0x10 [ 380.413366][T11517] ? ovl_permission+0x182/0x2c0 [ 380.413390][T11517] ? __pfx_ovl_permission+0x10/0x10 [ 380.413417][T11517] ? from_kgid+0x1b0/0x650 [ 380.413437][T11517] ? make_vfsgid+0x49/0xa0 [ 380.413458][T11517] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 380.413479][T11517] ? inode_permission+0x149/0x470 [ 380.413495][T11517] ? __pfx_ovl_permission+0x10/0x10 [ 380.413518][T11517] ? bpf_lsm_inode_create+0x9/0x20 [ 380.413548][T11517] path_openat+0x10fe/0x3830 [ 380.413568][T11517] ? arch_stack_walk+0xfc/0x150 [ 380.413629][T11517] ? __pfx_path_openat+0x10/0x10 [ 380.413649][T11517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.413690][T11517] do_filp_open+0x1fa/0x410 [ 380.413711][T11517] ? __lock_acquire+0xab9/0xd20 [ 380.413734][T11517] ? __pfx_do_filp_open+0x10/0x10 [ 380.413780][T11517] ? _raw_spin_unlock+0x28/0x50 [ 380.413803][T11517] ? alloc_fd+0x64c/0x6c0 [ 380.413842][T11517] do_sys_openat2+0x121/0x1c0 [ 380.413870][T11517] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.413891][T11517] ? ksys_write+0x22a/0x250 [ 380.413937][T11517] ? __pfx_ksys_write+0x10/0x10 [ 380.413961][T11517] ? rcu_is_watching+0x15/0xb0 [ 380.413999][T11517] __x64_sys_open+0x11e/0x150 [ 380.414027][T11517] do_syscall_64+0xfa/0x3b0 [ 380.414056][T11517] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.414085][T11517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.414105][T11517] ? clear_bhb_loop+0x60/0xb0 [ 380.414131][T11517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.414151][T11517] RIP: 0033:0x7f0a28f8e9a9 [ 380.414170][T11517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.414187][T11517] RSP: 002b:00007f0a29ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 380.414210][T11517] RAX: ffffffffffffffda RBX: 00007f0a291b5fa0 RCX: 00007f0a28f8e9a9 [ 380.414225][T11517] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 380.414238][T11517] RBP: 00007f0a29ec8090 R08: 0000000000000000 R09: 0000000000000000 [ 380.414251][T11517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.414263][T11517] R13: 0000000000000000 R14: 00007f0a291b5fa0 R15: 00007fff74c2fb18 [ 380.414296][T11517] [ 380.416748][T11517] overlayfs: failed inode index lookup (ino=2726, key=00fb210001b3cb6958681242309bf8e10b1c033b7ef4b28be5a60a000000000000, err=-12); [ 380.416748][T11517] overlayfs: mount with '-o index=off' to disable inodes index. [ 381.089800][T11523] /dev/rnullb0: Can't open blockdev [ 381.196458][ T30] audit: type=1804 audit(1753086738.463:42): pid=11526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1728" name="/newroot/277/bus/bus" dev="overlay" ino=1687 res=1 errno=0 [ 381.232481][T11529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.251463][T11529] /dev/rnullb0: Can't open blockdev [ 381.374694][T11534] /dev/rnullb0: Can't open blockdev [ 381.482760][T11543] FAULT_INJECTION: forcing a failure. [ 381.482760][T11543] name failslab, interval 1, probability 0, space 0, times 0 [ 381.495612][T11543] CPU: 0 UID: 0 PID: 11543 Comm: syz.4.1735 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 381.495639][T11543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.495651][T11543] Call Trace: [ 381.495660][T11543] [ 381.495668][T11543] dump_stack_lvl+0x189/0x250 [ 381.495701][T11543] ? __pfx____ratelimit+0x10/0x10 [ 381.495731][T11543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.495759][T11543] ? __pfx__printk+0x10/0x10 [ 381.495794][T11543] ? __pfx___might_resched+0x10/0x10 [ 381.495818][T11543] ? fs_reclaim_acquire+0x7d/0x100 [ 381.495849][T11543] should_fail_ex+0x414/0x560 [ 381.495881][T11543] should_failslab+0xa8/0x100 [ 381.495907][T11543] __kmalloc_node_noprof+0xd1/0x4e0 [ 381.495928][T11543] ? alloc_pages_mpol+0x3cd/0x4a0 [ 381.495949][T11543] ? allocate_slab+0x16a/0x370 [ 381.495981][T11543] allocate_slab+0x16a/0x370 [ 381.496012][T11543] ___slab_alloc+0xbeb/0x1410 [ 381.496042][T11543] ? __d_alloc+0x36/0x7a0 [ 381.496081][T11543] kmem_cache_alloc_lru_noprof+0x288/0x3d0 [ 381.496100][T11543] ? __d_alloc+0x36/0x7a0 [ 381.496122][T11543] __d_alloc+0x36/0x7a0 [ 381.496145][T11543] d_alloc_parallel+0xe5/0x15e0 [ 381.496168][T11543] ? stack_depot_save_flags+0x40/0x900 [ 381.496214][T11543] ? __pfx_d_alloc_parallel+0x10/0x10 [ 381.496239][T11543] ? __raw_spin_lock_init+0x45/0x100 [ 381.496268][T11543] ? __init_waitqueue_head+0xa9/0x150 [ 381.496299][T11543] __lookup_slow+0x116/0x3d0 [ 381.496321][T11543] ? __pfx___lookup_slow+0x10/0x10 [ 381.496356][T11543] ? down_read+0x1ad/0x2e0 [ 381.496376][T11543] lookup_one_unlocked+0x127/0x250 [ 381.496396][T11543] ? ovl_lookup_index+0x1d4/0x790 [ 381.496424][T11543] lookup_one_positive_unlocked+0x26/0xb0 [ 381.496446][T11543] ovl_lookup_index+0x27a/0x790 [ 381.496478][T11543] ? ovl_lookup_layer+0x377/0x450 [ 381.496503][T11543] ? __pfx_ovl_lookup_index+0x10/0x10 [ 381.496547][T11543] ? trace_kmalloc+0x1f/0xd0 [ 381.496565][T11543] ? ovl_lookup+0x5f7/0x1bc0 [ 381.496595][T11543] ovl_lookup+0x13f1/0x1bc0 [ 381.496658][T11543] ? __pfx_ovl_lookup+0x10/0x10 [ 381.496683][T11543] ? ovl_permission+0x182/0x2c0 [ 381.496711][T11543] ? __pfx_ovl_permission+0x10/0x10 [ 381.496733][T11543] ? from_kgid+0x1b0/0x650 [ 381.496753][T11543] ? make_vfsgid+0x49/0xa0 [ 381.496774][T11543] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 381.496795][T11543] ? inode_permission+0x149/0x470 [ 381.496811][T11543] ? __pfx_ovl_permission+0x10/0x10 [ 381.496834][T11543] ? bpf_lsm_inode_create+0x9/0x20 [ 381.496864][T11543] path_openat+0x10fe/0x3830 [ 381.496884][T11543] ? arch_stack_walk+0xfc/0x150 [ 381.496945][T11543] ? __pfx_path_openat+0x10/0x10 [ 381.496966][T11543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.497005][T11543] do_filp_open+0x1fa/0x410 [ 381.497026][T11543] ? __lock_acquire+0xab9/0xd20 [ 381.497049][T11543] ? __pfx_do_filp_open+0x10/0x10 [ 381.497094][T11543] ? _raw_spin_unlock+0x28/0x50 [ 381.497117][T11543] ? alloc_fd+0x64c/0x6c0 [ 381.497156][T11543] do_sys_openat2+0x121/0x1c0 [ 381.497186][T11543] ? __pfx_do_sys_openat2+0x10/0x10 [ 381.497206][T11543] ? ksys_write+0x22a/0x250 [ 381.497232][T11543] ? __pfx_ksys_write+0x10/0x10 [ 381.497254][T11543] ? rcu_is_watching+0x15/0xb0 [ 381.497283][T11543] __x64_sys_open+0x11e/0x150 [ 381.497307][T11543] do_syscall_64+0xfa/0x3b0 [ 381.497334][T11543] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.497360][T11543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.497379][T11543] ? clear_bhb_loop+0x60/0xb0 [ 381.497402][T11543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.497419][T11543] RIP: 0033:0x7fc655d8e9a9 [ 381.497436][T11543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.497451][T11543] RSP: 002b:00007fc656c23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 381.497471][T11543] RAX: ffffffffffffffda RBX: 00007fc655fb5fa0 RCX: 00007fc655d8e9a9 [ 381.497485][T11543] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 381.497496][T11543] RBP: 00007fc656c23090 R08: 0000000000000000 R09: 0000000000000000 [ 381.497507][T11543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.497517][T11543] R13: 0000000000000000 R14: 00007fc655fb5fa0 R15: 00007fff781bc718 [ 381.497546][T11543] [ 381.917914][ T30] audit: type=1804 audit(1753086739.183:43): pid=11543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1735" name="/newroot/279/bus/bus" dev="overlay" ino=1707 res=1 errno=0 [ 382.552478][ T30] audit: type=1804 audit(1753086739.823:44): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1734" name="/newroot/407/bus/bus" dev="overlay" ino=2337 res=1 errno=0 [ 382.612778][ T30] audit: type=1804 audit(1753086739.853:45): pid=11569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1740" name="/newroot/465/bus/bus" dev="overlay" ino=2756 res=1 errno=0 [ 382.856783][T11579] /dev/rnullb0: Can't open blockdev [ 382.866151][T11581] FAULT_INJECTION: forcing a failure. [ 382.866151][T11581] name failslab, interval 1, probability 0, space 0, times 0 [ 382.883298][T11581] CPU: 0 UID: 0 PID: 11581 Comm: syz.3.1744 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 382.883323][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.883335][T11581] Call Trace: [ 382.883342][T11581] [ 382.883350][T11581] dump_stack_lvl+0x189/0x250 [ 382.883381][T11581] ? __pfx____ratelimit+0x10/0x10 [ 382.883409][T11581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.883434][T11581] ? __pfx__printk+0x10/0x10 [ 382.883462][T11581] ? __pfx___might_resched+0x10/0x10 [ 382.883486][T11581] ? fs_reclaim_acquire+0x7d/0x100 [ 382.883514][T11581] should_fail_ex+0x414/0x560 [ 382.883542][T11581] should_failslab+0xa8/0x100 [ 382.883566][T11581] __kmalloc_noprof+0xcb/0x4f0 [ 382.883585][T11581] ? tomoyo_encode+0x28b/0x550 [ 382.883606][T11581] tomoyo_encode+0x28b/0x550 [ 382.883629][T11581] tomoyo_realpath_from_path+0x58d/0x5d0 [ 382.883662][T11581] tomoyo_check_open_permission+0x1c1/0x3b0 [ 382.883689][T11581] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 382.883714][T11581] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 382.883737][T11581] ? from_kgid+0x1b0/0x650 [ 382.883768][T11581] ? __lock_acquire+0xab9/0xd20 [ 382.883809][T11581] ? mnt_get_write_access+0x68/0x2a0 [ 382.883831][T11581] ? tomoyo_file_open+0x165/0x220 [ 382.883855][T11581] security_file_open+0xb1/0x270 [ 382.883881][T11581] do_dentry_open+0x384/0x13f0 [ 382.883925][T11581] ? vfs_open+0x31/0x340 [ 382.883950][T11581] vfs_open+0x3b/0x340 [ 382.883967][T11581] ? path_openat+0x2ecd/0x3830 [ 382.883995][T11581] path_openat+0x2ee5/0x3830 [ 382.884017][T11581] ? arch_stack_walk+0xfc/0x150 [ 382.884095][T11581] ? __pfx_path_openat+0x10/0x10 [ 382.884117][T11581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.884161][T11581] do_filp_open+0x1fa/0x410 [ 382.884183][T11581] ? __lock_acquire+0xab9/0xd20 [ 382.884208][T11581] ? __pfx_do_filp_open+0x10/0x10 [ 382.884263][T11581] ? _raw_spin_unlock+0x28/0x50 [ 382.884288][T11581] ? alloc_fd+0x64c/0x6c0 [ 382.884330][T11581] do_sys_openat2+0x121/0x1c0 [ 382.884355][T11581] ? __pfx_do_sys_openat2+0x10/0x10 [ 382.884378][T11581] ? ksys_write+0x22a/0x250 [ 382.884407][T11581] ? __pfx_ksys_write+0x10/0x10 [ 382.884430][T11581] ? rcu_is_watching+0x15/0xb0 [ 382.884461][T11581] __x64_sys_open+0x11e/0x150 [ 382.884488][T11581] do_syscall_64+0xfa/0x3b0 [ 382.884517][T11581] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.884546][T11581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.884566][T11581] ? clear_bhb_loop+0x60/0xb0 [ 382.884591][T11581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.884611][T11581] RIP: 0033:0x7f0a28f8e9a9 [ 382.884629][T11581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.884647][T11581] RSP: 002b:00007f0a29ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 382.884669][T11581] RAX: ffffffffffffffda RBX: 00007f0a291b5fa0 RCX: 00007f0a28f8e9a9 [ 382.884684][T11581] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 382.884698][T11581] RBP: 00007f0a29ec8090 R08: 0000000000000000 R09: 0000000000000000 [ 382.884711][T11581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.884723][T11581] R13: 0000000000000000 R14: 00007f0a291b5fa0 R15: 00007fff74c2fb18 [ 382.884755][T11581] [ 382.884988][T11581] ERROR: Out of memory at tomoyo_realpath_from_path. [ 382.954157][T11584] /dev/rnullb0: Can't open blockdev [ 383.084020][ T30] audit: type=1804 audit(1753086740.313:46): pid=11581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1744" name="/newroot/467/bus/bus" dev="overlay" ino=2777 res=1 errno=0 [ 383.251986][ T5915] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 383.397522][ T5915] usb 2-1: device descriptor read/64, error -71 [ 383.473443][T11596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1749'. [ 383.482723][T11594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1749'. [ 383.493992][T11594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1749'. [ 383.570938][ T30] audit: type=1804 audit(1753086740.843:47): pid=11598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1750" name="/newroot/413/bus/bus" dev="overlay" ino=2377 res=1 errno=0 [ 383.647557][ T5915] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 383.768152][ T30] audit: type=1804 audit(1753086741.043:48): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1751" name="/newroot/414/bus/bus" dev="overlay" ino=2392 res=1 errno=0 [ 383.789280][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.795389][ T5915] usb 2-1: device descriptor read/64, error -71 [ 383.907984][ T5915] usb usb2-port1: attempt power cycle [ 384.247525][ T5915] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 384.258223][T11604] /dev/rnullb0: Can't open blockdev [ 384.267377][T11604] loop6: detected capacity change from 0 to 524287999 [ 384.282244][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 384.291782][ C1] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 384.300229][ C1] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 384.310720][ T5915] usb 2-1: device descriptor read/8, error -71 [ 384.324255][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 384.519152][T11608] FAULT_INJECTION: forcing a failure. [ 384.519152][T11608] name failslab, interval 1, probability 0, space 0, times 0 [ 384.550017][ T5915] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 384.557759][T11608] CPU: 0 UID: 0 PID: 11608 Comm: syz.3.1754 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 384.557784][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.557795][T11608] Call Trace: [ 384.557803][T11608] [ 384.557811][T11608] dump_stack_lvl+0x189/0x250 [ 384.557842][T11608] ? __pfx____ratelimit+0x10/0x10 [ 384.557888][T11608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.557916][T11608] ? __pfx__printk+0x10/0x10 [ 384.557949][T11608] ? __pfx___might_resched+0x10/0x10 [ 384.557974][T11608] ? fs_reclaim_acquire+0x7d/0x100 [ 384.558004][T11608] should_fail_ex+0x414/0x560 [ 384.558034][T11608] should_failslab+0xa8/0x100 [ 384.558059][T11608] __kmalloc_noprof+0xcb/0x4f0 [ 384.558079][T11608] ? kfree+0x4d/0x440 [ 384.558095][T11608] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 384.558120][T11608] tomoyo_realpath_from_path+0xe3/0x5d0 [ 384.558141][T11608] ? tomoyo_domain+0xd9/0x130 [ 384.558170][T11608] tomoyo_path_perm+0x213/0x4b0 [ 384.558193][T11608] ? __lock_acquire+0xab9/0xd20 [ 384.558215][T11608] ? tomoyo_path_perm+0x1e3/0x4b0 [ 384.558239][T11608] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 384.558310][T11608] ? dget_parent+0x26/0x4a0 [ 384.558331][T11608] security_inode_getattr+0x12f/0x330 [ 384.558356][T11608] vfs_getattr+0x23/0x70 [ 384.558378][T11608] ovl_copy_up_flags+0x3f6/0x2ff0 [ 384.558406][T11608] ? is_bpf_text_address+0x292/0x2b0 [ 384.558430][T11608] ? is_bpf_text_address+0x26/0x2b0 [ 384.558473][T11608] ? unwind_get_return_address+0x4d/0x90 [ 384.558511][T11608] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 384.558535][T11608] ? stack_trace_save+0x9c/0xe0 [ 384.558565][T11608] ? stack_depot_save_flags+0x40/0x900 [ 384.558598][T11608] ? kasan_save_track+0x4f/0x80 [ 384.558615][T11608] ? kasan_save_track+0x3e/0x80 [ 384.558630][T11608] ? kasan_save_free_info+0x46/0x50 [ 384.558653][T11608] ? __kasan_slab_free+0x62/0x70 [ 384.558674][T11608] ? kfree+0x18e/0x440 [ 384.558689][T11608] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 384.558740][T11608] ? security_file_open+0xb1/0x270 [ 384.558761][T11608] ? do_dentry_open+0x384/0x13f0 [ 384.558777][T11608] ? vfs_open+0x3b/0x340 [ 384.558791][T11608] ? path_openat+0x2ee5/0x3830 [ 384.558811][T11608] ? do_filp_open+0x1fa/0x410 [ 384.558831][T11608] ? do_sys_openat2+0x121/0x1c0 [ 384.558847][T11608] ? __x64_sys_open+0x11e/0x150 [ 384.558864][T11608] ? do_syscall_64+0xfa/0x3b0 [ 384.558908][T11608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.559015][T11608] ? ovl_already_copied_up+0x181/0x310 [ 384.559049][T11608] ovl_open+0x138/0x2f0 [ 384.559078][T11608] ? __pfx_apparmor_file_open+0x10/0x10 [ 384.559102][T11608] ? __pfx_ovl_open+0x10/0x10 [ 384.559132][T11608] ? tomoyo_file_open+0x165/0x220 [ 384.559151][T11608] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 384.559186][T11608] ? __pfx_ovl_open+0x10/0x10 [ 384.559213][T11608] do_dentry_open+0x950/0x13f0 [ 384.559248][T11608] vfs_open+0x3b/0x340 [ 384.559264][T11608] ? path_openat+0x2ecd/0x3830 [ 384.559290][T11608] path_openat+0x2ee5/0x3830 [ 384.559311][T11608] ? arch_stack_walk+0xfc/0x150 [ 384.559375][T11608] ? __pfx_path_openat+0x10/0x10 [ 384.559395][T11608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.559437][T11608] do_filp_open+0x1fa/0x410 [ 384.559458][T11608] ? __lock_acquire+0xab9/0xd20 [ 384.559481][T11608] ? __pfx_do_filp_open+0x10/0x10 [ 384.559529][T11608] ? _raw_spin_unlock+0x28/0x50 [ 384.559553][T11608] ? alloc_fd+0x64c/0x6c0 [ 384.559593][T11608] do_sys_openat2+0x121/0x1c0 [ 384.559617][T11608] ? __pfx_do_sys_openat2+0x10/0x10 [ 384.559639][T11608] ? ksys_write+0x22a/0x250 [ 384.559666][T11608] ? __pfx_ksys_write+0x10/0x10 [ 384.559689][T11608] ? rcu_is_watching+0x15/0xb0 [ 384.559737][T11608] __x64_sys_open+0x11e/0x150 [ 384.559761][T11608] do_syscall_64+0xfa/0x3b0 [ 384.559788][T11608] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.559813][T11608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.559831][T11608] ? clear_bhb_loop+0x60/0xb0 [ 384.559853][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.559871][T11608] RIP: 0033:0x7f0a28f8e9a9 [ 384.559887][T11608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.559903][T11608] RSP: 002b:00007f0a29ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 384.559922][T11608] RAX: ffffffffffffffda RBX: 00007f0a291b5fa0 RCX: 00007f0a28f8e9a9 [ 384.559936][T11608] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 384.559948][T11608] RBP: 00007f0a29ec8090 R08: 0000000000000000 R09: 0000000000000000 [ 384.559960][T11608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.559971][T11608] R13: 0000000000000000 R14: 00007f0a291b5fa0 R15: 00007fff74c2fb18 [ 384.560000][T11608] [ 384.560105][T11608] ERROR: Out of memory at tomoyo_realpath_from_path. [ 384.875251][T11615] /dev/rnullb0: Can't open blockdev [ 384.901958][ T30] audit: type=1804 audit(1753086742.153:49): pid=11608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1754" name="/newroot/471/bus/bus" dev="overlay" ino=2808 res=1 errno=0 [ 385.067509][ T5915] usb 2-1: device descriptor read/8, error -71 [ 385.095992][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'. [ 385.142039][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'. [ 385.169263][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'. [ 385.178835][ T5915] usb usb2-port1: unable to enumerate USB device [ 385.385007][ T30] audit: type=1804 audit(1753086742.653:50): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1759" name="/newroot/418/bus/bus" dev="overlay" ino=2422 res=1 errno=0 [ 385.406176][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.147550][ T5938] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 386.310086][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 386.330742][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.347488][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.367504][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 386.404761][ T5938] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 386.433618][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.445259][T11665] FAULT_INJECTION: forcing a failure. [ 386.445259][T11665] name failslab, interval 1, probability 0, space 0, times 0 [ 386.458253][T11665] CPU: 1 UID: 0 PID: 11665 Comm: syz.3.1766 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 386.458280][T11665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.458293][T11665] Call Trace: [ 386.458301][T11665] [ 386.458309][T11665] dump_stack_lvl+0x189/0x250 [ 386.458342][T11665] ? __pfx____ratelimit+0x10/0x10 [ 386.458371][T11665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.458399][T11665] ? __pfx__printk+0x10/0x10 [ 386.458429][T11665] ? __pfx___might_resched+0x10/0x10 [ 386.458454][T11665] ? fs_reclaim_acquire+0x7d/0x100 [ 386.458484][T11665] should_fail_ex+0x414/0x560 [ 386.458515][T11665] should_failslab+0xa8/0x100 [ 386.458550][T11665] __kmalloc_noprof+0xcb/0x4f0 [ 386.458578][T11665] ? tomoyo_encode+0x28b/0x550 [ 386.458601][T11665] tomoyo_encode+0x28b/0x550 [ 386.458627][T11665] tomoyo_realpath_from_path+0x58d/0x5d0 [ 386.458659][T11665] tomoyo_path_perm+0x213/0x4b0 [ 386.458683][T11665] ? __lock_acquire+0xab9/0xd20 [ 386.458705][T11665] ? tomoyo_path_perm+0x1e3/0x4b0 [ 386.458730][T11665] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 386.458802][T11665] ? dget_parent+0x26/0x4a0 [ 386.458824][T11665] security_inode_getattr+0x12f/0x330 [ 386.458861][T11665] vfs_getattr+0x23/0x70 [ 386.458880][T11665] ovl_copy_up_flags+0x3f6/0x2ff0 [ 386.458906][T11665] ? is_bpf_text_address+0x292/0x2b0 [ 386.458929][T11665] ? is_bpf_text_address+0x26/0x2b0 [ 386.458959][T11665] ? unwind_get_return_address+0x4d/0x90 [ 386.458996][T11665] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 386.459020][T11665] ? stack_trace_save+0x9c/0xe0 [ 386.459050][T11665] ? stack_depot_save_flags+0x40/0x900 [ 386.459083][T11665] ? kasan_save_track+0x4f/0x80 [ 386.459100][T11665] ? kasan_save_track+0x3e/0x80 [ 386.459132][T11665] ? kasan_save_free_info+0x46/0x50 [ 386.459156][T11665] ? __kasan_slab_free+0x62/0x70 [ 386.459173][T11665] ? kfree+0x18e/0x440 [ 386.459190][T11665] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 386.459213][T11665] ? security_file_open+0xb1/0x270 [ 386.459235][T11665] ? do_dentry_open+0x384/0x13f0 [ 386.459251][T11665] ? vfs_open+0x3b/0x340 [ 386.459266][T11665] ? path_openat+0x2ee5/0x3830 [ 386.459287][T11665] ? do_filp_open+0x1fa/0x410 [ 386.459317][T11665] ? do_sys_openat2+0x121/0x1c0 [ 386.459334][T11665] ? __x64_sys_open+0x11e/0x150 [ 386.459350][T11665] ? do_syscall_64+0xfa/0x3b0 [ 386.459375][T11665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.459470][T11665] ? ovl_already_copied_up+0x181/0x310 [ 386.459499][T11665] ovl_open+0x138/0x2f0 [ 386.459526][T11665] ? __pfx_apparmor_file_open+0x10/0x10 [ 386.459548][T11665] ? __pfx_ovl_open+0x10/0x10 [ 386.459585][T11665] ? tomoyo_file_open+0x165/0x220 [ 386.459603][T11665] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 386.459637][T11665] ? __pfx_ovl_open+0x10/0x10 [ 386.459663][T11665] do_dentry_open+0x950/0x13f0 [ 386.459695][T11665] vfs_open+0x3b/0x340 [ 386.459712][T11665] ? path_openat+0x2ecd/0x3830 [ 386.459736][T11665] path_openat+0x2ee5/0x3830 [ 386.459755][T11665] ? arch_stack_walk+0xfc/0x150 [ 386.459815][T11665] ? __pfx_path_openat+0x10/0x10 [ 386.459834][T11665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.459872][T11665] do_filp_open+0x1fa/0x410 [ 386.459893][T11665] ? __lock_acquire+0xab9/0xd20 [ 386.459915][T11665] ? __pfx_do_filp_open+0x10/0x10 [ 386.459958][T11665] ? _raw_spin_unlock+0x28/0x50 [ 386.459981][T11665] ? alloc_fd+0x64c/0x6c0 [ 386.460027][T11665] do_sys_openat2+0x121/0x1c0 [ 386.460048][T11665] ? __pfx_do_sys_openat2+0x10/0x10 [ 386.460067][T11665] ? ksys_write+0x22a/0x250 [ 386.460091][T11665] ? __pfx_ksys_write+0x10/0x10 [ 386.460111][T11665] ? rcu_is_watching+0x15/0xb0 [ 386.460138][T11665] __x64_sys_open+0x11e/0x150 [ 386.460161][T11665] do_syscall_64+0xfa/0x3b0 [ 386.460185][T11665] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.460210][T11665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.460227][T11665] ? clear_bhb_loop+0x60/0xb0 [ 386.460266][T11665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.460285][T11665] RIP: 0033:0x7f0a28f8e9a9 [ 386.460300][T11665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.460317][T11665] RSP: 002b:00007f0a29ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 386.460336][T11665] RAX: ffffffffffffffda RBX: 00007f0a291b5fa0 RCX: 00007f0a28f8e9a9 [ 386.460350][T11665] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 386.460362][T11665] RBP: 00007f0a29ec8090 R08: 0000000000000000 R09: 0000000000000000 [ 386.460374][T11665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.460384][T11665] R13: 0000000000000000 R14: 00007f0a291b5fa0 R15: 00007fff74c2fb18 [ 386.460423][T11665] [ 386.466138][ T5938] usb 2-1: config 0 descriptor?? [ 386.467811][T11665] ERROR: Out of memory at tomoyo_realpath_from_path. [ 386.952301][ T30] audit: type=1804 audit(1753086744.213:51): pid=11665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1766" name="/newroot/476/bus/bus" dev="overlay" ino=2843 res=1 errno=0 [ 387.050201][ T5938] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 387.078640][T11672] /dev/rnullb0: Can't open blockdev [ 387.079618][ T5938] microsoft 0003:045E:07DA.0018: no inputs found [ 387.097306][ T5938] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 387.105115][T11672] /dev/rnullb0: Can't open blockdev [ 387.159407][ T30] audit: type=1804 audit(1753086744.433:52): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1763" name="/newroot/426/bus/bus" dev="overlay" ino=2424 res=1 errno=0 [ 387.165573][ T5938] usb 2-1: USB disconnect, device number 92 [ 387.637760][ T981] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 387.787584][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 387.797018][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 387.812344][ T981] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 387.821716][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.830234][ T981] usb 4-1: Product: syz [ 387.834621][ T981] usb 4-1: Manufacturer: syz [ 387.839667][ T981] usb 4-1: SerialNumber: syz [ 387.850410][ T981] usb 4-1: config 0 descriptor?? [ 387.862414][ T981] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 387.872347][ T981] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 388.467424][ T981] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 388.736927][T11698] FAULT_INJECTION: forcing a failure. [ 388.736927][T11698] name failslab, interval 1, probability 0, space 0, times 0 [ 388.750538][T11698] CPU: 1 UID: 0 PID: 11698 Comm: syz.1.1776 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 388.750557][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.750566][T11698] Call Trace: [ 388.750571][T11698] [ 388.750577][T11698] dump_stack_lvl+0x189/0x250 [ 388.750600][T11698] ? __pfx____ratelimit+0x10/0x10 [ 388.750619][T11698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.750638][T11698] ? __pfx__printk+0x10/0x10 [ 388.750658][T11698] ? __pfx___might_resched+0x10/0x10 [ 388.750674][T11698] ? fs_reclaim_acquire+0x7d/0x100 [ 388.750695][T11698] should_fail_ex+0x414/0x560 [ 388.750715][T11698] should_failslab+0xa8/0x100 [ 388.750731][T11698] __kmalloc_noprof+0xcb/0x4f0 [ 388.750745][T11698] ? tomoyo_encode+0x28b/0x550 [ 388.750760][T11698] tomoyo_encode+0x28b/0x550 [ 388.750776][T11698] tomoyo_realpath_from_path+0x58d/0x5d0 [ 388.750809][T11698] tomoyo_path_perm+0x213/0x4b0 [ 388.750824][T11698] ? __lock_acquire+0xab9/0xd20 [ 388.750839][T11698] ? tomoyo_path_perm+0x1e3/0x4b0 [ 388.750854][T11698] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 388.750897][T11698] ? dget_parent+0x26/0x4a0 [ 388.750911][T11698] security_inode_getattr+0x12f/0x330 [ 388.750927][T11698] vfs_getattr+0x23/0x70 [ 388.750940][T11698] ovl_copy_up_flags+0x3f6/0x2ff0 [ 388.750957][T11698] ? is_bpf_text_address+0x292/0x2b0 [ 388.750973][T11698] ? is_bpf_text_address+0x26/0x2b0 [ 388.750993][T11698] ? unwind_get_return_address+0x4d/0x90 [ 388.751018][T11698] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 388.751035][T11698] ? stack_trace_save+0x9c/0xe0 [ 388.751055][T11698] ? stack_depot_save_flags+0x40/0x900 [ 388.751077][T11698] ? kasan_save_track+0x4f/0x80 [ 388.751088][T11698] ? kasan_save_track+0x3e/0x80 [ 388.751098][T11698] ? kasan_save_free_info+0x46/0x50 [ 388.751115][T11698] ? __kasan_slab_free+0x62/0x70 [ 388.751126][T11698] ? kfree+0x18e/0x440 [ 388.751136][T11698] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 388.751152][T11698] ? security_file_open+0xb1/0x270 [ 388.751167][T11698] ? do_dentry_open+0x384/0x13f0 [ 388.751178][T11698] ? vfs_open+0x3b/0x340 [ 388.751188][T11698] ? path_openat+0x2ee5/0x3830 [ 388.751201][T11698] ? do_filp_open+0x1fa/0x410 [ 388.751215][T11698] ? do_sys_openat2+0x121/0x1c0 [ 388.751226][T11698] ? __x64_sys_open+0x11e/0x150 [ 388.751237][T11698] ? do_syscall_64+0xfa/0x3b0 [ 388.751255][T11698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.751319][T11698] ? ovl_already_copied_up+0x181/0x310 [ 388.751340][T11698] ovl_open+0x138/0x2f0 [ 388.751358][T11698] ? __pfx_apparmor_file_open+0x10/0x10 [ 388.751374][T11698] ? __pfx_ovl_open+0x10/0x10 [ 388.751397][T11698] ? tomoyo_file_open+0x165/0x220 [ 388.751409][T11698] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 388.751432][T11698] ? __pfx_ovl_open+0x10/0x10 [ 388.751449][T11698] do_dentry_open+0x950/0x13f0 [ 388.751470][T11698] vfs_open+0x3b/0x340 [ 388.751480][T11698] ? path_openat+0x2ecd/0x3830 [ 388.751496][T11698] path_openat+0x2ee5/0x3830 [ 388.751510][T11698] ? arch_stack_walk+0xfc/0x150 [ 388.751548][T11698] ? __pfx_path_openat+0x10/0x10 [ 388.751561][T11698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.751586][T11698] do_filp_open+0x1fa/0x410 [ 388.751598][T11698] ? __lock_acquire+0xab9/0xd20 [ 388.751613][T11698] ? __pfx_do_filp_open+0x10/0x10 [ 388.751641][T11698] ? _raw_spin_unlock+0x28/0x50 [ 388.751656][T11698] ? alloc_fd+0x64c/0x6c0 [ 388.751681][T11698] do_sys_openat2+0x121/0x1c0 [ 388.751695][T11698] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.751709][T11698] ? ksys_write+0x22a/0x250 [ 388.751726][T11698] ? __pfx_ksys_write+0x10/0x10 [ 388.751739][T11698] ? rcu_is_watching+0x15/0xb0 [ 388.751758][T11698] __x64_sys_open+0x11e/0x150 [ 388.751774][T11698] do_syscall_64+0xfa/0x3b0 [ 388.751791][T11698] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.751808][T11698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.751820][T11698] ? clear_bhb_loop+0x60/0xb0 [ 388.751835][T11698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.751846][T11698] RIP: 