last executing test programs: 16.5227365s ago: executing program 1 (id=1042): getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc2000, 0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(r1, &(0x7f0000000280)='./file0\x00', 0x173000, 0x120) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x4, 0x1) mknodat(r3, 0x0, 0x8, 0x8001) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8929, &(0x7f0000000180)={'macvtap0\x00', @ifru_addrs=@ax25={0x3, @null, 0x2}}) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'geneve0\x00', @remote}) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000040)="2e9b3d002ae03dd65193dfb6e575963f8864", 0x12}, {&(0x7f0000000100)="119b99ec0003237f", 0x8}], 0x2) write$cgroup_int(r6, &(0x7f0000000080)=0x2, 0x12) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4}, 0x6e) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x800448f0, &(0x7f00000002c0)="0123db8000000000") openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 15.040280784s ago: executing program 1 (id=1048): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4008040) open(&(0x7f0000000340)='./bus\x00', 0x14d27e, 0x102) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0xb0}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x3ff}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf65}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 12.099222622s ago: executing program 1 (id=1056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x1a, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}}, 0x0) 12.051281241s ago: executing program 0 (id=1057): syz_usb_connect(0x3, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x42, 0x86, 0x42, 0x20, 0xcf3, 0x9375, 0xa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x95, 0x20, 0x10, [{{0x9, 0x4, 0x3d, 0x6, 0x1, 0xad, 0xd5, 0xda, 0x0, [], [{{0x9, 0x5, 0x3, 0x3, 0x40, 0x7, 0x6, 0xe}}]}}]}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x2024}, 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0xbe6, &(0x7f0000001180)={{0x12, 0x1, 0x110, 0x1a, 0x5d, 0x39, 0x40, 0x20b9, 0x1682, 0xb50a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd4, 0x3, 0x7, 0xc, 0xe0, 0x2, [{{0x9, 0x4, 0xbd, 0x1, 0x6, 0xb3, 0x5a, 0x26, 0x0, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'X\\'}, {0x5, 0x24, 0x0, 0xfff7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0xf800, 0x80}, {0x6, 0x24, 0x1a, 0x6, 0x30}, [@dmm={0x7, 0x24, 0x14, 0x4, 0x8000}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xde}, @dmm={0x7, 0x24, 0x14, 0xfff7, 0xf84}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x9c, 0x7, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x2}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x6, 0xff, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf2, 0x1}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x5, 0x2, 0x2, [@generic={0x85, 0x1, "d30ba919ea0d078c794210f5781eda71fd73e917bf30d106df3eacbaa5e2a4589a4d52c62e3aca4ce4e1c431e7988ddc5a58a07a951895fa09a4bb5c8404c1296b27f835f3ac25260857224e483fa12bdaa370f0482bfc733c2b0718a7696456f707722f5bb04491b9cb224a51e80cb81760fdcab5b8ce4aa20d7a12f368a68094011c"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x8, 0x4, 0x7, 0x7, [@generic={0xb5, 0x23, "92f8c7213cf27edcefa8441aaa7250bf92c1176d809bce63b9116458c6d471236fab1cc9ac3e3e405b0f3d59c1ac786c0f0e1f6fb88208f3bb5a5a604940d66d70084ea8cece752debf9d73f1d675501807a436acc65e540e70ecdbda8a73f89b9459e9746ae3c7e1b1658c53bd84d650d3f06ac2cb997ba9a0d1e0897f3987f47d5d153499d857ad60fd2c04b75c445e2ea402a1186b3ee29e0e82db7b0ef366ff7e0c5588f120ef28ea5f12daa99b673b7be"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x0, 0x58, 0x5, 0x20, [@generic={0x29, 0x23, "b5e4102a491f03ebf9fbe1aaf73917fa18351fe39bd428565434d132a3c186d80e567c422daff2"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x0, 0x0, 0x2, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x5}]}}]}}, {{0x9, 0x4, 0xbd, 0x0, 0x5, 0xff, 0xff, 0xff, 0x9, [@hid_hid={0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x2a5}}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0xc, 0x23, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0x2}]}}, {{0x9, 0x5, 0x85, 0x12, 0x40, 0x2, 0x9, 0xd6, [@generic={0x6f, 0x0, "baa5ca15224158f4f01a2b9abc28dd9cac7ea7edaaacecd599183a857d9f197b15a15eb59c92c022fe57af8e2ba3e595804e2afcda4d13f4ca2f7a492d3f05a04bde1acf047c87f0ba254dd2f06f0aa73e5b273bbe227195f660acd514b1ce030ac9b96d35c79aed584d78fcdc"}, @generic={0x38, 0x21, "203d4af61f93399de79e66d39dec0d5d8b58e8fb4d91abae49e6ddcec475b0cff782c37038d633cff84a5e1016ca0b6218fd29201e13"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0x1, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x0, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x2, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x43}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x2, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x18, 0x6def}, @generic={0x101, 0x10, "e268720e273257fccd513efc5c4d4849385bc47f14fcd4e9f5deaf75e017d208f4342f5ef66a8280ba908875219902992655b3368057637000d23b955c916ae6ac58aa259d8277fee60c10498454c9a645cbc3a9611bfcb25f49d9254cb795a2dc97baa706a0da524479fee60cf4aa1488ae5173d370459bf387db82644c462a8cad2f3352af58b996c354128d01dd45879daec99a50d47c55edc7e18a16e5ca6c50c10d343151ebbd7a7bc060e11edbbc7b7ba7e30d1fa881f22c2fcaa43fba9c17823695c98e5a8f3c00e66c038dfe9d812924d55f330cc7075b123398c08717340a5b778cccd47f6ff5f9a2c2155868fde00b596fbab420e73a81f29b11"}]}}]}}, {{0x9, 0x4, 0xff, 0x2, 0xf, 0x4f, 0xcc, 0xda, 0x3, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x80, 0x9, 0x8}, [@obex={0x5, 0x24, 0x15, 0x800}, @mbim_extended={0x8, 0x24, 0x1c, 0x100, 0xd, 0x62d7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xffff, 0x6, 0x4, 0x3, 0xbb}, @ncm={0x6, 0x24, 0x1a, 0x800, 0x16}, @acm={0x4}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "11"}, {0x5, 0x24, 0x0, 0x4d}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x2, 0xa7}, {0x6, 0x24, 0x1a, 0x5, 0x32}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x4, 0x8, 0x8}]}], [{{0x9, 0x5, 0x4, 0x10, 0x20, 0x6, 0xc, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x100}]}}, {{0x9, 0x5, 0xb, 0x3, 0x48, 0x2, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}]}}, {{0x9, 0x5, 0x83, 0x0, 0x20, 0x1, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1a, 0x2}, @generic={0xa1, 0x23, "628d4a0b75a74f3ff32e91242548ef6232d6ff6879c49bf9fff3985ccfe6c204a9374118310e4e324f12243350d63dd300c42f9339b5df49b0a31c749306493101399d2c53b8e34eac46978b95f5069f6d949689e08237120436d5dd587325d25e3f461d7d3056b68e9c08119b9d330334a54e7f74a2783e86db364681d67d60970476fb20d5fa56d9adc902e9b94a81df87f010161ee18833781ae41cf0d7"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x17, 0x1, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x40, 0xd}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x9, 0xe, [@generic={0xc8, 0x10, "76a4d9324ef66da5f6ded00e45a1600c8d37ddc6929ad87e48f0294aff0fc77c48918783238827b9725e67f9a5820636ef354d2c6a1b71f3c9be141bb0a4f21fd96f761379dba8c8748330e927c70992ff500473187b151c9c418f5f16da5705d78eda05afb8a7ee592ac73b60338009008cf22dca19aa4612fef1dcdae1ce05ea4a2d8c831440b55b371fa89b25636b6620225be6bf743768e1659b21c9c1227b333403dfb921d454b1d1c11c49b3878902d1821bbdfd61ff73b4d5abb416e08bdb08ae7f01"}, @generic={0xaf, 0x7, "daa79a5112389a17c7ef15d0511cd57f054ed67b334053e3466f810811c8634e65dccade64fec4f2bfea2a1f95473e2e1738db5972dace8ca019706adb39e477b5d776e92b051d0c14076cfb23c3538b2a3095ca6b2994729d857bda5a165f45cefa45ceef8b40f265b546e19e14f05e8153d69cc1dea40e6914db88a13100dd87ff07be55f99c2a4de47dc24d567394caa6254cb292be24f0bd6cdb34bdf03bffa0f439c0b00417316c89522a"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0xaa, 0xb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x91, 0xc1}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x48, 0x7, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0xe00}, @generic={0x93, 0x22, "ffe5d768bf99585bbb3063f96450093b89e3486a55b3316952fb028d545ab14e7014fe44be7982e09cad1e4691da87aa4e05ef3b86ca03f472b920ff3cfdaa8c338b1841a8fbc1c9b4cdca4f803fd2db7eb79473c7af01f05e38f22c1ffd1beff383ce005829dcb715b71f3df4b0562a5c70f6fbfea3e0f0a3ef0acf43c34ed093f8d3a157de0313452d96a239ae952633"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x5, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3ff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x5, 