last executing test programs: 8.509744411s ago: executing program 0 (id=3418): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x21) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x0, &(0x7f0000000440)=0x7, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x5) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r4, 0x10007, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000ff000000040000000300000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000000000000000000000000000000000000000000c890641281971f5a01e30d1d8dd3b4351077187eb2ebfe9f571918256e6b1539264842e7273db997c3a5d9478209d8d34240b2d9117b1a211a0e5ae8bff51ff5fc87e1b09d"], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0xf0ffffff) 7.53775336s ago: executing program 2 (id=3419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=@newtaction={0x88, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ife={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x6, 0x1, @val=0x2}]}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x88}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5eaa00000000000071070000000000009500e70400000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120110018e2f6b2037210100e50c0102030109021b0001030bc0020904ab6c013c3a0c0309050110400007060020d348977eaa0202b4e900bd05fe58ca04e6c6a29977217ce6315218ff900dd5406afee1d29e1502d3c00f0916aba9d08cf67c4486ab855a51e71cd0eee96c93978a56d23118099d2f9815d970e8ed3cc1c188b77d2c668110a43a5ff9134ea1fe2a9059aadd435f71ba3fc321198749fee69225762ea160f4607fc3dc16b7d0d3ea9c7d789d9459e9bd"], 0x0) r2 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='user\x00', &(0x7f0000000440)='\x00\x00E\x01\x00\x00\f\x01\x00\x00\x00Y\x00\xc1~\x99l\xb7\xd6\xfc\xebw1hn\x1a\xc5\x7fn\a\\\xec\xd8\x94oh\x1d\xec\xf5jb\xe5\xb2\xa2e\xfd\x9c\xc4\xd22\x9c\xe97#(/\xb1\xe6\x03\xe1\xaa\x96\x92\x8b4}\xc1L\x1b\x9b\xe6n\x97\xc7\x06\xb2Y\xadQ\xa4c\x1b&\x0e]$\x1b\x1bt\xda\x9eA\xd3\x1b\x12A\x82\xd5\xa8@\x1eIw\xb2y2F\xe8\xc7\x03e&\x98\"9\t\xe0\x81Pj\xee&\xae{P\xe8\xceL\xe1\xd1V\xc7\xeaF\xd54\x80\xb6%\xaf\xbbK\x85\x95\xf2\x1bG\xf1\xdaq:\xae\xe22\\~j~\xfe\x83\xbb>\xb0\x9b.\xa4\x95\x0eY\xb8j\xe1M\xf5\xa5\x87`\x04\xab\xf1\xc7[\xda{\r\x95\xa4\xea^\xfc\xa7\x8b\x85\xd1\x1d\xaa\x99\xeb\t|@\xd5p\x1d>+\x0e\xec\xe2\xcd\xdc\x8f\x01\xf7\xabH=z\xa5x\x1b\x9f\x95\xd1\x88k\x85L#\x99^p\x18\x98\xec6\xf69y\x052\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\x1d\xa3\x80\x9c[\xfa\xab\xf6\xbcB6\xac-\xe6?\xb8\xd3\x82(\xbd\xb7\a\xbf\xf6~{)\xc9:\'(\x85u\xf76\xe4l\xb94a!\t\xb8\xc7\xfamF\x8f\x87$:eU\xe2P\x1d\x82\x04P\xee\xd7,\x93/\x14\x11\xbd\x8d\xc8\x94\x91\x04?\xc2\xb7\x96\x81q\xc3_\xb3;]*\x89\xd4\n\x06Z\xc3\xdbbJ\xact|\xb5\xf6\x98\xb6\xbb*S\x15|[\xb9\xb59+\xa0\xa5we\x92u\"\xc8\xbac\xea-\xed\xd8!\xcf&\r\xb3\xf7\x9f\xf1s\x7f\xaa\x85p\xaa\xe6\x7f\xd9\x94\xae\xf6\xe7f~\xf3a\x02\x1a\x1a\xce5<~w\xd0\xd5\xa1\x04.\x98\xaa\xff\xa7\xb86n\xbe\xfd\x95\x16\xe6`\xa3R\xb6\xf9E\xa8\x13k\xcf!\xd2(\x8c\x18C>\xec\x99Q\xdf!]\xe7WV%K\x92\xdc\xafM\xea]K\f\x1f\xe5\xe3\xbd\xdc#\xc7kv\x9aI\xa9y\xde8G\xbfQ@J\xe9\xb6\a\x96\xc4!\xdeO\x1d\xc5\xec\xf0c\xba\xe8v\xc8\\3\xcfi\xf4\xed>c\x85n8\xc4\t\x95Y\xfa\x00'/535, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x47) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000001c0)={@multicast1, @multicast2}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="555300000000000000000898"], 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x300, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x605cce74a6e1ee72, 0x80) getdents(r6, &(0x7f0000000040)=""/61, 0x3d) 6.176562533s ago: executing program 3 (id=3422): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffa}}, './file0\x00'}) syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x7ffc, 0x25d, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, 0x0, 0x0, 0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) io_setup(0x800, &(0x7f0000000500)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x15, &(0x7f0000000000)={@remote, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@generic={0xa01, "1973fd"}}}, 0x0) connect$unix(r8, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x3b, &(0x7f0000000280)=0x200, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x3, 0x0) r10 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x0, 0xdd}) io_submit(r4, 0x2, &(0x7f00000004c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x47, r3, 0x0, 0x0, 0x5, 0x0, 0x2}]) 5.577514191s ago: executing program 1 (id=3426): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket(0x28, 0x5, 0x0) setsockopt$sock_int(r0, 0x28, 0x7, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000009700)=[{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004740)="b6b52b7050fb3ca2bca9ccbf61f91dd7a0ad821d74649c10c9cc13956175afa4acd3bb92ab86dd89d41e2976668821c61e804c5cd887d71c2b9116ab5898afb498fabfc612ea6c3a88240b306b6da6ea13a77ff1e00a51760130d5fbbe3ef98a137c2ee16e40d658c655edc5a070225e109e246f50dd6d2f3d6252b2b610261861c670cd049ddd94f181010f56a42b0e133e99cf8a56c547379b39266c52077c998066ca37082bb5bfb12bf0f1", 0xad}], 0x1, &(0x7f0000004ac0)=ANY=[@ANYBLOB="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"/592], 0x250, 0x4010}, {0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000004d40)="3764e290d536bb5c17b9bd68f1521e75bd80919de6f4ea3223773eb0133aada01cef0cc61605e595e51bd7fd9fec787e86db70e8f4941c3c060cd4170fe1e7268be3a6d203ddf5131fce59bdf23e2e33682268743dd8bfe948bd6676482bfcc9546cd6feee6a830ae2a6cd51322fc1f606b8fefa7d8630423762cfa673e003a61f6111a4da331c275fd9ffaa10baf85539a512b3a7b00632fc2d5b0cd5888c5803b453011107ed3489b6ba585c7965db4c65aa3d288704607c0897f1966ffc8539", 0xc1}, {&(0x7f0000004e40)="c2169bff6207bc5ee23e2e1dde97940773c4a0ac13935440e73bdb98ea7fe51d25f2c897a241b90fcd667cf5a1dd67dfe07306a322d68e4a06cf56a7082ca637f82724ecb2cdc21fb59422ab715ec6509bc6433548aa150be153a56686fa000e6624f261165ef10d30c32ba7a8183dc4f64fe20081ff896b308c8581d3cdb639eb7ffd461c8b32dd0a11b752eb44172f0b43804a3478f6dec8d2993915625c88a3dd50b04a6efb83fa73e063b354655b9628781709c21a29b3045d05b73a149957f27952a914e98b82690079a60751471afd72e12fa7c90d034864dcc323ce6e43ae8a83c31ab0311bd93c880ca3921f5fac99b693abab87c7a0c90db32e816afd9dbac8518e89f6f32d38b96acf2e74941beb1e39c4e0db1d110a812716a4c4a7db89c5dc6aa92ca1504dc7f3e357dd498887d37501dcb03a405c1fa089ecb2ca994c716cd6f07b69255c05eff0b4699c1eb04586bafc7b91be4cc53b20ea1b314c0c829db8620fa6d939cb32eb954438d81f6939687ae36118a5c9c6a7a53e9916cfae85b315a4aa46ff19609dc247b71a7cb66d38b2158fcad3efb6cdd5ec66c69f9804f2e1e731e64856b9a600437d8d107327891e0fbda814fd53bf1b7b617cbe5e32e1bfb9152c82e3e02822082d732f805f7d2bf96d69908b5d4dda55250f1092af8865bb4c327cccff2c980b460398d2402991f85c17a291f5e2a1808ae2b67b5c61fcdeb78896d0c5b229fff02ddff12a2034fdd6f6d4581b7b7409a7b1424bf7396ff095156644273ac94b75ae0e86f237777fb42da8517b47e468e437bc10892f59382a9f1ca8854bc61439cef9c97903c886eb66aa966c6e00777f381d124d4219dfb9c0db2a5ccf285de0d1f81f16f1f84a4a8171244b1708ba370170c2abf2774849de0d47a72e8785b29fbaf28513fe1b7401ee084507d4bb6edb072f842f5867aab275444d7d1e70b3a9fce8431afdc23bd64dce51bab566686fee26d219964ed2e950bc15908411cb437d3f5ebb4cf0469aad56b196620e882bba4b0b925a350b24bb7bd0757ce698a65a450aa5672d8ee56b912e5cb53be997b3e2413cac8b6c3d7a55e55a3e38a902f9c03d768ab0e2148e4e0ada4b80f2697f890514acb666d7707a606cc38e061a9271f2c1477239f9f22a67f5a90dfa0031d1a1a2689258f1b6b5f40d6744157dee50bc35b621d8f4accfd707b5c3b1f4974b5703f9bbb4242014669ae295926b5757d72d1e37f1c44203400194d0396a97d48ac01d999a97486507a2f55242bed5e5c387a3b189a6fdaed093e0511ffe1127c9768f6740d106ddf8f97071d91e218de981aaea25f677b06537994fbdbf2c99a0a529a39b74a280b9e6feee3f88d8288e4cfdf76678b21664bbcf1d289af202f37360f73745b40ef374dd192904e22784bda7ea00de137249a662e2ac383e5f37eb8d9814d63c25382e9f32c9fa0adb6c5f4b6a34803acd1501d69fb567612ca1fd30a0dc65f86e772de279f421eadf07310d1920f763cdc73bc1e89e17ac41fa577d93a4b5c6f1560001f01093d272fb329bc5a9fb82ac97968ef127cbf94ab1b8136daa6fc472810006a5f091e5c26b8c00d0b2887c3b8fdaa38a46d4b74e91461eb34c5808693d0a4d097e48f0890c023fd2c743e9c4acec0bd989ffcf5e151cc0ce51a54f82f996a81a2018c78b2a91fd7acdea67734cf971efa9f7316ed0026064ab0020d4808d957921b5df428b98ef74250d98ed98c2a136efaf4a831b069547d574bf5a44eb4181bde38d7816f18ed5f8254df915c82f4cf530336657dd24519d752261ef6716158ca920817935adc86f62a58ee0ed9507a1b820dcf502ad1e53853d4f5e9912a1e332a7bfe8eeed773b8abcaa05d93b6ba4af6df5716267183edc73334244215a8ff85cb6e761850b791047f54d0b3ceb87c47513afa7be070224516806d5ce38f4218b36c13c69f68238becf4ccd81f80f701aebd6184367a72203dda75269aaa4d846a90fd8b857ad3f82705fe7174809b01a912c759497c47df8ddd213312057774f8c94cb3e98c2fe742789ae5a5a0eb8631f8e244db19eedfecd0d2e8e035b004f089cee3a5128ed0461d6145ecfe3b88a6902a932890c6d72a08f8d14e4f5c4950d0bbeb81eedd3228fed253d6080cf0a56eea559cfa6ff0346f38539096b17bd1de701c84a471525889988b7d3d4b842c126a3d9493d11e25e75dfdbd48f7ae0af29f2fa1496069ba10b2db73b3cd5349b3249e525bdef98af1ee3f3647086d6f1b2194c67f6524ebcd9a427ce92cd5794a275fa9ae2b5367f24ed3e05e5929fe273fb12f2873cf16669dc7584a0554e2d34f2dd455c7ba735fd2f467619f950221ce432645f0af0cb18693b07c1511a40018d6b5d0d7430d97161d828dbdc2315c4c83a3e9346299074600558ec50c20045a839e8088771f62890544bebf47acfac8ff4003a1a288ea8b1b8d4d8124fe04ebaa287aa3157426b231edc17d442976c417bf9cdf5321f8c9b669ee3c423ab2acb8c09c43d551b25953f5e78485a34e8eb1f26b90d72503f6475e3009c868e204866734b68e9a6162e01d989b3fbcd5a1617fe56d5fe7a211715cb84dafdfbb5bf39d0885560e08c4caf741ec94d4b8cc11ede4a0be9ad784e30e995a4ed2ecfd76ae9dc19b43e24f0b9b377b34fd1c94f3e69fc8744166cb9f5dfbe066f94e4201a6577c58c50ff7c7d58b64715361c226918d01825ac0f399aeb2586eec18483fc7140d23e320f3ac3caff1e0801a28698e56e55697ee5ad4c5fec51f0d2bd82cf3c62e4af30664399f97a7787833dae9fbc20c656bdc3a98863bb06e051e7eff79c223ef8d0e1115c5dad1fbc5fb8071250c62ca2b629836b278d32666f0c00d93f77c5d30433bdbcbe163251b87768644f083864dfca80f04e16dc67e959369dbd14b8db807ece67d0e44fa5227c5a9a8e614fcac0bb74fde592141dfe768da0236cc9758e0735fc0a901ae708ba6dde27a3abe54d05c9ac2f4328203cf0e690c4dd4e51dc33b1589b0053c1d5309721b2fe02a24dc6dbc48d6cba757674a3997b7adfe6b9f5478e85599eb59887df35b06b1366977eb6b8ba2eebe248800147260868c74490039e0a72fb78a1dad0ebf3c38f8f18d63708559857b3aa779c207a9aa5d48e6b23b332f28b3363cecf755779544b190ddbc7394fc8a5bb761af4fb37c7fc54ed0a1fa25d0b28fc351a5357a7120910391c191eaec760bdec246520c4f606131801ab4704b0472a37473f6d86a15647653816a80ed8339661b0506cd6792f8c6f1ecbdb4391ab13784e36d8d83d47843237a340e33330f3dd1fe144c0b89136e4d95115bad4ab8940f2866d199ee802296ed3dfcfb4c512d34677a265f9c70be3452725789d5d0927100c4ad2509e9140a895583886e1e11d960a6d1be8a8b87cc8b54e416888cf8c8ca1f051785907d00b13125f579a6b58c1afbe06cbf4f3e42d2bd7837c366f0a9ee09231f1164093c0ec33ae5f2a477845bac70c77cdb30890eb8008e7287dfab5061d02debc40476103713861201884e835ed1c05a54a968b347d8164ffc1dddf32c4135c740c8d87f645294ccdac80328b9429e645194afce7193db6c802448509d4752e75ebc065619898f48305ad0783a25235d1bc8afe329020965c7044006c71332d37f236f88287e223e3930370ea5816d00d28968e94505f9f93e8fbef6fa771626fbbb94f00de472044b78a1932fe32eca21bc0e62de912206c3c7b37967fdac9d8928bd3943e01df86b73fc5cd2102aed01d5fa87979a8dda95d3cb7256cbce5a8632d7aae47625e66ff5c2cb00dbac707613ccc15a32d476054d836e95369eb19fabc905d6f00a4b826569a63bee083cd4af2eb5ced8670345ade9af8b9c9aec5948ecc1d573a7d5d9d20933080fce998b288d5e65c10eefaa7f7b999a101839c23014e45626863ad7fc324063a2ddba004102b916841a1eda87d6b254e23b9fe1b5053527f70f0603f9f6500a47949bce10f74975323cb5851d5225ffcf69d4fdf9852378159c552d28b38fba338308124fd569adf930a2018ad57c7926b20e14745afac4317bf5c800d6110339e777587bc6597048f8f4b7bfeca87b8a088340754d68f3cc246b6cdedcba46cf90a5548b056afd7d0acf3ff05759da65e4933025502e85dadd8d0867c1dfce5244e1c8c3c7f90681b0de8a6f1e399c9aba2c931d010ace457f25a339b4fd84e4c31f7fd3fe4b6d50c5dade03662e5350e7f140ef387449474675252f0e90713a17267415d441a5fbfc24dea29c18481f956f068bd9ce846b4aa595268a7789f6df57680502d26c8de9fd3b71ea3b7382c431b33c5fd5e40c86be965ed383332c6f16c06ac3bd45b66996e5af4a5820383358a044212e5d0b443e3dc390a107c029be8e56acccfb8e658862fb2bdfc0e00ad3d0eacf39bc32b60b7a04b38ebf178b1392c442dc9e9fadfc2a10517358562146336ec1efd2ff91295f883826cd9ee7145bf058767afd21eb7facd5a3dd79931fc8c4032de91fab33ff770f0ceb4766c72c991ea5248fc41c1cc76ecc56d479409d5dc3d5ed7895fc572c023e2ccb64ebe8917fdf9bf05c42fd56b31cfb31725c382d1d423b7b59314eda50484e8e4de9d74b76c01ec711dc58e0a1555c4f94ad595bc0b8b7dbd25c1aa16d9cf3e4800b72d35d23f158e14ff328851fae28b86ef3311ae9c266d97c52952816198bbfa8d0d1f21eae5b0fdc5c800e5f1fce08c85fbd3c9930ed9c4378eee25267fec1be813da296ff5bfaeebda96d2ab11ff9ebee934af2f381c93d84954b8f829e9a1b14d393e5cdc651908340c70860faa76cd897f96ac39da5b1f620606bbafcf1ff572aa847121fa51636a1ae27f63763e51dd113d09c07524f04233c9fe75071a56fae2db12719c1acced4e37823ad457b3b8793d2d6a0859c1ce2d872064e5bd1cc63b7342ed67d4dbc43c47dc8255ea561360a739bb05bb921da10f9ec9bd6d6e74d981abf364a9931a6243aae33117e1f2779fcaaec541a442ac06fa7a1215d712144c73a78ba6cbb38db0a37be11231883de2b79708e8489b82619f471382842f18c884a9841b77fc8c37b66f17d008809563b55e4c024fb6b107f9936e48cde23fee2952d126ae605073a61fd5dc84a5afc27024a0190054810e721806761f0f165a770dd7f04bf6ed0bf0256d05d5774a987e24474f7ef66c3fa24d00167d79c553f113d349b6140788093ee55a23388590552565de2e9d752a5e81fe5e23bba9e1f5ef19fc54a3ff30d7fe22452802ed7d9e3ed253bb17253a29fbeb0d84f7e54227284acafac7e5620c827848f309e438a33bfffccc5e47a920cbf49baa5b9ac7570cdabcb65f77dee737fabaf9afa7b712a6a6a4a0030a30f7214fa4e072dccae8c6ef870e1b2e7174420f1cebb3507224fc0650198bd76f7d59c9a09b498537a1bc5b38bdb3cd5215b76cd70556033b80393c99081d01111f9b4eb544bfed9650267c12915acb07ccf2dd44dd8aeeca6ce67893d1c53a20b2ef208d0aba78efd8fe38a04b89a57cf1fd9ff6a931beb380e5a59d199d774ea4ac1ffb12f498347d2f210d177fdb5e3c83d9861251435862cbd80ad7a5392d07f55acd6efd61f58614d450b9c570213c5e20bd48576ad81a1183f145a95bf859c1a0d492624049590457db87c887ac4ad472b897038e917c0283692d00cda111dca16dbb9e8d555a9e8d6367e740c70c96094578bc99a388cc", 0x1000}, {&(0x7f0000005e40)="e9297654ef5251b4dc8ab929aec07291ef3b8c6bcb79035c5ab00a34f01fb1563ba24fd659ff2be32627925f8bd1e21555d3b3f1d3441fb4fcf0bff3a678ed555ec36b1bd225db4bded7af2ee5e2d0b36a60abf451b230a7bc5fb744156821543d60c682df08b457f1d66271f78c44475e76dd9b94015215489c2f86e1e6803cceeb45c304802426c1fa425c04001c9aa6d42ebebc7c287ca7574e93c93271c3c986d4f1abcca76951406caa34f2866b2818e04dddd2de721dc0d119272dd5a43bd4e23a42d440cd5fb2e2e6f201cee832b54c1dc7c6754cdcfabf6ea153d6d2f4072af94bebf0325c577fa54f4b397e3489d6e0f737c4a5402ee27bbf7c", 0xfe}, {&(0x7f0000005f40)="129f480af52d00219d8e93a2c8856efe19007576347a53a15929f7fc027c89b72a658756d9fdfa419cd8327ebb1a783c9dafd14ea2f334c75fcacd5f889d405cfff37fe56eee7b4ec447cbcd632e4dcd3caba3168d1e8af296ea55d58983d4bd9b58cd43f593a28486477e349d763c83afd50991fbf468a764fa5f7847a5d01ecef43664349d9b9b803dece119a3340a2000fc30db857b2afc7a7b999d08399bb7f3c90c71c1e86a3ea77410dcc3cb8fd152c7cff0a931571cac5323c8c34ca549cacf6e6add99ea0d98d051c7795e4ab7c5e0da397d728b1232c78b8f", 0xdd}], 0x4, &(0x7f00000082c0)=[@iv={0x110, 0x117, 0x2, 0xf8, "3dc3d969e41177ee8fae6b55ad5344add3d2fd4175b4ba4a7d5a23deb86290cc3ac4a5c20736b4f74f0f368070fe4efd69c83d856afab8a017930e2ecaf773c2154bc7dd93ebb32e4fd88a4411637539fa0f700188d318dbb5e8e81a45ddaf8c73bb5d92c21db9695bc3f08581230b8a882be6aa14f24c14fc9962187643909af56741fa14acc09916481b730f4a0624464652ed538ebb389de5f3b1dfd2862e09bdde1a903ac486305a5dfba3d2c0c77a84e8998c5a73e465cf6f02f7763bd3210b276453d92b5f5e6950729947ac457b3d197d472182bddd3131012c555331d084479b08ba8da3e0670f22c382e45ed1c07f25351a937a"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xb0, 0x117, 0x2, 0x99, "881fdd7dedfaf2416c19a7ec5c34c7e8679fd1d001c8722158976ed48e0760fa2adeb2d4f54bf7af7c818323e83384d516f53409f87d80f85a37cf571579a91f0c377b384ed4184674e891fa94227d3e27b1a52f548d4f22b4f25d77084333a8bb9a894d57a907322b15ede0f85898d01f7233746d8775a9e9ef62d6ff6ac0e09d8171d4097b6f8b6a8f689ec58613f07e339ad95a0ed01101"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x11f0, 0x4}, {0x0, 0x0, &(0x7f0000009600)=[{&(0x7f0000006040)="09e1be8b02ada9da517b5a9d4514b91fd95640eab19b12d101e8464fb2025e4793de492ff9e928f8cf2bb196090720bdf6c57bb231b882ce080458010ba98b27f891bfb6de9cc07a15c2d64413d1d122b062e3165f0c23ab62711072996f7be599de4f6e4ba6cd2f8dc776075725ca370008ba08c51306352e18235950084e4814d2a2bee33ed2113b0e8f54a433eb4c", 0x90}, {&(0x7f0000006100)="1889e591b411f985a1e4aa9be573144ff83c1105a5ac95602223e89acd221fdf92e101bc4fde7382038609b0b13710e31b808120c23c507116a546c00c38ed43dfd4f2e5c817614ef965fcd29e345fdc7e167533a979b2bfba0cf65fd51e3779e4174a34e92bc6fd49a2a40166c7a45a93970dad337eefe7db37083b8c975a60be77b44afdf2d0badb81aad942bd84007d0af6039b9d079676653a1383376a78b4b548149b89f45db4a47c14cdb4f244fd4df6b0f0330b5a76d83e577c6300b185191cc196372171643616ca16bd3e55014c202908488e18d651091b4efa369762", 0xe1}, {&(0x7f0000006200)="c31515218de08c747c079bb4a20ff5f22d1edafa135c83e1530c3b2bc7969457dda4edac98165d840dd91b1d12983b2595dd785b6f8cdcf46a8c766fd315d59924822a825b156454b3740f7c1359ca695c20af754b76a76148200c9fea7c7aacff741146bc0e54c3428f5bd67664aa08dbfc2159cc7a5d57096d8c75552835816a25b10194d2526a486718cb9b625571e58e5a1b8b99c558f3c3", 0x9a}, {&(0x7f00000094c0)="c63fc947bdcc4690e36a3350797853b95747d4bc31663d42502b94c8a594836b3eeb93840c721012e5f1a4a3ecd52ffec8a5c74836624f6b85b57dba5e274b623d6b12f72c25ec4ebb94cf615e228cb432c2f7121292bfb779f035a36dfd29079d5ef22af08fddcbd8af51ae2c4466904bb98a69efc6ab2b9400496a42824ee65a91c4fb3277dc06bce7aadae5cbf20964570f6d9f7a31c06ae77f346f", 0x9d}, {&(0x7f0000009580)="1fbbe68807eeebf5df07c18e49dbe5ba79e30427ecf931da80e09c54bc2f1741275fff97754408c653c4ef761bc2ca82294e8ce70d0365ebeffaa0368c7174605cf55f1ad481c33e761543ca1dbd85b2662ddb2e0085d4247c6c208c6846abad9d1fa55059115ea19449769004a75a2d1fe70206972ee3ebd6a4776b3e", 0x7d}, {&(0x7f0000002140)="ab3d10ec1e7f60a33e22c9c82781139ae172950d37cc2c1d0845c6c3da65b94648fc8ff20e34ac", 0x27}], 0x6, &(0x7f0000009680)=[@assoc={0x18, 0x117, 0x4, 0x7}, @op={0xfffffffffffffed9}, @op={0x18}], 0x48, 0x220000d1}], 0x3, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000004a80)=ANY=[@ANYRESOCT=r1], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003680)='pids.current\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2940, 0x2, 0x9}, 0x18) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0xa0031718561a00d8, 0xffff, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x6366, 0x9ef1, 0x8, 0x5, 0x9b, 0x8, 0x2339fdf6, 0x5, 0x1000, 0x538, 0x0, 0xffffffffffffffff, 0x8, 0x5d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) recvmsg$can_j1939(r3, &(0x7f0000004a00)={0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/100, 