0033:0x7ff44cb8e9a9 [ 388.751857][T11698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.751867][T11698] RSP: 002b:00007ff44d987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 388.751880][T11698] RAX: ffffffffffffffda RBX: 00007ff44cdb5fa0 RCX: 00007ff44cb8e9a9 [ 388.751889][T11698] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 388.751897][T11698] RBP: 00007ff44d987090 R08: 0000000000000000 R09: 0000000000000000 [ 388.751904][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.751911][T11698] R13: 0000000000000000 R14: 00007ff44cdb5fa0 R15: 00007ffcb3c2d4f8 [ 388.751930][T11698] [ 388.751946][T11698] ERROR: Out of memory at tomoyo_realpath_from_path. [ 388.895773][ T981] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 388.903413][ T30] audit: type=1804 audit(1753086746.173:53): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1776" name="/newroot/429/bus/bus" dev="overlay" ino=2450 res=1 errno=0 [ 388.912368][ T981] em28xx 4-1:0.0: board has no eeprom [ 389.271693][T11699] /dev/rnullb0: Can't open blockdev [ 389.527665][ T981] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 389.535603][ T981] em28xx 4-1:0.0: dvb set to bulk mode. [ 389.544344][ T5938] em28xx 4-1:0.0: Binding DVB extension [ 389.560344][ T981] usb 4-1: USB disconnect, device number 93 [ 389.567663][ T1072] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 389.576593][ T981] em28xx 4-1:0.0: Disconnecting em28xx [ 389.623415][ T5938] em28xx 4-1:0.0: Registering input extension [ 389.629710][ T981] em28xx 4-1:0.0: Closing input extension [ 389.645235][ T981] em28xx 4-1:0.0: Freeing device [ 389.755184][ T3078] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 389.765868][ T1072] usb 2-1: Using ep0 maxpacket: 8 [ 389.776472][ T1072] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=19.b2 [ 389.785580][ T1072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.793658][ T1072] usb 2-1: Product: syz [ 389.797898][ T1072] usb 2-1: Manufacturer: syz [ 389.802491][ T1072] usb 2-1: SerialNumber: syz [ 389.809731][ T1072] usb 2-1: config 0 descriptor?? [ 390.327723][ T43] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 390.487732][ T43] usb 4-1: device descriptor read/64, error -71 [ 390.693472][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1779'. [ 390.737959][ T43] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 390.877621][ T43] usb 4-1: device descriptor read/64, error -71 [ 390.988041][ T43] usb usb4-port1: attempt power cycle [ 391.038830][T11701] syz.1.1777 (11701): drop_caches: 1 [ 391.081900][T11701] syz.1.1777 (11701): drop_caches: 1 [ 391.098141][ T1072] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 391.104682][ T1072] gspca_sunplus: reg_w_riv err -71 [ 391.113761][ T1072] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 391.124617][ T1072] usb 2-1: USB disconnect, device number 93 [ 391.327932][ T43] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 391.349210][ T43] usb 4-1: device descriptor read/8, error -71 [ 391.587890][ T43] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 391.608348][ T43] usb 4-1: device descriptor read/8, error -71 [ 391.648417][T11711] /dev/rnullb0: Can't open blockdev [ 391.729247][ T43] usb usb4-port1: unable to enumerate USB device [ 391.749977][ T30] audit: type=1804 audit(1753086749.023:54): pid=11713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1782" name="/newroot/432/bus/bus" dev="overlay" ino=2476 res=1 errno=0 [ 392.137646][ T43] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 392.287771][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 392.296985][ T43] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 392.306239][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.314466][ T43] usb 2-1: Product: syz [ 392.318702][ T43] usb 2-1: Manufacturer: syz [ 392.323296][ T43] usb 2-1: SerialNumber: syz [ 392.331343][ T43] usb 2-1: config 0 descriptor?? [ 392.541697][T11715] /dev/rnullb0: Can't open blockdev [ 392.548901][ T43] usb 2-1: USB disconnect, device number 94 [ 393.155543][T11718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1784'. [ 393.285448][T11723] FAULT_INJECTION: forcing a failure. [ 393.285448][T11723] name failslab, interval 1, probability 0, space 0, times 0 [ 393.299009][T11723] CPU: 1 UID: 0 PID: 11723 Comm: syz.3.1786 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 393.299031][T11723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.299041][T11723] Call Trace: [ 393.299048][T11723] [ 393.299055][T11723] dump_stack_lvl+0x189/0x250 [ 393.299084][T11723] ? __pfx____ratelimit+0x10/0x10 [ 393.299109][T11723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.299133][T11723] ? __pfx__printk+0x10/0x10 [ 393.299160][T11723] ? __pfx___might_resched+0x10/0x10 [ 393.299182][T11723] ? fs_reclaim_acquire+0x7d/0x100 [ 393.299209][T11723] should_fail_ex+0x414/0x560 [ 393.299235][T11723] should_failslab+0xa8/0x100 [ 393.299258][T11723] __kmalloc_noprof+0xcb/0x4f0 [ 393.299276][T11723] ? tomoyo_encode+0x28b/0x550 [ 393.299296][T11723] tomoyo_encode+0x28b/0x550 [ 393.299317][T11723] tomoyo_realpath_from_path+0x58d/0x5d0 [ 393.299353][T11723] tomoyo_path_perm+0x213/0x4b0 [ 393.299375][T11723] ? __lock_acquire+0xab9/0xd20 [ 393.299393][T11723] ? tomoyo_path_perm+0x1e3/0x4b0 [ 393.299415][T11723] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 393.299467][T11723] ? shmem_huge_global_enabled+0x174/0x3a0 [ 393.299489][T11723] ? from_kgid+0x1b0/0x650 [ 393.299514][T11723] security_inode_getattr+0x12f/0x330 [ 393.299535][T11723] vfs_getattr+0x23/0x70 [ 393.299553][T11723] ovl_copy_up_flags+0x85b/0x2ff0 [ 393.299580][T11723] ? is_bpf_text_address+0x26/0x2b0 [ 393.299610][T11723] ? unwind_get_return_address+0x4d/0x90 [ 393.299644][T11723] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 393.299667][T11723] ? stack_trace_save+0x9c/0xe0 [ 393.299695][T11723] ? stack_depot_save_flags+0x40/0x900 [ 393.299726][T11723] ? kasan_save_track+0x4f/0x80 [ 393.299741][T11723] ? kasan_save_track+0x3e/0x80 [ 393.299755][T11723] ? kasan_save_free_info+0x46/0x50 [ 393.299777][T11723] ? __kasan_slab_free+0x62/0x70 [ 393.299793][T11723] ? kfree+0x18e/0x440 [ 393.299807][T11723] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 393.299829][T11723] ? security_file_open+0xb1/0x270 [ 393.299848][T11723] ? do_dentry_open+0x384/0x13f0 [ 393.299863][T11723] ? vfs_open+0x3b/0x340 [ 393.299877][T11723] ? path_openat+0x2ee5/0x3830 [ 393.299896][T11723] ? do_filp_open+0x1fa/0x410 [ 393.299913][T11723] ? do_sys_openat2+0x121/0x1c0 [ 393.299929][T11723] ? __x64_sys_open+0x11e/0x150 [ 393.299945][T11723] ? do_syscall_64+0xfa/0x3b0 [ 393.299969][T11723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.300064][T11723] ? ovl_already_copied_up+0x181/0x310 [ 393.300094][T11723] ovl_open+0x138/0x2f0 [ 393.300119][T11723] ? __pfx_apparmor_file_open+0x10/0x10 [ 393.300140][T11723] ? __pfx_ovl_open+0x10/0x10 [ 393.300166][T11723] ? tomoyo_file_open+0x165/0x220 [ 393.300183][T11723] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 393.300214][T11723] ? __pfx_ovl_open+0x10/0x10 [ 393.300238][T11723] do_dentry_open+0x950/0x13f0 [ 393.300269][T11723] vfs_open+0x3b/0x340 [ 393.300283][T11723] ? path_openat+0x2ecd/0x3830 [ 393.300306][T11723] path_openat+0x2ee5/0x3830 [ 393.300329][T11723] ? arch_stack_walk+0xfc/0x150 [ 393.300385][T11723] ? __pfx_path_openat+0x10/0x10 [ 393.300402][T11723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.300439][T11723] do_filp_open+0x1fa/0x410 [ 393.300457][T11723] ? __lock_acquire+0xab9/0xd20 [ 393.300477][T11723] ? __pfx_do_filp_open+0x10/0x10 [ 393.300519][T11723] ? _raw_spin_unlock+0x28/0x50 [ 393.300539][T11723] ? alloc_fd+0x64c/0x6c0 [ 393.300574][T11723] do_sys_openat2+0x121/0x1c0 [ 393.300595][T11723] ? __pfx_do_sys_openat2+0x10/0x10 [ 393.300615][T11723] ? ksys_write+0x22a/0x250 [ 393.300639][T11723] ? __pfx_ksys_write+0x10/0x10 [ 393.300658][T11723] ? rcu_is_watching+0x15/0xb0 [ 393.300684][T11723] __x64_sys_open+0x11e/0x150 [ 393.300707][T11723] do_syscall_64+0xfa/0x3b0 [ 393.300731][T11723] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.300755][T11723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.300772][T11723] ? clear_bhb_loop+0x60/0xb0 [ 393.300794][T11723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.300810][T11723] RIP: 0033:0x7f0a28f8e9a9 [ 393.300825][T11723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.300840][T11723] RSP: 002b:00007f0a29ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 393.300858][T11723] RAX: ffffffffffffffda RBX: 00007f0a291b5fa0 RCX: 00007f0a28f8e9a9 [ 393.300871][T11723] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 393.300882][T11723] RBP: 00007f0a29ec8090 R08: 0000000000000000 R09: 0000000000000000 [ 393.300893][T11723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.300903][T11723] R13: 0000000000000000 R14: 00007f0a291b5fa0 R15: 00007fff74c2fb18 [ 393.300930][T11723] [ 393.300952][T11723] ERROR: Out of memory at tomoyo_realpath_from_path. [ 393.770054][ T30] audit: type=1804 audit(1753086751.043:55): pid=11723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1786" name="/newroot/482/bus/bus" dev="overlay" ino=2884 res=1 errno=0 [ 393.827759][ T1072] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 393.892778][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'. [ 393.895858][T11727] /dev/rnullb0: Can't open blockdev [ 393.910720][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1787'. [ 393.992083][ T1072] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 394.006447][ T1072] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.020394][ T1072] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 394.031536][ T1072] usb 2-1: config 1 has no interface number 1 [ 394.040092][ T1072] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 394.064084][ T1072] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.073871][T11731] Invalid ELF header len 16 [ 394.074170][ T1072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.090559][ T1072] usb 2-1: Product: syz [ 394.094808][ T1072] usb 2-1: Manufacturer: syz [ 394.099803][ T1072] usb 2-1: SerialNumber: syz [ 394.321829][T11718] Malformed UNC in devname [ 394.321829][T11718] [ 394.331755][T11718] CIFS: VFS: Malformed UNC in devname [ 394.352087][ T1072] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 394.372298][ T1072] usb 2-1: MIDIStreaming interface descriptor not found [ 394.410621][T11727] could not allocate digest TFM handle hmac(sha1-avx2) [ 394.470862][ T1072] usb 2-1: USB disconnect, device number 95 [ 394.564966][T10435] udevd[10435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.654478][T11741] ubi: mtd0 is already attached to ubi31 [ 394.785902][T11752] tipc: Started in network mode [ 394.793331][T11752] tipc: Node identity de487decd4ab, cluster identity 4711 [ 394.804411][T11752] tipc: Enabled bearer , priority 0 [ 394.812754][T11752] syzkaller0: entered promiscuous mode [ 394.828420][T11752] syzkaller0: entered allmulticast mode [ 394.871375][T11752] tipc: Resetting bearer [ 394.965405][T11757] FAULT_INJECTION: forcing a failure. [ 394.965405][T11757] name failslab, interval 1, probability 0, space 0, times 0 [ 394.980230][T11758] tipc: Resetting bearer [ 394.991280][T11757] CPU: 1 UID: 0 PID: 11757 Comm: syz.1.1796 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 394.991303][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.991314][T11757] Call Trace: [ 394.991321][T11757] [ 394.991328][T11757] dump_stack_lvl+0x189/0x250 [ 394.991357][T11757] ? __pfx____ratelimit+0x10/0x10 [ 394.991383][T11757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.991406][T11757] ? __pfx__printk+0x10/0x10 [ 394.991434][T11757] ? __pfx___might_resched+0x10/0x10 [ 394.991455][T11757] ? fs_reclaim_acquire+0x7d/0x100 [ 394.991482][T11757] should_fail_ex+0x414/0x560 [ 394.991510][T11757] should_failslab+0xa8/0x100 [ 394.991532][T11757] __kmalloc_noprof+0xcb/0x4f0 [ 394.991550][T11757] ? tomoyo_encode+0x28b/0x550 [ 394.991570][T11757] tomoyo_encode+0x28b/0x550 [ 394.991590][T11757] tomoyo_realpath_from_path+0x58d/0x5d0 [ 394.991620][T11757] tomoyo_path_perm+0x213/0x4b0 [ 394.991641][T11757] ? __lock_acquire+0xab9/0xd20 [ 394.991660][T11757] ? tomoyo_path_perm+0x1e3/0x4b0 [ 394.991682][T11757] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 394.991733][T11757] ? shmem_huge_global_enabled+0x174/0x3a0 [ 394.991757][T11757] ? from_kgid+0x1b0/0x650 [ 394.991781][T11757] security_inode_getattr+0x12f/0x330 [ 394.991802][T11757] vfs_getattr+0x23/0x70 [ 394.991821][T11757] ovl_copy_up_flags+0x85b/0x2ff0 [ 394.991847][T11757] ? is_bpf_text_address+0x26/0x2b0 [ 394.991877][T11757] ? unwind_get_return_address+0x4d/0x90 [ 394.991911][T11757] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 394.991935][T11757] ? stack_trace_save+0x9c/0xe0 [ 394.991972][T11757] ? stack_depot_save_flags+0x40/0x900 [ 394.992003][T11757] ? kasan_save_track+0x4f/0x80 [ 394.992019][T11757] ? kasan_save_track+0x3e/0x80 [ 394.992034][T11757] ? kasan_save_free_info+0x46/0x50 [ 394.992056][T11757] ? __kasan_slab_free+0x62/0x70 [ 394.992072][T11757] ? kfree+0x18e/0x440 [ 394.992086][T11757] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 394.992108][T11757] ? security_file_open+0xb1/0x270 [ 394.992128][T11757] ? do_dentry_open+0x384/0x13f0 [ 394.992143][T11757] ? vfs_open+0x3b/0x340 [ 394.992157][T11757] ? path_openat+0x2ee5/0x3830 [ 394.992176][T11757] ? do_filp_open+0x1fa/0x410 [ 394.992195][T11757] ? do_sys_openat2+0x121/0x1c0 [ 394.992211][T11757] ? __x64_sys_open+0x11e/0x150 [ 394.992227][T11757] ? do_syscall_64+0xfa/0x3b0 [ 394.992251][T11757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.992347][T11757] ? ovl_already_copied_up+0x181/0x310 [ 394.992377][T11757] ovl_open+0x138/0x2f0 [ 394.992402][T11757] ? __pfx_apparmor_file_open+0x10/0x10 [ 394.992424][T11757] ? __pfx_ovl_open+0x10/0x10 [ 394.992450][T11757] ? tomoyo_file_open+0x165/0x220 [ 394.992468][T11757] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 394.992500][T11757] ? __pfx_ovl_open+0x10/0x10 [ 394.992524][T11757] do_dentry_open+0x950/0x13f0 [ 394.992555][T11757] vfs_open+0x3b/0x340 [ 394.992570][T11757] ? path_openat+0x2ecd/0x3830 [ 394.992593][T11757] path_openat+0x2ee5/0x3830 [ 394.992612][T11757] ? arch_stack_walk+0xfc/0x150 [ 394.992668][T11757] ? __pfx_path_openat+0x10/0x10 [ 394.992687][T11757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.992721][T11757] do_filp_open+0x1fa/0x410 [ 394.992740][T11757] ? __lock_acquire+0xab9/0xd20 [ 394.992762][T11757] ? __pfx_do_filp_open+0x10/0x10 [ 394.992803][T11757] ? _raw_spin_unlock+0x28/0x50 [ 394.992824][T11757] ? alloc_fd+0x64c/0x6c0 [ 394.992858][T11757] do_sys_openat2+0x121/0x1c0 [ 394.992878][T11757] ? __pfx_do_sys_openat2+0x10/0x10 [ 394.992896][T11757] ? ksys_write+0x22a/0x250 [ 394.992920][T11757] ? __pfx_ksys_write+0x10/0x10 [ 394.992944][T11757] ? rcu_is_watching+0x15/0xb0 [ 394.992969][T11757] __x64_sys_open+0x11e/0x150 [ 394.992990][T11757] do_syscall_64+0xfa/0x3b0 [ 394.993014][T11757] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.993036][T11757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.993053][T11757] ? clear_bhb_loop+0x60/0xb0 [ 394.993073][T11757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.993089][T11757] RIP: 0033:0x7ff44cb8e9a9 [ 394.993104][T11757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.993118][T11757] RSP: 002b:00007ff44d987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 394.993135][T11757] RAX: ffffffffffffffda RBX: 00007ff44cdb5fa0 RCX: 00007ff44cb8e9a9 [ 394.993148][T11757] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 394.993158][T11757] RBP: 00007ff44d987090 R08: 0000000000000000 R09: 0000000000000000 [ 394.993169][T11757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.993178][T11757] R13: 0000000000000000 R14: 00007ff44cdb5fa0 R15: 00007ffcb3c2d4f8 [ 394.993204][T11757] [ 395.460967][T11757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 395.470457][T11758] tipc: Disabling bearer [ 395.499829][ T30] audit: type=1804 audit(1753086752.743:56): pid=11757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1796" name="/newroot/435/bus/bus" dev="overlay" ino=2501 res=1 errno=0 [ 395.565272][T11763] openvswitch: netlink: EtherType 0 is less than min 600 [ 395.696778][T11765] /dev/rnullb0: Can't open blockdev [ 395.761722][T11769] /dev/rnullb0: Can't open blockdev [ 395.810320][T11773] netlink: 'syz.1.1802': attribute type 21 has an invalid length. [ 395.823021][T11773] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1802'. [ 395.906118][T11776] use of bytesused == 0 is deprecated and will be removed in the future, [ 395.907971][ T5938] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 395.916824][T11776] use the actual size instead. [ 396.019615][T11779] FAULT_INJECTION: forcing a failure. [ 396.019615][T11779] name failslab, interval 1, probability 0, space 0, times 0 [ 396.035460][T11779] CPU: 1 UID: 0 PID: 11779 Comm: syz.1.1805 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 396.035485][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 396.035497][T11779] Call Trace: [ 396.035505][T11779] [ 396.035512][T11779] dump_stack_lvl+0x189/0x250 [ 396.035544][T11779] ? __pfx____ratelimit+0x10/0x10 [ 396.035571][T11779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.035596][T11779] ? __pfx__printk+0x10/0x10 [ 396.035627][T11779] ? __pfx___might_resched+0x10/0x10 [ 396.035650][T11779] ? fs_reclaim_acquire+0x7d/0x100 [ 396.035677][T11779] should_fail_ex+0x414/0x560 [ 396.035705][T11779] should_failslab+0xa8/0x100 [ 396.035729][T11779] __kmalloc_cache_noprof+0x70/0x3d0 [ 396.035750][T11779] ? ovl_encode_real_fh+0xcf/0x360 [ 396.035777][T11779] ovl_encode_real_fh+0xcf/0x360 [ 396.035799][T11779] ? __asan_memcpy+0x40/0x70 [ 396.035826][T11779] ? __pfx_ovl_encode_real_fh+0x10/0x10 [ 396.035847][T11779] ? ovl_encode_real_fh+0x26c/0x360 [ 396.035873][T11779] ? apparmor_capable+0x137/0x1b0 [ 396.035896][T11779] ? __pfx_ovl_encode_real_fh+0x10/0x10 [ 396.035935][T11779] ? security_capable+0x7e/0x2e0 [ 396.035966][T11779] ovl_get_index_name+0x4d/0x1c0 [ 396.035998][T11779] ovl_copy_up_flags+0xc06/0x2ff0 [ 396.036027][T11779] ? is_bpf_text_address+0x26/0x2b0 [ 396.036060][T11779] ? unwind_get_return_address+0x4d/0x90 [ 396.036108][T11779] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 396.036150][T11779] ? stack_trace_save+0x9c/0xe0 [ 396.036182][T11779] ? stack_depot_save_flags+0x40/0x900 [ 396.036217][T11779] ? kasan_save_track+0x4f/0x80 [ 396.036233][T11779] ? kasan_save_track+0x3e/0x80 [ 396.036250][T11779] ? kasan_save_free_info+0x46/0x50 [ 396.036274][T11779] ? __kasan_slab_free+0x62/0x70 [ 396.036291][T11779] ? kfree+0x18e/0x440 [ 396.036308][T11779] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 396.036332][T11779] ? security_file_open+0xb1/0x270 [ 396.036354][T11779] ? do_dentry_open+0x384/0x13f0 [ 396.036378][T11779] ? vfs_open+0x3b/0x340 [ 396.036393][T11779] ? path_openat+0x2ee5/0x3830 [ 396.036414][T11779] ? do_filp_open+0x1fa/0x410 [ 396.036434][T11779] ? do_sys_openat2+0x121/0x1c0 [ 396.036452][T11779] ? __x64_sys_open+0x11e/0x150 [ 396.036470][T11779] ? do_syscall_64+0xfa/0x3b0 [ 396.036497][T11779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.036600][T11779] ? ovl_already_copied_up+0x181/0x310 [ 396.036633][T11779] ovl_open+0x138/0x2f0 [ 396.036662][T11779] ? __pfx_apparmor_file_open+0x10/0x10 [ 396.036685][T11779] ? __pfx_ovl_open+0x10/0x10 [ 396.036714][T11779] ? tomoyo_file_open+0x165/0x220 [ 396.036733][T11779] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 396.036767][T11779] ? __pfx_ovl_open+0x10/0x10 [ 396.036794][T11779] do_dentry_open+0x950/0x13f0 [ 396.036828][T11779] vfs_open+0x3b/0x340 [ 396.036844][T11779] ? path_openat+0x2ecd/0x3830 [ 396.036875][T11779] path_openat+0x2ee5/0x3830 [ 396.036896][T11779] ? arch_stack_walk+0xfc/0x150 [ 396.036958][T11779] ? __pfx_path_openat+0x10/0x10 [ 396.036978][T11779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.037037][T11779] do_filp_open+0x1fa/0x410 [ 396.037060][T11779] ? __lock_acquire+0xab9/0xd20 [ 396.037086][T11779] ? __pfx_do_filp_open+0x10/0x10 [ 396.037134][T11779] ? _raw_spin_unlock+0x28/0x50 [ 396.037159][T11779] ? alloc_fd+0x64c/0x6c0 [ 396.037212][T11779] do_sys_openat2+0x121/0x1c0 [ 396.037236][T11779] ? __pfx_do_sys_openat2+0x10/0x10 [ 396.037258][T11779] ? ksys_write+0x22a/0x250 [ 396.037285][T11779] ? __pfx_ksys_write+0x10/0x10 [ 396.037307][T11779] ? rcu_is_watching+0x15/0xb0 [ 396.037336][T11779] __x64_sys_open+0x11e/0x150 [ 396.037360][T11779] do_syscall_64+0xfa/0x3b0 [ 396.037388][T11779] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.037415][T11779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.037433][T11779] ? clear_bhb_loop+0x60/0xb0 [ 396.037470][T11779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.037486][T11779] RIP: 0033:0x7ff44cb8e9a9 [ 396.037501][T11779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.037516][T11779] RSP: 002b:00007ff44d987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 396.037534][T11779] RAX: ffffffffffffffda RBX: 00007ff44cdb5fa0 RCX: 00007ff44cb8e9a9 [ 396.037547][T11779] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 396.037557][T11779] RBP: 00007ff44d987090 R08: 0000000000000000 R09: 0000000000000000 [ 396.037568][T11779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.037578][T11779] R13: 0000000000000000 R14: 00007ff44cdb5fa0 R15: 00007ffcb3c2d4f8 [ 396.037604][T11779] [ 396.147627][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 396.498090][ T5938] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 396.506415][ T5938] usb 4-1: config 0 has no interface number 0 [ 396.512577][ T5938] usb 4-1: config 0 interface 125 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.525563][ T5938] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 396.536646][ T5938] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 396.550137][ T5938] usb 4-1: New USB device found, idVendor=3277, idProduct=009e, bcdDevice=2e.0f [ 396.559387][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.567386][ T5938] usb 4-1: Product: syz [ 396.571663][ T5938] usb 4-1: Manufacturer: syz [ 396.576273][ T5938] usb 4-1: SerialNumber: syz [ 396.583684][ T5938] usb 4-1: config 0 descriptor?? [ 396.590749][T11766] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 396.600951][ T5938] usb 4-1: Found UVC 0.00 device syz (3277:009e) [ 396.607313][ T5938] usb 4-1: No valid video chain found. [ 396.762254][T11787] fuse: Bad value for 'fd' [ 396.836157][T11789] /dev/rnullb0: Can't open blockdev [ 396.856109][T11789] fuse: Bad value for 'fd' [ 397.369843][T11796] 9pnet_fd: p9_fd_create_tcp (11796): problem connecting socket to 127.0.0.1 [ 397.410735][T11797] 9pnet_fd: p9_fd_create_tcp (11797): problem connecting socket to 127.0.0.1 [ 398.153606][T11807] /dev/rnullb0: Can't open blockdev [ 398.250861][T11809] FAULT_INJECTION: forcing a failure. [ 398.250861][T11809] name failslab, interval 1, probability 0, space 0, times 0 [ 398.277567][T11809] CPU: 1 UID: 0 PID: 11809 Comm: syz.1.1815 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 398.277592][T11809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.277603][T11809] Call Trace: [ 398.277610][T11809] [ 398.277617][T11809] dump_stack_lvl+0x189/0x250 [ 398.277646][T11809] ? __pfx____ratelimit+0x10/0x10 [ 398.277672][T11809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.277697][T11809] ? __pfx__printk+0x10/0x10 [ 398.277726][T11809] ? __pfx___might_resched+0x10/0x10 [ 398.277747][T11809] ? fs_reclaim_acquire+0x7d/0x100 [ 398.277774][T11809] should_fail_ex+0x414/0x560 [ 398.277802][T11809] should_failslab+0xa8/0x100 [ 398.277824][T11809] __kmalloc_cache_noprof+0x70/0x3d0 [ 398.277844][T11809] ? ovl_encode_real_fh+0xcf/0x360 [ 398.277870][T11809] ovl_encode_real_fh+0xcf/0x360 [ 398.277892][T11809] ? __asan_memcpy+0x40/0x70 [ 398.277918][T11809] ? __pfx_ovl_encode_real_fh+0x10/0x10 [ 398.277938][T11809] ? ovl_encode_real_fh+0x26c/0x360 [ 398.277981][T11809] ? apparmor_capable+0x137/0x1b0 [ 398.278005][T11809] ? __pfx_ovl_encode_real_fh+0x10/0x10 [ 398.278027][T11809] ? security_capable+0x7e/0x2e0 [ 398.278057][T11809] ovl_get_index_name+0x4d/0x1c0 [ 398.278088][T11809] ovl_copy_up_flags+0xc06/0x2ff0 [ 398.278126][T11809] ? is_bpf_text_address+0x26/0x2b0 [ 398.278156][T11809] ? unwind_get_return_address+0x4d/0x90 [ 398.278191][T11809] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 398.278214][T11809] ? stack_trace_save+0x9c/0xe0 [ 398.278242][T11809] ? stack_depot_save_flags+0x40/0x900 [ 398.278274][T11809] ? kasan_save_track+0x4f/0x80 [ 398.278289][T11809] ? kasan_save_track+0x3e/0x80 [ 398.278303][T11809] ? kasan_save_free_info+0x46/0x50 [ 398.278326][T11809] ? __kasan_slab_free+0x62/0x70 [ 398.278341][T11809] ? kfree+0x18e/0x440 [ 398.278356][T11809] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 398.278378][T11809] ? security_file_open+0xb1/0x270 [ 398.278397][T11809] ? do_dentry_open+0x384/0x13f0 [ 398.278412][T11809] ? vfs_open+0x3b/0x340 [ 398.278426][T11809] ? path_openat+0x2ee5/0x3830 [ 398.278445][T11809] ? do_filp_open+0x1fa/0x410 [ 398.278463][T11809] ? do_sys_openat2+0x121/0x1c0 [ 398.278478][T11809] ? __x64_sys_open+0x11e/0x150 [ 398.278494][T11809] ? do_syscall_64+0xfa/0x3b0 [ 398.278519][T11809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.278620][T11809] ? ovl_already_copied_up+0x181/0x310 [ 398.278651][T11809] ovl_open+0x138/0x2f0 [ 398.278676][T11809] ? __pfx_apparmor_file_open+0x10/0x10 [ 398.278698][T11809] ? __pfx_ovl_open+0x10/0x10 [ 398.278724][T11809] ? tomoyo_file_open+0x165/0x220 [ 398.278742][T11809] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 398.278774][T11809] ? __pfx_ovl_open+0x10/0x10 [ 398.278797][T11809] do_dentry_open+0x950/0x13f0 [ 398.278828][T11809] vfs_open+0x3b/0x340 [ 398.278843][T11809] ? path_openat+0x2ecd/0x3830 [ 398.278865][T11809] path_openat+0x2ee5/0x3830 [ 398.278884][T11809] ? arch_stack_walk+0xfc/0x150 [ 398.278941][T11809] ? __pfx_path_openat+0x10/0x10 [ 398.278964][T11809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.279000][T11809] do_filp_open+0x1fa/0x410 [ 398.279019][T11809] ? __lock_acquire+0xab9/0xd20 [ 398.279040][T11809] ? __pfx_do_filp_open+0x10/0x10 [ 398.279082][T11809] ? _raw_spin_unlock+0x28/0x50 [ 398.279103][T11809] ? alloc_fd+0x64c/0x6c0 [ 398.279139][T11809] do_sys_openat2+0x121/0x1c0 [ 398.279160][T11809] ? __pfx_do_sys_openat2+0x10/0x10 [ 398.279179][T11809] ? ksys_write+0x22a/0x250 [ 398.279200][T11809] ? __pfx_ksys_write+0x10/0x10 [ 398.279215][T11809] ? rcu_is_watching+0x15/0xb0 [ 398.279238][T11809] __x64_sys_open+0x11e/0x150 [ 398.279260][T11809] do_syscall_64+0xfa/0x3b0 [ 398.279285][T11809] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.279308][T11809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.279325][T11809] ? clear_bhb_loop+0x60/0xb0 [ 398.279346][T11809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.279363][T11809] RIP: 0033:0x7ff44cb8e9a9 [ 398.279378][T11809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.279393][T11809] RSP: 002b:00007ff44d987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 398.279410][T11809] RAX: ffffffffffffffda RBX: 00007ff44cdb5fa0 RCX: 00007ff44cb8e9a9 [ 398.279422][T11809] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 398.279433][T11809] RBP: 00007ff44d987090 R08: 0000000000000000 R09: 0000000000000000 [ 398.279443][T11809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.279453][T11809] R13: 0000000000000000 R14: 00007ff44cdb5fa0 R15: 00007ffcb3c2d4f8 [ 398.279479][T11809] [ 398.840850][ T5914] usb 4-1: USB disconnect, device number 98 [ 398.871655][T11813] /dev/rnullb0: Can't open blockdev [ 398.890568][T11815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.903376][T11815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.911232][T11815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.919341][T11815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.926963][T11815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.938628][T11817] fuse: Bad value for 'fd' [ 399.335082][T11827] /dev/rnullb0: Can't open blockdev [ 399.450584][T11810] chnl_net:caif_netlink_parms(): no params data found [ 399.462980][T11832] sock: sock_timestamping_bind_phc: sock not bind to device [ 399.643451][T11810] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.650749][T11810] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.657989][T11810] bridge_slave_0: entered allmulticast mode [ 399.665745][T11810] bridge_slave_0: entered promiscuous mode [ 399.675759][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.682998][T11810] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.692688][T11810] bridge_slave_1: entered allmulticast mode [ 399.700487][T11810] bridge_slave_1: entered promiscuous mode [ 399.740999][T11839] ieee802154 phy0 wpan0: encryption failed: -22 [ 399.747746][T11838] ieee802154 phy0 wpan0: encryption failed: -22 [ 399.758260][T11810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.770826][T11810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.818994][T11810] team0: Port device team_slave_0 added [ 399.829384][T11810] team0: Port device team_slave_1 added [ 399.884437][T11810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.891463][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.923711][T11810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.937202][T11810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.944962][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.977500][T11810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.015177][T11843] FAULT_INJECTION: forcing a failure. [ 400.015177][T11843] name failslab, interval 1, probability 0, space 0, times 0 [ 400.043901][T11843] CPU: 1 UID: 0 PID: 11843 Comm: syz.3.1823 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 400.043927][T11843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.043957][T11843] Call Trace: [ 400.043965][T11843] [ 