0x5, 0x7, [@generic={0x7d, 0xe, "f2ced3a2163a1703a2b3a0892a29737f4d2ba891dc32adc23afe411b93c13db5d19f984449c86ae3edd24755cfd623cca17f4f08cbc9a6f9e4f2cd5b3a7452384e1622cb58d296cff45885b3840ff8638cc70f87f9252adfd0998231609d731ea3b8a257da54e097d5d8dc3b8e8a8110150d4fc662b3916718242f"}, @generic={0xc0, 0x8, "9a3fcd1c713da61300b450f7dc573e92622e219b07dcb29cb786a15738ad5f8b900fd426cd72e7cee60daf03113c3fe611241e23043721492da7b7ca1c1d1308ab85789bb3fc162108fdd79ee2178569053c2ebf2dca8f5ef8d5aeaff5b19c19db61dc2ff136ca6ab36eee1b495d84c61c01a45475c8046d4cc95fc8cc9b8aa26807e0862aa87005b22568b3ace044f98e76d23d7fcfa8e9caf80d742c159279ac91eb655305f84833d7a90f324a75875b085881d49885f4a44de3e94fe7"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0xce, 0x4, 0x0, [@generic={0xd, 0x21, "75def25ea9302e5f13dc97"}, @generic={0xc, 0x7, "cfc1f3ea23c31ffa81b7"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x4, 0x9}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x7, 0x7, 0x55, [@generic={0xc6, 0xc, "08c7764b58d82d9517ba0da278bd5e0cab545914d545ab53cc17b2796002017a31b0d534bf97ce5d242ee9ec523a5777d191c9cc50c6301ce9da8911d9e388a4bef3785384197068bfc90c013b89d1aa100397e5d7fb398f52902f7b5c1299bd926fb282c52c5fa22420e51735fa00c51757e3647a5517711dd9e3bff03d9751c4d3a6931379afdd34793df16b15e47c2f84af0ec935ca64042591ca0df0649e4a8982175333ff43cdccba5f85b9e08faca71eac15572ccbaa229476f31b6a14468f8728"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x0, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x2, 0x3, 0xb, [@generic={0xda, 0x22, "bca58af99ef3bd797837da7ccd9df9bf6a447d201583dc364ecf7294e57f2c2cc18b3452dde0d6cdf88c7d90bf7ae1af38c0ce9525be9a55548276503ad27237fa1c84e755702c053b3a4cc33efd9f5a8f4328ae2360fa769208f0d4d0a8d7454ecae2da45bfa5cdb5a2fa25bf5ae8d1f1341d532acb706591f8667ea7256750e7019d5f5a048a8d088f9ece4f58a87374b45dd8bdac46c4fb40b056ffd763c15d6e7cfd965cd60a7020d3d47d84409f52c01937acdda7f53e9d80fe959e33be52eab55bcb06fceb360b0853b547689c8e8f403a4504ac59"}]}}, {{0x9, 0x5, 0x84c6a90d30c27518, 0x2, 0x8, 0x1, 0x8f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x355}, @generic={0xfc, 0x21, "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"}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x201, 0x95, 0x5, 0x41, 0x10, 0x4}, 0x1e, &(0x7f0000000040)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0xf4, 0x7, 0x2, 0x9, 0xc8}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0xf, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x8, 0xfff9}]}, 0x1, [{0x79, &(0x7f0000000300)=@string={0x79, 0x3, "a9db1a7b90736bd97b478ced12c45f31fd5bbe327d52aacb92461898e0605277e37ca8a570439a7f80ee411fed08cfb49220c4f76c639980c458e500a3ead383dd3f579051575ddad9f6abad9b1644b094d91ba8c8f46e8f16fd936832de8b8a2cda71b095fa9184d3d42ef170f59f7930cfc09d3d7365"}}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x4b, 0x29, "67081d9fc303c68bf9b0408358a178f2f26833306b55cdcf22c903000000000000004cfeb3eb98beba"}}) 11.978511177s ago: executing program 2 (id=1058): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x37, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @alu={0x4, 0x0, 0xd, 0x8, 0xb, 0x18, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf2bd}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @ringbuf_query, @ringbuf_query, @alu={0x4, 0x1, 0xc, 0x0, 0xa, 0xfffffffffffffff4, 0xffffffffffffffff}, @generic={0x1, 0x1, 0x0, 0x2, 0xfff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @exit, @generic={0x1, 0xa, 0x6, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xaf}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x1, 0x8, 0x0, 0xa, 0xfffffffffffffffe, 0x8}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x18, {0x4, @bearer=@l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4048004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_capability(0x0, &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x5525, 0xffff314d}, {0x6b, 0x9}]}, 0x14, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000180)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') socket(0x2, 0x2, 0x1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x24000840, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 10.270407724s ago: executing program 3 (id=1060): syz_io_uring_setup(0x495, 0x0, 0x0, 0x0) epoll_create(0xff) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) getrandom(&(0x7f0000000080)=""/38, 0x26, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = semget$private(0x0, 0x207, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}], 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000100)={0x2000}, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f00000000c0), 0xfc, 0x583, &(0x7f0000000b40)="$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") (fail_nth: 1) 9.375321424s ago: executing program 3 (id=1061): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000140)='0', 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xfff, 0x3247504d, 0x3, 0x0, [{0x8, 0xf}, {0x821, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x3}, {0xfffffffd, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x2}}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x720, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000280)=0xfffffff8) close_range(r4, r3, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) get_mempolicy(0x0, &(0x7f00000000c0), 0x3, &(0x7f0000ffd000/0x3000)=nil, 0x4) 9.089718351s ago: executing program 3 (id=1063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8904, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r2, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 9.030535475s ago: executing program 1 (id=1064): bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x400000, 0x10000000000041}, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a0069ae00000000000000001c001000fe00000c00000000ccc5e7c1b0f9f6ba27fcb3861666049754e74410d0b15a2ae07f07722f057694ad2d33074b3920a8fd7c2ca3f379bdde1bc4ebaf51d824f1e180b41846ac68cfaf6cbaefac27db24bf5777ed7dfaf2"], 0x1c}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x10}}, 0x8890) close(r2) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f00000000c0)=0x9, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_mount_image$ocfs2(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x41, 0x448b, &(0x7f0000006340)="$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") r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42561, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) socket$phonet(0x23, 0x2, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x1fffffec, &(0x7f0000000100)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x6, 0x4, 0x0, 0x6, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x401}], &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x6, 0x800, 0x14810, r0, 0x7, '\x00', r9, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0xc}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 8.989631133s ago: executing program 2 (id=1065): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4008040) open(&(0x7f0000000340)='./bus\x00', 0x14d27e, 0x102) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x3ff}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf65}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r7, 0x10000}, &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.144014724s ago: executing program 3 (id=1067): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4008040) open(&(0x7f0000000340)='./bus\x00', 0x14d27e, 0x102) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0xb0}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x3ff}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf65}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 8.081863358s ago: executing program 0 (id=1068): socket$igmp(0x2, 0x3, 0x2) unshare(0x4020400) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x2, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44) 7.761221367s ago: executing program 2 (id=1069): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010011, &(0x7f0000000880)=ANY=[@ANYBLOB='iocharset=macturkish,iocharset=ascii,utf8=0,shortname=win95,shortname=mixed,rodir,iocharset=cp932,uni_xlate=1,uni_xlate=0,uni_xwate=1,utf8=1,codepage=\t\x002,shortoame0winnt,shortname=lower,shortname=win95,uni_xlate=0,utf8=0,\x00'], 0x1, 0x36b, &(0x7f0000000500)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001280)=""/4089, 0xff9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sndctrl(&(0x7f0000000280), 0x9, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f0000000a40)='d'}) 7.699125315s ago: executing program 4 (id=1070): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000005000000000000000000000009030000000000000061"], 0x0, 0x52}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc02c0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000006c0)={{0xa, 0x4e23, 0x63438955, @mcast1, 0x5}, {0xa, 0x4e23, 0xa72, @private2, 0x7}, 0x0, {[0x40, 0x80, 0x56ae, 0x10005, 0xfffffffb, 0x8, 0xfffffc01, 0x8]}}, 0x5c) ioctl$KVM_RUN(r2, 0xae80, 0x0) exit(0xffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000040)={0x7, 0x8}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x100000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x3f) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) sendmmsg$inet(r6, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001040)="90", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x160}}], 0x2, 0x4000000) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000600)="b39d74d45c51016b58f05879701367d02926d02be5f285ad2a9f385783ca45074d3e253338471ba78730d7fcb706c1e86415b85a8369dfce7ba9d691e7af2fa0e695ae0a4e5aa59d02a64d4b0cf1493530bdf1203697f45c202ecc5c8291b4891209832fe35ee9a48e0e7f7fe846196e68d00a9883eaf26b7118e3c371556c130545b1df91869a55cd883d5143b557", 0x8f, r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="c0537a516e8a9c5e69902bd27a62ad67dcd599148b51df53f4a6d3b778cffc65df98bd92c93c078a9aedd121e7e48c45c7f9d03079008ad446a208330a6e85a8a09b7173e482009da5c74814fed40fdff4b285c8f92e2b0a28e976fdfed83a043f104eb1afdb722623a18cab373ecb0a41182e54", 0x74}, {&(0x7f0000000400)="7bdd586b79554202d060a5b2715af1323b95dc27c4cf87b76e33aacb5d4a169bd2228116b06a1a948e53288684aa08f5f47a2bd0ea289091c2b8eb220eb2ab4e", 0x40}, {&(0x7f00000009c0)="8e2150e319c113ad16ea7cfa175b7627a4f3976a9c2afc6567a5f70d398969209f9c3587ba4c2743ab9294047ca873d49a3680eee1669aca689647395039e0ff828d88aeca92753371b14b68145a08de8e5460bd0e70a9268ebafd859b64fb1b141eaac51eecc9416da3405c6b20223fdf98cdd1b44e06c4c49a474eba6e60a38f262a6fcd23dc5f71447d659eb63dbe744dad9295fca1644f40538f0a61e17ba195e7e69c6f1441687eeef63a96e8cefb6f91", 0xb3}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x160}, 0x4000) 7.531314807s ago: executing program 0 (id=1071): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4008040) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x3ff}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r4, 0x10000}, &(0x7f0000000180)=0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) 6.948665021s ago: executing program 0 (id=1072): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x37, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @alu={0x4, 0x0, 0xd, 0x8, 0xb, 0x18, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf2bd}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @ringbuf_query, @ringbuf_query, @alu={0x4, 0x1, 0xc, 0x0, 0xa, 0xfffffffffffffff4, 0xffffffffffffffff}, @generic={0x1, 0x1, 0x0, 0x2, 0xfff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @exit, @generic={0x1, 0xa, 0x6, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xaf}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @alu={0x4, 0x1, 0x8, 0x0, 0xa, 0xfffffffffffffffe, 0x8}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x18, {0x4, @bearer=@l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4048004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_capability(0x0, &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x5525, 0xffff314d}, {0x6b, 0x9}]}, 0x14, 0x1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000180)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') socket(0x2, 0x2, 0x1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x24000840, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 6.760974141s ago: executing program 4 (id=1073): timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = memfd_secret(0x0) close(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x53c3, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 6.687235399s ago: executing program 2 (id=1074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x1a, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}}, 0x0) 6.579320806s ago: executing program 4 (id=1075): timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (fail_nth: 1) 5.744058642s ago: executing program 1 (id=1076): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x37, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @alu={0x4, 0x0, 0xd, 0x8, 0xb, 0x18, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf2bd}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @ringbuf_query, @ringbuf_query, @alu={0x4, 0x1, 0xc, 0x0, 0xa, 0xfffffffffffffff4, 0xffffffffffffffff}, @generic={0x1, 0x1, 0x0, 0x2, 0xfff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @exit, @generic={0x1, 0xa, 0x6, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xaf}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x1, 0x8, 0x0, 0xa, 0xfffffffffffffffe, 0x8}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x18, {0x4, @bearer=@l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4048004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_capability(0x0, &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x5525, 0xffff314d}, {0x6b, 0x9}]}, 0x14, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000180)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') socket(0x2, 0x2, 0x1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x24000840, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 5.627458599s ago: executing program 4 (id=1077): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT], 0xfe, 0x677, &(0x7f0000000c00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4092, 0x100) 4.851693875s ago: executing program 4 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8904, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.358727454s ago: executing program 0 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8904, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.344576246s ago: executing program 3 (id=1080): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4008040) open(&(0x7f0000000340)='./bus\x00', 0x14d27e, 0x102) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x3ff}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf65}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r7, 0x10000}, &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.566257675s ago: executing program 4 (id=1081): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) close_range(r2, r2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79aa0079}, 0x94) prctl$PR_GET_TIMERSLACK(0x1e) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) fsopen(0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x80000239, 0x0, 0x0, &(0x7f0000000240)) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040891}, 0x4000) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 3.515258231s ago: executing program 2 (id=1082): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES8, @ANYBLOB="181f36e869bbb170f7d405d9cf3f62e0ae0b917f82"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x5, 0x2003) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400), 0x45, 