0x64}, {0x0}, {&(0x7f00000048c0)=""/122, 0x7a}], 0x4, &(0x7f00000049c0)=""/6, 0x6}, 0x21) 5.516206664s ago: executing program 0 (id=3428): io_setup(0x8, &(0x7f00000002c0)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000180)={0x0, 0x3d, 0x0, 0x0, 0x0, r1, 0x0, 0x3d, 0x4, 0x0, 0x0, r1}]) 5.409668006s ago: executing program 2 (id=3429): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff086dd1fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", 0x0}, 0x50) 5.383951488s ago: executing program 2 (id=3431): prctl$PR_SET_DUMPABLE(0x4, 0x3) prctl$PR_SET_DUMPABLE(0x4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffa8, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESOCT, @ANYRES8=0x0, @ANYRES64=r0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r5 = io_uring_setup(0x21e1, &(0x7f0000000280)={0x0, 0x19cc, 0x800, 0x3, 0x391}) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000380)={0xad64, 0x0, &(0x7f0000000340)=[r2, r6, r3, r7, r0, 0xffffffffffffffff, r1]}, 0x7) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000000c0)={r10, 0x3, 0x6, @random="cea0300a1672"}, 0x10) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$FUSE(r11, 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r11, 0x80045006, &(0x7f00000001c0)) 5.324585389s ago: executing program 0 (id=3432): r0 = syz_mount_image$fuse(0x0, 0x0, 0x410, 0x0, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xffffb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000080)=0x6c, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000500)={0x100, 0x2, &(0x7f0000000400)=[0x4, 0x7], &(0x7f0000000440)=[0x2], &(0x7f0000000480), &(0x7f00000004c0)=[0x1, 0x154d, 0xffff, 0x5, 0x5, 0x0]}) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000022c0)="2c2b74fddbc858e42edcd12037e5751c680f2e3099edf8f9d5a3a3e83d9a78c4b9e8c4324c327477723fc69642803d0ed4f42e83d068a0cbe1038c574676809bcd3eb9c8abe84cf07e74bc76c679f56293ca909551c6bc396200608271a4cc09e0c90c686fe2d3b5ecbcffbcde51f51ef184793dccaa40c9a0edc00a0927", 0x7e}], 0x1, &(0x7f00000024c0)=ANY=[@ANYBLOB="18000000000000001701000004000000fcffffff00000000180000000000000017010000030000000100000000000000e0"], 0x110, 0x4000}], 0x1, 0x8081) recvmmsg(r9, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000bc0)=""/95, 0x5f}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2}, 0x4}], 0x1, 0x40012001, 0x0) sendmmsg$unix(r2, &(0x7f00000003c0)=[{{&(0x7f00000000c0)=@file={0x86079d747c7f1ac0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000240)="6bb27592e9067851f287c6f44fd5faa960566e0458e77be67ab5223c892701504340aa5dbf8313791d0c8488f4191e46b030b79284ad872c6b3bc2aecd0fd3b290c138dddbab3c28663c88d6c5109244c6153bae313f991b1b41c9f5eb0f79f46252ec750199eeed235e030b9507ae982446d983228e450c41500abff37680fcbf12f5893eba79e941fb7b15b68e2ef3ea989dcd25c4978feb0aba09caec8eb9d1c3bbb1b8dc17a6e26da1814164654409f2676417ac192d17b6103e15", 0xbd}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000300)="0aefb492c61d47506f4e402566b4f1cd8271c9376cd5109586184f3da7e098d9", 0x20}, {&(0x7f0000000340)="f6e5c35e1c707963fb6041824631f95338d95d4649754d230cb46d05707ca24ed7f13ab4f5b98d139121b1bd5a7fcaf7f5671547e2868ccfeaf61df2fac9197d566b015f5e037ddd89038ca06269509e39c6996ec50a74b16aa856e90ce8546dde601f814435060e86878e400eb3419d9031bdb830f20bd1d3099665746b96", 0x7f}, {&(0x7f0000000580)="08f9b652d4713248b790a4349c849a0d3eeabdccd53589a163173c5d7c5a2d6bab5e15a4bf057c9f75ba0daa5eb104ec079d979dec36e632cc768b4dd6190ce6d69556be7534804ddb2f7a8d0d41238e8b1e4a45d3da43a80c0e9fe8d378", 0x5e}], 0x5, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [r1, r7]}}, @rights={{0x28, 0x1, 0x1, [r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}}, @rights={{0x24, 0x1, 0x1, [r3, r3, r8, r7, r0]}}, @rights={{0x10}}], 0x78, 0x4004065}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket(0x1e, 0x4, 0x0) connect$tipc(r10, &(0x7f0000000040)=@id, 0x10) 5.029844652s ago: executing program 3 (id=3433): r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f0000000140)=0x5) 4.649562932s ago: executing program 2 (id=3434): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0xc) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000340)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x2, @mcast2, 0x3}, 0x1c, 0x0}}], 0x1, 0x55cfe9da1f5ebbe6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 4.009877716s ago: executing program 3 (id=3435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0x0, &(0x7f0000000080)=""/120}, 0x20) 3.887855879s ago: executing program 3 (id=3437): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRESOCT=r0, @ANYBLOB="0000000000002cbc0000660000002000000000000000000000005c93b5c69c5a4c345562fe87c2319500000000004000c703000001000020"], &(0x7f0000000040)='syzkaller\x00', 0x2d9d}, 0x94) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1, 0x0, 0xd}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r4, 0x540b, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa13, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)='}', 0x61) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 3.787573021s ago: executing program 4 (id=3438): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000000)=@id, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1b000100ff"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="0500"], 0x9) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff0400", 0x14, 0x6, 0x0, @remote, @mcast2, {[], {{0x7fe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x10}}}}}}}, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000300)=""/215, 0xd7) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-cast6-avx\x00'}, 0x58) timer_settime(r5, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r5) r6 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r6, &(0x7f0000000080), &(0x7f0000000200)=0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/profiling', 0x18000, 0x1) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3010, 0x0, 0x0, 0x0, r7}, 0x0, 0x0) r8 = socket$caif_stream(0x25, 0x1, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}, {@dfltgid}]}}) 3.569820338s ago: executing program 1 (id=3439): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0x18000c, 0x3, 0x59c, 0xffffffffffffffff}) 3.240941483s ago: executing program 1 (id=3440): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0x18000c, 0x3, 0x59c, 0xffffffffffffffff}) (fail_nth: 1) 3.190893225s ago: executing program 2 (id=3441): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffff7, 0x1) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000002c0)="d7be2f21d887454a0dfd12373aa419890549974942a866b085142c55529cc3d678c81b81f6e6ec0c1f6347b35c7ff71eb11b05423c5684d339e655e4855b87b241e3cef8cbeade7954ec8e97add7732f731f5203498689c45bd2e57905801ba7f441354be8a3fac479a56e51d181b3c946ffa9e80fece3658179c77a38ed3152f90ecef573fe2caf6bbefd5d4fc5bebe491f32f610b878595548cc99d128d438c381b54753328525ae6b3ce60d9d48e747ee4a997e2b30bb4e6183c7ce041de38b80182e8a336c8eaec9045e7a3c79189a6f1b8a79b6", 0xd6}], 0x1, &(0x7f0000000100)="1f5fe49578785e6f2763", 0xa, 0xa010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) fsync(0xffffffffffffffff) 3.063929678s ago: executing program 2 (id=3442): socket$can_raw(0x1d, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7c, 0x4, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0xb400, 0x0, 0x0, 0xb4}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) 2.863419887s ago: executing program 3 (id=3443): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe1f, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x1a0, 0x10, 0x5, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {0x0, 0x0, 0x10}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_auth={0x48, 0x1, {{'michael_mic-generic\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x1a0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGySKnFRWiFwAcEJiUP/gILkGweExD0oXLiUW68+VkLiEnGIelk0s7P27nr9lvgloZ9PNZnnmeeZZ377m2dmvOtaG+AL6+q5NB+myNVzbzwo66srs+3VldkjdXM7SVluJM3uKsWdpHiUzJXtRd+SvvUGHy1eeevTx6ufdWvNeqn6j2213wgj+i7XS6br8aZH7jm+00Ms1+HlpSTX6vWgiZ2ONdCxTNrZeg2HrjOokc7ybnbfzXULPGd6T6ei+9zcYCo5mmSy/jkg9d2hcXAR7qlv9Aq7ussBAADAC+qTu4cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx4qu//b61VG91NyXSK3vf/T/S21eXn0NyOez7c1zgAAAAAAAAA4GB8/Ume5EGO9eqdovqd/5mqciKfd5Iv5b3cz0Lu5XweZD5LWcq9XEwy1TfQxIP5paV7F9f2LI3e89LIPS8d1CsGAAAAAAAAgP9Lv0pr/ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSse6qWk7U60yl0cx6W5aTfyWZOOx4d6EYtfHhwccBAAAAz2TyKfb58pM8yYMc69U7RfWe/yvV++XJvJc7WcpiltLOQq7X76HLd/2N1ZXZ9urK7O1yKeuD4/7gP7sKY6IeYayqjTryqapHKzeyWG05n2tVMNfT6B77bHKqF09fXH0+LGMqvl/bYWTNOq3lwf6w2acIe2Lwo4jGFj1b68ElaxmZqWMr9zzezUBRfVCTDGdi+OxsOFhzoDZVdRlfO9LFNNY++TmxDzk/Wq/L1/Pbfc35TvTnYi0TjVSZuNSbfeU1s3Umkm/+7c9v32zfuXXzxv1zh/uSdmFsk+3Dc2K2LxOvvtCZaO6y/0yViZNr9av5cX6ac5nOm7mXxfws81nKQjp1+3w9n8t/p7bO1NxA7c3tIpmoz0v3nO0kpun8qCrN50y177EspsjdXM9CXq/+u5SL+U4u53Ku9J3hk5vGXb226qpvDF/1vTP995HBn/1WXSjvbr9bv8vNbfWKN5ude6V77y/zerwvr91Z/3it1/G+62CmL0sv97IzPnLwp7k3Nr9aF8pj/Hqb58TBmqozUV5AvadEL7pXuploVs+ijfP8j51yv7TvdDo359/dZPzlofpr9bqcVitf2653z+hTsbfK+fJyJus7yeDsKNteWbvL9LV11udyt23wiVvud7JqK4relfqT3K0mwMYrdaL+GW7jSJeqtleH2k7X9/Cy7VRf28DPW7mbdq4fQP4AeBr/fHutOJWjE61/tz5pfdz6Tetm643JHx757pHTExn/x/j3mjNjrzVOF3/Nx/nF+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6d1//4Nb8+32wr3RhcbmTQOFVoa3bDfyUKGov9BnVJ9b9bcU7GrAQy5MJhnYUn3P0YGH0RoOY0Oh88vkwPPT+xLB0X1+XxaaOzrdcwNb/rJxwA+3j2csQ/NwB9fFPhYaOdiDjmX0BDisOxJwUC4s3X73wv33P/j24u35dxbeWbgzfvnylZkrl1+fvXBjsb0w0/33sKME9sP6Q/+wIwEAAAAAAAAAAAB2atQfBpx5abs/GtlQaCQZ/hsP/2chAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCeunkvzYYpcnDk/U9ZXV2bb5dIrr/dsJmk0kuLnSfEomUt3yVTfcEX+9CidEcf5aPHKW58+Xv1sfaxmt3/SqNeb27o1yXK9ZDrJWL1+BgPjXXvm8Yr/9l5DmbDPO53O3LPFB3vjfwEAAP//qWztYw==") r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) r6 = syz_io_uring_setup(0xbdc, &(0x7f00000002c0)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x9}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x1f, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x1, 0xfffffffffefffffc, 0x4}, 0x0, 0x0, 0x0) 2.842888898s ago: executing program 4 (id=3444): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$inet_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./bus\x00', 0x208c, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) 2.821201214s ago: executing program 1 (id=3445): r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f0000000140)=0x5) 2.322843855s ago: executing program 4 (id=3446): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) r2 = dup(r1) socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2.2323359s ago: executing program 1 (id=3447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0x0, &(0x7f0000000080)=""/120}, 0x20) 1.89317666s ago: executing program 0 (id=3448): r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000f80)=""/4086, 0x44, 0xff6, 0x1, 0x4}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x90}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x40090) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setresuid(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ff", 0x22}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 1.829583095s ago: executing program 1 (id=3449): ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_overlay={0x9, 0xa, 0x4, 0x40, 0x2, {0x0, 0x2710}, {0x3, 0x0, 0x8, 0x1, 0x9, 0x1, "a3df36fd"}, 0x1, 0x3, {0x0}, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000004180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000200600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="1400000036000103000036ff6a0bdab1bd33e97d080b10e7f3f3e01090cfbf72"], 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x1020, &(0x7f00000009c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d3030303130303030302c757365725f69643d32dc9f311ff36e71fd5bbd90d48076623bd6ca5d171472e8c48d0f24925519a2775d18fe9ce8", @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030322c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030303830302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c616c6c6f775f6f746865722c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313030302c7065726d69745f646972656374696f2c736d61636b6673726f6f743dffff2c666f776e65723e", @ANYRESDEC, @ANYBLOB="2c6673757569643d63633a615a3634372d643730662d32cc630a2d346234332d61313533373232392c657569643d", @ANYRESDEC=r3, @ANYBLOB=',dont_hash,nomand,\x00'], 0x0, 0x0, &(0x7f0000000800)="0dc2b4605713d0c4f7a80866f21013499aa55bbae90aeaad19bb619b6bec0be8335bf7676561e7311a4af046d0cba2b442118c1a17119c23347e19be5df2e0f7084158") syz_init_net_socket$ax25(0x3, 0x5, 0xcf) syz_open_procfs(0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x25, 0x0, 0x0) r5 = semget$private(0x0, 0x3, 0x0) semop(r5, &(0x7f0000000240)=[{0x2, 0xd5db, 0x800}, {0x0, 0x200, 0x800}], 0x2) semctl$GETZCNT(r5, 0x2, 0xf, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x3}, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e63, 0x1ff, @loopback={0x200000000000000}, 0x23}, 0x1c) io_setup(0x2007, &(0x7f0000000980)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) io_destroy(r7) 1.733690472s ago: executing program 4 (id=3450): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x2004, @broadcast}, 0x10) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80040) write$P9_RSETATTR(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r6, 0x8903, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, r8, 0xb03, 0x3, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x4}]}]}, 0x20}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0) 1.697669337s ago: executing program 3 (id=3451): syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "00744d00889d3bc68afd5c976b4c1ce4a945b1aafb00"}]}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0xb001, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) write$char_usb(r2, &(0x7f0000001300)='7', 0x1) write$char_usb(r2, &(0x7f0000000bc0)="be", 0x1) syz_usb_disconnect(r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 1.215198233s ago: executing program 0 (id=3452): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) close(r5) socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r5, 0x4, 0x2c00) close_range(r4, 0xffffffffffffffff, 0x0) 983.191349ms ago: executing program 4 (id=3453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x24000801, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100", 0xba) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x891a, 0x0) r6 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a32000000000500010007000000140007800800134000000000080012"], 0x64}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, 0x0) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f00000000c0)={&(0x7f00007b3000/0x1000)=nil, &(0x7f0000208000/0x3000)=nil, 0x1000}) 125.415996ms ago: executing program 0 (id=3454): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRESOCT=r0, @ANYBLOB="0000000000002cbc0000660000002000000000000000000000005c93b5c69c5a4c345562fe87c2319500000000004000c703000001000020"], &(0x7f0000000040)='syzkaller\x00', 0x2d9d}, 0x94) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1, 0x0, 0xd}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r4, 0x540b, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa13, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)='}', 0x61) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 0s ago: executing program 4 (id=3455): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffff000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000000000600000000020000050e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014005e00000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket(0x15, 0x5, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000000000002fe, 0x61, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES64=r5], 0x20) ppoll(&(0x7f0000000540)=[{}], 0x5b, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000700)={0x810, 0x0, [{0x0, 0xda, &(0x7f00000007c0)=""/232}, {0x4, 0xeb, &(0x7f0000000440)=""/235}, {0x4000, 0x36, &(0x7f0000000100)=""/54}, {0x3000, 0xcc, &(0x7f0000000580)=""/204}]}) read(r7, &(0x7f00000002c0)=""/237, 0xed) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000040)=0x1) close_range(r6, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.612456][T17059] RSP: 002b:00007f2dc47ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 916.612475][T17059] RAX: ffffffffffffffda RBX: 00007f2dc67e6180 RCX: 00007f2dc658eec9 [ 916.612489][T17059] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000006 [ 916.612507][T17059] RBP: 00007f2dc47ac090 R08: 0000000000000000 R09: 0000000000000000 [ 916.612519][T17059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.612529][T17059] R13: 00007f2dc67e6218 R14: 00007f2dc67e6180 R15: 00007ffca19d1f88 [ 916.612560][T17059] [ 916.804286][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.836426][T17054] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 916.847893][T17054] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 916.856463][T17054] UDF-fs: Scanning with blocksize 2048 failed [ 916.863420][T17054] I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 916.873294][T17054] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 916.883430][T17054] I/O error, dev loop1, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 916.894337][T17054] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 916.904099][T17054] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 916.911872][T17054] UDF-fs: Scanning with blocksize 4096 failed [ 916.918645][T17054] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 916.949426][T16994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.324331][ T5866] Bluetooth: hci3: command tx timeout [ 917.686950][T16994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.030942][T17068] netlink: 'syz.0.3140': attribute type 2 has an invalid length. [ 918.043278][T17068] netlink: 'syz.0.3140': attribute type 8 has an invalid length. [ 918.051290][T17068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3140'. [ 918.113503][T17071] usb usb8: usbfs: process 17071 (syz.1.3142) did not claim interface 8 before use [ 918.115246][T16994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.376264][T17077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3143'. [ 918.390124][T17077] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 918.911100][T16994] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 918.925288][T16994] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 918.973618][T16994] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 