400.043973][T11843] dump_stack_lvl+0x189/0x250 [ 400.044009][T11843] ? __pfx____ratelimit+0x10/0x10 [ 400.044040][T11843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.044069][T11843] ? __pfx__printk+0x10/0x10 [ 400.044105][T11843] ? __pfx___might_resched+0x10/0x10 [ 400.044136][T11843] should_fail_ex+0x414/0x560 [ 400.044168][T11843] should_failslab+0xa8/0x100 [ 400.044196][T11843] kmem_cache_alloc_noprof+0x73/0x3c0 [ 400.044218][T11843] ? alloc_empty_file_noaccount+0x23/0xc0 [ 400.044245][T11843] alloc_empty_file_noaccount+0x23/0xc0 [ 400.044267][T11843] kernel_tmpfile_open+0x2a/0x90 [ 400.044295][T11843] ovl_copy_up_flags+0x13d0/0x2ff0 [ 400.044355][T11843] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 400.044383][T11843] ? stack_trace_save+0x9c/0xe0 [ 400.044417][T11843] ? stack_depot_save_flags+0x40/0x900 [ 400.044455][T11843] ? kasan_save_track+0x4f/0x80 [ 400.044473][T11843] ? kasan_save_track+0x3e/0x80 [ 400.044491][T11843] ? kasan_save_free_info+0x46/0x50 [ 400.044517][T11843] ? __kasan_slab_free+0x62/0x70 [ 400.044536][T11843] ? kfree+0x18e/0x440 [ 400.044553][T11843] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 400.044579][T11843] ? security_file_open+0xb1/0x270 [ 400.044611][T11843] ? do_dentry_open+0x384/0x13f0 [ 400.044628][T11843] ? vfs_open+0x3b/0x340 [ 400.044645][T11843] ? path_openat+0x2ee5/0x3830 [ 400.044667][T11843] ? do_filp_open+0x1fa/0x410 [ 400.044688][T11843] ? do_sys_openat2+0x121/0x1c0 [ 400.044706][T11843] ? __x64_sys_open+0x11e/0x150 [ 400.044821][T11843] ? ovl_already_copied_up+0x181/0x310 [ 400.044858][T11843] ovl_open+0x138/0x2f0 [ 400.044889][T11843] ? __pfx_apparmor_file_open+0x10/0x10 [ 400.044914][T11843] ? __pfx_ovl_open+0x10/0x10 [ 400.044945][T11843] ? tomoyo_file_open+0x165/0x220 [ 400.044966][T11843] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 400.045003][T11843] ? __pfx_ovl_open+0x10/0x10 [ 400.045031][T11843] do_dentry_open+0x950/0x13f0 [ 400.045080][T11843] vfs_open+0x3b/0x340 [ 400.045097][T11843] ? path_openat+0x2ecd/0x3830 [ 400.045134][T11843] path_openat+0x2ee5/0x3830 [ 400.045153][T11843] ? arch_stack_walk+0xfc/0x150 [ 400.045210][T11843] ? __pfx_path_openat+0x10/0x10 [ 400.045228][T11843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.045266][T11843] do_filp_open+0x1fa/0x410 [ 400.045285][T11843] ? __lock_acquire+0xab9/0xd20 [ 400.045307][T11843] ? __pfx_do_filp_open+0x10/0x10 [ 400.045348][T11843] ? _raw_spin_unlock+0x28/0x50 [ 400.045370][T11843] ? alloc_fd+0x64c/0x6c0 [ 400.045406][T11843] do_sys_openat2+0x121/0x1c0 [ 400.045427][T11843] ? __pfx_do_sys_openat2+0x10/0x10 [ 400.045447][T11843] ? ksys_write+0x22a/0x250 [ 400.045471][T11843] ? __pfx_ksys_write+0x10/0x10 [ 400.045492][T11843] ? rcu_is_watching+0x15/0xb0 [ 400.045518][T11843] __x64_sys_open+0x11e/0x150 [ 400.045541][T11843] do_syscall_64+0xfa/0x3b0 [ 400.045565][T11843] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.045589][T11843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.045642][T11843] ? clear_bhb_loop+0x60/0xb0 [ 400.045664][T11843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.045680][T11843] RIP: 0033:0x7f0a28f8e9a9 [ 400.045696][T11843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.045711][T11843] RSP: 002b:00007f0a29ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 400.045729][T11843] RAX: ffffffffffffffda RBX: 00007f0a291b5fa0 RCX: 00007f0a28f8e9a9 [ 400.045742][T11843] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 400.045753][T11843] RBP: 00007f0a29ec8090 R08: 0000000000000000 R09: 0000000000000000 [ 400.045763][T11843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.045774][T11843] R13: 0000000000000000 R14: 00007f0a291b5fa0 R15: 00007fff74c2fb18 [ 400.045801][T11843] [ 400.621008][T11810] hsr_slave_0: entered promiscuous mode [ 400.629146][T11810] hsr_slave_1: entered promiscuous mode [ 400.635503][T11810] debugfs: 'hsr0' already exists in 'hsr' [ 400.641581][T11810] Cannot create hsr debugfs directory [ 400.838048][T11853] fuse: Bad value for 'fd' [ 401.027713][ T5862] Bluetooth: hci5: command tx timeout [ 401.200984][T11810] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 401.209501][T11860] /dev/rnullb0: Can't open blockdev [ 401.261013][T11810] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 401.279866][T11810] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 401.291430][T11865] /dev/rnullb0: Can't open blockdev [ 401.301509][T11810] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 401.390284][T11869] FAULT_INJECTION: forcing a failure. [ 401.390284][T11869] name failslab, interval 1, probability 0, space 0, times 0 [ 401.417680][T11877] overlayfs: failed to resolve './file1': -2 [ 401.439791][T11869] CPU: 0 UID: 0 PID: 11869 Comm: syz.1.1832 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 401.439814][T11869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.439825][T11869] Call Trace: [ 401.439832][T11869] [ 401.439840][T11869] dump_stack_lvl+0x189/0x250 [ 401.439868][T11869] ? __pfx____ratelimit+0x10/0x10 [ 401.439893][T11869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.439917][T11869] ? __pfx__printk+0x10/0x10 [ 401.439948][T11869] ? __pfx___might_resched+0x10/0x10 [ 401.439975][T11869] should_fail_ex+0x414/0x560 [ 401.440002][T11869] should_failslab+0xa8/0x100 [ 401.440024][T11869] kmem_cache_alloc_noprof+0x73/0x3c0 [ 401.440043][T11869] ? alloc_empty_file_noaccount+0x23/0xc0 [ 401.440083][T11869] alloc_empty_file_noaccount+0x23/0xc0 [ 401.440111][T11869] kernel_tmpfile_open+0x2a/0x90 [ 401.440136][T11869] ovl_copy_up_flags+0x13d0/0x2ff0 [ 401.440190][T11869] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 401.440215][T11869] ? stack_trace_save+0x9c/0xe0 [ 401.440245][T11869] ? stack_depot_save_flags+0x40/0x900 [ 401.440279][T11869] ? kasan_save_track+0x4f/0x80 [ 401.440295][T11869] ? kasan_save_track+0x3e/0x80 [ 401.440310][T11869] ? kasan_save_free_info+0x46/0x50 [ 401.440334][T11869] ? __kasan_slab_free+0x62/0x70 [ 401.440352][T11869] ? kfree+0x18e/0x440 [ 401.440367][T11869] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 401.440391][T11869] ? security_file_open+0xb1/0x270 [ 401.440412][T11869] ? do_dentry_open+0x384/0x13f0 [ 401.440429][T11869] ? vfs_open+0x3b/0x340 [ 401.440444][T11869] ? path_openat+0x2ee5/0x3830 [ 401.440464][T11869] ? do_filp_open+0x1fa/0x410 [ 401.440488][T11869] ? do_sys_openat2+0x121/0x1c0 [ 401.440506][T11869] ? __x64_sys_open+0x11e/0x150 [ 401.440607][T11869] ? ovl_already_copied_up+0x181/0x310 [ 401.440639][T11869] ovl_open+0x138/0x2f0 [ 401.440667][T11869] ? __pfx_apparmor_file_open+0x10/0x10 [ 401.440690][T11869] ? __pfx_ovl_open+0x10/0x10 [ 401.440718][T11869] ? tomoyo_file_open+0x165/0x220 [ 401.440736][T11869] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 401.440771][T11869] ? __pfx_ovl_open+0x10/0x10 [ 401.440796][T11869] do_dentry_open+0x950/0x13f0 [ 401.440835][T11869] vfs_open+0x3b/0x340 [ 401.440851][T11869] ? path_openat+0x2ecd/0x3830 [ 401.440876][T11869] path_openat+0x2ee5/0x3830 [ 401.440896][T11869] ? arch_stack_walk+0xfc/0x150 [ 401.440956][T11869] ? __pfx_path_openat+0x10/0x10 [ 401.440976][T11869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.441015][T11869] do_filp_open+0x1fa/0x410 [ 401.441035][T11869] ? __lock_acquire+0xab9/0xd20 [ 401.441059][T11869] ? __pfx_do_filp_open+0x10/0x10 [ 401.441104][T11869] ? _raw_spin_unlock+0x28/0x50 [ 401.441127][T11869] ? alloc_fd+0x64c/0x6c0 [ 401.441166][T11869] do_sys_openat2+0x121/0x1c0 [ 401.441187][T11869] ? __pfx_do_sys_openat2+0x10/0x10 [ 401.441208][T11869] ? ksys_write+0x22a/0x250 [ 401.441234][T11869] ? __pfx_ksys_write+0x10/0x10 [ 401.441255][T11869] ? rcu_is_watching+0x15/0xb0 [ 401.441284][T11869] __x64_sys_open+0x11e/0x150 [ 401.441308][T11869] do_syscall_64+0xfa/0x3b0 [ 401.441335][T11869] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.441360][T11869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.441378][T11869] ? clear_bhb_loop+0x60/0xb0 [ 401.441401][T11869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.441419][T11869] RIP: 0033:0x7ff44cb8e9a9 [ 401.441435][T11869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.441450][T11869] RSP: 002b:00007ff44d987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 401.441470][T11869] RAX: ffffffffffffffda RBX: 00007ff44cdb5fa0 RCX: 00007ff44cb8e9a9 [ 401.441489][T11869] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 401.441501][T11869] RBP: 00007ff44d987090 R08: 0000000000000000 R09: 0000000000000000 [ 401.441513][T11869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.441524][T11869] R13: 0000000000000000 R14: 00007ff44cdb5fa0 R15: 00007ffcb3c2d4f8 [ 401.441553][T11869] [ 402.153893][T11810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.257289][T11810] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.410755][T11883] overlayfs: failed to resolve './file1': -2 [ 402.446381][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.453569][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.489749][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.497003][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.768734][T11888] /dev/rnullb0: Can't open blockdev [ 403.107675][ T5862] Bluetooth: hci5: command tx timeout [ 403.140961][T11810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.395703][T11900] /dev/rnullb0: Can't open blockdev [ 403.673998][T11913] FAULT_INJECTION: forcing a failure. [ 403.673998][T11913] name failslab, interval 1, probability 0, space 0, times 0 [ 403.695471][T11910] /dev/rnullb0: Can't open blockdev [ 403.708021][T11913] CPU: 0 UID: 0 PID: 11913 Comm: syz.1.1842 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 403.708044][T11913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.708055][T11913] Call Trace: [ 403.708062][T11913] [ 403.708069][T11913] dump_stack_lvl+0x189/0x250 [ 403.708097][T11913] ? __pfx____ratelimit+0x10/0x10 [ 403.708123][T11913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.708147][T11913] ? __pfx__printk+0x10/0x10 [ 403.708177][T11913] ? __pfx___might_resched+0x10/0x10 [ 403.708198][T11913] ? fs_reclaim_acquire+0x7d/0x100 [ 403.708225][T11913] should_fail_ex+0x414/0x560 [ 403.708252][T11913] should_failslab+0xa8/0x100 [ 403.708275][T11913] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 403.708294][T11913] ? __d_alloc+0x36/0x7a0 [ 403.708316][T11913] __d_alloc+0x36/0x7a0 [ 403.708339][T11913] d_alloc+0x4b/0x190 [ 403.708360][T11913] vfs_tmpfile+0x191/0x860 [ 403.708391][T11913] kernel_tmpfile_open+0x4d/0x90 [ 403.708415][T11913] ovl_copy_up_flags+0x13d0/0x2ff0 [ 403.708468][T11913] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 403.708492][T11913] ? stack_trace_save+0x9c/0xe0 [ 403.708520][T11913] ? stack_depot_save_flags+0x40/0x900 [ 403.708552][T11913] ? kasan_save_track+0x4f/0x80 [ 403.708568][T11913] ? kasan_save_track+0x3e/0x80 [ 403.708583][T11913] ? kasan_save_free_info+0x46/0x50 [ 403.708606][T11913] ? __kasan_slab_free+0x62/0x70 [ 403.708623][T11913] ? kfree+0x18e/0x440 [ 403.708645][T11913] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 403.708667][T11913] ? security_file_open+0xb1/0x270 [ 403.708687][T11913] ? do_dentry_open+0x384/0x13f0 [ 403.708703][T11913] ? vfs_open+0x3b/0x340 [ 403.708717][T11913] ? path_openat+0x2ee5/0x3830 [ 403.708737][T11913] ? do_filp_open+0x1fa/0x410 [ 403.708755][T11913] ? do_sys_openat2+0x121/0x1c0 [ 403.708772][T11913] ? __x64_sys_open+0x11e/0x150 [ 403.708868][T11913] ? ovl_already_copied_up+0x181/0x310 [ 403.708898][T11913] ovl_open+0x138/0x2f0 [ 403.708923][T11913] ? __pfx_apparmor_file_open+0x10/0x10 [ 403.708946][T11913] ? __pfx_ovl_open+0x10/0x10 [ 403.708973][T11913] ? tomoyo_file_open+0x165/0x220 [ 403.708991][T11913] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 403.709024][T11913] ? __pfx_ovl_open+0x10/0x10 [ 403.709049][T11913] do_dentry_open+0x950/0x13f0 [ 403.709081][T11913] vfs_open+0x3b/0x340 [ 403.709096][T11913] ? path_openat+0x2ecd/0x3830 [ 403.709120][T11913] path_openat+0x2ee5/0x3830 [ 403.709140][T11913] ? arch_stack_walk+0xfc/0x150 [ 403.709216][T11913] ? __pfx_path_openat+0x10/0x10 [ 403.709238][T11913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.709278][T11913] do_filp_open+0x1fa/0x410 [ 403.709298][T11913] ? __lock_acquire+0xab9/0xd20 [ 403.709323][T11913] ? __pfx_do_filp_open+0x10/0x10 [ 403.709368][T11913] ? _raw_spin_unlock+0x28/0x50 [ 403.709392][T11913] ? alloc_fd+0x64c/0x6c0 [ 403.709431][T11913] do_sys_openat2+0x121/0x1c0 [ 403.709454][T11913] ? __pfx_do_sys_openat2+0x10/0x10 [ 403.709475][T11913] ? ksys_write+0x22a/0x250 [ 403.709501][T11913] ? __pfx_ksys_write+0x10/0x10 [ 403.709523][T11913] ? rcu_is_watching+0x15/0xb0 [ 403.709552][T11913] __x64_sys_open+0x11e/0x150 [ 403.709577][T11913] do_syscall_64+0xfa/0x3b0 [ 403.709604][T11913] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.709631][T11913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.709657][T11913] ? clear_bhb_loop+0x60/0xb0 [ 403.709681][T11913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.709700][T11913] RIP: 0033:0x7ff44cb8e9a9 [ 403.709716][T11913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.709732][T11913] RSP: 002b:00007ff44d987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 403.709753][T11913] RAX: ffffffffffffffda RBX: 00007ff44cdb5fa0 RCX: 00007ff44cb8e9a9 [ 403.709768][T11913] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 403.709781][T11913] RBP: 00007ff44d987090 R08: 0000000000000000 R09: 0000000000000000 [ 403.709793][T11913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.709805][T11913] R13: 0000000000000000 R14: 00007ff44cdb5fa0 R15: 00007ffcb3c2d4f8 [ 403.709835][T11913] [ 404.139998][T11810] veth0_vlan: entered promiscuous mode [ 404.153119][T11810] veth1_vlan: entered promiscuous mode [ 404.181693][T11810] veth0_macvtap: entered promiscuous mode [ 404.191218][T11810] veth1_macvtap: entered promiscuous mode [ 404.199395][T11910] /dev/rnullb0: Can't open blockdev [ 404.205342][T11910] /dev/rnullb0: Can't open blockdev [ 404.212589][T11810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.224372][T11810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.237042][ T3078] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.258229][T11910] /dev/rnullb0: Can't open blockdev [ 404.264117][T11910] /dev/rnullb0: Can't open blockdev [ 404.270307][T11910] /dev/rnullb0: Can't open blockdev [ 404.276192][T11910] /dev/rnullb0: Can't open blockdev [ 404.286600][T11910] /dev/rnullb0: Can't open blockdev [ 404.292475][T11910] /dev/rnullb0: Can't open blockdev [ 404.307948][T11910] /dev/rnullb0: Can't open blockdev [ 404.313948][T11910] /dev/rnullb0: Can't open blockdev [ 404.320545][T11910] /dev/rnullb0: Can't open blockdev [ 404.332755][ T3078] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.341743][T11910] /dev/rnullb0: Can't open blockdev [ 404.352181][T11910] /dev/rnullb0: Can't open blockdev [ 404.352473][ T3078] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.392075][T11910] /dev/rnullb0: Can't open blockdev [ 404.399354][ T3078] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.439217][T11910] /dev/rnullb0: Can't open blockdev [ 404.445128][T11910] /dev/rnullb0: Can't open blockdev [ 404.451207][T11910] /dev/rnullb0: Can't open blockdev [ 404.457028][T11910] /dev/rnullb0: Can't open blockdev [ 404.463626][T11910] /dev/rnullb0: Can't open blockdev [ 404.474977][T11910] /dev/rnullb0: Can't open blockdev [ 404.597970][ T3078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.605920][ T3078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.643893][T11923] x_tables: duplicate underflow at hook 2 [ 404.666112][T11922] overlayfs: failed to resolve './file0': -2 [ 404.699577][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.708334][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.863858][T11928] /dev/rnullb0: Can't open blockdev [ 405.125618][T11943] FAULT_INJECTION: forcing a failure. [ 405.125618][T11943] name failslab, interval 1, probability 0, space 0, times 0 [ 405.139028][T11943] CPU: 0 UID: 0 PID: 11943 Comm: syz.5.1850 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 405.139051][T11943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.139063][T11943] Call Trace: [ 405.139070][T11943] [ 405.139078][T11943] dump_stack_lvl+0x189/0x250 [ 405.139109][T11943] ? __pfx____ratelimit+0x10/0x10 [ 405.139135][T11943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.139160][T11943] ? __pfx__printk+0x10/0x10 [ 405.139191][T11943] ? __pfx___might_resched+0x10/0x10 [ 405.139213][T11943] ? fs_reclaim_acquire+0x7d/0x100 [ 405.139240][T11943] should_fail_ex+0x414/0x560 [ 405.139275][T11943] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 405.139297][T11943] should_failslab+0xa8/0x100 [ 405.139320][T11943] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 405.139339][T11943] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 405.139360][T11943] ? shmem_alloc_inode+0x28/0x40 [ 405.139384][T11943] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 405.139406][T11943] shmem_alloc_inode+0x28/0x40 [ 405.139427][T11943] alloc_inode+0x6a/0x1b0 [ 405.139455][T11943] new_inode+0x22/0x170 [ 405.139485][T11943] shmem_get_inode+0x346/0xe90 [ 405.139517][T11943] shmem_tmpfile+0x58/0x150 [ 405.139543][T11943] vfs_tmpfile+0x3a0/0x860 [ 405.139576][T11943] kernel_tmpfile_open+0x4d/0x90 [ 405.139599][T11943] ovl_copy_up_flags+0x13d0/0x2ff0 [ 405.139651][T11943] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 405.139675][T11943] ? stack_trace_save+0x9c/0xe0 [ 405.139704][T11943] ? stack_depot_save_flags+0x40/0x900 [ 405.139737][T11943] ? kasan_save_track+0x4f/0x80 [ 405.139752][T11943] ? kasan_save_track+0x3e/0x80 [ 405.139768][T11943] ? kasan_save_free_info+0x46/0x50 [ 405.139791][T11943] ? __kasan_slab_free+0x62/0x70 [ 405.139808][T11943] ? kfree+0x18e/0x440 [ 405.139823][T11943] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 405.139846][T11943] ? security_file_open+0xb1/0x270 [ 405.139867][T11943] ? do_dentry_open+0x384/0x13f0 [ 405.139883][T11943] ? vfs_open+0x3b/0x340 [ 405.139897][T11943] ? path_openat+0x2ee5/0x3830 [ 405.139916][T11943] ? do_filp_open+0x1fa/0x410 [ 405.139935][T11943] ? do_sys_openat2+0x121/0x1c0 [ 405.139951][T11943] ? __x64_sys_open+0x11e/0x150 [ 405.140049][T11943] ? ovl_already_copied_up+0x181/0x310 [ 405.140079][T11943] ovl_open+0x138/0x2f0 [ 405.140104][T11943] ? __pfx_apparmor_file_open+0x10/0x10 [ 405.140126][T11943] ? __pfx_ovl_open+0x10/0x10 [ 405.140152][T11943] ? tomoyo_file_open+0x165/0x220 [ 405.140170][T11943] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 405.140202][T11943] ? __pfx_ovl_open+0x10/0x10 [ 405.140227][T11943] do_dentry_open+0x950/0x13f0 [ 405.140259][T11943] vfs_open+0x3b/0x340 [ 405.140279][T11943] ? path_openat+0x2ecd/0x3830 [ 405.140303][T11943] path_openat+0x2ee5/0x3830 [ 405.140322][T11943] ? arch_stack_walk+0xfc/0x150 [ 405.140379][T11943] ? __pfx_path_openat+0x10/0x10 [ 405.140399][T11943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.140436][T11943] do_filp_open+0x1fa/0x410 [ 405.140455][T11943] ? __lock_acquire+0xab9/0xd20 [ 405.140477][T11943] ? __pfx_do_filp_open+0x10/0x10 [ 405.140520][T11943] ? _raw_spin_unlock+0x28/0x50 [ 405.140542][T11943] ? alloc_fd+0x64c/0x6c0 [ 405.140579][T11943] do_sys_openat2+0x121/0x1c0 [ 405.140600][T11943] ? __pfx_do_sys_openat2+0x10/0x10 [ 405.140621][T11943] ? ksys_write+0x22a/0x250 [ 405.140646][T11943] ? __pfx_ksys_write+0x10/0x10 [ 405.140666][T11943] ? rcu_is_watching+0x15/0xb0 [ 405.140692][T11943] __x64_sys_open+0x11e/0x150 [ 405.140711][T11943] do_syscall_64+0xfa/0x3b0 [ 405.140733][T11943] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.140772][T11943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.140786][T11943] ? clear_bhb_loop+0x60/0xb0 [ 405.140808][T11943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.140826][T11943] RIP: 0033:0x7f2d30b8e9a9 [ 405.140843][T11943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.140859][T11943] RSP: 002b:00007f2d3191c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 405.140880][T11943] RAX: ffffffffffffffda RBX: 00007f2d30db5fa0 RCX: 00007f2d30b8e9a9 [ 405.140894][T11943] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 405.140907][T11943] RBP: 00007f2d3191c090 R08: 0000000000000000 R09: 0000000000000000 [ 405.140919][T11943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.140931][T11943] R13: 0000000000000000 R14: 00007f2d30db5fa0 R15: 00007ffed6881468 [ 405.140961][T11943] [ 405.232296][T11947] /dev/rnullb0: Can't open blockdev [ 405.238253][ T5862] Bluetooth: hci5: command tx timeout [ 406.116489][T11965] /dev/rnullb0: Can't open blockdev [ 406.322212][ T30] audit: type=1804 audit(1753086763.593:57): pid=11967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1855" name="/newroot/4/bus/bus" dev="overlay" ino=57 res=1 errno=0 [ 406.525145][T11974] /dev/rnullb0: Can't open blockdev [ 406.718834][T11977] FAULT_INJECTION: forcing a failure. [ 406.718834][T11977] name failslab, interval 1, probability 0, space 0, times 0 [ 406.747587][T11977] CPU: 0 UID: 0 PID: 11977 Comm: syz.5.1859 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 406.747614][T11977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 406.747626][T11977] Call Trace: [ 406.747633][T11977] [ 406.747642][T11977] dump_stack_lvl+0x189/0x250 [ 406.747675][T11977] ? __pfx____ratelimit+0x10/0x10 [ 406.747702][T11977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.747728][T11977] ? __pfx__printk+0x10/0x10 [ 406.747759][T11977] ? __pfx___might_resched+0x10/0x10 [ 406.747781][T11977] ? fs_reclaim_acquire+0x7d/0x100 [ 406.747809][T11977] should_fail_ex+0x414/0x560 [ 406.747835][T11977] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 406.747858][T11977] should_failslab+0xa8/0x100 [ 406.747881][T11977] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 406.747904][T11977] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 406.747925][T11977] ? shmem_alloc_inode+0x28/0x40 [ 406.747952][T11977] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 406.747974][T11977] shmem_alloc_inode+0x28/0x40 [ 406.747996][T11977] alloc_inode+0x6a/0x1b0 [ 406.748025][T11977] new_inode+0x22/0x170 [ 406.748058][T11977] shmem_get_inode+0x346/0xe90 [ 406.748093][T11977] shmem_tmpfile+0x58/0x150 [ 406.748119][T11977] vfs_tmpfile+0x3a0/0x860 [ 406.748153][T11977] kernel_tmpfile_open+0x4d/0x90 [ 406.748178][T11977] ovl_copy_up_flags+0x13d0/0x2ff0 [ 406.748251][T11977] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 406.748278][T11977] ? stack_trace_save+0x9c/0xe0 [ 406.748311][T11977] ? stack_depot_save_flags+0x40/0x900 [ 406.748355][T11977] ? kasan_save_track+0x4f/0x80 [ 406.748383][T11977] ? kasan_save_track+0x3e/0x80 [ 406.748398][T11977] ? kasan_save_free_info+0x46/0x50 [ 406.748421][T11977] ? __kasan_slab_free+0x62/0x70 [ 406.748436][T11977] ? kfree+0x18e/0x440 [ 406.748451][T11977] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 406.748474][T11977] ? security_file_open+0xb1/0x270 [ 406.748494][T11977] ? do_dentry_open+0x384/0x13f0 [ 406.748510][T11977] ? vfs_open+0x3b/0x340 [ 406.748525][T11977] ? path_openat+0x2ee5/0x3830 [ 406.748543][T11977] ? do_filp_open+0x1fa/0x410 [ 406.748561][T11977] ? do_sys_openat2+0x121/0x1c0 [ 406.748576][T11977] ? __x64_sys_open+0x11e/0x150 [ 406.748655][T11977] ? ovl_already_copied_up+0x181/0x310 [ 406.748684][T11977] ovl_open+0x138/0x2f0 [ 406.748708][T11977] ? __pfx_apparmor_file_open+0x10/0x10 [ 406.748731][T11977] ? __pfx_ovl_open+0x10/0x10 [ 406.748757][T11977] ? tomoyo_file_open+0x165/0x220 [ 406.748775][T11977] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 406.748809][T11977] ? __pfx_ovl_open+0x10/0x10 [ 406.748834][T11977] do_dentry_open+0x950/0x13f0 [ 406.748868][T11977] vfs_open+0x3b/0x340 [ 406.748884][T11977] ? path_openat+0x2ecd/0x3830 [ 406.748926][T11977] path_openat+0x2ee5/0x3830 [ 406.748947][T11977] ? arch_stack_walk+0xfc/0x150 [ 406.749013][T11977] ? __pfx_path_openat+0x10/0x10 [ 406.749034][T11977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.749077][T11977] do_filp_open+0x1fa/0x410 [ 406.749098][T11977] ? __lock_acquire+0xab9/0xd20 [ 406.749136][T11977] ? __pfx_do_filp_open+0x10/0x10 [ 406.749182][T11977] ? _raw_spin_unlock+0x28/0x50 [ 406.749206][T11977] ? alloc_fd+0x64c/0x6c0 [ 406.749246][T11977] do_sys_openat2+0x121/0x1c0 [ 406.749270][T11977] ? __pfx_do_sys_openat2+0x10/0x10 [ 406.749292][T11977] ? ksys_write+0x22a/0x250 [ 406.749318][T11977] ? __pfx_ksys_write+0x10/0x10 [ 406.749339][T11977] ? rcu_is_watching+0x15/0xb0 [ 406.749374][T11977] __x64_sys_open+0x11e/0x150 [ 406.749398][T11977] do_syscall_64+0xfa/0x3b0 [ 406.749426][T11977] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.749452][T11977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.749470][T11977] ? clear_bhb_loop+0x60/0xb0 [ 406.749494][T11977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.749512][T11977] RIP: 0033:0x7f2d30b8e9a9 [ 406.749529][T11977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.749546][T11977] RSP: 002b:00007f2d3191c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 406.749567][T11977] RAX: ffffffffffffffda RBX: 00007f2d30db5fa0 RCX: 00007f2d30b8e9a9 [ 406.749581][T11977] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 406.749594][T11977] RBP: 00007f2d3191c090 R08: 0000000000000000 R09: 0000000000000000 [ 406.749606][T11977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.749617][T11977] R13: 0000000000000000 R14: 00007f2d30db5fa0 R15: 00007ffed6881468 [ 406.749647][T11977] [ 407.668758][ T5862] Bluetooth: hci5: command tx timeout [ 408.525348][T12003] syzkaller1: entered promiscuous mode [ 408.534245][T12003] syzkaller1: entered allmulticast mode [ 408.677578][ T5915] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 408.838917][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 408.863234][ T5915] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 408.866457][T12001] overlayfs: failed to resolve './file0': -2 [ 408.901547][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.911763][ T5915] usb 6-1: Product: syz [ 408.916030][ T5915] usb 6-1: Manufacturer: syz [ 408.921430][ T5915] usb 6-1: SerialNumber: syz [ 408.940327][ T5915] empeg 6-1:1.0: empeg converter detected [ 408.971035][T12008] FAULT_INJECTION: forcing a failure. [ 408.971035][T12008] name failslab, interval 1, probability 0, space 0, times 0 [ 409.017608][T12008] CPU: 0 UID: 0 PID: 12008 Comm: syz.3.1868 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 409.017633][T12008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.017647][T12008] Call Trace: [ 409.017655][T12008] [ 409.017663][T12008] dump_stack_lvl+0x189/0x250 [ 409.017695][T12008] ? __pfx____ratelimit+0x10/0x10 [ 409.017721][T12008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.017746][T12008] ? __pfx__printk+0x10/0x10 [ 409.017777][T12008] ? __pfx___might_resched+0x10/0x10 [ 409.017798][T12008] ? fs_reclaim_acquire+0x7d/0x100 [ 409.017826][T12008] should_fail_ex+0x414/0x560 [ 409.017853][T12008] should_failslab+0xa8/0x100 [ 409.017876][T12008] __kmalloc_noprof+0xcb/0x4f0 [ 409.017896][T12008] ? security_inode_init_security+0x107/0x3f0 [ 409.017919][T12008] security_inode_init_security+0x107/0x3f0 [ 409.017938][T12008] ? __pfx_shmem_initxattrs+0x10/0x10 [ 409.017965][T12008] ? __pfx_security_inode_init_security+0x10/0x10 [ 409.017983][T12008] ? shmem_get_inode+0xbc5/0xe90 [ 409.018015][T12008] shmem_tmpfile+0x90/0x150 [ 409.018040][T12008] vfs_tmpfile+0x3a0/0x860 [ 409.018073][T12008] kernel_tmpfile_open+0x4d/0x90 [ 409.018097][T12008] ovl_copy_up_flags+0x13d0/0x2ff0 [ 409.018147][T12008] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 409.018171][T12008] ? stack_trace_save+0x9c/0xe0 [ 409.018205][T12008] ? stack_depot_save_flags+0x40/0x900 [ 409.018238][T12008] ? kasan_save_track+0x4f/0x80 [ 409.018253][T12008] ? kasan_save_track+0x3e/0x80 [ 409.018268][T12008] ? kasan_save_free_info+0x46/0x50 [ 409.018292][T12008] ? __kasan_slab_free+0x62/0x70 [ 409.018309][T12008] ? kfree+0x18e/0x440 [ 409.018324][T12008] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 409.018347][T12008] ? security_file_open+0xb1/0x270 [ 409.018368][T12008] ? do_dentry_open+0x384/0x13f0 [ 409.018383][T12008] ? vfs_open+0x3b/0x340 [ 409.018398][T12008] ? path_openat+0x2ee5/0x3830 [ 409.018417][T12008] ? do_filp_open+0x1fa/0x410 [ 409.018435][T12008] ? do_sys_openat2+0x121/0x1c0 [ 409.018452][T12008] ? __x64_sys_open+0x11e/0x150 [ 409.018550][T12008] ? ovl_already_copied_up+0x181/0x310 [ 409.018581][T12008] ovl_open+0x138/0x2f0 [ 409.018607][T12008] ? __pfx_apparmor_file_open+0x10/0x10 [ 409.018629][T12008] ? __pfx_ovl_open+0x10/0x10 [ 409.018656][T12008] ? tomoyo_file_open+0x165/0x220 [ 409.018674][T12008] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 409.018706][T12008] ? __pfx_ovl_open+0x10/0x10 [ 409.018731][T12008] do_dentry_open+0x950/0x13f0 [ 409.018763][T12008] vfs_open+0x3b/0x340 [ 409.018779][T12008] ? path_openat+0x2ecd/0x3830 [ 409.018802][T12008] path_openat+0x2ee5/0x3830 [ 409.018821][T12008] ? arch_stack_walk+0xfc/0x150 [ 409.018878][T12008] ? __pfx_path_openat+0x10/0x10 [ 409.018897][T12008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.018934][T12008] do_filp_open+0x1fa/0x410 [ 409.018954][T12008] ? __lock_acquire+0xab9/0xd20 [ 409.018977][T12008] ? __pfx_do_filp_open+0x10/0x10 [ 409.019019][T12008] ? _raw_spin_unlock+0x28/0x50 [ 409.019041][T12008] ? alloc_fd+0x64c/0x6c0 [ 409.019077][T12008] do_sys_openat2+0x121/0x1c0 [ 409.019099][T12008] ? __pfx_do_sys_openat2+0x10/0x10 [ 409.019119][T12008] ? ksys_write+0x22a/0x250 [ 409.019144][T12008] ? __pfx_ksys_write+0x10/0x10 [ 409.019166][T12008] ? rcu_is_watching+0x15/0xb0 [ 409.019193][T12008] __x64_sys_open+0x11e/0x150 [ 409.019222][T12008] do_syscall_64+0xfa/0x3b0 [ 409.019247][T12008] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.019271][T12008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.019288][T12008] ? clear_bhb_loop+0x60/0xb0 [ 