0x7bf, &(0x7f0000000e00)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngQLu4EQeZ31Jlso1KWHUmgg0J56aGJkxaSWrWDJITamTSiFXgpt6a295Nyfl9Jrfxx6af+PkhJaJzSlh+Iy+hHLtuRKiS2T5vOBid+beaM333lPb148YymAR1Yu/ScTcSwi3kwixhvrk4gYrKWyETP1cnc31gvpksTm5nM/JLUydzbWC9GyT+pII/P3iPjytYgTmd31VlbXFmZLpeJyIz9ZXbw8WVldO3lpcXa+OF9cOj01PX3qzP/OnN6/WH/6du3o9289/e+PZn559W8fv/FVEjNxtLGtNY79kotc45wMpqdwm6f2u7JD8+nLXRRq6QHZgzwYepQ2zECjVY7FeAzs1T6j/TwyAOCgvBIRm50MdNwCADzUkvr1/4nDPg4AoF+avwe4s7FeaC6H+xuJ/rr1ZESM1ONv3t+sb8k27tmN1O6Djt1Jtt0ZSSJiYh/qz0XEe5+9+EG6xAHdhwRo59r1iLgwkds9/ie7nlno1X/ar55vzeR2bDT+Qf98ns5//t9u/pe5N/+JNvOf4Tbv3fuRS7bnd7//Mzf3oZqO0vnf4y3Ptt1tib9hYqCR+1NtzjeYXLxUKqZj258j4ngMDqf5qT3qOH7719udtrXO/358+6X30/rTn1slMjezw9v3mZutzj5IzK1uXY/4R7Zd/On4P1xr/6TD/Pdcl3U889jr73balsafxttcdsd/sDZvRPyrbftvdcxkz+cTJ2vdYbLZKdr4ZCbGOtWfy261f7qk9Tf/L9APafuP7R3/RNL6vGal65e+97TYNzfGv+hUqLX/t4+/ff8fSp6vpYca667OVqvLUxFDybO715/a2reZb5ZP4z/+z/bv/+b416b/v5C+/oUuT0R2ID6sj5j3E//BSuOf66n9e07EyN2FgU717xF/o/+k7T+9bZ9uxr9uD/BBzh0AAAAAAAAAAAAAAAAAAAAAAAAAdCsTEUcjyeTvpTOZfL7+Hd5/jbFMqVypnrhYXlmai9p3ZU/EYKb5UZfjLZ+HOtX4PPxm/tSO/H8j4i8R8c7waC2fL5RLc4cdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HOnw/f+p74Z3FB44jCMEAA7EiAs7ADxqkmz2sA8BAOi3kZ5Kjx7YcQAA/dPb9R8A+CNw/QeAR8/vXP93/hkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Orc2bPpsvnzxnohzc9dWV1ZKF85OVesLOQXVwr5Qnn5cn6+XJ4vFfOF8mLHF7pW/1Eqly9Px9LK1clqsVKdrKyunV8sryxVz19anJ0vni8O9i0yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOheZXVtYbZUKi5L7E9iuHFiu9xr4et68XZlNjcPPxyJvRNxrafmfogSMbQ1Soz2f2ACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEj8FgAA///+gx9z") connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000000000)="c8b52a", 0x3) sendfile(r5, r4, 0x0, 0x40001) 3.406240234s ago: executing program 3 (id=1083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8ba05000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000280)={0x14, 0x4, 0x3}) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000080)={0x1c, 0x0, 0x5a}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r8, 0xc0040d07, &(0x7f0000000040)=0x121) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd700000000000090000003c000380140002007663616e3000000000000000000000000800030000000000080001000200000014000600ff0100008300"/73], 0x50}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001000)=ANY=[@ANYBLOB='iocharset=ascii,noadinicb,adinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',umask=00000000000000000000002,longad,gid=', @ANYRESDEC=0x0, @ANYBLOB="dcd86209000000000000000f1b0457a62f5fee2d928bc47a7dc47432c54aa394c17122e235e87b05df5f794bf53c8800e7f1aa6d249e2c432cbf603a10e026e3b388b615f9545c5780a7d377ee3a22e6d5556640a86b466e"], 0xfe, 0xc22, &(0x7f00000002c0)="$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") write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x9, 0x89, 0xd612, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) 2.275670879s ago: executing program 1 (id=1084): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r4, 0x0, 0x1000000000000}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00", @ANYRES16=r6, @ANYBLOB="210f0000000000000000200000000800", @ANYRES32=0x0, @ANYBLOB="b2559e8c9b4302000000821819bb"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 455.181227ms ago: executing program 0 (id=1085): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ptrace$setregs(0xd, r0, 0x5, &(0x7f00000009c0)="2a9612260d2f7f1300aacde9bd5473af4ad6f6bfa4b03a8af607845dd631e20880e38a545893f18c256ee23541d4d8e4bf044dddf0cf9b681ef8b5fce277665e5b85c3cb64a1ecc0598fd5c03514708f7f58ee1713d01421b040b71ced99dc4263bee7d48161678d90cf97c459fc569db4e2ef3b") bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7a3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000ac0)}, 0x20) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd700000000000020000000000000001000100", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r3], 0x28}}, 0x0) (fail_nth: 1) 0s ago: executing program 2 (id=1086): move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, 0xfffffffffffffffe, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x22}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x12d5}, @IFLA_TARGET_NETNSID={0x8}]}, 0x6c}, 0x1, 0xba01}, 0x810) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@gettaction={0x14}, 0x14}}, 0x0) connect$inet(r3, &(0x7f0000000540)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x61f6, &(0x7f000000cdc0)="$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") prctl$PR_PAC_RESET_KEYS(0x36, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): ng attributes in process `syz.2.720'. [ 381.113284][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 381.213486][ T5922] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 381.301002][ T5921] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 381.334588][ T8998] 9pnet_fd: Insufficient options for proto=fd [ 382.063760][ T8986] loop4: detected capacity change from 0 to 4096 [ 382.160131][ T9001] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.456684][ T5921] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 382.464653][ T5921] ath9k_htc: Failed to initialize the device [ 382.508122][ T8984] loop0: detected capacity change from 0 to 32768 [ 382.531016][ T5921] usb 5-1: ath9k_htc: USB layer deinitialized [ 382.607157][ T9003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.618116][ T9003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.835916][ T5922] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 384.037637][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short [ 384.053025][ T5922] usb 1-1: not running at top speed; connect to a high speed hub [ 384.185229][ T5908] usb 5-1: USB disconnect, device number 13 [ 384.332654][ T5922] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.927937][ T5922] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.940739][ T9009] loop3: detected capacity change from 0 to 1024 [ 384.979663][ T5922] usb 1-1: string descriptor 0 read error: -22 [ 384.986325][ T5922] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.004961][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.201902][ T5922] usb 1-1: 0:2 : does not exist [ 385.209674][ T36] hfsplus: b-tree write err: -5, ino 8 [ 386.471025][ T5901] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 386.565312][ T5922] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 386.588250][ T5922] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 387.129032][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 387.213725][ T5922] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 387.396381][ T5901] usb 3-1: not running at top speed; connect to a high speed hub [ 387.854824][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.072463][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.114491][ T5922] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 388.162020][ T5922] usb 1-1: USB disconnect, device number 16 [ 388.187175][ T5901] usb 3-1: string descriptor 0 read error: -22 [ 388.210964][ T5901] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.245420][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.356135][ T5901] usb 3-1: 0:2 : does not exist [ 389.103651][ T5901] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 389.135691][ T5901] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 389.155702][ T5901] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 389.244023][ T5901] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 389.259550][ T9050] overlayfs: failed to resolve './file1': -2 [ 389.313710][ T5901] usb 3-1: USB disconnect, device number 24 [ 389.402077][ T5921] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 389.477020][ T9049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.193045][ T5921] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 390.213649][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.221733][ T5921] usb 2-1: Product: syz [ 390.226645][ T5921] usb 2-1: Manufacturer: syz [ 390.231248][ T5921] usb 2-1: SerialNumber: syz [ 390.250247][ T5921] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 390.267068][ T5922] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 390.620344][ T9044] loop0: detected capacity change from 0 to 32768 [ 390.778173][ T9047] loop1: detected capacity change from 0 to 4096 [ 391.577115][ T5922] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 391.585274][ T5922] ath9k_htc: Failed to initialize the device [ 391.616730][ T5922] usb 2-1: ath9k_htc: USB layer deinitialized [ 392.224794][ T9049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.276675][ T5901] usb 2-1: USB disconnect, device number 15 [ 393.452218][ T5953] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 393.941153][ T5953] usb 2-1: unable to get BOS descriptor or descriptor too short [ 393.955706][ T5953] usb 2-1: not running at top speed; connect to a high speed hub [ 394.013045][ T5953] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.030370][ T9079] loop2: detected capacity change from 0 to 4096 [ 394.039231][ T5953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.100410][ T9049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.113474][ T9085] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 394.130520][ T5953] usb 2-1: string descriptor 0 read error: -22 [ 394.139285][ T30] audit: type=1800 audit(1759448773.945:45): pid=9079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.743" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 394.160134][ T5953] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.188316][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.329355][ T5953] usb 2-1: 0:2 : does not exist [ 394.953689][ T9049] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.126533][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.153611][ T5953] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 395.154581][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.194337][ T5953] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 395.224302][ T5953] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 395.247648][ T9086] loop4: detected capacity change from 0 to 32768 [ 395.259178][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.289303][ T5953] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 395.292319][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.373300][ T30] audit: type=1800 audit(1759448775.155:46): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.745" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 395.394313][ T5953] usb 2-1: USB disconnect, device number 16 [ 396.070424][ T9104] overlayfs: failed to resolve './file1': -2 [ 396.514237][ T9091] loop2: detected capacity change from 0 to 32768 [ 396.570093][ T9091] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 396.621108][ T9114] nbd: must specify a size in bytes for the device [ 396.749592][ T9091] XFS (loop2): Ending clean mount [ 396.794583][ T9091] XFS (loop2): Quotacheck needed: Please wait. [ 397.026489][ T9122] loop3: detected capacity change from 0 to 1024 [ 397.044481][ T5953] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 397.207911][ T9091] XFS (loop2): Quotacheck: Done. [ 397.371986][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 397.490865][ T5953] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 397.502812][ T5953] usb 2-1: config 0 has no interface number 0 [ 397.522373][ T5953] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 397.531587][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.541711][ T5953] usb 2-1: Product: syz [ 397.577459][ T5953] usb 2-1: Manufacturer: syz [ 397.602055][ T5953] usb 2-1: SerialNumber: syz [ 397.607828][ T1008] hfsplus: b-tree write err: -5, ino 8 [ 397.626316][ T5953] usb 2-1: config 0 descriptor?? [ 397.645427][ T5953] smsc95xx v2.0.0 [ 397.649092][ T5953] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 397.666701][ T5953] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 397.685110][ T5842] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 397.860018][ T9105] loop4: detected capacity change from 0 to 32768 [ 397.951681][ T30] audit: type=1800 audit(1759448777.755:47): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.750" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 399.065023][ T5922] usb 2-1: USB disconnect, device number 17 [ 399.251367][ T9137] ubi: mtd0 is already attached to ubi31 [ 399.297769][ T9137] 9pnet_fd: Insufficient options for proto=fd [ 399.450798][ T9139] loop2: detected capacity change from 0 to 64 [ 399.502743][ T5953] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 400.105998][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 400.127864][ T5953] usb 5-1: not running at top speed; connect to a high speed hub [ 400.147621][ T5953] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.179411][ T5953] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.229245][ T5953] usb 5-1: string descriptor 0 read error: -22 [ 400.255067][ T5953] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.782500][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.806078][ T9145] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.882213][ T5953] usb 5-1: 0:2 : does not exist [ 401.794719][ T9145] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.978715][ T9145] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.996602][ T5953] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 402.018208][ T5953] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 402.050913][ T5953] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 402.113723][ T9145] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.479212][ T5953] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 402.490346][ T5953] usb 5-1: USB disconnect, device number 14 [ 402.588192][ T9156] loop0: detected capacity change from 0 to 4096 [ 402.685397][ T3513] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.752321][ T3513] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.782494][ T9156] loop0: detected capacity change from 0 to 2048 [ 402.814113][ T6891] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.841047][ T9156] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 402.910249][ T9156] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.950584][ T30] audit: type=1800 audit(1759448782.755:48): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.764" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 403.033803][ T7277] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.711513][ T9170] loop3: detected capacity change from 0 to 256 [ 403.801960][ T5953] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 404.012018][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 404.283515][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 404.335863][ T5953] usb 5-1: config 5 has an invalid interface number: 61 but max is 0 [ 404.379519][ T5953] usb 5-1: config 5 has no interface number 0 [ 404.405091][ T5953] usb 5-1: config 5 interface 61 has no altsetting 0 [ 404.425344][ T5953] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0a [ 404.441300][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.453443][ T5953] usb 5-1: Product: syz [ 404.457637][ T5953] usb 5-1: Manufacturer: syz [ 404.462724][ T5953] usb 5-1: SerialNumber: syz [ 404.555767][ T5921] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 404.623173][ T9175] loop2: detected capacity change from 0 to 256 [ 405.242345][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 405.259084][ T5921] usb 2-1: too many configurations: 60, using maximum allowed: 8 [ 405.288248][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.323762][ T5921] usb 2-1: config 0 has no interfaces? [ 405.340657][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.360592][ T9180] loop0: detected capacity change from 0 to 2048 [ 405.392485][ T5921] usb 2-1: config 0 has no interfaces? [ 405.433140][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.580174][ T5921] usb 2-1: config 0 has no interfaces? [ 405.660427][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.663658][ T5953] ath6kl: Failed to submit usb control message: -71 [ 405.691927][ T5921] usb 2-1: config 0 has no interfaces? [ 405.706394][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.717197][ T5921] usb 2-1: config 0 has no interfaces? [ 405.731288][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.744499][ T5921] usb 2-1: config 0 has no interfaces? [ 405.756869][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.767713][ T5921] usb 2-1: config 0 has no interfaces? [ 405.781646][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.795778][ T5921] usb 2-1: config 0 has no interfaces? [ 405.837263][ T5921] usb 