918.993786][T16994] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 919.300737][ T5866] Bluetooth: hci3: command tx timeout [ 919.611597][T17090] ntfs3(loop1): try to read out of volume at offset 0x0 [ 919.665060][T16994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.775657][T16994] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.788522][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.795960][T13542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.819220][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.826369][T13542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.855427][T16994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 919.869050][T16994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 919.978392][T17109] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 920.082500][T17109] EXT4-fs (loop4): unable to read superblock [ 920.605125][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 920.611619][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 920.636206][T17109] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 920.666680][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3154'. [ 920.736668][T17109] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 920.848676][T17109] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 920.856800][T17109] UDF-fs: Scanning with blocksize 512 failed [ 920.872984][T17109] blk_print_req_error: 2 callbacks suppressed [ 920.872998][T17109] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 920.917148][T17109] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 920.995750][T17129] msdos: Unknown parameter 'flush 1 [ 928.237967][ T30] audit: type=1400 audit(1758586541.103:112): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=17191 comm="syz.1.3175" [ 928.383567][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 928.392328][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 928.400452][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 928.412826][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 928.944996][T17201] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 928.955936][T17201] EXT4-fs (loop3): unable to read superblock [ 929.081369][T17201] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 929.090729][T17201] FAT-fs (loop3): unable to read boot sector [ 929.211772][T17215] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 929.224194][T17215] hfs: can't find a HFS filesystem on dev loop2 [ 929.272564][T17215] iso9660: Unknown parameter '̧7WuGVOŅQȾaȓm/uK|JӾon' [ 929.484950][T15497] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 929.692639][T15497] usb 2-1: Using ep0 maxpacket: 32 [ 929.700135][T15497] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 929.724370][T15497] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 930.331361][T17217] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 930.385489][T15497] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 930.407144][T15497] usb 2-1: config 1 has no interface number 0 [ 930.413268][T15497] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 930.477872][T15497] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 930.541459][T15497] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 930.560824][T15497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.603742][T15497] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 930.622377][T17202] chnl_net:caif_netlink_parms(): no params data found [ 930.788662][T17207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.830172][T17207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.894287][T15497] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 931.083221][T17227] tipc: Started in network mode [ 931.088195][T17227] tipc: Node identity 0adffe47d168, cluster identity 4711 [ 931.101872][T17227] tipc: Enabled bearer , priority 0 [ 931.115749][T17233] tipc: Resetting bearer [ 931.131891][T15499] usb 2-1: USB disconnect, device number 54 [ 931.139451][T15499] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 931.279329][T17226] tipc: Disabling bearer [ 931.523018][T17202] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.536810][T17202] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.546132][T17202] bridge_slave_0: entered allmulticast mode [ 931.554613][T17202] bridge_slave_0: entered promiscuous mode [ 931.564967][T17202] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.575346][T17202] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.583079][T17202] bridge_slave_1: entered allmulticast mode [ 931.601666][T17202] bridge_slave_1: entered promiscuous mode [ 931.665662][T17202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.681115][T17202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.968419][T17256] __nla_validate_parse: 135 callbacks suppressed [ 931.968436][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'. [ 931.984917][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'. [ 931.994900][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'. [ 932.003881][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'. [ 932.013444][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'. [ 932.022494][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'. [ 932.031957][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'. [ 932.040952][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'. [ 932.050301][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'. [ 932.059349][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'. [ 932.318335][T17202] team0: Port device team_slave_0 added [ 932.768861][T17202] team0: Port device team_slave_1 added [ 932.842893][T17267] netlink: 'syz.2.3193': attribute type 21 has an invalid length. [ 934.107380][T17283] syzkaller0: entered promiscuous mode [ 934.131343][T17283] syzkaller0: entered allmulticast mode [ 934.151960][T17202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.179243][T17202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.261177][T17202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.441261][T17202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.471264][T17202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.568260][T17202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.303851][T17202] hsr_slave_0: entered promiscuous mode [ 935.332951][T17202] hsr_slave_1: entered promiscuous mode [ 935.353188][T17305] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 935.369796][T17305] EXT4-fs (loop4): unable to read superblock [ 935.376816][T17202] debugfs: 'hsr0' already exists in 'hsr' [ 935.385513][T17202] Cannot create hsr debugfs directory [ 935.462086][T17305] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 935.472206][T17305] FAT-fs (loop4): unable to read boot sector [ 936.502804][T15497] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 936.683501][T15497] usb 4-1: Using ep0 maxpacket: 16 [ 936.700210][T15497] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 936.709353][T15497] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.721711][T15497] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 936.740428][T15497] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 936.751442][T15497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.780152][T15497] usb 4-1: Product: syz [ 936.784506][T15497] usb 4-1: Manufacturer: syz [ 936.793905][T15497] usb 4-1: SerialNumber: syz [ 937.012079][T17202] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.104711][ T30] audit: type=1326 audit(1758586550.878:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17324 comm="syz.1.3206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37a618eec9 code=0x0 [ 937.560686][T15497] usb 4-1: 0:2 : does not exist [ 937.839972][T17202] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.975562][T17202] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.030801][ T1210] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 938.064333][T17329] erofs: Unexpected value for 'user_xattr' [ 938.172836][T17323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.189924][T17202] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.208103][ T1210] usb 2-1: Using ep0 maxpacket: 8 [ 938.215266][ T1210] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 938.241863][ T1210] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 938.263079][ T1210] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 938.310916][ T1210] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 938.322359][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.330486][ T1210] usb 2-1: Product: syz [ 938.344966][ T1210] usb 2-1: Manufacturer: syz [ 938.349602][ T1210] usb 2-1: SerialNumber: syz [ 938.374901][ T1210] usb 2-1: config 0 descriptor?? [ 938.439461][ T1210] imon_raw 2-1:0.0: IR endpoint missing [ 938.546528][T17202] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 938.581924][T17202] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 938.606015][T17202] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 938.619819][T17202] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 938.894991][T17340] __nla_validate_parse: 134 callbacks suppressed [ 938.895011][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 938.911533][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 938.921071][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 938.930143][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 938.939675][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 938.948792][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 938.958181][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 938.967253][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 938.976601][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 938.985630][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 939.239362][T17202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.256259][T17202] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.387405][T15497] usb 4-1: USB disconnect, device number 29 [ 939.396663][ T1210] usb 2-1: USB disconnect, device number 55 [ 939.934665][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.941931][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.258031][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.265320][T13542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.477108][T15497] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 940.648080][T15501] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 940.678235][T15497] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 940.772575][T15497] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 940.872111][T15501] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 940.955387][T17202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 940.976111][T17202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 941.540218][T15497] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 941.552671][T15501] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 941.569902][T15497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.578223][T15497] usb 4-1: Product: syz [ 941.681594][T15497] usb 4-1: Manufacturer: syz [ 941.697439][T15501] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 941.716604][T15497] usb 4-1: SerialNumber: syz [ 941.728790][T15501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.761637][T15501] usb 2-1: Product: syz [ 941.766017][T15501] usb 2-1: Manufacturer: syz [ 941.775707][T15501] usb 2-1: SerialNumber: syz [ 941.787270][T15501] usb 2-1: config 0 descriptor?? [ 941.794491][T17366] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 941.808118][T17366] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 941.912547][T15502] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 942.021097][T17202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.022568][T17358] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 942.047368][T17358] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 942.085379][T15502] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 942.094071][T15502] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 942.132627][T15502] usb 3-1: config 0 has no interface number 0 [ 942.148938][T15502] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 942.178560][T15502] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 942.198180][T15502] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 942.229081][T15502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.275805][T15502] usb 3-1: config 0 descriptor?? [ 942.658389][T15501] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 942.676137][T15497] usb 4-1: 0:2 : does not exist [ 942.721652][T15501] usb 2-1: USB disconnect, device number 56 [ 942.735838][T15497] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 942.768688][T15497] usb 4-1: USB disconnect, device number 30 [ 942.891665][T17391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.900472][T17391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.921417][T17338] udevd[17338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 942.961292][T17377] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.969107][T17377] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.975741][T17393] FAULT_INJECTION: forcing a failure. [ 942.975741][T17393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.998287][T17393] CPU: 0 UID: 0 PID: 17393 Comm: syz.3.3219 Not tainted syzkaller #0 PREEMPT(full) [ 942.998311][T17393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 942.998323][T17393] Call Trace: [ 942.998330][T17393] [ 942.998337][T17393] dump_stack_lvl+0x189/0x250 [ 942.998362][T17393] ? __pfx____ratelimit+0x10/0x10 [ 942.998384][T17393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 942.998407][T17393] ? __pfx__printk+0x10/0x10 [ 942.998429][T17393] ? __might_fault+0xb0/0x130 [ 942.998462][T17393] should_fail_ex+0x414/0x560 [ 942.998489][T17393] _copy_from_user+0x2d/0xb0 [ 942.998507][T17393] do_sock_getsockopt+0x17d/0x450 [ 942.998529][T17393] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 942.998546][T17393] ? do_syscall_64+0xa0/0xfa0 [ 942.998563][T17393] ? __fget_files+0x2a/0x420 [ 942.998579][T17393] ? __fget_files+0x3a0/0x420 [ 942.998592][T17393] ? __fget_files+0x2a/0x420 [ 942.998614][T17393] __x64_sys_getsockopt+0x1a5/0x250 [ 942.998632][T17393] ? do_syscall_64+0xa0/0xfa0 [ 942.998652][T17393] ? do_syscall_64+0xa0/0xfa0 [ 942.998673][T17393] do_syscall_64+0xfa/0xfa0 [ 942.998700][T17393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.998715][T17393] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 942.998729][T17393] ? clear_bhb_loop+0x60/0xb0 [ 942.998750][T17393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.998763][T17393] RIP: 0033:0x7fc9b598eec9 [ 942.998778][T17393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.998792][T17393] RSP: 002b:00007fc9b6896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 942.998810][T17393] RAX: ffffffffffffffda RBX: 00007fc9b5be5fa0 RCX: 00007fc9b598eec9 [ 942.998823][T17393] RDX: 000000000000001a RSI: 0000000000000006 RDI: 0000000000000003 [ 942.998833][T17393] RBP: 00007fc9b6896090 R08: 0000200000000000 R09: 0000000000000000 [ 942.998845][T17393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.998854][T17393] R13: 00007fc9b5be6038 R14: 00007fc9b5be5fa0 R15: 00007fff38aaf238 [ 942.998883][T17393] [ 943.219607][T15502] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input24 [ 943.235064][T15502] input: failed to attach handler kbd to device input24, error: -5 [ 944.320653][T17377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.368188][T17377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.846214][T17407] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 944.876810][T17407] macsec1: entered allmulticast mode [ 944.904138][T17407] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 944.928238][T15497] usb 3-1: USB disconnect, device number 45 [ 944.940274][T17411] FAULT_INJECTION: forcing a failure. [ 944.940274][T17411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.958548][T17411] CPU: 1 UID: 0 PID: 17411 Comm: syz.1.3223 Not tainted syzkaller #0 PREEMPT(full) [ 944.958572][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 944.958581][T17411] Call Trace: [ 944.958589][T17411] [ 944.958597][T17411] dump_stack_lvl+0x189/0x250 [ 944.958621][T17411] ? __pfx____ratelimit+0x10/0x10 [ 944.958641][T17411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 944.958659][T17411] ? __pfx__printk+0x10/0x10 [ 944.958680][T17411] ? __might_fault+0xb0/0x130 [ 944.958714][T17411] should_fail_ex+0x414/0x560 [ 944.958740][T17411] _copy_from_user+0x2d/0xb0 [ 944.958759][T17411] ___sys_sendmsg+0x158/0x2a0 [ 944.958783][T17411] ? __pfx____sys_sendmsg+0x10/0x10 [ 944.958838][T17411] ? __fget_files+0x2a/0x420 [ 944.958855][T17411] ? __fget_files+0x3a0/0x420 [ 944.958883][T17411] __x64_sys_sendmsg+0x19b/0x260 [ 944.958906][T17411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 944.958935][T17411] ? __pfx_ksys_write+0x10/0x10 [ 944.958963][T17411] ? do_syscall_64+0xbe/0xfa0 [ 944.958984][T17411] do_syscall_64+0xfa/0xfa0 [ 944.959002][T17411] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.959021][T17411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.959037][T17411] ? clear_bhb_loop+0x60/0xb0 [ 944.959059][T17411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.959075][T17411] RIP: 0033:0x7f37a618eec9 [ 944.959091][T17411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.959106][T17411] RSP: 002b:00007f37a6ff0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.959125][T17411] RAX: ffffffffffffffda RBX: 00007f37a63e5fa0 RCX: 00007f37a618eec9 [ 944.959138][T17411] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 944.959149][T17411] RBP: 00007f37a6ff0090 R08: 0000000000000000 R09: 0000000000000000 [ 944.959160][T17411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.959170][T17411] R13: 00007f37a63e6038 R14: 00007f37a63e5fa0 R15: 00007fff61ae3e08 [ 944.959200][T17411] [ 945.339560][T17416] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 945.358610][T17416] EXT4-fs (loop4): unable to read superblock [ 945.640582][T17407] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 945.713609][T17407] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 946.028442][T17416] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 946.047404][T17416] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 