409.019310][T12008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.019327][T12008] RIP: 0033:0x7f0a28f8e9a9 [ 409.019343][T12008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.019358][T12008] RSP: 002b:00007f0a29ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 409.019378][T12008] RAX: ffffffffffffffda RBX: 00007f0a291b5fa0 RCX: 00007f0a28f8e9a9 [ 409.019392][T12008] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 409.019404][T12008] RBP: 00007f0a29ec8090 R08: 0000000000000000 R09: 0000000000000000 [ 409.019415][T12008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.019426][T12008] R13: 0000000000000000 R14: 00007f0a291b5fa0 R15: 00007fff74c2fb18 [ 409.019454][T12008] [ 409.705434][ T5915] empeg 6-1:1.0: probe with driver empeg failed with error -71 [ 409.716216][ T5915] usb 6-1: USB disconnect, device number 2 [ 410.007624][ T5862] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 410.221953][T12043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1877'. [ 410.389872][T12052] FAULT_INJECTION: forcing a failure. [ 410.389872][T12052] name failslab, interval 1, probability 0, space 0, times 0 [ 410.404007][T12052] CPU: 0 UID: 0 PID: 12052 Comm: syz.5.1881 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 410.404036][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 410.404049][T12052] Call Trace: [ 410.404058][T12052] [ 410.404067][T12052] dump_stack_lvl+0x189/0x250 [ 410.404110][T12052] ? __pfx____ratelimit+0x10/0x10 [ 410.404142][T12052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.404172][T12052] ? __pfx__printk+0x10/0x10 [ 410.404207][T12052] ? __pfx___might_resched+0x10/0x10 [ 410.404233][T12052] ? fs_reclaim_acquire+0x7d/0x100 [ 410.404265][T12052] should_fail_ex+0x414/0x560 [ 410.404298][T12052] should_failslab+0xa8/0x100 [ 410.404325][T12052] kmem_cache_alloc_noprof+0x73/0x3c0 [ 410.404348][T12052] ? security_inode_alloc+0x39/0x330 [ 410.404373][T12052] security_inode_alloc+0x39/0x330 [ 410.404396][T12052] inode_init_always_gfp+0x9ed/0xdc0 [ 410.404434][T12052] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 410.404460][T12052] alloc_inode+0x82/0x1b0 [ 410.404492][T12052] new_inode+0x22/0x170 [ 410.404527][T12052] shmem_get_inode+0x346/0xe90 [ 410.404565][T12052] shmem_tmpfile+0x58/0x150 [ 410.404596][T12052] vfs_tmpfile+0x3a0/0x860 [ 410.404634][T12052] kernel_tmpfile_open+0x4d/0x90 [ 410.404661][T12052] ovl_copy_up_flags+0x13d0/0x2ff0 [ 410.404722][T12052] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 410.404750][T12052] ? stack_trace_save+0x9c/0xe0 [ 410.404784][T12052] ? stack_depot_save_flags+0x40/0x900 [ 410.404822][T12052] ? kasan_save_track+0x4f/0x80 [ 410.404841][T12052] ? kasan_save_track+0x3e/0x80 [ 410.404859][T12052] ? kasan_save_free_info+0x46/0x50 [ 410.404886][T12052] ? __kasan_slab_free+0x62/0x70 [ 410.404906][T12052] ? kfree+0x18e/0x440 [ 410.404924][T12052] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 410.404950][T12052] ? security_file_open+0xb1/0x270 [ 410.404975][T12052] ? do_dentry_open+0x384/0x13f0 [ 410.404995][T12052] ? vfs_open+0x3b/0x340 [ 410.405012][T12052] ? path_openat+0x2ee5/0x3830 [ 410.405034][T12052] ? do_filp_open+0x1fa/0x410 [ 410.405057][T12052] ? do_sys_openat2+0x121/0x1c0 [ 410.405076][T12052] ? __x64_sys_open+0x11e/0x150 [ 410.405220][T12052] ? ovl_already_copied_up+0x181/0x310 [ 410.405256][T12052] ovl_open+0x138/0x2f0 [ 410.405285][T12052] ? __pfx_apparmor_file_open+0x10/0x10 [ 410.405311][T12052] ? __pfx_ovl_open+0x10/0x10 [ 410.405343][T12052] ? tomoyo_file_open+0x165/0x220 [ 410.405363][T12052] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 410.405400][T12052] ? __pfx_ovl_open+0x10/0x10 [ 410.405428][T12052] do_dentry_open+0x950/0x13f0 [ 410.405465][T12052] vfs_open+0x3b/0x340 [ 410.405483][T12052] ? path_openat+0x2ecd/0x3830 [ 410.405509][T12052] path_openat+0x2ee5/0x3830 [ 410.405542][T12052] ? arch_stack_walk+0xfc/0x150 [ 410.405604][T12052] ? __pfx_path_openat+0x10/0x10 [ 410.405625][T12052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.405665][T12052] do_filp_open+0x1fa/0x410 [ 410.405686][T12052] ? __lock_acquire+0xab9/0xd20 [ 410.405710][T12052] ? __pfx_do_filp_open+0x10/0x10 [ 410.405755][T12052] ? _raw_spin_unlock+0x28/0x50 [ 410.405779][T12052] ? alloc_fd+0x64c/0x6c0 [ 410.405818][T12052] do_sys_openat2+0x121/0x1c0 [ 410.405841][T12052] ? __pfx_do_sys_openat2+0x10/0x10 [ 410.405863][T12052] ? ksys_write+0x22a/0x250 [ 410.405890][T12052] ? __pfx_ksys_write+0x10/0x10 [ 410.405912][T12052] ? rcu_is_watching+0x15/0xb0 [ 410.405941][T12052] __x64_sys_open+0x11e/0x150 [ 410.405967][T12052] do_syscall_64+0xfa/0x3b0 [ 410.405994][T12052] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.406021][T12052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.406039][T12052] ? clear_bhb_loop+0x60/0xb0 [ 410.406063][T12052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.406081][T12052] RIP: 0033:0x7f2d30b8e9a9 [ 410.406105][T12052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.406122][T12052] RSP: 002b:00007f2d3191c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 410.406142][T12052] RAX: ffffffffffffffda RBX: 00007f2d30db5fa0 RCX: 00007f2d30b8e9a9 [ 410.406157][T12052] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 410.406169][T12052] RBP: 00007f2d3191c090 R08: 0000000000000000 R09: 0000000000000000 [ 410.406181][T12052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.406193][T12052] R13: 0000000000000000 R14: 00007f2d30db5fa0 R15: 00007ffed6881468 [ 410.406223][T12052] [ 411.064630][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1886'. [ 411.073875][T12065] openvswitch: netlink: Missing key (keys=40, expected=80) [ 411.083239][T12066] /dev/rnullb0: Can't open blockdev [ 411.117591][ T5915] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 411.281657][ T5915] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 411.290921][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.307964][ T5915] usb 2-1: Product: syz [ 411.312245][ T5915] usb 2-1: Manufacturer: syz [ 411.316982][ T5915] usb 2-1: SerialNumber: syz [ 411.335840][ T5915] usb 2-1: config 0 descriptor?? [ 411.408091][T12079] /dev/rnullb0: Can't open blockdev [ 411.662977][T12086] FAULT_INJECTION: forcing a failure. [ 411.662977][T12086] name failslab, interval 1, probability 0, space 0, times 0 [ 411.681970][T12086] CPU: 1 UID: 0 PID: 12086 Comm: syz.0.1892 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 411.681996][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.682008][T12086] Call Trace: [ 411.682016][T12086] [ 411.682025][T12086] dump_stack_lvl+0x189/0x250 [ 411.682055][T12086] ? __pfx____ratelimit+0x10/0x10 [ 411.682081][T12086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.682107][T12086] ? __pfx__printk+0x10/0x10 [ 411.682135][T12086] ? __pfx___might_resched+0x10/0x10 [ 411.682175][T12086] ? fs_reclaim_acquire+0x7d/0x100 [ 411.682205][T12086] should_fail_ex+0x414/0x560 [ 411.682235][T12086] should_failslab+0xa8/0x100 [ 411.682270][T12086] __kmalloc_noprof+0xcb/0x4f0 [ 411.682289][T12086] ? tomoyo_encode+0x28b/0x550 [ 411.682327][T12086] tomoyo_encode+0x28b/0x550 [ 411.682351][T12086] tomoyo_realpath_from_path+0x58d/0x5d0 [ 411.682385][T12086] tomoyo_check_open_permission+0x1c1/0x3b0 [ 411.682413][T12086] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 411.682439][T12086] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 411.682478][T12086] ? __lock_acquire+0xab9/0xd20 [ 411.682521][T12086] ? mnt_get_write_access+0x68/0x2a0 [ 411.682544][T12086] ? tomoyo_file_open+0x165/0x220 [ 411.682569][T12086] security_file_open+0xb1/0x270 [ 411.682594][T12086] do_dentry_open+0x384/0x13f0 [ 411.682622][T12086] ? _raw_spin_unlock+0x28/0x50 [ 411.682651][T12086] vfs_tmpfile+0x3a0/0x860 [ 411.682686][T12086] kernel_tmpfile_open+0x4d/0x90 [ 411.682712][T12086] ovl_copy_up_flags+0x13d0/0x2ff0 [ 411.682774][T12086] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 411.682800][T12086] ? stack_trace_save+0x9c/0xe0 [ 411.682831][T12086] ? stack_depot_save_flags+0x40/0x900 [ 411.682892][T12086] ? kasan_save_track+0x4f/0x80 [ 411.682910][T12086] ? kasan_save_track+0x3e/0x80 [ 411.682928][T12086] ? kasan_save_free_info+0x46/0x50 [ 411.682971][T12086] ? __kasan_slab_free+0x62/0x70 [ 411.682991][T12086] ? kfree+0x18e/0x440 [ 411.683008][T12086] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 411.683034][T12086] ? security_file_open+0xb1/0x270 [ 411.683059][T12086] ? do_dentry_open+0x384/0x13f0 [ 411.683077][T12086] ? vfs_open+0x3b/0x340 [ 411.683095][T12086] ? path_openat+0x2ee5/0x3830 [ 411.683117][T12086] ? do_filp_open+0x1fa/0x410 [ 411.683139][T12086] ? do_sys_openat2+0x121/0x1c0 [ 411.683159][T12086] ? __x64_sys_open+0x11e/0x150 [ 411.683277][T12086] ? ovl_already_copied_up+0x181/0x310 [ 411.683314][T12086] ovl_open+0x138/0x2f0 [ 411.683344][T12086] ? __pfx_apparmor_file_open+0x10/0x10 [ 411.683371][T12086] ? __pfx_ovl_open+0x10/0x10 [ 411.683403][T12086] ? tomoyo_file_open+0x165/0x220 [ 411.683424][T12086] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 411.683463][T12086] ? __pfx_ovl_open+0x10/0x10 [ 411.683490][T12086] do_dentry_open+0x950/0x13f0 [ 411.683528][T12086] vfs_open+0x3b/0x340 [ 411.683546][T12086] ? path_openat+0x2ecd/0x3830 [ 411.683575][T12086] path_openat+0x2ee5/0x3830 [ 411.683597][T12086] ? arch_stack_walk+0xfc/0x150 [ 411.683666][T12086] ? __pfx_path_openat+0x10/0x10 [ 411.683689][T12086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.683734][T12086] do_filp_open+0x1fa/0x410 [ 411.683756][T12086] ? __lock_acquire+0xab9/0xd20 [ 411.683792][T12086] ? __pfx_do_filp_open+0x10/0x10 [ 411.683843][T12086] ? _raw_spin_unlock+0x28/0x50 [ 411.683868][T12086] ? alloc_fd+0x64c/0x6c0 [ 411.683916][T12086] do_sys_openat2+0x121/0x1c0 [ 411.683942][T12086] ? __pfx_do_sys_openat2+0x10/0x10 [ 411.683966][T12086] ? ksys_write+0x22a/0x250 [ 411.683996][T12086] ? __pfx_ksys_write+0x10/0x10 [ 411.684021][T12086] ? rcu_is_watching+0x15/0xb0 [ 411.684054][T12086] __x64_sys_open+0x11e/0x150 [ 411.684081][T12086] do_syscall_64+0xfa/0x3b0 [ 411.684112][T12086] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.684141][T12086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.684162][T12086] ? clear_bhb_loop+0x60/0xb0 [ 411.684189][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.684210][T12086] RIP: 0033:0x7fb7c9d8e9a9 [ 411.684228][T12086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.684247][T12086] RSP: 002b:00007fb7c7bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 411.684270][T12086] RAX: ffffffffffffffda RBX: 00007fb7c9fb5fa0 RCX: 00007fb7c9d8e9a9 [ 411.684286][T12086] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 411.684300][T12086] RBP: 00007fb7c7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 411.684313][T12086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.684327][T12086] R13: 0000000000000000 R14: 00007fb7c9fb5fa0 R15: 00007fff95534528 [ 411.684360][T12086] [ 411.684389][T12086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 411.787570][ T5915] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 411.885221][ T1072] usb 2-1: USB disconnect, device number 96 [ 411.899719][ T30] audit: type=1804 audit(1753086769.123:58): pid=12086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1892" name="/newroot/450/bus/bus" dev="overlay" ino=2616 res=1 errno=0 [ 412.216047][ T5914] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 412.230067][T12093] /dev/rnullb0: Can't open blockdev [ 412.347643][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 412.359054][ T5915] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 412.367254][ T5915] usb 6-1: config 1 has no interface number 0 [ 412.378340][ T5914] usb 4-1: device descriptor read/64, error -71 [ 412.401626][T12102] /dev/rnullb0: Can't open blockdev [ 412.408768][ T5915] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 412.424493][ T5915] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 412.434892][ T5915] usb 6-1: config 1 interface 105 has no altsetting 0 [ 412.444451][ T5915] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 412.453821][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.462165][ T5915] usb 6-1: Product: syz [ 412.466474][ T5915] usb 6-1: Manufacturer: syz [ 412.473152][ T5915] usb 6-1: SerialNumber: syz [ 412.491532][T12081] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 412.504879][T12081] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 412.618520][ T5914] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 412.757533][ T5914] usb 4-1: device descriptor read/64, error -71 [ 412.835309][T12081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.844432][T12081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.861549][ T30] audit: type=1800 audit(1753086770.133:59): pid=12081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1891" name="bus" dev="overlay" ino=155 res=0 errno=0 [ 412.868122][ T5914] usb usb4-port1: attempt power cycle [ 412.888636][ T5915] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71 [ 412.901853][ T30] audit: type=1804 audit(1753086770.133:60): pid=12081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1891" name="/newroot/16/bus/bus" dev="overlay" ino=155 res=1 errno=0 [ 412.910545][ T5915] usb 6-1: USB disconnect, device number 3 [ 412.923406][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.935573][ T981] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 412.955201][T12112] /dev/rnullb0: Can't open blockdev [ 413.089586][ T981] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.100236][ T981] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 413.110293][ T981] usb 2-1: config 1 has no interface number 1 [ 413.116421][ T981] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 413.129394][ T981] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x76, changing to 0x6 [ 413.141746][ T981] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 101, changing to 7 [ 413.152839][ T981] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid maxpacket 25951, setting to 1024 [ 413.165900][ T981] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.175108][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.183129][ T981] usb 2-1: Product: syz [ 413.187302][ T981] usb 2-1: Manufacturer: syz [ 413.192125][ T981] usb 2-1: SerialNumber: syz [ 413.201397][T12107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 413.237679][ T5914] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 413.260670][ T5914] usb 4-1: device descriptor read/8, error -71 [ 413.413338][ T5862] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 413.426580][T12107] /dev/rnullb0: Can't open blockdev [ 413.446612][ T981] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 413.455983][ T981] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 413.465492][T12115] /dev/rnullb0: Can't open blockdev [ 413.497604][ T5914] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 413.527384][ T981] usb 2-1: USB disconnect, device number 97 [ 413.544303][ T5914] usb 4-1: device