946.057665][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.061886][T17421] tmpfs: Bad value for 'mpol' [ 946.068199][T17416] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 946.084238][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.093254][T17416] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 946.108964][T17416] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 946.142241][T17416] UDF-fs: Scanning with blocksize 512 failed [ 946.149876][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.150809][T17416] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 946.238760][T17416] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 946.248521][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.257476][T17202] veth0_vlan: entered promiscuous mode [ 946.452496][T17202] veth1_vlan: entered promiscuous mode [ 946.488974][T17416] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 946.522441][T17416] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 946.664859][T17416] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 946.689195][T17202] veth0_macvtap: entered promiscuous mode [ 946.720080][T17416] UDF-fs: Scanning with blocksize 1024 failed [ 946.725470][T17202] veth1_macvtap: entered promiscuous mode [ 946.739793][T17416] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 946.764348][T17416] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 946.765497][T17202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.794335][T17202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.802230][T17416] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 946.913359][T17416] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 946.938857][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.948760][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.956834][T17416] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 946.975652][T17416] UDF-fs: Scanning with blocksize 2048 failed [ 946.988917][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.035940][T17416] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 947.057533][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.068007][T17416] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 947.081731][T17416] I/O error, dev loop4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 947.106936][T17435] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 947.129649][T17435] EXT4-fs (loop1): unable to read superblock [ 947.157596][T17416] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 947.180137][T17416] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 947.187818][T17416] UDF-fs: Scanning with blocksize 4096 failed [ 947.218255][T13542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.226124][T13542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.235541][T17416] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 947.300919][T17435] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 947.319769][T17435] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 947.321724][T15137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.361348][T17435] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 947.381909][T17435] UDF-fs: Scanning with blocksize 512 failed [ 947.407366][T17435] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 947.420599][T17435] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 947.459389][T17435] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 947.510272][T17435] UDF-fs: Scanning with blocksize 1024 failed [ 947.540386][T17435] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 947.565687][T15137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.574002][T17435] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 947.584629][T17435] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 947.592649][T17435] UDF-fs: Scanning with blocksize 2048 failed [ 947.601787][T17435] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 947.612350][T17435] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 947.622721][T17435] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 947.630486][T17435] UDF-fs: Scanning with blocksize 4096 failed [ 947.638779][T17435] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 947.731678][T17442] FAULT_INJECTION: forcing a failure. [ 947.731678][T17442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.922596][T17442] CPU: 0 UID: 0 PID: 17442 Comm: syz.3.3232 Not tainted syzkaller #0 PREEMPT(full) [ 947.922622][T17442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 947.922634][T17442] Call Trace: [ 947.922642][T17442] [ 947.922651][T17442] dump_stack_lvl+0x189/0x250 [ 947.922678][T17442] ? __pfx____ratelimit+0x10/0x10 [ 947.922699][T17442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 947.922715][T17442] ? __pfx__printk+0x10/0x10 [ 947.922736][T17442] ? __might_fault+0xb0/0x130 [ 947.922769][T17442] should_fail_ex+0x414/0x560 [ 947.922797][T17442] _copy_from_user+0x2d/0xb0 [ 947.922818][T17442] copy_bpf_fprog_from_user+0x15c/0x2b0 [ 947.922845][T17442] ? __pfx_copy_bpf_fprog_from_user+0x10/0x10 [ 947.922879][T17442] sk_setsockopt+0x1a9b/0x2dc0 [ 947.922908][T17442] ? __pfx_sk_setsockopt+0x10/0x10 [ 947.922928][T17442] ? __lock_acquire+0xab9/0xd20 [ 947.922957][T17442] ? aa_sk_perm+0x81e/0x950 [ 947.922983][T17442] ? __pfx_aa_sk_perm+0x10/0x10 [ 947.923005][T17442] ? aa_sock_opt_perm+0xff/0x1b0 [ 947.923030][T17442] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 947.923052][T17442] do_sock_setsockopt+0x11b/0x1b0 [ 947.923078][T17442] __x64_sys_setsockopt+0x13f/0x1b0 [ 947.923104][T17442] do_syscall_64+0xfa/0xfa0 [ 947.923123][T17442] ? lockdep_hardirqs_on+0x9c/0x150 [ 947.923143][T17442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.923160][T17442] ? clear_bhb_loop+0x60/0xb0 [ 947.923181][T17442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.923204][T17442] RIP: 0033:0x7fc9b598eec9 [ 947.923220][T17442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.923236][T17442] RSP: 002b:00007fc9b6875038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 947.923256][T17442] RAX: ffffffffffffffda RBX: 00007fc9b5be6090 RCX: 00007fc9b598eec9 [ 947.923269][T17442] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 947.923280][T17442] RBP: 00007fc9b6875090 R08: 0000000000000010 R09: 0000000000000000 [ 947.923292][T17442] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 947.923303][T17442] R13: 00007fc9b5be6128 R14: 00007fc9b5be6090 R15: 00007fff38aaf238 [ 947.923335][T17442] [ 948.863922][T17458] FAULT_INJECTION: forcing a failure. [ 948.863922][T17458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.922749][T17458] CPU: 0 UID: 0 PID: 17458 Comm: syz.2.3236 Not tainted syzkaller #0 PREEMPT(full) [ 948.922775][T17458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 948.922786][T17458] Call Trace: [ 948.922794][T17458] [ 948.922803][T17458] dump_stack_lvl+0x189/0x250 [ 948.922829][T17458] ? __pfx____ratelimit+0x10/0x10 [ 948.922849][T17458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 948.922870][T17458] ? __pfx__printk+0x10/0x10 [ 948.922892][T17458] ? __might_fault+0xb0/0x130 [ 948.922927][T17458] should_fail_ex+0x414/0x560 [ 948.922954][T17458] _copy_from_user+0x2d/0xb0 [ 948.922974][T17458] ucma_bind_ip+0xa9/0x240 [ 948.923001][T17458] ? __pfx_ucma_bind_ip+0x10/0x10 [ 948.923040][T17458] ucma_write+0x249/0x2e0 [ 948.923065][T17458] ? __pfx_ucma_write+0x10/0x10 [ 948.923087][T17458] ? security_file_permission+0x75/0x290 [ 948.923106][T17458] ? rw_verify_area+0x255/0x4d0 [ 948.923127][T17458] ? __lock_acquire+0xab9/0xd20 [ 948.923147][T17458] ? __pfx_ucma_write+0x10/0x10 [ 948.923171][T17458] vfs_write+0x27e/0xb30 [ 948.923202][T17458] ? __pfx_vfs_write+0x10/0x10 [ 948.923227][T17458] ? __fget_files+0x2a/0x420 [ 948.923247][T17458] ? __fget_files+0x2a/0x420 [ 948.923269][T17458] ? __fget_files+0x3a0/0x420 [ 948.923285][T17458] ? __fget_files+0x2a/0x420 [ 948.923312][T17458] ksys_write+0x145/0x250 [ 948.923338][T17458] ? __pfx_ksys_write+0x10/0x10 [ 948.923365][T17458] ? do_syscall_64+0xbe/0xfa0 [ 948.923390][T17458] do_syscall_64+0xfa/0xfa0 [ 948.923408][T17458] ? lockdep_hardirqs_on+0x9c/0x150 [ 948.923427][T17458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.923445][T17458] ? clear_bhb_loop+0x60/0xb0 [ 948.923466][T17458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.923482][T17458] RIP: 0033:0x7f1963d8eec9 [ 948.923498][T17458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.923513][T17458] RSP: 002b:00007f1964c0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 948.923532][T17458] RAX: ffffffffffffffda RBX: 00007f1963fe5fa0 RCX: 00007f1963d8eec9 [ 948.923546][T17458] RDX: 0000000000000030 RSI: 00002000000002c0 RDI: 0000000000000003 [ 948.923558][T17458] RBP: 00007f1964c0b090 R08: 0000000000000000 R09: 0000000000000000 [ 948.923568][T17458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.923579][T17458] R13: 00007f1963fe6038 R14: 00007f1963fe5fa0 R15: 00007ffdff6d48b8 [ 948.923610][T17458] [ 949.356733][T17467] FAULT_INJECTION: forcing a failure. [ 949.356733][T17467] name failslab, interval 1, probability 0, space 0, times 0 [ 949.525241][T17467] CPU: 1 UID: 0 PID: 17467 Comm: syz.4.3237 Not tainted syzkaller #0 PREEMPT(full) [ 949.525267][T17467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 949.525279][T17467] Call Trace: [ 949.525287][T17467] [ 949.525295][T17467] dump_stack_lvl+0x189/0x250 [ 949.525321][T17467] ? __pfx____ratelimit+0x10/0x10 [ 949.525341][T17467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 949.525362][T17467] ? __pfx__printk+0x10/0x10 [ 949.525391][T17467] ? __pfx___might_resched+0x10/0x10 [ 949.525414][T17467] ? fs_reclaim_acquire+0x7d/0x100 [ 949.525436][T17467] should_fail_ex+0x414/0x560 [ 949.525464][T17467] should_failslab+0xa8/0x100 [ 949.525484][T17467] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 949.525510][T17467] ? __get_vm_area_node+0x13f/0x300 [ 949.525538][T17467] __get_vm_area_node+0x13f/0x300 [ 949.525567][T17467] __vmalloc_node_range_noprof+0x301/0x12f0 [ 949.525592][T17467] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 949.525615][T17467] ? __lock_acquire+0xab9/0xd20 [ 949.525663][T17467] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 949.525686][T17467] ? __might_fault+0xb0/0x130 [ 949.525711][T17467] ? _parse_integer_limit+0x1ae/0x1f0 [ 949.525740][T17467] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 949.525760][T17467] __vmalloc_noprof+0xb1/0xf0 [ 949.525782][T17467] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 949.525807][T17467] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 949.525851][T17467] bpf_prog_alloc+0x3c/0x1a0 [ 949.525876][T17467] bpf_prog_load+0x735/0x1930 [ 949.525910][T17467] ? __pfx_bpf_prog_load+0x10/0x10 [ 949.525954][T17467] ? bpf_lsm_bpf+0x9/0x20 [ 949.525974][T17467] ? security_bpf+0x7e/0x300 [ 949.525995][T17467] __sys_bpf+0x528/0x870 [ 949.526019][T17467] ? __pfx___sys_bpf+0x10/0x10 [ 949.526052][T17467] ? ksys_write+0x22a/0x250 [ 949.526079][T17467] ? __pfx_ksys_write+0x10/0x10 [ 949.526108][T17467] __x64_sys_bpf+0x7c/0x90 [ 949.526129][T17467] do_syscall_64+0xfa/0xfa0 [ 949.526149][T17467] ? lockdep_hardirqs_on+0x9c/0x150 [ 949.526168][T17467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.526185][T17467] ? clear_bhb_loop+0x60/0xb0 [ 949.526225][T17467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.526242][T17467] RIP: 0033:0x7f7a05b8eec9 [ 949.526258][T17467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.526274][T17467] RSP: 002b:00007f7a069dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 949.526294][T17467] RAX: ffffffffffffffda RBX: 00007f7a05de5fa0 RCX: 00007f7a05b8eec9 [ 949.526307][T17467] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 949.526319][T17467] RBP: 00007f7a069dd090 R08: 0000000000000000 R09: 0000000000000000 [ 949.526330][T17467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.526340][T17467] R13: 00007f7a05de6038 R14: 00007f7a05de5fa0 R15: 00007ffd086bef48 [ 949.526372][T17467] [ 949.526381][T17467] syz.4.3237: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 950.345721][T17474] blk_print_req_error: 8 callbacks suppressed [ 950.345759][T17474] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 950.380361][T17467] CPU: 1 UID: 0 PID: 17467 Comm: syz.4.3237 Not tainted syzkaller #0 PREEMPT(full) [ 950.380387][T17467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 950.380398][T17467] Call Trace: [ 950.380407][T17467] [ 950.380416][T17467] dump_stack_lvl+0x189/0x250 [ 950.380445][T17467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 950.380467][T17467] ? __pfx__printk+0x10/0x10 [ 950.380489][T17467] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 950.380508][T17467] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 950.380527][T17467] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 950.380548][T17467] warn_alloc+0x214/0x310 [ 950.380572][T17467] ? __pfx_warn_alloc+0x10/0x10 [ 950.380599][T17467] ? __get_vm_area_node+0x2b5/0x300 [ 950.380629][T17467] __vmalloc_node_range_noprof+0x326/0x12f0 [ 950.380654][T17467] ? __lock_acquire+0xab9/0xd20 [ 950.380702][T17467] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 950.380724][T17467] ? __might_fault+0xb0/0x130 [ 950.380755][T17467] ? _parse_integer_limit+0x1ae/0x1f0 [ 950.380785][T17467] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 950.380805][T17467] __vmalloc_noprof+0xb1/0xf0 [ 950.380828][T17467] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 950.380850][T17467] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 950.380877][T17467] bpf_prog_alloc+0x3c/0x1a0 [ 950.380901][T17467] bpf_prog_load+0x735/0x1930 [ 950.380934][T17467] ? __pfx_bpf_prog_load+0x10/0x10 [ 950.380978][T17467] ? bpf_lsm_bpf+0x9/0x20 [ 950.380997][T17467] ? security_bpf+0x7e/0x300 [ 950.381019][T17467] __sys_bpf+0x528/0x870 [ 950.381041][T17467] ? __pfx___sys_bpf+0x10/0x10 [ 950.381078][T17467] ? ksys_write+0x22a/0x250 [ 950.381105][T17467] ? __pfx_ksys_write+0x10/0x10 [ 950.381133][T17467] __x64_sys_bpf+0x7c/0x90 [ 950.381158][T17467] do_syscall_64+0xfa/0xfa0 [ 950.381176][T17467] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.381196][T17467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.381213][T17467] ? clear_bhb_loop+0x60/0xb0 [ 950.381235][T17467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.381252][T17467] RIP: 0033:0x7f7a05b8eec9 [ 950.381268][T17467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.381284][T17467] RSP: 002b:00007f7a069dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 950.381303][T17467] RAX: ffffffffffffffda RBX: 00007f7a05de5fa0 RCX: 00007f7a05b8eec9 [ 950.381316][T17467] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 950.381328][T17467] RBP: 00007f7a069dd090 R08: 0000000000000000 R09: 0000000000000000 [ 950.381339][T17467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.381350][T17467] R13: 00007f7a05de6038 R14: 00007f7a05de5fa0 R15: 00007ffd086bef48 [ 950.381381][T17467] [ 950.381541][T17467] Mem-Info: [ 950.601800][T17474] EXT4-fs (loop1): unable to read superblock [ 950.684019][T17467] active_anon:8940 inactive_anon:0 isolated_anon:0 [ 950.684019][T17467] active_file:25357 inactive_file:40914 isolated_file:0 [ 950.684019][T17467] unevictable:768 dirty:456 writeback:0 [ 950.684019][T17467] slab_reclaimable:11885 slab_unreclaimable:106447 [ 950.684019][T17467] mapped:33849 shmem:4246 pagetables:1310 [ 950.684019][T17467] sec_pagetables:0 bounce:0 [ 950.684019][T17467] kernel_misc_reclaimable:0 [ 950.684019][T17467] free:1287911 free_pcp:11155 free_cma:0 [ 950.796827][T17467] Node 0 active_anon:35560kB inactive_anon:0kB active_file:101428kB inactive_file:163368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135220kB dirty:1820kB writeback:0kB shmem:15448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13852kB pagetables:5076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 950.881669][T17474] ext4: Bad value for 'barrier' [ 950.902588][T17467] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 950.932802][T17467] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.966217][T17467] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 950.973080][T17467] Node 0 DMA32 free:1242304kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35760kB inactive_anon:0kB active_file:101428kB inactive_file:163368kB unevictable:1536kB writepending:1820kB zspages:0kB present:3129332kB managed:2550800kB mlocked:0kB bounce:0kB free_pcp:33164kB local_pcp:18264kB free_cma:0kB [ 950.991229][T17480] FAULT_INJECTION: forcing a failure. [ 950.991229][T17480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.008758][T17467] lowmem_reserve[]: 0 0 0 0 0 [ 951.025972][T17467] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 951.070644][T17467] lowmem_reserve[]: 0 0 0 0 0 [ 951.079819][T17480] CPU: 0 UID: 0 PID: 17480 Comm: syz.0.3243 Not tainted syzkaller #0 PREEMPT(full) [ 951.079844][T17480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 951.079855][T17480] Call Trace: [ 951.079863][T17480] [ 951.079880][T17480] dump_stack_lvl+0x189/0x250 [ 951.079903][T17480] ? __pfx____ratelimit+0x10/0x10 [ 951.079921][T17480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 951.079940][T17480] ? __pfx__printk+0x10/0x10 [ 951.079959][T17480] ? __might_fault+0xb0/0x130 [ 951.079991][T17480] should_fail_ex+0x414/0x560 [ 951.080017][T17480] _copy_from_user+0x2d/0xb0 [ 951.080035][T17480] proc_setgroups_write+0x14d/0x430 [ 951.080060][T17480] ? __pfx_proc_setgroups_write+0x10/0x10 [ 951.080092][T17480] vfs_writev+0x4b6/0x960 [ 951.080112][T17480] ? __pfx_proc_setgroups_write+0x10/0x10 [ 951.080135][T17480] ? __pfx_vfs_writev+0x10/0x10 [ 951.080165][T17480] ? __fget_files+0x2a/0x420 [ 951.080184][T17480] ? __fget_files+0x3a0/0x420 [ 951.080196][T17480] ? __fget_files+0x2a/0x420 [ 951.080219][T17480] do_writev+0x14d/0x2d0 [ 951.080238][T17480] ? __pfx_do_writev+0x10/0x10 [ 951.080258][T17480] ? do_syscall_64+0xbe/0xfa0 [ 951.080282][T17480] do_syscall_64+0xfa/0xfa0 [ 951.080299][T17480] ? lockdep_hardirqs_on+0x9c/0x150 [ 951.080318][T17480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.080336][T17480] ? clear_bhb_loop+0x60/0xb0 [ 951.080356][T17480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.080372][T17480] RIP: 0033:0x7f7bb278eec9 [ 951.080386][T17480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.080399][T17480] RSP: 002b:00007f7bb354f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 951.080418][T17480] RAX: ffffffffffffffda RBX: 00007f7bb29e5fa0 RCX: 00007f7bb278eec9 [ 951.080431][T17480] RDX: 0000000000000001 RSI: 0000200000003740 RDI: 0000000000000003 [ 951.080443][T17480] RBP: 00007f7bb354f090 R08: 0000000000000000 R09: 0000000000000000 [ 951.080453][T17480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.080462][T17480] R13: 00007f7bb29e6038 R14: 00007f7bb29e5fa0 R15: 00007ffc28d11848 [ 951.080491][T17480] [ 951.113603][T17467] Node 1 [ 951.369212][T17487] FAULT_INJECTION: forcing a failure. [ 951.369212][T17487] name failslab, interval 1, probability 0, space 0, times 0 [ 951.373981][T17489] FAULT_INJECTION: forcing a failure. [ 951.373981][T17489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.403387][T17487] CPU: 0 UID: 0 PID: 17487 Comm: syz.0.3246 Not tainted syzkaller #0 PREEMPT(full) [ 951.403410][T17487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 951.403419][T17487] Call Trace: [ 951.403427][T17487] [ 951.403435][T17487] dump_stack_lvl+0x189/0x250 [ 951.403460][T17487] ? __pfx____ratelimit+0x10/0x10 [ 951.403480][T17487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 951.403499][T17487] ? __pfx__printk+0x10/0x10 [ 951.403525][T17487] ? __pfx___might_resched+0x10/0x10 [ 951.403546][T17487] ? fs_reclaim_acquire+0x7d/0x100 [ 951.403567][T17487] should_fail_ex+0x414/0x560 [ 951.403593][T17487] should_failslab+0xa8/0x100 [ 951.403613][T17487] kmem_cache_alloc_noprof+0x74/0x6e0 [ 951.403636][T17487] ? getname_flags+0xb8/0x540 [ 951.403660][T17487] getname_flags+0xb8/0x540 [ 951.403682][T17487] __x64_sys_lgetxattr+0x1b2/0x210 [ 951.403707][T17487] ? __pfx___x64_sys_lgetxattr+0x10/0x10 [ 951.403752][T17487] ? __pfx_ksys_write+0x10/0x10 [ 951.403777][T17487] ? do_syscall_64+0xbe/0xfa0 [ 951.403800][T17487] do_syscall_64+0xfa/0xfa0 [ 951.403817][T17487] ? lockdep_hardirqs_on+0x9c/0x150 [ 951.403848][T17487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.403865][T17487] ? clear_bhb_loop+0x60/0xb0 [ 951.403886][T17487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.403901][T17487] RIP: 0033:0x7f7bb278eec9 [ 951.403919][T17487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.403934][T17487] RSP: 002b:00007f7bb354f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 951.403952][T17487] RAX: ffffffffffffffda RBX: 00007f7bb29e5fa0 RCX: 00007f7bb278eec9 [ 951.403964][T17487] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00002000000023c0 [ 951.403975][T17487] RBP: 00007f7bb354f090 R08: 0000000000000000 R09: 0000000000000000 [ 951.403986][T17487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.403997][T17487] R13: 00007f7bb29e6038 R14: 00007f7bb29e5fa0 R15: 00007ffc28d11848 [ 951.404025][T17487] [ 951.404521][T17467] Normal free:3893980kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:288kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12236kB local_pcp:12236kB free_cma:0kB [ 951.406958][T17489] CPU: 1 UID: 0 PID: 17489 Comm: syz.2.3247 Not tainted syzkaller #0 PREEMPT(full) [ 951.406980][T17489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 951.406991][T17489] Call Trace: [ 951.406998][T17489] [ 951.407006][T17489] dump_stack_lvl+0x189/0x250 [ 951.407030][T17489] ? __pfx____ratelimit+0x10/0x10 [ 951.407050][T17489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 951.407069][T17489] ? __pfx__printk+0x10/0x10 [ 951.407099][T17489] ? __might_fault+0xb0/0x130 [ 951.407133][T17489] should_fail_ex+0x414/0x560 [ 951.407160][T17489] _copy_from_iter+0x1de/0x1790 [ 951.407186][T17489] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 951.407203][T17489] ? __lock_acquire+0xab9/0xd20 [ 951.407230][T17489] ? policy_nodemask+0x27c/0x720 [ 951.407247][T17489] ? __pfx__copy_from_iter+0x10/0x10 [ 951.407277][T17489] ? set_page_refcounted+0xa0/0x1e0 [ 951.407294][T17489] ? page_copy_sane+0x4e/0x280 [ 951.407311][T17489] copy_page_from_iter+0xdd/0x170 [ 951.407331][T17489] tun_get_user+0x1d7b/0x3e20 [ 951.407362][T17489] ? tun_get_user+0x6f6/0x3e20 [ 951.407391][T17489] ? stack_trace_save+0x9c/0xe0 [ 951.407409][T17489] ? __pfx_tun_get_user+0x10/0x10 [ 951.407434][T17489] ? save_netdev_trace_buffer+0x14f/0x5e0 [ 951.407461][T17489] ? save_netdev_trace_buffer+0x4e2/0x5e0 [ 951.407481][T17489] ? __lock_acquire+0xab9/0xd20 [ 951.407507][T17489] ? ref_tracker_alloc+0x318/0x460 [ 951.407527][T17489] ? tun_get+0x157/0x2f0 [ 951.407545][T17489] ? tun_chr_write_iter+0x60/0x210 [ 951.407564][T17489] ? ksys_write+0x145/0x250 [ 951.407586][T17489] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 951.407613][T17489] ? tun_get+0x1c/0x2f0 [ 951.407639][T17489] ? tun_get+0x1c/0x2f0 [ 951.407658][T17489] ? tun_get+0x1c/0x2f0 [ 951.407683][T17489] tun_chr_write_iter+0x113/0x210 [ 951.407707][T17489] vfs_write+0x5c9/0xb30 [ 951.407733][T17489] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 951.407755][T17489] ? __pfx_vfs_write+0x10/0x10 [ 951.407786][T17489] ? __fget_files+0x2a/0x420 [ 951.407812][T17489] ksys_write+0x145/0x250 [ 951.407836][T17489] ? __pfx_ksys_write+0x10/0x10 [ 951.407861][T17489] ? do_syscall_64+0xbe/0xfa0 [ 951.407884][T17489] do_syscall_64+0xfa/0xfa0 [ 951.407901][T17489] ? lockdep_hardirqs_on+0x9c/0x150 [ 951.407920][T17489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.407937][T17489] ? clear_bhb_loop+0x60/0xb0 [ 951.407956][T17489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.407972][T17489] RIP: 0033:0x7f1963d8d97f [ 951.407987][T17489] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 951.408001][T17489] RSP: 002b:00007f1964c0b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 951.408019][T17489] RAX: ffffffffffffffda RBX: 00007f1963fe5fa0 RCX: 00007f1963d8d97f [ 951.408031][T17489] RDX: 0000000000000032 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 951.408042][T17489] RBP: 00007f1964c0b090 R08: 0000000000000000 R09: 0000000000000000 [ 951.408052][T17489] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001 [ 951.408062][T17489] R13: 00007f1963fe6038 R14: 00007f1963fe5fa0 R15: 00007ffdff6d48b8 [ 951.408096][T17489] [ 951.574784][T16674] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 951.917712][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 951.974715][T17467] lowmem_reserve[]: 0 0 0 0 0 [ 951.986363][T17467] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 952.007997][T17467] Node 0 DMA32: 2346*4kB (UM) 1244*8kB (UM) 1831*16kB (UM) 1325*32kB (UME) 827*64kB (UM) 413*128kB (UME) 174*256kB (UM) 144*512kB (UME) 112*1024kB (UM) 36*2048kB (UME) 182*4096kB (UM) = 1248984kB [ 952.045496][T17467] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 952.057552][T17499] netlink: 'syz.3.3251': attribute type 10 has an invalid length. [ 952.063711][T17467] Node 1 Normal: 15*4kB (UE) 18*8kB (UME) 51*16kB (UME) 243*32kB (UME) 106*64kB (UE) 34*128kB (UME) 5*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 943*4096kB (M) = 3893980kB [ 952.068561][T17499] __nla_validate_parse: 134 callbacks suppressed [ 952.068574][T17499] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3251'. [ 952.095671][T17467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 952.116676][T16674] usb 2-1: Using ep0 maxpacket: 16 [ 952.129053][T17467] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 952.140489][T17467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 952.151451][T17467] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 952.161555][T17467] 67655 total pagecache pages [ 952.166626][T17467] 0 pages in swap cache [ 952.172041][T16674] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.183419][T16674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 952.199497][T16674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 952.209424][T17467] Free swap = 124996kB [ 952.213978][T17467] Total swap = 124996kB [ 952.218731][T16674] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 952.228801][T17467] 2097051 pages RAM [ 952.232627][T17467] 0 pages HighMem/MovableOnly [ 952.238940][T16674] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 952.253310][T17467] 427581 pages reserved [ 952.257979][T17467] 0 pages cma reserved [ 952.268249][T16674] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 952.285496][T16674] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 952.332434][T16674] usb 2-1: Manufacturer: syz [ 952.340034][T17507] fuse: Invalid rootmode [ 952.350786][T16674] usb 2-1: config 0 descriptor?? [ 952.361256][ T24] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 952.424572][T17513] binder: 17506:17513 ioctl c0306201 0 returned -14 [ 952.517978][ T24] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 952.529653][ T24] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.542082][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 952.548731][ T24] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 952.561114][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.577658][ T24] usb 3-1: config 0 descriptor?? [ 953.488437][ T24] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 953.505030][ T24] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 953.519243][ T24] hid-steam 0003:28DE:1102.000D: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 953.530807][T16674] rc_core: IR keymap rc-hauppauge not found [ 953.538683][T16674] Registered IR keymap rc-empty [ 953.560524][T16674] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 953.590065][T16674] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 953.610960][T17501] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 953.618778][ T24] hid-steam 0003:28DE:1102.000D: Steam Controller 'XXXXXXXXXX' connected [ 953.657995][T17501] overlayfs: failed to set xattr on upper [ 953.662428][T17529] FAULT_INJECTION: forcing a failure. [ 953.662428][T17529] name failslab, interval 1, probability 0, space 0, times 0 [ 953.663748][T17501] overlayfs: ...falling back to redirect_dir=nofollow. [ 953.685264][ T24] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.000D/input/input26 [ 953.704350][T16674] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 953.749376][T17501] overlayfs: ...falling back to index=off. [ 953.760774][T16674] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input25 [ 953.777957][ T24] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0 [ 953.800956][T17501] overlayfs: ...falling back to uuid=null. [ 953.815332][ T24] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0 [ 953.836570][T16674] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 953.844611][T17529] CPU: 0 UID: 0 PID: 17529 Comm: syz.3.3261 Not tainted syzkaller #0 PREEMPT(full) [ 953.844633][T17529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 953.844642][T17529] Call Trace: [ 953.844648][T17529] [ 953.844655][T17529] dump_stack_lvl+0x189/0x250 [ 953.844676][T17529] ? __pfx____ratelimit+0x10/0x10 [ 953.844693][T17529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 953.844709][T17529] ? __pfx__printk+0x10/0x10 [ 953.844730][T17529] ? __pfx___might_resched+0x10/0x10 [ 953.844753][T17529] ? fs_reclaim_acquire+0x7d/0x100 [ 953.844771][T17529] should_fail_ex+0x414/0x560 [ 953.844793][T17529] should_failslab+0xa8/0x100 [ 953.844811][T17529] __kmalloc_noprof+0xcb/0x7f0 [ 953.844832][T17529] ? bpf_test_init+0xc2/0x170 [ 953.844855][T17529] bpf_test_init+0xc2/0x170 [ 953.844879][T17529] bpf_prog_test_run_skb+0x1e9/0x1560 [ 953.844892][T17529] ? __fget_files+0x2a/0x420 [ 953.844908][T17529] ? __fget_files+0x2a/0x420 [ 953.844927][T17529] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 953.844942][T17529] bpf_prog_test_run+0x2c7/0x340 [ 953.844962][T17529] __sys_bpf+0x581/0x870 [ 953.844979][T17529] ? __pfx___sys_bpf+0x10/0x10 [ 953.845005][T17529] ? ksys_write+0x22a/0x250 [ 953.845026][T17529] ? __pfx_ksys_write+0x10/0x10 [ 953.845049][T17529] __x64_sys_bpf+0x7c/0x90 [ 953.845066][T17529] do_syscall_64+0xfa/0xfa0 [ 953.845082][T17529] ? lockdep_hardirqs_on+0x9c/0x150 [ 953.845098][T17529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.845114][T17529] ? clear_bhb_loop+0x60/0xb0 [ 953.845132][T17529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.845148][T17529] RIP: 0033:0x7fc9b598eec9 [ 953.845164][T17529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.845178][T17529] RSP: 002b:00007fc9b6896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 953.845196][T17529] RAX: ffffffffffffffda RBX: 00007fc9b5be5fa0 RCX: 00007fc9b598eec9 [ 953.845208][T17529] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 953.845219][T17529] RBP: 00007fc9b6896090 R08: 0000000000000000 R09: 0000000000000000 [ 953.845230][T17529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.845240][T17529] R13: 00007fc9b5be6038 R14: 00007fc9b5be5fa0 R15: 00007fff38aaf238 [ 953.845268][T17529] [ 954.074662][ C0] vkms_vblank_simulate: vblank timer overrun [ 954.114265][ T24] hid-steam 0003:28DE:1102.000E: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 954.142314][T16674] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 954.187015][ T24] usb 3-1: USB disconnect, device number 46 [ 954.195013][T16674] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 954.262386][T16674] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 954.323783][T16674] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 954.335145][ T24] hid-steam 0003:28DE:1102.000D: Steam Controller 'XXXXXXXXXX' disconnected [ 954.362162][T17535] FAULT_INJECTION: forcing a failure. [ 954.362162][T17535] name failslab, interval 1, probability 0, space 0, times 0 [ 954.393297][T16674] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 954.417429][T17535] CPU: 0 UID: 0 PID: 17535 Comm: syz.0.3263 Not tainted syzkaller #0 PREEMPT(full) [ 954.417450][T17535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 954.417459][T17535] Call Trace: [ 954.417465][T17535] [ 954.417473][T17535] dump_stack_lvl+0x189/0x250 [ 954.417497][T17535] ? __pfx____ratelimit+0x10/0x10 [ 954.417526][T17535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 954.417544][T17535] ? __pfx__printk+0x10/0x10 [ 954.417570][T17535] ? __pfx___might_resched+0x10/0x10 [ 954.417592][T17535] ? fs_reclaim_acquire+0x7d/0x100 [ 954.417615][T17535] should_fail_ex+0x414/0x560 [ 954.417643][T17535] should_failslab+0xa8/0x100 [ 954.417663][T17535] __kmalloc_noprof+0xcb/0x7f0 [ 954.417686][T17535] ? tomoyo_encode+0x28b/0x550 [ 954.417714][T17535] tomoyo_encode+0x28b/0x550 [ 954.417740][T17535] tomoyo_realpath_from_path+0x58d/0x5d0 [ 954.417763][T17535] ? tomoyo_domain+0xd9/0x130 [ 954.417791][T17535] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 954.417809][T17535] tomoyo_path_number_perm+0x1e8/0x5a0 [ 954.417831][T17535] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 954.417887][T17535] ? __fget_files+0x2a/0x420 [ 954.417910][T17535] ? __fget_files+0x3a0/0x420 [ 954.417925][T17535] ? __fget_files+0x2a/0x420 [ 954.417945][T17535] security_file_ioctl+0xcb/0x2d0 [ 954.417966][T17535] __se_sys_ioctl+0x47/0x170 [ 954.417987][T17535] do_syscall_64+0xfa/0xfa0 [ 954.418004][T17535] ? lockdep_hardirqs_on+0x9c/0x150 [ 954.418021][T17535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.418036][T17535] ? clear_bhb_loop+0x60/0xb0 [ 954.418055][T17535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.418070][T17535] RIP: 0033:0x7f7bb278eec9 [ 954.418084][T17535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 954.418098][T17535] RSP: 002b:00007f7bb09f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 954.418116][T17535] RAX: ffffffffffffffda RBX: 00007f7bb29e6090 RCX: 00007f7bb278eec9 [ 954.418129][T17535] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 954.418140][T17535] RBP: 00007f7bb09f6090 R08: 0000000000000000 R09: 0000000000000000 [ 954.418151][T17535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.418161][T17535] R13: 00007f7bb29e6128 R14: 00007f7bb29e6090 R15: 00007ffc28d11848 [ 954.418193][T17535] [ 954.446842][T16674] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 954.448713][ C0] vkms_vblank_simulate: vblank timer overrun [ 954.543963][T17485] netlink: 'syz.1.3240': attribute type 29 has an invalid length. [ 954.573280][T17536] fido_id[17536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 954.618491][T17535] ERROR: Out of memory at tomoyo_realpath_from_path. [ 954.714878][T17526] netlink: 'syz.1.3240': attribute type 29 has an invalid length. [ 955.259631][T16674] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 955.473591][T16674] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 955.571575][T16674] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 955.621027][T16674] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 955.694707][T16674] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 956.244192][T17554] Bluetooth: MGMT ver 1.23 [ 957.040789][T15498] usb 2-1: USB disconnect, device number 57 [ 957.287247][T17562] fuse: Invalid rootmode [ 957.446299][ T30] audit: type=1326 audit(1758586572.233:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a05b8eec9 code=0x7ffc0000 [ 957.513825][ T30] audit: type=1326 audit(1758586572.265:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7a05b8eec9 code=0x7ffc0000 [ 957.566627][ T30] audit: type=1326 audit(1758586572.265:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a05b8ef03 code=0x7ffc0000 [ 957.626880][T17572] binder: 17561:17572 ioctl c0306201 0 returned -14 [ 957.665399][ T30] audit: type=1326 audit(1758586572.265:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a05b8eec9 code=0x7ffc0000 [ 957.730555][ T30] audit: type=1326 audit(1758586572.286:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a05b8eec9 code=0x7ffc0000 [ 957.801150][ T30] audit: type=1326 audit(1758586572.359:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7a05b8eec9 code=0x7ffc0000 [ 957.867306][ T30] audit: type=1326 audit(1758586572.359:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a05b8eec9 code=0x7ffc0000 [ 957.924401][ T30] audit: type=1326 audit(1758586572.359:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a05b8eec9 code=0x7ffc0000 [ 957.975610][ T30] audit: type=1326 audit(1758586572.359:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a05b8eec9 code=0x7ffc0000 [ 958.034784][ T30] audit: type=1326 audit(1758586572.359:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17567 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a05b8eec9 code=0x7ffc0000 [ 958.241145][T17584] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3278'. [ 958.345639][T17584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3278'. [ 959.705908][T17600] FAULT_INJECTION: forcing a failure. [ 