descriptor read/8, error -71 [ 413.559279][T12117] netlink: 'syz.5.1903': attribute type 28 has an invalid length. [ 413.569867][T12117] /dev/rnullb0: Can't open blockdev [ 413.578064][T12117] fuse: Bad value for 'user_id' [ 413.583193][T12117] fuse: Bad value for 'user_id' [ 413.606928][T10027] udevd[10027]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.661332][ T5914] usb usb4-port1: unable to enumerate USB device [ 413.739519][T12119] FAULT_INJECTION: forcing a failure. [ 413.739519][T12119] name failslab, interval 1, probability 0, space 0, times 0 [ 413.756763][T12119] CPU: 1 UID: 0 PID: 12119 Comm: syz.5.1904 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 413.756790][T12119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.756803][T12119] Call Trace: [ 413.756813][T12119] [ 413.756822][T12119] dump_stack_lvl+0x189/0x250 [ 413.756855][T12119] ? __pfx____ratelimit+0x10/0x10 [ 413.756886][T12119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.756924][T12119] ? __pfx__printk+0x10/0x10 [ 413.756956][T12119] ? __pfx___might_resched+0x10/0x10 [ 413.756982][T12119] ? fs_reclaim_acquire+0x7d/0x100 [ 413.757014][T12119] should_fail_ex+0x414/0x560 [ 413.757046][T12119] should_failslab+0xa8/0x100 [ 413.757073][T12119] __kmalloc_noprof+0xcb/0x4f0 [ 413.757106][T12119] ? tomoyo_encode+0x28b/0x550 [ 413.757130][T12119] tomoyo_encode+0x28b/0x550 [ 413.757172][T12119] tomoyo_realpath_from_path+0x58d/0x5d0 [ 413.757207][T12119] tomoyo_check_open_permission+0x1c1/0x3b0 [ 413.757236][T12119] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 413.757263][T12119] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 413.757306][T12119] ? __lock_acquire+0xab9/0xd20 [ 413.757351][T12119] ? mnt_get_write_access+0x68/0x2a0 [ 413.757376][T12119] ? tomoyo_file_open+0x165/0x220 [ 413.757403][T12119] security_file_open+0xb1/0x270 [ 413.757443][T12119] do_dentry_open+0x384/0x13f0 [ 413.757474][T12119] ? _raw_spin_unlock+0x28/0x50 [ 413.757502][T12119] vfs_tmpfile+0x3a0/0x860 [ 413.757537][T12119] kernel_tmpfile_open+0x4d/0x90 [ 413.757562][T12119] ovl_copy_up_flags+0x13d0/0x2ff0 [ 413.757616][T12119] ? __pfx_ovl_copy_up_flags+0x10/0x10 [ 413.757642][T12119] ? stack_trace_save+0x9c/0xe0 [ 413.757673][T12119] ? stack_depot_save_flags+0x40/0x900 [ 413.757708][T12119] ? kasan_save_track+0x4f/0x80 [ 413.757724][T12119] ? kasan_save_track+0x3e/0x80 [ 413.757741][T12119] ? kasan_save_free_info+0x46/0x50 [ 413.757765][T12119] ? __kasan_slab_free+0x62/0x70 [ 413.757783][T12119] ? kfree+0x18e/0x440 [ 413.757799][T12119] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 413.757823][T12119] ? security_file_open+0xb1/0x270 [ 413.757844][T12119] ? do_dentry_open+0x384/0x13f0 [ 413.757861][T12119] ? vfs_open+0x3b/0x340 [ 413.757876][T12119] ? path_openat+0x2ee5/0x3830 [ 413.757896][T12119] ? do_filp_open+0x1fa/0x410 [ 413.757923][T12119] ? do_sys_openat2+0x121/0x1c0 [ 413.757941][T12119] ? __x64_sys_open+0x11e/0x150 [ 413.758047][T12119] ? ovl_already_copied_up+0x181/0x310 [ 413.758081][T12119] ovl_open+0x138/0x2f0 [ 413.758109][T12119] ? __pfx_apparmor_file_open+0x10/0x10 [ 413.758133][T12119] ? __pfx_ovl_open+0x10/0x10 [ 413.758162][T12119] ? tomoyo_file_open+0x165/0x220 [ 413.758181][T12119] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 413.758215][T12119] ? __pfx_ovl_open+0x10/0x10 [ 413.758242][T12119] do_dentry_open+0x950/0x13f0 [ 413.758276][T12119] vfs_open+0x3b/0x340 [ 413.758293][T12119] ? path_openat+0x2ecd/0x3830 [ 413.758318][T12119] path_openat+0x2ee5/0x3830 [ 413.758339][T12119] ? arch_stack_walk+0xfc/0x150 [ 413.758402][T12119] ? __pfx_path_openat+0x10/0x10 [ 413.758422][T12119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.758462][T12119] do_filp_open+0x1fa/0x410 [ 413.758483][T12119] ? __lock_acquire+0xab9/0xd20 [ 413.758506][T12119] ? __pfx_do_filp_open+0x10/0x10 [ 413.758552][T12119] ? _raw_spin_unlock+0x28/0x50 [ 413.758574][T12119] ? alloc_fd+0x64c/0x6c0 [ 413.758613][T12119] do_sys_openat2+0x121/0x1c0 [ 413.758637][T12119] ? __pfx_do_sys_openat2+0x10/0x10 [ 413.758658][T12119] ? ksys_write+0x22a/0x250 [ 413.758686][T12119] ? __pfx_ksys_write+0x10/0x10 [ 413.758708][T12119] ? rcu_is_watching+0x15/0xb0 [ 413.758737][T12119] __x64_sys_open+0x11e/0x150 [ 413.758762][T12119] do_syscall_64+0xfa/0x3b0 [ 413.758790][T12119] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.758816][T12119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.758835][T12119] ? clear_bhb_loop+0x60/0xb0 [ 413.758859][T12119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.758878][T12119] RIP: 0033:0x7f2d30b8e9a9 [ 413.758896][T12119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.758918][T12119] RSP: 002b:00007f2d3191c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 413.758939][T12119] RAX: ffffffffffffffda RBX: 00007f2d30db5fa0 RCX: 00007f2d30b8e9a9 [ 413.758954][T12119] RDX: 0000000000000000 RSI: 0000000000060142 RDI: 0000200000000000 [ 413.758966][T12119] RBP: 00007f2d3191c090 R08: 0000000000000000 R09: 0000000000000000 [ 413.758979][T12119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.758990][T12119] R13: 0000000000000000 R14: 00007f2d30db5fa0 R15: 00007ffed6881468 [ 413.759020][T12119] [ 413.764794][T12121] /dev/rnullb0: Can't open blockdev [ 413.777692][T12119] ERROR: Out of memory at tomoyo_realpath_from_path. [ 413.791943][T12122] /dev/rnullb0: Can't open blockdev [ 414.246084][T12128] /dev/rnullb0: Can't open blockdev [ 414.273279][T12130] /dev/rnullb0: Can't open blockdev [ 414.283537][ T30] audit: type=1804 audit(1753086771.553:61): pid=12119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1904" name="/newroot/19/bus/bus" dev="overlay" ino=180 res=1 errno=0 [ 414.304495][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.395715][T12133] /dev/rnullb0: Can't open blockdev [ 414.498589][T12137] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 414.507826][ T1146] Bluetooth: hci6: Frame reassembly failed (-84) [ 414.509928][T12137] batadv_slave_1: entered promiscuous mode [ 414.525317][T12136] batadv_slave_1: left promiscuous mode [ 414.838937][T12143] [ 414.841294][T12143] ====================================================== [ 414.848300][T12143] WARNING: possible circular locking dependency detected [ 414.855317][T12143] 6.16.0-rc6-next-20250718-syzkaller #0 Not tainted [ 414.861898][T12143] ------------------------------------------------------ [ 414.868908][T12143] syz.5.1913/12143 is trying to acquire lock: [ 414.874964][T12143] ffffffff8e622c28 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 414.884559][T12143] [ 414.884559][T12143] but task is already holding lock: [ 414.891924][T12143] ffff888143b9c558 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 414.902194][T12143] [ 414.902194][T12143] which lock already depends on the new lock. [ 414.902194][T12143] [ 414.912610][T12143] [ 414.912610][T12143] the existing dependency chain (in reverse order) is: [ 414.921618][T12143] [ 414.921618][T12143] -> #2 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 414.930219][T12143] lock_acquire+0x120/0x360 [ 414.935239][T12143] blk_alloc_queue+0x538/0x620 [ 414.940520][T12143] __blk_mq_alloc_disk+0x15c/0x340 [ 414.946152][T12143] nbd_dev_add+0x46c/0xae0 [ 414.951083][T12143] nbd_init+0x21a/0x2d0 [ 414.955762][T12143] do_one_initcall+0x233/0x820 [ 414.961049][T12143] do_initcall_level+0x137/0x1f0 [ 414.966531][T12143] do_initcalls+0x69/0xd0 [ 414.971384][T12143] kernel_init_freeable+0x3d9/0x590 [ 414.977109][T12143] kernel_init+0x1d/0x1d0 [ 414.981958][T12143] ret_from_fork+0x3f9/0x770 [ 414.987067][T12143] ret_from_fork_asm+0x1a/0x30 [ 414.992348][T12143] [ 414.992348][T12143] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 414.999561][T12143] lock_acquire+0x120/0x360 [ 415.004594][T12143] fs_reclaim_acquire+0x72/0x100 [ 415.010122][T12143] prepare_alloc_pages+0x153/0x610 [ 415.015772][T12143] __alloc_frozen_pages_noprof+0x123/0x370 [ 415.022112][T12143] __alloc_pages_noprof+0xa/0x30 [ 415.027589][T12143] pcpu_populate_chunk+0x182/0xb30 [ 415.033320][T12143] pcpu_alloc_noprof+0xcbf/0x16b0 [ 415.038875][T12143] xt_percpu_counter_alloc+0x161/0x220 [ 415.044861][T12143] translate_table+0x12e9/0x2000 [ 415.050329][T12143] ipt_register_table+0x106/0x7c0 [ 415.055886][T12143] iptable_nat_table_init+0x43/0x2e0 [ 415.061698][T12143] xt_find_table_lock+0x309/0x3e0 [ 415.067242][T12143] xt_request_find_table_lock+0x26/0x100 [ 415.073392][T12143] do_ipt_get_ctl+0x730/0x1180 [ 415.078685][T12143] nf_getsockopt+0x26b/0x290 [ 415.083792][T12143] ip_getsockopt+0x1c4/0x220 [ 415.088909][T12143] do_sock_getsockopt+0x372/0x450 [ 415.094464][T12143] __x64_sys_getsockopt+0x1a5/0x250 [ 415.100184][T12143] do_syscall_64+0xfa/0x3b0 [ 415.105210][T12143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.111621][T12143] [ 415.111621][T12143] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 415.119458][T12143] validate_chain+0xb9b/0x2140 [ 415.124755][T12143] __lock_acquire+0xab9/0xd20 [ 415.129961][T12143] lock_acquire+0x120/0x360 [ 415.134982][T12143] __mutex_lock+0x187/0x1360 [ 415.140104][T12143] pcpu_alloc_noprof+0x286/0x16b0 [ 415.145649][T12143] sbitmap_init_node+0x1e1/0x630 [ 415.151118][T12143] sbitmap_queue_init_node+0x41/0x660 [ 415.157021][T12143] blk_mq_init_tags+0x110/0x280 [ 415.162404][T12143] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 415.168397][T12143] blk_mq_update_nr_hw_queues+0x76a/0x14c0 [ 415.174734][T12143] nbd_start_device+0x17f/0xb10 [ 415.180112][T12143] nbd_ioctl+0x636/0xeb0 [ 415.184877][T12143] blkdev_ioctl+0x5a5/0x6d0 [ 415.189908][T12143] __se_sys_ioctl+0xf9/0x170 [ 415.195025][T12143] do_syscall_64+0xfa/0x3b0 [ 415.200093][T12143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.206594][T12143] [ 415.206594][T12143] other info that might help us debug this: [ 415.206594][T12143] [ 415.216819][T12143] Chain exists of: [ 415.216819][T12143] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 415.216819][T12143] [ 415.230564][T12143] Possible unsafe locking scenario: [ 415.230564][T12143] [ 415.238010][T12143] CPU0 CPU1 [ 415.243380][T12143] ---- ---- [ 415.248737][T12143] lock(&q->q_usage_counter(io)#55); [ 415.254119][T12143] lock(fs_reclaim); [ 415.260627][T12143] lock(&q->q_usage_counter(io)#55); [ 415.268524][T12143] lock(pcpu_alloc_mutex); [ 415.273026][T12143] [ 415.273026][T12143] *** DEADLOCK *** [ 415.273026][T12143] [ 415.281172][T12143] 4 locks held by syz.5.1913/12143: [ 415.286370][T12143] #0: ffff8880258d1988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 415.297859][T12143] #1: ffff8880258d18d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x49/0x14c0 [ 415.308838][T12143] #2: ffff888143b9c558 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 415.319538][T12143] #3: ffff888143b9c590 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 415.330418][T12143] [ 415.330418][T12143] stack backtrace: [ 415.336305][T12143] CPU: 1 UID: 0 PID: 12143 Comm: syz.5.1913 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 415.336324][T12143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.336334][T12143] Call Trace: [ 415.336342][T12143] [ 415.336349][T12143] dump_stack_lvl+0x189/0x250 [ 415.336375][T12143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.336396][T12143] ? __pfx__printk+0x10/0x10 [ 415.336418][T12143] ? print_lock_name+0xde/0x100 [ 415.336439][T12143] print_circular_bug+0x2ee/0x310 [ 415.336461][T12143] check_noncircular+0x134/0x160 [ 415.336483][T12143] validate_chain+0xb9b/0x2140 [ 415.336513][T12143] __lock_acquire+0xab9/0xd20 [ 415.336531][T12143] ? pcpu_alloc_noprof+0x286/0x16b0 [ 415.336549][T12143] lock_acquire+0x120/0x360 [ 415.336564][T12143] ? pcpu_alloc_noprof+0x286/0x16b0 [ 415.336586][T12143] __mutex_lock+0x187/0x1360 [ 415.336608][T12143] ? pcpu_alloc_noprof+0x286/0x16b0 [ 415.336623][T12143] ? stack_depot_save_flags+0x429/0x900 [ 415.336644][T12143] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 415.336665][T12143] ? kasan_save_track+0x4f/0x80 [ 415.336678][T12143] ? kasan_save_track+0x3e/0x80 [ 415.336691][T12143] ? __kasan_kmalloc+0x93/0xb0 [ 415.336705][T12143] ? pcpu_alloc_noprof+0x286/0x16b0 [ 415.336721][T12143] ? blk_mq_init_tags+0x85/0x280 [ 415.336736][T12143] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 415.336758][T12143] ? blk_mq_update_nr_hw_queues+0x76a/0x14c0 [ 415.336781][T12143] ? __pfx___mutex_lock+0x10/0x10 [ 415.336802][T12143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.336823][T12143] pcpu_alloc_noprof+0x286/0x16b0 [ 415.336845][T12143] sbitmap_init_node+0x1e1/0x630 [ 415.336868][T12143] ? __kasan_kmalloc+0x93/0xb0 [ 415.336883][T12143] sbitmap_queue_init_node+0x41/0x660 [ 415.336897][T12143] ? __raw_spin_lock_init+0x45/0x100 [ 415.336919][T12143] blk_mq_init_tags+0x110/0x280 [ 415.336936][T12143] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 415.336959][T12143] ? blk_mq_update_nr_hw_queues+0x678/0x14c0 [ 415.336981][T12143] ? kfree+0x18e/0x440 [ 415.336996][T12143] blk_mq_update_nr_hw_queues+0x76a/0x14c0 [ 415.337024][T12143] nbd_start_device+0x17f/0xb10 [ 415.337042][T12143] nbd_ioctl+0x636/0xeb0 [ 415.337058][T12143] ? __pfx_nbd_ioctl+0x10/0x10 [ 415.337075][T12143] ? blkdev_common_ioctl+0xa8d/0xc50 [ 415.337095][T12143] ? __pfx_nbd_ioctl+0x10/0x10 [ 415.337109][T12143] blkdev_ioctl+0x5a5/0x6d0 [ 415.337130][T12143] ? __pfx_blkdev_ioctl+0x10/0x10 [ 415.337148][T12143] ? __fget_files+0x2a/0x420 [ 415.337171][T12143] ? bpf_lsm_file_ioctl+0x9/0x20 [ 415.337186][T12143] ? __pfx_blkdev_ioctl+0x10/0x10 [ 415.337206][T12143] __se_sys_ioctl+0xf9/0x170 [ 415.337224][T12143] do_syscall_64+0xfa/0x3b0 [ 415.337246][T12143] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.337266][T12143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.337280][T12143] ? clear_bhb_loop+0x60/0xb0 [ 415.337296][T12143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.337311][T12143] RIP: 0033:0x7f2d30b8e9a9 [ 415.337325][T12143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.337338][T12143] RSP: 002b:00007f2d3191c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.337354][T12143] RAX: ffffffffffffffda RBX: 00007f2d30db5fa0 RCX: 00007f2d30b8e9a9 [ 415.337365][T12143] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 415.337374][T12143] RBP: 00007f2d30c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 415.337383][T12143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.337392][T12143] R13: 0000000000000000 R14: 00007f2d30db5fa0 R15: 00007ffed6881468 [ 415.337407][T12143] [ 415.691958][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.742742][T12144] block nbd5: NBD_DISCONNECT [ 415.759409][T12144] block nbd5: Disconnected due to user request. [ 415.766132][T12144] block nbd5: shutting down sockets [ 415.780777][T12144] /dev/rnullb0: Can't open blockdev [ 416.547549][T11815] Bluetooth: hci6: command 0x1003 tx timeout [ 416.547761][ T5862] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 420.782228][ T1146] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)