959.705908][T17600] name failslab, interval 1, probability 0, space 0, times 0 [ 959.719131][T17600] CPU: 1 UID: 0 PID: 17600 Comm: syz.0.3284 Not tainted syzkaller #0 PREEMPT(full) [ 959.719157][T17600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 959.719168][T17600] Call Trace: [ 959.719177][T17600] [ 959.719186][T17600] dump_stack_lvl+0x189/0x250 [ 959.719212][T17600] ? __pfx____ratelimit+0x10/0x10 [ 959.719233][T17600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 959.719253][T17600] ? __pfx__printk+0x10/0x10 [ 959.719276][T17600] ? __lock_acquire+0xab9/0xd20 [ 959.719309][T17600] should_fail_ex+0x414/0x560 [ 959.719336][T17600] should_failslab+0xa8/0x100 [ 959.719357][T17600] kmem_cache_alloc_noprof+0x74/0x6e0 [ 959.719382][T17600] ? __send_signal_locked+0x22a/0xeb0 [ 959.719400][T17600] ? sig_get_ucounts+0x26/0x450 [ 959.719420][T17600] ? sig_get_ucounts+0x3e4/0x450 [ 959.719444][T17600] __send_signal_locked+0x22a/0xeb0 [ 959.719466][T17600] ? mt_find+0x46f/0x5e0 [ 959.719489][T17600] force_sig_info_to_task+0x30c/0x590 [ 959.719520][T17600] force_sig_fault+0xdc/0x130 [ 959.719543][T17600] ? __pfx_force_sig_fault+0x10/0x10 [ 959.719570][T17600] ? fixup_vdso_exception+0x2cc/0x300 [ 959.719602][T17600] __bad_area_nosemaphore+0x3b3/0x780 [ 959.719636][T17600] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 959.719663][T17600] ? rcu_is_watching+0x15/0xb0 [ 959.719686][T17600] ? trace_page_fault_user+0x84/0x1e0 [ 959.719712][T17600] exc_page_fault+0x82/0x100 [ 959.719735][T17600] asm_exc_page_fault+0x26/0x30 [ 959.719751][T17600] RIP: 0033:0x7f7bb2656ef4 [ 959.719768][T17600] Code: f5 48 8b 54 24 58 48 8b 4c 24 50 48 89 4c 24 18 48 8b 8c 24 40 1b 00 00 48 89 4c 24 48 48 8b 8c 24 48 1b 00 00 48 89 4c 24 28 <48> 8b 08 48 89 4c 24 08 48 8b 48 08 48 8b 40 10 48 89 4c 24 10 48 [ 959.719783][T17600] RSP: 002b:00007f7bb354d4f0 EFLAGS: 00010206 [ 959.719799][T17600] RAX: 0000000000000000 RBX: 00007f7bb354dbe0 RCX: 0000000000000000 [ 959.719811][T17600] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 959.719824][T17600] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000043 [ 959.719835][T17600] R10: ffffffffffffffff R11: 0000200000fe8000 R12: 0000000000000000 [ 959.719848][T17600] R13: 0000200000fe8000 R14: 0000200000fe8000 R15: 00000000fec00000 [ 959.719879][T17600] [ 959.776926][T17608] macsec1: entered allmulticast mode [ 959.926722][T17613] FAULT_INJECTION: forcing a failure. [ 959.926722][T17613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.926753][T17613] CPU: 1 UID: 0 PID: 17613 Comm: syz.1.3286 Not tainted syzkaller #0 PREEMPT(full) [ 959.926770][T17613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 959.926781][T17613] Call Trace: [ 959.926789][T17613] [ 959.926796][T17613] dump_stack_lvl+0x189/0x250 [ 959.926822][T17613] ? __pfx____ratelimit+0x10/0x10 [ 959.926841][T17613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 959.926861][T17613] ? __pfx__printk+0x10/0x10 [ 959.926893][T17613] should_fail_ex+0x414/0x560 [ 959.926920][T17613] strncpy_from_user+0x36/0x290 [ 959.926954][T17613] getname_flags+0xf3/0x540 [ 959.926976][T17613] __x64_sys_execveat+0xad/0xe0 [ 959.927001][T17613] do_syscall_64+0xfa/0xfa0 [ 959.927019][T17613] ? lockdep_hardirqs_on+0x9c/0x150 [ 959.927038][T17613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.927054][T17613] ? clear_bhb_loop+0x60/0xb0 [ 959.927074][T17613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.927089][T17613] RIP: 0033:0x7f37a618eec9 [ 959.927105][T17613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.927119][T17613] RSP: 002b:00007f37a6fcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 959.927137][T17613] RAX: ffffffffffffffda RBX: 00007f37a63e6090 RCX: 00007f37a618eec9 [ 959.927149][T17613] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 959.927160][T17613] RBP: 00007f37a6fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 959.927171][T17613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.927181][T17613] R13: 00007f37a63e6128 R14: 00007f37a63e6090 R15: 00007fff61ae3e08 [ 959.927209][T17613] [ 960.136536][T17608] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 960.153086][T17608] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 960.210347][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3283'. [ 960.401128][T17627] fuse: Invalid rootmode [ 960.459265][T17627] binder: BINDER_SET_CONTEXT_MGR already set [ 960.486015][T17627] binder: 17626:17627 ioctl 4018620d 200000004a80 returned -16 [ 960.590305][T17632] binder: 17626:17632 ioctl c0306201 0 returned -14 [ 960.615885][T17639] FAULT_INJECTION: forcing a failure. [ 960.615885][T17639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.670081][T17639] CPU: 1 UID: 0 PID: 17639 Comm: syz.1.3292 Not tainted syzkaller #0 PREEMPT(full) [ 960.670106][T17639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 960.670117][T17639] Call Trace: [ 960.670123][T17639] [ 960.670131][T17639] dump_stack_lvl+0x189/0x250 [ 960.670155][T17639] ? __pfx____ratelimit+0x10/0x10 [ 960.670175][T17639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 960.670195][T17639] ? __pfx__printk+0x10/0x10 [ 960.670228][T17639] should_fail_ex+0x414/0x560 [ 960.670253][T17639] strncpy_from_user+0x36/0x290 [ 960.670277][T17639] getname_flags+0xf3/0x540 [ 960.670297][T17639] user_path_at+0x24/0x60 [ 960.670317][T17639] do_fchownat+0x105/0x270 [ 960.670336][T17639] ? __pfx_do_fchownat+0x10/0x10 [ 960.670350][T17639] ? ksys_write+0x22a/0x250 [ 960.670373][T17639] ? __pfx_ksys_write+0x10/0x10 [ 960.670398][T17639] __x64_sys_fchownat+0xb5/0xd0 [ 960.670417][T17639] do_syscall_64+0xfa/0xfa0 [ 960.670435][T17639] ? lockdep_hardirqs_on+0x9c/0x150 [ 960.670452][T17639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.670468][T17639] ? clear_bhb_loop+0x60/0xb0 [ 960.670488][T17639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.670504][T17639] RIP: 0033:0x7f37a618eec9 [ 960.670517][T17639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.670532][T17639] RSP: 002b:00007f37a6fcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 960.670550][T17639] RAX: ffffffffffffffda RBX: 00007f37a63e6090 RCX: 00007f37a618eec9 [ 960.670562][T17639] RDX: 000000000000ee01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 960.670572][T17639] RBP: 00007f37a6fcf090 R08: 0000000000001000 R09: 0000000000000000 [ 960.670583][T17639] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 960.670594][T17639] R13: 00007f37a63e6128 R14: 00007f37a63e6090 R15: 00007fff61ae3e08 [ 960.670623][T17639] [ 961.009603][T17641] /dev/loop0: Can't lookup blockdev [ 961.930793][T17649] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 961.965461][T17649] EXT4-fs (loop4): unable to read superblock [ 963.097648][T17649] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.117020][T17649] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 963.208376][T17649] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.232389][T17649] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 963.247563][T17649] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 963.257229][T17649] UDF-fs: Scanning with blocksize 512 failed [ 963.264025][T17649] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.286848][T17649] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 963.300744][T17649] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.310565][T17649] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 963.320480][T17649] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 963.329165][T17649] UDF-fs: Scanning with blocksize 1024 failed [ 963.336723][T17649] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.358459][T17649] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 963.412997][T17649] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.432499][T17649] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 963.461252][T17649] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 963.482861][T17649] UDF-fs: Scanning with blocksize 2048 failed [ 963.499682][T17649] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.511094][T17673] team0: No ports can be present during mode change [ 963.527684][T17673] tipc: Enabling of bearer rejected, failed to enable media [ 963.565345][T17649] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 963.609503][T17649] I/O error, dev loop4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.619663][T17649] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 963.630856][T17649] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 963.647614][T17649] UDF-fs: Scanning with blocksize 4096 failed [ 963.653928][T17649] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 964.292909][T17685] fuse: Invalid rootmode [ 966.206532][T17706] EXT4-fs: Ignoring removed bh option [ 966.239365][T17706] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 966.283888][T17706] EXT4-fs (loop3): unable to read superblock [ 966.495810][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 966.495828][ T30] audit: type=1326 audit(1758586581.735:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.3.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 967.032988][ T30] audit: type=1326 audit(1758586581.735:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.3.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 967.056044][ T30] audit: type=1326 audit(1758586581.735:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.3.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 967.103524][ T30] audit: type=1326 audit(1758586581.745:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.3.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 967.167569][ T30] audit: type=1326 audit(1758586581.745:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.3.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 967.262625][ T30] audit: type=1326 audit(1758586581.745:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.3.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 967.304610][ T30] audit: type=1326 audit(1758586581.745:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.3.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 967.381710][ T30] audit: type=1326 audit(1758586581.745:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.3.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 967.445399][T15137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.467325][ T30] audit: type=1326 audit(1758586581.745:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.3.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 967.520616][ T30] audit: type=1326 audit(1758586581.745:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.3.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 967.549572][T17726] team0: No ports can be present during mode change [ 967.745699][T15137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.796841][T17726] tipc: Enabling of bearer rejected, failed to enable media [ 967.900092][T15137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.006990][T15137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.042750][T17742] team0: No ports can be present during mode change [ 968.052043][T17741] fuse: Invalid rootmode [ 968.108173][T17742] tipc: Enabling of bearer rejected, failed to enable media [ 968.855936][T15137] bridge_slave_1: left allmulticast mode [ 968.898019][T15137] bridge_slave_1: left promiscuous mode [ 968.907338][T15137] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.967921][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 968.980987][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 968.990743][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 968.999377][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 969.000085][T15137] bridge_slave_0: left allmulticast mode [ 969.013718][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 969.086747][T15137] bridge_slave_0: left promiscuous mode [ 969.102707][T15137] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.248499][T15498] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 969.311927][T17763] FAULT_INJECTION: forcing a failure. [ 969.311927][T17763] name failslab, interval 1, probability 0, space 0, times 0 [ 969.343314][T17763] CPU: 0 UID: 0 PID: 17763 Comm: syz.3.3330 Not tainted syzkaller #0 PREEMPT(full) [ 969.343340][T17763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 969.343352][T17763] Call Trace: [ 969.343359][T17763] [ 969.343366][T17763] dump_stack_lvl+0x189/0x250 [ 969.343389][T17763] ? __pfx____ratelimit+0x10/0x10 [ 969.343409][T17763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 969.343429][T17763] ? __pfx__printk+0x10/0x10 [ 969.343458][T17763] ? __pfx___might_resched+0x10/0x10 [ 969.343480][T17763] ? fs_reclaim_acquire+0x7d/0x100 [ 969.343503][T17763] should_fail_ex+0x414/0x560 [ 969.343531][T17763] should_failslab+0xa8/0x100 [ 969.343553][T17763] __kmalloc_noprof+0xcb/0x7f0 [ 969.343576][T17763] ? tomoyo_encode+0x28b/0x550 [ 969.343605][T17763] tomoyo_encode+0x28b/0x550 [ 969.343632][T17763] tomoyo_realpath_from_path+0x58d/0x5d0 [ 969.343654][T17763] ? tomoyo_domain+0xd9/0x130 [ 969.343678][T17763] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 969.343704][T17763] tomoyo_path_number_perm+0x1e8/0x5a0 [ 969.343727][T17763] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 969.343785][T17763] ? __fget_files+0x2a/0x420 [ 969.343808][T17763] ? __fget_files+0x3a0/0x420 [ 969.343824][T17763] ? __fget_files+0x2a/0x420 [ 969.343845][T17763] security_file_ioctl+0xcb/0x2d0 [ 969.343886][T17763] __se_sys_ioctl+0x47/0x170 [ 969.343911][T17763] do_syscall_64+0xfa/0xfa0 [ 969.343931][T17763] ? lockdep_hardirqs_on+0x9c/0x150 [ 969.343950][T17763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.343967][T17763] ? clear_bhb_loop+0x60/0xb0 [ 969.343988][T17763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.344004][T17763] RIP: 0033:0x7fc9b598eec9 [ 969.344021][T17763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 969.344037][T17763] RSP: 002b:00007fc9b6896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 969.344056][T17763] RAX: ffffffffffffffda RBX: 00007fc9b5be5fa0 RCX: 00007fc9b598eec9 [ 969.344069][T17763] RDX: 00002000000001c0 RSI: 000000004138ae84 RDI: 0000000000000005 [ 969.344081][T17763] RBP: 00007fc9b6896090 R08: 0000000000000000 R09: 0000000000000000 [ 969.344092][T17763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.344103][T17763] R13: 00007fc9b5be6038 R14: 00007fc9b5be5fa0 R15: 00007fff38aaf238 [ 969.344134][T17763] [ 969.344211][T17763] ERROR: Out of memory at tomoyo_realpath_from_path. [ 969.624864][T15498] usb 3-1: unable to get BOS descriptor or descriptor too short [ 969.636003][T15498] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 969.646813][T15498] usb 3-1: can't read configurations, error -71 [ 970.089492][T15137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.101417][T15137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.113636][T15137] bond0 (unregistering): Released all slaves [ 970.522936][T17782] ntfs3(loop3): try to read out of volume at offset 0x0 [ 970.737978][T17789] fuse: Invalid rootmode [ 970.969930][ T51] Bluetooth: hci1: command tx timeout [ 971.361664][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 972.731344][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3341'. [ 972.939031][T15137] hsr_slave_0: left promiscuous mode [ 972.944087][ T5866] Bluetooth: hci1: command tx timeout [ 972.958441][T15137] hsr_slave_1: left promiscuous mode [ 972.985454][T15137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.994345][T15137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.008037][T15137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.016454][T15137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.138672][T15137] veth1_macvtap: left promiscuous mode [ 973.155612][T15137] veth0_macvtap: left promiscuous mode [ 973.161734][T15137] veth1_vlan: left promiscuous mode [ 973.168418][T15137] veth0_vlan: left promiscuous mode [ 973.238611][T15502] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 973.404366][T15502] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.424885][T15502] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 973.454997][T15502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.492002][T15502] usb 5-1: config 0 descriptor?? [ 973.894796][T15502] steelseries 0003:1038:12B6.000F: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 974.924723][ T5866] Bluetooth: hci1: command tx timeout [ 975.123769][T15137] team0 (unregistering): Port device team_slave_1 removed [ 975.505968][T15137] team0 (unregistering): Port device team_slave_0 removed [ 976.381950][T15501] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 976.565186][T15501] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 976.630612][T15501] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 976.641866][T15501] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 976.657855][T15501] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 976.711332][T15501] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.757785][T15501] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 976.766613][T15501] usb 4-1: invalid MIDI out EP 0 [ 976.896423][T17338] udevd[17338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 976.915552][ T5866] Bluetooth: hci1: command tx timeout [ 976.958241][T15501] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 977.100690][T15502] steelseries 0003:1038:12B6.000F: hid_hw_raw_request() failed with -71 [ 977.160950][T15502] usb 5-1: USB disconnect, device number 41 [ 977.259640][ T24] usb 4-1: USB disconnect, device number 31 [ 977.349107][T17804] team0: No ports can be present during mode change [ 977.412893][T17753] chnl_net:caif_netlink_parms(): no params data found [ 977.471701][T17817] tipc: Enabling of bearer rejected, failed to enable media [ 977.923671][T17753] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.946205][T17753] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.174756][T15502] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 978.346673][T15502] usb 1-1: Using ep0 maxpacket: 8 [ 978.375447][T15502] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 978.412333][T15502] usb 1-1: config 0 has no interface number 0 [ 978.469964][T17753] bridge_slave_0: entered allmulticast mode [ 978.478364][T17753] bridge_slave_0: entered promiscuous mode [ 978.487090][T17753] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.494380][T17753] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.496353][T15502] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 978.502099][T17753] bridge_slave_1: entered allmulticast mode [ 978.552279][T15502] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 978.614624][T15502] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 978.643742][T15502] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 978.658886][T15502] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 978.673968][T15502] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 978.677491][T16674] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 978.684271][T15502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.703299][T17753] bridge_slave_1: entered promiscuous mode [ 978.710385][T15502] usb 1-1: config 0 descriptor?? [ 978.718216][T15502] usb 1-1: can't set config #0, error -71 [ 978.742468][T15502] usb 1-1: USB disconnect, device number 49 [ 978.831490][T17875] overlayfs: missing 'workdir' [ 978.900256][T17753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.917681][T16674] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 978.943801][T16674] usb 4-1: config 0 has no interface number 0 [ 978.962006][T17753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.963251][T16674] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 979.002547][T16674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.054082][T16674] usb 4-1: config 0 descriptor?? [ 979.084075][T16674] usb 4-1: selecting invalid altsetting 1 [ 979.097212][T16674] dvb_ttusb_budget: ttusb_init_controller: error [ 979.113595][T16674] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 979.125342][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 979.125406][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 979.150858][T17753] team0: Port device team_slave_0 added [ 979.180291][T17753] team0: Port device team_slave_1 added [ 979.228514][T17886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 979.371028][T16674] DVB: Unable to find symbol cx22700_attach() [ 979.393144][T17753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.427669][T17753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.518412][T16674] DVB: Unable to find symbol tda10046_attach() [ 979.532560][T16674] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 979.802116][T17753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.943397][T16674] usb 4-1: USB disconnect, device number 32 [ 979.952818][T17753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.983659][T17753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.081476][T17753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.264329][T17753] hsr_slave_0: entered promiscuous mode [ 980.289302][T17753] hsr_slave_1: entered promiscuous mode [ 980.316560][T17753] debugfs: 'hsr0' already exists in 'hsr' [ 980.322325][T17753] Cannot create hsr debugfs directory [ 980.463417][T17906] team0: No ports can be present during mode change [ 980.503985][T17906] tipc: Enabling of bearer rejected, failed to enable media [ 981.221467][ T5979] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 981.395689][ T5979] usb 3-1: Using ep0 maxpacket: 8 [ 981.405658][ T5979] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 981.416220][ T5979] usb 3-1: config 0 has no interface number 0 [ 981.432701][ T5979] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 981.464067][ T5979] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 981.489923][ T5979] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 981.506432][T17753] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 981.516423][T16674] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 981.524971][T15502] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 981.535144][ T5979] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 981.539195][T17753] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 981.552343][ T5979] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 981.583827][T17753] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 981.588024][ T5979] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 981.608649][T17753] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 981.616967][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.636639][ T5979] usb 3-1: Product: syz [ 981.649089][ T5979] usb 3-1: Manufacturer: syz [ 981.656558][ T5979] usb 3-1: SerialNumber: syz [ 981.678062][T16674] usb 4-1: Using ep0 maxpacket: 32 [ 981.685157][T16674] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 981.702741][T15502] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 981.716609][T15502] usb 1-1: config 0 has no interface number 0 [ 981.717608][ T5979] usb 3-1: config 0 descriptor?? [ 981.733868][T15502] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 981.740008][T16674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.777651][T15502] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 981.795357][T15502] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 981.811916][T16674] usb 4-1: config 0 descriptor?? [ 981.825750][T15502] usb 1-1: Product: syz [ 981.839191][T15502] usb 1-1: Manufacturer: syz [ 981.852347][T15502] usb 1-1: SerialNumber: syz [ 981.880595][T15502] usb 1-1: config 0 descriptor?? [ 981.890055][T17753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.904087][T15502] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 981.927668][T15502] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 981.968893][T15502] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 981.978469][T17753] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.996132][T15502] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 981.997250][ T5979] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=쇳敺ކ interface=186 now attached to iowarrior0 [ 982.022571][T15502] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 982.024751][T15137] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.037572][T15137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.056144][T15502] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 982.061308][T15137] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.071351][T15137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.085563][T16674] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 982.085567][T15502] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 982.119913][T16674] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 982.130752][T17954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.141312][T16674] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 982.150967][T17954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.171087][T16674] usb 4-1: media controller created [ 982.188431][ T1210] usb 3-1: USB disconnect, device number 49 [ 982.215624][T15502] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 982.286024][T17753] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 982.309841][T16674] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 982.325224][T17753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 982.443220][T15502] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 982.464932][T16674] az6027: usb out operation failed. (-71) [ 982.469955][T15502] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 982.492272][T15502] usb 1-1: USB disconnect, device number 50 [ 982.520600][T16674] az6027: usb out operation failed. (-71) [ 982.558817][T16674] stb0899_attach: Driver disabled by Kconfig [ 982.588599][T16674] az6027: no front-end attached [ 982.588599][T16674] [ 982.598879][T15502] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 982.623584][T16674] az6027: usb out operation failed. (-71) [ 982.640101][T16674] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 982.690964][T15502] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 982.692677][T16674] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 982.993074][T15502] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 983.047495][T15502] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 983.088010][T16674] dvb-usb: schedule remote query interval to 400 msecs. [ 983.089283][T15502] keyspan 1-1:0.107: device disconnected [ 983.094987][T16674] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 983.205793][T16674] usb 4-1: USB disconnect, device number 33 [ 983.386767][T17753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.412495][T16674] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 983.550043][T17753] veth0_vlan: entered promiscuous mode [ 983.602320][T17753] veth1_vlan: entered promiscuous mode [ 983.694083][T17753] veth0_macvtap: entered promiscuous mode [ 983.723964][T17753] veth1_macvtap: entered promiscuous mode [ 983.744821][T16674] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 983.794838][T17753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.831083][T17753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.871941][T15143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.898454][T15143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.942037][T15143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.162244][T15143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.248752][T17993] team0: No ports can be present during mode change [ 984.363647][T16674] usb 4-1: Using ep0 maxpacket: 32 [ 984.378701][T16674] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 984.391958][T16674] usb 4-1: config 0 has no interface number 0 [ 984.398092][T16674] usb 4-1: config 0 interface 196 has no altsetting 0 [ 984.419141][T17993] tipc: Enabling of bearer rejected, failed to enable media [ 984.447647][T16674] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 984.461099][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.481378][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.495562][T16674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.508244][T16674] usb 4-1: Product: syz [ 984.512442][T16674] usb 4-1: Manufacturer: syz [ 984.517133][T16674] usb 4-1: SerialNumber: syz [ 984.524485][T16674] usb 4-1: config 0 descriptor?? [ 984.596490][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.621406][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.774051][T18007] FAULT_INJECTION: forcing a failure. [ 984.774051][T18007] name failslab, interval 1, probability 0, space 0, times 0 [ 984.873712][T18007] CPU: 1 UID: 0 PID: 18007 Comm: syz.1.3320 Not tainted syzkaller #0 PREEMPT(full) [ 984.873736][T18007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 984.873747][T18007] Call Trace: [ 984.873755][T18007] [ 984.873763][T18007] dump_stack_lvl+0x189/0x250 [ 984.873789][T18007] ? __pfx____ratelimit+0x10/0x10 [ 984.873808][T18007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 984.873831][T18007] ? __pfx__printk+0x10/0x10 [ 984.873858][T18007] ? __pfx___might_resched+0x10/0x10 [ 984.873879][T18007] ? fs_reclaim_acquire+0x7d/0x100 [ 984.873902][T18007] should_fail_ex+0x414/0x560 [ 984.873929][T18007] should_failslab+0xa8/0x100 [ 984.873948][T18007] __kmalloc_noprof+0xcb/0x7f0 [ 984.873971][T18007] ? tomoyo_encode+0x28b/0x550 [ 984.873999][T18007] tomoyo_encode+0x28b/0x550 [ 984.874026][T18007] tomoyo_realpath_from_path+0x58d/0x5d0 [ 984.874058][T18007] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 984.874078][T18007] tomoyo_path_number_perm+0x1e8/0x5a0 [ 984.874101][T18007] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 984.874125][T18007] ? __pfx___schedule+0x10/0x10 [ 984.874178][T18007] ? __fget_files+0x2a/0x420 [ 984.874198][T18007] ? __fget_files+0x3a0/0x420 [ 984.874213][T18007] ? __fget_files+0x2a/0x420 [ 984.874233][T18007] security_file_ioctl+0xcb/0x2d0 [ 984.874251][T18007] __se_sys_ioctl+0x47/0x170 [ 984.874274][T18007] do_syscall_64+0xfa/0xfa0 [ 984.874293][T18007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.874308][T18007] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 984.874323][T18007] ? clear_bhb_loop+0x60/0xb0 [ 984.874342][T18007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.874363][T18007] RIP: 0033:0x7f291578eec9 [ 984.874379][T18007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.874393][T18007] RSP: 002b:00007f2916594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 984.874411][T18007] RAX: ffffffffffffffda RBX: 00007f29159e5fa0 RCX: 00007f291578eec9 [ 984.874424][T18007] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000003 [ 984.874436][T18007] RBP: 00007f2916594090 R08: 0000000000000000 R09: 0000000000000000 [ 984.874446][T18007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.874457][T18007] R13: 00007f29159e6038 R14: 00007f29159e5fa0 R15: 00007ffff2ce3c98 [ 984.874496][T18007] [ 984.874540][T18007] ERROR: Out of memory at tomoyo_realpath_from_path. [ 985.137921][T16674] ipheth 4-1:0.196: Unable to find endpoints [ 985.176975][T16674] usb 4-1: USB disconnect, device number 34 [ 985.219467][T18007] usb usb8: usbfs: process 18007 (syz.1.3320) did not claim interface 0 before use [ 985.256490][T18007] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 985.737495][T18014] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 985.759232][T18017] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 985.770127][T18014] exFAT-fs (loop1): unable to read boot sector [ 985.782004][T18014] exFAT-fs (loop1): failed to read boot sector [ 985.789352][T18014] exFAT-fs (loop1): failed to recognize exfat type [ 985.796427][T18017] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 986.576505][T18027] fuse: Invalid rootmode [ 986.630616][T18027] binder: BINDER_SET_CONTEXT_MGR already set [ 986.636647][T18027] binder: 18026:18027 ioctl 4018620d 200000004a80 returned -16 [ 986.756390][T18033] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 986.790311][T18033] hfsplus: unable to find HFS+ superblock [ 987.874382][T18069] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 987.894669][T18069] EXT4-fs (loop1): unable to read superblock [ 987.901843][T18071] team0: No ports can be present during mode change [ 987.934426][T18069] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.967320][T18073] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 987.978978][T18073] EXT4-fs (loop2): unable to read superblock [ 988.033175][T18076] tipc: Enabling of bearer rejected, failed to enable media [ 989.277658][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3393'. [ 989.566130][T18069] FAT-fs (loop1): unable to read boot sector [ 990.635795][T18097] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 990.852080][T18097] EXT4-fs (loop2): unable to read superblock [ 991.009442][T18097] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.089048][T18097] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 991.188069][T18097] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.500918][T18097] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 991.604262][T18097] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 991.751656][T18097] UDF-fs: Scanning with blocksize 512 failed [ 991.765734][T18097] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.807687][T18097] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 991.836562][T18097] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.854736][T18097] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 992.014574][T18097] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 992.040416][T18097] UDF-fs: Scanning with blocksize 1024 failed [ 992.069704][T18097] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 992.129744][T18123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 992.164402][T18097] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 992.175019][T18097] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 992.184956][T18097] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 992.198745][T18097] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 992.221897][T18097] UDF-fs: Scanning with blocksize 2048 failed [ 992.258590][T18097] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 992.300271][T18097] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 992.341621][T18097] I/O error, dev loop2, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 992.429131][T18097] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 992.459145][T18097] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 992.502391][T18097] UDF-fs: Scanning with blocksize 4096 failed [ 992.546424][T18097] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 992.723514][ T5979] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 992.764192][T16674] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 992.954714][T16674] usb 2-1: Using ep0 maxpacket: 8 [ 993.059301][ T5979] usb 1-1: Using ep0 maxpacket: 16 [ 993.064867][T16674] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 993.075161][T16674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.075575][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.094599][T16674] usb 2-1: Product: syz [ 993.138218][T16674] usb 2-1: Manufacturer: syz [ 993.188841][T16674] usb 2-1: SerialNumber: syz [ 993.240985][ T5979] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 993.257515][T18144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3406'. [ 993.286533][T16674] usb 2-1: config 0 descriptor?? [ 993.325813][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.344001][T16674] gspca_main: sq905-2.14.0 probing 2770:9120 [ 993.430380][ T5979] usb 1-1: config 0 descriptor?? [ 993.898758][T16674] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 994.079199][T16674] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 994.227214][ T5979] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 994.300202][ T5979] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 994.415391][T18135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.424322][T18135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.557717][ T5979] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 994.597933][ T5979] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 994.634313][ T5979] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 994.706639][ T5979] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 994.741575][ T5979] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 994.773494][ T5979] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 994.784032][ T5979] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 994.792216][ T5979] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 994.878884][ T5979] sony 0003:1345:3008.0010: unexpected long global item [ 994.899492][ T5979] sony 0003:1345:3008.0010: parse failed [ 994.905987][ T5979] sony 0003:1345:3008.0010: probe with driver sony failed with error -22 [ 995.795977][T16674] usb 1-1: USB disconnect, device number 51 [ 995.926502][ T5979] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 995.981439][T15501] usb 2-1: USB disconnect, device number 58 [ 996.136329][ T5979] usb 5-1: Using ep0 maxpacket: 16 [ 996.200001][T18175] [U] .h0FwZ,iqgҏV2sO [ 996.277122][T18175] fuse: Unknown parameter '' [ 997.352195][T18161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.555570][T18161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.653642][T18169] [U] ` w* [ 999.593171][T15497] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 999.749080][T15497] usb 3-1: Using ep0 maxpacket: 32 [ 999.801066][T15497] usb 3-1: config 3 has an invalid interface number: 171 but max is 0 [ 999.837985][T15497] usb 3-1: config 3 has no interface number 0 [ 999.876859][T15497] usb 3-1: config 3 interface 171 has no altsetting 0 [ 999.910331][T15497] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 999.945798][T15497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.973331][T15497] usb 3-1: Product: syz [ 999.979845][T18210] Bluetooth: MGMT ver 1.23 [ 999.994454][T15497] usb 3-1: Manufacturer: syz [ 999.999178][T15497] usb 3-1: SerialNumber: syz [ 1000.224183][T18202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3419'. [ 1000.284528][ T5979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1000.327064][T15497] as10x_usb: device has been detected [ 1000.441562][ T5979] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1000.456831][T15497] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1000.466008][ T5979] usb 5-1: can't read configurations, error -71 [ 1000.583331][T15497] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1000.627554][T15497] as10x_usb: error during firmware upload part1 [ 1000.650986][T15497] Registered device Sky IT Digital Key (green led) [ 1000.658343][T15497] usb 3-1: USB disconnect, device number 50 [ 1000.756857][T15497] Unregistered device Sky IT Digital Key (green led) [ 1000.760684][T15497] as10x_usb: device has been disconnected [ 1000.972274][T18235] bridge0: entered promiscuous mode [ 1001.494684][T18235] bridge0: left promiscuous mode [ 1001.675390][T18238] ref_ctr_offset mismatch. inode: 0x1c9 offset: 0x0 ref_ctr_offset(old): 0x200000000000 ref_ctr_offset(new): 0x0 [ 1002.235526][T18238] uprobe: syz.4.3430:18238 failed to unregister, leaking uprobe [ 1002.266922][T18238] uprobe: syz.4.3430:18238 failed to unregister, leaking uprobe [ 1002.287618][T18238] uprobe: syz.4.3430:18238 failed to unregister, leaking uprobe [ 1002.365061][T18247] bond2: entered promiscuous mode [ 1002.403580][T18247] bond2: entered allmulticast mode [ 1002.409215][T18247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1002.901069][T18247] bond2 (unregistering): Released all slaves [ 1003.106047][T18263] FAULT_INJECTION: forcing a failure. [ 1003.106047][T18263] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.120086][T18263] CPU: 1 UID: 0 PID: 18263 Comm: syz.1.3440 Not tainted syzkaller #0 PREEMPT(full) [ 1003.120110][T18263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1003.120120][T18263] Call Trace: [ 1003.120128][T18263] [ 1003.120136][T18263] dump_stack_lvl+0x189/0x250 [ 1003.120161][T18263] ? __pfx____ratelimit+0x10/0x10 [ 1003.120182][T18263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1003.120201][T18263] ? __pfx__printk+0x10/0x10 [ 1003.120228][T18263] ? __pfx___might_resched+0x10/0x10 [ 1003.120255][T18263] should_fail_ex+0x414/0x560 [ 1003.120279][T18263] should_failslab+0xa8/0x100 [ 1003.120299][T18263] __kmalloc_noprof+0xcb/0x7f0 [ 1003.120319][T18263] ? kfree+0x4d/0x6d0 [ 1003.120337][T18263] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1003.120365][T18263] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1003.120392][T18263] ? tomoyo_domain+0xd9/0x130 [ 1003.120419][T18263] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1003.120439][T18263] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1003.120460][T18263] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1003.120518][T18263] ? __fget_files+0x2a/0x420 [ 1003.120559][T18263] ? __fget_files+0x3a0/0x420 [ 1003.120574][T18263] ? __fget_files+0x2a/0x420 [ 1003.120593][T18263] security_file_ioctl+0xcb/0x2d0 [ 1003.120614][T18263] __se_sys_ioctl+0x47/0x170 [ 1003.120638][T18263] do_syscall_64+0xfa/0xfa0 [ 1003.120657][T18263] ? lockdep_hardirqs_on+0x9c/0x150 [ 1003.120676][T18263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.120692][T18263] ? clear_bhb_loop+0x60/0xb0 [ 1003.120712][T18263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.120728][T18263] RIP: 0033:0x7f291578eec9 [ 1003.120744][T18263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.120756][T18263] RSP: 002b:00007f2916594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1003.120774][T18263] RAX: ffffffffffffffda RBX: 00007f29159e5fa0 RCX: 00007f291578eec9 [ 1003.120787][T18263] RDX: 0000200000000b40 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1003.120799][T18263] RBP: 00007f2916594090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.120809][T18263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.120820][T18263] R13: 00007f29159e6038 R14: 00007f29159e5fa0 R15: 00007ffff2ce3c98 [ 1003.120851][T18263] [ 1003.121258][T18263] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1004.002129][T18274] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1004.016848][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1004.016866][ T30] audit: type=1326 audit(1758586621.086:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 1004.051784][T18274] hfsplus: unable to find HFS+ superblock [ 1004.244278][ T30] audit: type=1326 audit(1758586621.086:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 1004.325848][ T30] audit: type=1326 audit(1758586621.401:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 1004.441040][ T30] audit: type=1326 audit(1758586621.401:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 1004.464765][ T30] audit: type=1326 audit(1758586621.401:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 1004.531947][ T30] audit: type=1326 audit(1758586621.401:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 1004.657165][ T30] audit: type=1326 audit(1758586621.401:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 1005.010376][T18292] netlink: 'syz.4.3450': attribute type 2 has an invalid length. [ 1005.139242][ T30] audit: type=1326 audit(1758586621.401:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 1005.165466][ T30] audit: type=1326 audit(1758586621.401:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 1005.193335][ T30] audit: type=1326 audit(1758586621.401:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b598eec9 code=0x7ffc0000 [ 1005.345767][T15502] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1006.147973][T15502] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1006.157408][T15502] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1006.167692][T15502] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1006.178940][T15502] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1006.195146][T15502] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1006.205360][T15502] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1006.220351][T15502] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1006.229091][T15502] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1006.239695][T15502] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1006.320587][T15502] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1006.330377][T15502] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1006.346033][T15502] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1006.363342][T15502] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1006.374219][T15502] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1006.390804][T15502] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1006.570117][T15502] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1006.585317][T15502] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1107.079485][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1107.086475][ C1] rcu: 0-...!: (1 GPs behind) idle=63c4/1/0x4000000000000000 softirq=92753/92754 fqs=21 [ 1107.098153][ C1] rcu: (detected by 1, t=10505 jiffies, g=88937, q=200 ncpus=2) [ 1107.105898][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1107.105928][ C0] NMI backtrace for cpu 0 [ 1107.105952][ C0] CPU: 0 UID: 0 PID: 18307 Comm: syz.0.3454 Not tainted syzkaller #0 PREEMPT(full) [ 1107.105991][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1107.106010][ C0] RIP: 0010:check_preemption_disabled+0x1/0x120 [ 1107.106038][ C0] Code: 00 aa 03 8c 48 c7 c6 40 aa 03 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 05 de 94 3e 07 48 89 44 24 08 [ 1107.106054][ C0] RSP: 0018:ffffc90000007ce8 EFLAGS: 00000082 [ 1107.106069][ C0] RAX: ffffffff81adfe57 RBX: 0000000000000001 RCX: 0000000000010000 [ 1107.106081][ C0] RDX: ffff88807af3bc80 RSI: ffffffff8c03aa40 RDI: ffffffff8c03aa00 [ 1107.106094][ C0] RBP: ffffc90000007e90 R08: ffffffff8fc39677 R09: 1ffffffff1f872ce [ 1107.106107][ C0] R10: dffffc0000000000 R11: fffffbfff1f872cf R12: ffff88807d27e340 [ 1107.106120][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8627bc0 [ 1107.106132][ C0] FS: 00007f7bb09f66c0(0000) GS:ffff8881259e7000(0000) knlGS:0000000000000000 [ 1107.106147][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1107.106158][ C0] CR2: 00007f7bb09f5f98 CR3: 000000005e274000 CR4: 00000000003526f0 [ 1107.106174][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000008 [ 1107.106184][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1107.106195][ C0] Call Trace: [ 1107.106204][ C0] [ 1107.106212][ C0] rcu_is_watching+0x15/0xb0 [ 1107.106237][ C0] debug_deactivate+0x80/0x200 [ 1107.106254][ C0] __hrtimer_run_queues+0x2b0/0xc60 [ 1107.106285][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1107.106306][ C0] ? read_tsc+0x9/0x20 [ 1107.106330][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1107.106365][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1107.106390][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1107.106408][ C0] [ 1107.106414][ C0] [ 1107.106421][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1107.106439][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 1107.106459][ C0] Code: 08 90 c3 92 65 8b 15 f8 b6 03 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 7c 16 00 00 00 74 2c 8b 91 58 16 00 00 <83> fa 02 75 21 48 8b 91 60 16 00 00 48 8b 32 48 8d 7e 01 8b 89 5c [ 1107.106473][ C0] RSP: 0018:ffffc9000544f9e0 EFLAGS: 00000246 [ 1107.106487][ C0] RAX: ffffffff820c15f2 RBX: ffff88807af3c218 RCX: ffff88807af3bc80 [ 1107.106500][ C0] RDX: 0000000000000002 RSI: ffffffff8dd9240a RDI: ffffffff8c03aa60 [ 1107.106512][ C0] RBP: 00000000000000a2 R08: ffffc9000544fad7 R09: 0000000000000000 [ 1107.106529][ C0] R10: ffffc9000544faa0 R11: fffff52000a89f5b R12: dffffc0000000000 [ 1107.106542][ C0] R13: 1ffff1100f5e7843 R14: ffffffff8c02fd60 R15: ffff88807d118ac0 [ 1107.106558][ C0] ? __might_fault+0xa2/0x130 [ 1107.106584][ C0] __might_fault+0xa2/0x130 [ 1107.106607][ C0] _copy_from_user+0x28/0xb0 [ 1107.106625][ C0] ___sys_recvmsg+0x12e/0x510 [ 1107.106654][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1107.106689][ C0] ? __might_fault+0xb0/0x130 [ 1107.106712][ C0] do_recvmmsg+0x307/0x770 [ 1107.106735][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1107.106760][ C0] ? count_memcg_event_mm+0x21/0x260 [ 1107.106788][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 1107.106810][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1107.106832][ C0] ? do_syscall_64+0xbe/0xfa0 [ 1107.106852][ C0] do_syscall_64+0xfa/0xfa0 [ 1107.106869][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.106887][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.106903][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1107.106921][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.106937][ C0] RIP: 0033:0x7f7bb278eec9 [ 1107.106952][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.106966][ C0] RSP: 002b:00007f7bb09f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1107.106982][ C0] RAX: ffffffffffffffda RBX: 00007f7bb29e6090 RCX: 00007f7bb278eec9 [ 1107.106995][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1107.107006][ C0] RBP: 00007f7bb2811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1107.107017][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1107.107027][ C0] R13: 00007f7bb29e6128 R14: 00007f7bb29e6090 R15: 00007ffc28d11848 [ 1107.107048][ C0] [ 1107.107922][ C1] rcu: rcu_preempt kthread starved for 10400 jiffies! g88937 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1107.548470][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1107.558433][ C1] rcu: RCU grace-period kthread stack dump: [ 1107.564312][ C1] task:rcu_preempt state:R running task stack:26936 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1107.577810][ C1] Call Trace: [ 1107.581086][ C1] [ 1107.584017][ C1] __schedule+0x1798/0x4cc0 [ 1107.588569][ C1] ? __pfx___schedule+0x10/0x10 [ 1107.593457][ C1] ? schedule+0x91/0x360 [ 1107.597708][ C1] schedule+0x165/0x360 [ 1107.601875][ C1] schedule_timeout+0x12b/0x270 [ 1107.606731][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1107.612107][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1107.618001][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1107.623294][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1107.628854][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1107.633745][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1107.639901][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1107.645185][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1107.650388][ C1] ? finish_swait+0xcd/0x1f0 [ 1107.654983][ C1] rcu_gp_kthread+0x99/0x390 [ 1107.659579][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1107.664780][ C1] ? __kthread_parkme+0x7b/0x200 [ 1107.669714][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1107.674740][ C1] kthread+0x711/0x8a0 [ 1107.678817][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1107.684017][ C1] ? __pfx_kthread+0x10/0x10 [ 1107.688613][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1107.693806][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.699001][ C1] ? __pfx_kthread+0x10/0x10 [ 1107.703593][ C1] ret_from_fork+0x4bc/0x870 [ 1107.708190][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.713317][ C1] ? __switch_to_asm+0x39/0x70 [ 1107.718085][ C1] ? __switch_to_asm+0x33/0x70 [ 1107.722850][ C1] ? __pfx_kthread+0x10/0x10 [ 1107.727449][ C1] ret_from_fork_asm+0x1a/0x30 [ 1107.732229][ C1] [ 1107.735254][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1107.741584][ C1] CPU: 1 UID: 0 PID: 18127 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1107.750525][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1107.760594][ C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 1107.767291][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 36 79 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 e1 74 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 c5 74 [ 1107.786902][ C1] RSP: 0018:ffffc90003067540 EFLAGS: 00000293 [ 1107.792985][ C1] RAX: ffffffff81b4645b RBX: 1ffff110170c8441 RCX: ffff88802c0a5ac0 [ 1107.800959][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1107.808950][ C1] RBP: ffffc900030676c0 R08: ffffffff8fc39677 R09: 1ffffffff1f872ce [ 1107.816932][ C1] R10: dffffc0000000000 R11: fffffbfff1f872cf R12: ffff8880b8642208 [ 1107.824909][ C1] R13: dffffc0000000000 R14: ffff8880b873b200 R15: 0000000000000000 [ 1107.832968][ C1] FS: 00007f9250dd6880(0000) GS:ffff888125ae7000(0000) knlGS:0000000000000000 [ 1107.841897][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1107.848477][ C1] CR2: 000000110c3967ff CR3: 000000007425a000 CR4: 00000000003526f0 [ 1107.856456][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000e000408 [ 1107.864420][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1107.872386][ C1] Call Trace: [ 1107.875662][ C1] [ 1107.878591][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1107.883799][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1107.890130][ C1] ? free_pgd_range+0x144b/0x14c0 [ 1107.895174][ C1] ? rcu_is_watching+0x15/0xb0 [ 1107.899959][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1107.905172][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1107.910311][ C1] flush_tlb_mm_range+0x6b1/0x12d0 [ 1107.915437][ C1] ? free_pgtables+0x8e0/0x9c0 [ 1107.920214][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1107.925764][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1107.930876][ C1] tlb_flush_mmu+0x1a7/0x680 [ 1107.935471][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 1107.940064][ C1] vms_clear_ptes+0x42c/0x540 [ 1107.944754][ C1] ? __pfx_vms_clear_ptes+0x10/0x10 [ 1107.949977][ C1] vms_complete_munmap_vmas+0x206/0x8a0 [ 1107.955528][ C1] ? __mas_set_range+0x12f/0x3c0 [ 1107.960473][ C1] do_vmi_align_munmap+0x364/0x440 [ 1107.965601][ C1] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1107.971267][ C1] do_vmi_munmap+0x253/0x2e0 [ 1107.975872][ C1] __vm_munmap+0x207/0x380 [ 1107.980301][ C1] ? __pfx___vm_munmap+0x10/0x10 [ 1107.985252][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1107.990464][ C1] __x64_sys_munmap+0x60/0x70 [ 1107.995167][ C1] do_syscall_64+0xfa/0xfa0 [ 1107.999688][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.005753][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1108.011906][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1108.016586][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.022478][ C1] RIP: 0033:0x7f925071e097 [ 1108.026902][ C1] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 1108.046519][ C1] RSP: 002b:00007fff0dee2938 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1108.054943][ C1] RAX: ffffffffffffffda RBX: 000055fc08d66bf0 RCX: 00007f925071e097 [ 1108.062909][ C1] RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007f924fc00000 [ 1108.070877][ C1] RBP: 000055fc08d66910 R08: 000055fc08d79140 R09: 0000000000000006 [ 1108.078868][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000055fbfc17d588 [ 1108.086833][ C1] R13: 00007fff0dee29c0 R14: 0000000000000000 R15: 0000000000000000 [ 1108.094818][ C1]