2-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 405.842648][ T9180] loop0: detected capacity change from 0 to 512 [ 405.921607][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 405.932636][ T5953] ath6kl: unable to send the bmi data to the device: -71 [ 405.968017][ T5921] usb 2-1: Product: syz [ 405.971460][ T5953] ath6kl: Unable to send get target info: -71 [ 405.985740][ T5921] usb 2-1: Manufacturer: syz [ 405.985794][ T5921] usb 2-1: SerialNumber: syz [ 406.011270][ T9180] EXT4-fs: Ignoring removed orlov option [ 406.017777][ T9180] EXT4-fs: Ignoring removed orlov option [ 406.023885][ T5921] usb 2-1: config 0 descriptor?? [ 406.043872][ T5953] ath6kl: Failed to init ath6kl core: -71 [ 406.055428][ T9180] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 406.064292][ T5953] ath6kl_usb 5-1:5.61: probe with driver ath6kl_usb failed with error -71 [ 406.089800][ T5953] usb 5-1: USB disconnect, device number 15 [ 406.132644][ T9180] EXT4-fs (loop0): 1 orphan inode deleted [ 406.138457][ T9180] EXT4-fs (loop0): 1 truncate cleaned up [ 406.211152][ T9180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.269837][ T9180] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.770: iget: bad extra_isize 46 (inode size 256) [ 406.280449][ T9167] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.766'. [ 406.291503][ T9167] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.766'. [ 406.349795][ T9191] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.374696][ T5922] usb 2-1: USB disconnect, device number 18 [ 406.394452][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.409372][ T9193] overlayfs: failed to resolve './file1': -2 [ 406.481559][ T9191] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.949129][ T9187] loop2: detected capacity change from 0 to 32768 [ 407.095433][ T9187] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 407.111409][ T9191] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.498708][ T9205] (syz.2.771,9205,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 407.515217][ T9205] (syz.2.771,9205,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 407.523887][ T9205] (syz.2.771,9205,1):ocfs2_link:764 ERROR: status = -2 [ 407.530798][ T9205] (syz.2.771,9205,1):ocfs2_link:842 ERROR: status = -2 [ 407.912941][ T9191] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.926835][ T5842] ocfs2: Unmounting device (7,2) on (node local) [ 407.953346][ T89] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 408.655630][ T9213] loop1: detected capacity change from 0 to 2048 [ 409.472798][ T89] usb 5-1: unable to get BOS descriptor or descriptor too short [ 409.488483][ T89] usb 5-1: not running at top speed; connect to a high speed hub [ 409.497395][ T89] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.507734][ T89] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.203493][ T9213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.301075][ T89] usb 5-1: string descriptor 0 read error: -71 [ 411.392352][ T89] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.401452][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.980699][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.989792][ T3513] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.128025][ T9226] loop0: detected capacity change from 0 to 256 [ 412.700554][ T89] usb 5-1: can't set config #1, error -71 [ 412.744282][ T89] usb 5-1: USB disconnect, device number 16 [ 412.790229][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.811201][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.905853][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.092302][ T89] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 413.274176][ T9237] loop0: detected capacity change from 0 to 2048 [ 413.912426][ T9237] loop0: detected capacity change from 0 to 512 [ 414.002170][ T9243] loop3: detected capacity change from 0 to 32768 [ 414.011082][ T9243] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.784 (9243) [ 414.034176][ T9243] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 414.044450][ T9243] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 414.044959][ T9237] EXT4-fs: Ignoring removed orlov option [ 414.076323][ T89] usb 5-1: unable to get BOS descriptor or descriptor too short [ 414.093339][ T9237] EXT4-fs: Ignoring removed orlov option [ 414.110085][ T89] usb 5-1: not running at top speed; connect to a high speed hub [ 414.125406][ T9237] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 414.135701][ T89] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.188993][ T9237] EXT4-fs (loop0): 1 orphan inode deleted [ 414.203405][ T89] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.217463][ T9237] EXT4-fs (loop0): 1 truncate cleaned up [ 414.220380][ T89] usb 5-1: string descriptor 0 read error: -22 [ 414.229877][ T9243] BTRFS info (device loop3): enabling ssd optimizations [ 414.236854][ T9243] BTRFS info (device loop3): enabling free space tree [ 414.243970][ T9243] BTRFS info (device loop3): use zstd compression, level 3 [ 414.261982][ T89] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.291865][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.335907][ T9237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.355228][ T89] usb 5-1: 0:2 : does not exist [ 414.565091][ T9260] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.783: iget: bad extra_isize 46 (inode size 256) [ 414.574510][ T89] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 414.674317][ T5848] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 414.710767][ T89] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 414.776731][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.814938][ T89] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 414.886920][ T89] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 415.451688][ T89] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 415.477402][ T89] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 415.588318][ T9235] loop1: detected capacity change from 0 to 32768 [ 415.847565][ T89] usb 5-1: USB disconnect, device number 17 [ 416.196121][ T30] audit: type=1800 audit(1759448796.005:49): pid=9235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.780" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 416.922519][ T9282] loop4: detected capacity change from 0 to 64 [ 417.102009][ T9286] 9pnet_fd: Insufficient options for proto=fd [ 418.808963][ T9297] loop2: detected capacity change from 0 to 256 [ 419.778239][ T9309] loop4: detected capacity change from 0 to 2048 [ 420.643717][ T9311] loop2: detected capacity change from 0 to 32768 [ 420.663431][ T9311] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.796 (9311) [ 420.696944][ T9311] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 420.707369][ T9311] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 421.919399][ T9306] loop3: detected capacity change from 0 to 1024 [ 422.535616][ T9311] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 422.536745][ T9311] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 422.546713][ T9311] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 422.556203][ T9311] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 422.565352][ T9311] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 422.574506][ T9311] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 422.584426][ T9311] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 422.594480][ T9311] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 422.604206][ T9311] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 422.614751][ T9311] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 422.624863][ T9311] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 422.978897][ T9311] BTRFS error (device loop2): open_ctree failed: -12 [ 422.996501][ T9309] EXT4-fs: error -4 creating inode table initialization thread [ 423.006456][ T9309] EXT4-fs (loop4): mount failed [ 424.751191][ T9341] loop0: detected capacity change from 0 to 4096 [ 424.816883][ T12] hfsplus: b-tree write err: -5, ino 8 [ 426.340723][ T9349] loop1: detected capacity change from 0 to 4096 [ 426.493406][ T9349] loop1: detected capacity change from 0 to 2048 [ 426.585012][ T9363] 9pnet_fd: Insufficient options for proto=fd [ 426.648378][ T5953] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 427.086391][ T9349] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 427.569169][ T9349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.578364][ T5953] usb 3-1: unable to get BOS descriptor or descriptor too short [ 427.601064][ T5953] usb 3-1: not running at top speed; connect to a high speed hub [ 427.675036][ T30] audit: type=1800 audit(1759448807.485:50): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.803" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 427.732218][ T5953] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.764870][ T5953] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.911402][ T5953] usb 3-1: string descriptor 0 read error: -71 [ 428.960063][ T9376] loop0: detected capacity change from 0 to 32768 [ 428.968733][ T9376] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.809 (9376) [ 428.969004][ T5953] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.283913][ T9376] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 429.294313][ T9376] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 429.369214][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.465769][ T5953] usb 3-1: can't set config #1, error -71 [ 429.604963][ T5953] usb 3-1: USB disconnect, device number 25 [ 430.044226][ T9376] BTRFS info (device loop0): enabling ssd optimizations [ 430.051210][ T9376] BTRFS info (device loop0): enabling free space tree [ 430.058020][ T9376] BTRFS info (device loop0): use zstd compression, level 3 [ 431.024936][ T5837] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 431.591873][ T9416] loop3: detected capacity change from 0 to 1024 [ 432.512401][ T12] hfsplus: b-tree write err: -5, ino 8 [ 432.785815][ T9429] 9pnet_fd: Insufficient options for proto=fd [ 434.585645][ T9442] loop1: detected capacity change from 0 to 32768 [ 434.944757][ T30] audit: type=1800 audit(1759448814.735:51): pid=9445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.823" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 438.513107][ T9466] loop3: detected capacity change from 0 to 2048 [ 438.627238][ T9466] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 438.638327][ T9466] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 438.646052][ T9466] UDF-fs: Scanning with blocksize 512 failed [ 438.657210][ T9466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.672908][ T30] audit: type=1800 audit(1759448818.475:52): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.828" name="file1" dev="loop3" ino=838 res=0 errno=0 [ 439.200041][ T9478] loop2: detected capacity change from 0 to 1024 [ 439.982644][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.988987][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.016977][ T12] hfsplus: b-tree write err: -5, ino 8 [ 440.387039][ T9483] loop3: detected capacity change from 0 to 2048 [ 440.435037][ T9487] FAULT_INJECTION: forcing a failure. [ 440.435037][ T9487] name failslab, interval 1, probability 0, space 0, times 0 [ 440.450310][ T9487] CPU: 0 UID: 0 PID: 9487 Comm: syz.4.833 Not tainted syzkaller #0 PREEMPT(full) [ 440.450334][ T9487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 440.450346][ T9487] Call Trace: [ 440.450353][ T9487] [ 440.450361][ T9487] dump_stack_lvl+0x189/0x250 [ 440.450391][ T9487] ? __pfx____ratelimit+0x10/0x10 [ 440.450413][ T9487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.450436][ T9487] ? __pfx__printk+0x10/0x10 [ 440.450479][ T9487] ? __pfx___might_resched+0x10/0x10 [ 440.450501][ T9487] should_fail_ex+0x414/0x560 [ 440.450529][ T9487] should_failslab+0xa8/0x100 [ 440.450557][ T9487] __kmalloc_noprof+0xcb/0x7f0 [ 440.450578][ T9487] ? kfree+0x4d/0x6d0 [ 440.450595][ T9487] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 440.450625][ T9487] tomoyo_realpath_from_path+0xe3/0x5d0 [ 440.450651][ T9487] ? tomoyo_domain+0xd9/0x130 [ 440.450680][ T9487] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 440.450700][ T9487] tomoyo_path_number_perm+0x1e8/0x5a0 [ 440.450722][ T9487] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 440.450777][ T9487] ? __fget_files+0x2a/0x420 [ 440.450807][ T9487] ? __fget_files+0x3a0/0x420 [ 440.450831][ T9487] ? __fget_files+0x2a/0x420 [ 440.450860][ T9487] security_file_ioctl+0xcb/0x2d0 [ 440.450892][ T9487] __se_sys_ioctl+0x47/0x170 [ 440.450914][ T9487] do_syscall_64+0xfa/0xfa0 [ 440.450935][ T9487] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.450957][ T9487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.450976][ T9487] ? clear_bhb_loop+0x60/0xb0 [ 440.450999][ T9487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.451017][ T9487] RIP: 0033:0x7fbfc938eec9 [ 440.451033][ T9487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.451049][ T9487] RSP: 002b:00007fbfca285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.451070][ T9487] RAX: ffffffffffffffda RBX: 00007fbfc95e6090 RCX: 00007fbfc938eec9 [ 440.451083][ T9487] RDX: 00002000000009c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 440.451094][ T9487] RBP: 00007fbfca285090 R08: 0000000000000000 R09: 0000000000000000 [ 440.451106][ T9487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.451117][ T9487] R13: 00007fbfc95e6128 R14: 00007fbfc95e6090 R15: 00007ffffc708438 [ 440.451148][ T9487] [ 440.451156][ T9487] ERROR: Out of memory at tomoyo_realpath_from_path. [ 440.733747][ T9474] loop1: detected capacity change from 0 to 32768 [ 440.844273][ T9489] loop0: detected capacity change from 0 to 40427 [ 440.958979][ T9489] F2FS-fs (loop0): invalid crc value [ 441.086638][ T9489] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 441.123597][ T9489] F2FS-fs (loop0): Start checkpoint disabled! [ 441.490967][ T9489] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 441.499181][ T9489] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 441.519592][ T30] audit: type=1800 audit(1759448821.325:53): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.835" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 441.565360][ T9500] loop3: detected capacity change from 0 to 2048 [ 441.584399][ T30] audit: type=1800 audit(1759448821.345:54): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.830" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 441.614564][ T9489] syz.0.835: attempt to access beyond end of device [ 441.614564][ T9489] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 441.628748][ T9489] syz.0.835: attempt to access beyond end of device [ 441.628748][ T9489] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 441.644426][ T9489] syz.0.835: attempt to access beyond end of device [ 441.644426][ T9489] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 441.658566][ T9489] syz.0.835: attempt to access beyond end of device [ 441.658566][ T9489] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 441.672923][ T9489] syz.0.835: attempt to access beyond end of device [ 441.672923][ T9489] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 441.687241][ T9489] syz.0.835: attempt to access beyond end of device [ 441.687241][ T9489] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 441.701230][ T9489] syz.0.835: attempt to access beyond end of device [ 441.701230][ T9489] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 441.715723][ T9489] syz.0.835: attempt to access beyond end of device [ 441.715723][ T9489] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 441.729861][ T9489] syz.0.835: attempt to access beyond end of device [ 441.729861][ T9489] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 441.744946][ T9489] syz.0.835: attempt to access beyond end of device [ 441.744946][ T9489] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 442.019400][ T5953] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 442.039399][ T3513] CPU: 0 UID: 0 PID: 3513 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 442.039425][ T3513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 442.039437][ T3513] Workqueue: writeback wb_workfn (flush-7:0) [ 442.039475][ T3513] Call Trace: [ 442.039482][ T3513] [ 442.039490][ T3513] dump_stack_lvl+0x189/0x250 [ 442.039519][ T3513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.039542][ T3513] ? __pfx_queue_work_on+0x10/0x10 [ 442.039559][ T3513] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 442.039580][ T3513] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 442.039612][ T3513] f2fs_handle_critical_error+0x37c/0x540 [ 442.039642][ T3513] f2fs_write_end_io+0x886/0xb60 [ 442.039684][ T3513] __submit_merged_bio+0x27a/0x6a0 [ 442.039713][ T3513] __submit_merged_write_cond+0x255/0x530 [ 442.039741][ T3513] f2fs_write_data_pages+0x261d/0x3000 [ 442.039797][ T3513] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 442.039836][ T3513] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 442.039896][ T3513] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 442.039932][ T3513] ? trace_f2fs_writepages+0x7f/0x200 [ 442.039956][ T3513] ? f2fs_write_node_pages+0x478/0x6e0 [ 442.039982][ T3513] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 442.040008][ T3513] ? __lock_acquire+0xab9/0xd20 [ 442.040043][ T3513] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 442.040069][ T3513] do_writepages+0x32e/0x550 [ 442.040094][ T3513] ? reacquire_held_locks+0x127/0x1d0 [ 442.040112][ T3513] ? writeback_sb_inodes+0x384/0x1010 [ 442.040142][ T3513] __writeback_single_inode+0x145/0xff0 [ 442.040164][ T3513] ? do_raw_spin_unlock+0x122/0x240 [ 442.040192][ T3513] writeback_sb_inodes+0x6c7/0x1010 [ 442.040238][ T3513] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 442.040300][ T3513] ? rcu_is_watching+0x15/0xb0 [ 442.040335][ T3513] wb_writeback+0x43b/0xaf0 [ 442.040365][ T3513] ? queue_io+0x391/0x590 [ 442.040390][ T3513] ? __pfx_wb_writeback+0x10/0x10 [ 442.040420][ T3513] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.040445][ T3513] wb_workfn+0x409/0xef0 [ 442.040489][ T3513] ? __pfx_wb_workfn+0x10/0x10 [ 442.040522][ T3513] ? __lock_acquire+0xab9/0xd20 [ 442.040560][ T3513] ? process_scheduled_works+0x9ef/0x17b0 [ 442.040596][ T3513] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.040614][ T3513] ? process_scheduled_works+0x9ef/0x17b0 [ 442.040642][ T3513] ? process_scheduled_works+0x9ef/0x17b0 [ 442.040673][ T3513] process_scheduled_works+0xae1/0x17b0 [ 442.040731][ T3513] ? __pfx_process_scheduled_works+0x10/0x10 [ 442.040778][ T3513] worker_thread+0x8a0/0xda0 [ 442.040821][ T3513] kthread+0x711/0x8a0 [ 442.040846][ T3513] ? __pfx_worker_thread+0x10/0x10 [ 442.040864][ T3513] ? __pfx_kthread+0x10/0x10 [ 442.040888][ T3513] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.040907][ T3513] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.040928][ T3513] ? __pfx_kthread+0x10/0x10 [ 442.040951][ T3513] ret_from_fork+0x4bc/0x870 [ 442.040982][ T3513] ? __pfx_ret_from_fork+0x10/0x10 [ 442.041016][ T3513] ? __switch_to_asm+0x39/0x70 [ 442.041040][ T3513] ? __switch_to_asm+0x33/0x70 [ 442.041063][ T3513] ? __pfx_kthread+0x10/0x10 [ 442.041087][ T3513] ret_from_fork_asm+0x1a/0x30 [ 442.041130][ T3513] [ 442.041138][ T3513] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 442.707828][ T5953] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 442.905112][ T5953] usb 5-1: config 0 has no interface number 0 [ 442.918965][ T5953] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 443.133437][ T5953] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 443.183937][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.203765][ T5953] usb 5-1: Product: syz [ 443.212992][ T5953] usb 5-1: Manufacturer: syz [ 443.250546][ T5953] usb 5-1: SerialNumber: syz [ 443.362211][ T5953] usb 5-1: config 0 descriptor?? [ 443.515690][ T9516] loop1: detected capacity change from 0 to 2048 [ 443.534211][ T9516] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 443.544838][ T9505] loop2: detected capacity change from 0 to 32768 [ 443.567889][ T9517] loop3: detected capacity change from 0 to 164 [ 443.581062][ T9518] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 443.620446][ T9517] Unable to read rock-ridge attributes [ 443.778366][ T9503] loop4: detected capacity change from 0 to 512 [ 443.821993][ T9503] EXT4-fs (loop4): orphan cleanup on readonly fs [ 444.007092][ T9503] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 444.023479][ T9503] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 444.034964][ T9503] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.837: Failed to acquire dquot type 1 [ 444.104876][ T9503] EXT4-fs (loop4): 1 truncate cleaned up [ 444.199551][ T9503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 444.566768][ T9505] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 445.432115][ T5953] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 445.439316][ T5953] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 446.836015][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.852615][ T5842] ocfs2: Unmounting device (7,2) on (node local) [ 447.003194][ T5953] usb 5-1: USB disconnect, device number 18 [ 447.417555][ T9530] loop3: detected capacity change from 0 to 2048 [ 448.771428][ T9536] loop0: detected capacity change from 0 to 2048 [ 449.202871][ T9550] FAULT_INJECTION: forcing a failure. [ 449.202871][ T9550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.716711][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.4.850 Not tainted syzkaller #0 PREEMPT(full) [ 449.716738][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 449.716750][ T9550] Call Trace: [ 449.716758][ T9550] [ 449.716766][ T9550] dump_stack_lvl+0x189/0x250 [ 449.716794][ T9550] ? __pfx____ratelimit+0x10/0x10 [ 449.716816][ T9550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.716840][ T9550] ? __pfx__printk+0x10/0x10 [ 449.716868][ T9550] ? __might_fault+0xb0/0x130 [ 449.716902][ T9550] should_fail_ex+0x414/0x560 [ 449.716929][ T9550] _copy_from_user+0x2d/0xb0 [ 449.716949][ T9550] ___sys_recvmsg+0x12e/0x510 [ 449.716981][ T9550] ? __pfx____sys_recvmsg+0x10/0x10 [ 449.717030][ T9550] ? __fget_files+0x3a0/0x420 [ 449.717066][ T9550] do_recvmmsg+0x307/0x770 [ 449.717100][ T9550] ? __pfx_do_recvmmsg+0x10/0x10 [ 449.717138][ T9550] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 449.717178][ T9550] __x64_sys_recvmmsg+0x190/0x240 [ 449.717207][ T9550] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 449.717237][ T9550] ? do_syscall_64+0xbe/0xfa0 [ 449.717263][ T9550] do_syscall_64+0xfa/0xfa0 [ 449.717284][ T9550] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.717305][ T9550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.717324][ T9550] ? clear_bhb_loop+0x60/0xb0 [ 449.717346][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.717364][ T9550] RIP: 0033:0x7fbfc938eec9 [ 449.717380][ T9550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.717400][ T9550] RSP: 002b:00007fbfca2a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 449.717420][ T9550] RAX: ffffffffffffffda RBX: 00007fbfc95e5fa0 RCX: 00007fbfc938eec9 [ 449.717433][ T9550] RDX: 0000000000000001 RSI: 00002000000037c0 RDI: 0000000000000003 [ 449.717445][ T9550] RBP: 00007fbfca2a6090 R08: 0000000000000000 R09: 0000000000000000 [ 449.717456][ T9550] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 449.717468][ T9550] R13: 00007fbfc95e6038 R14: 00007fbfc95e5fa0 R15: 00007ffffc708438 [ 449.717499][ T9550] [ 449.927576][ T5847] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 450.297981][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 450.309737][ T5847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 450.332865][ T5847] usb 1-1: config 5 has an invalid interface number: 61 but max is 0 [ 450.346056][ T5847] usb 1-1: config 5 has no interface number 0 [ 450.436941][ T9567] loop3: detected capacity change from 0 to 2048 [ 450.864154][ T5847] usb 1-1: config 5 interface 61 has no altsetting 0 [ 450.878518][ T5847] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0a [ 450.887820][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.896646][ T5847] usb 1-1: Product: syz [ 450.907872][ T5847] usb 1-1: Manufacturer: syz [ 451.070638][ T5847] usb 1-1: SerialNumber: syz [ 451.670472][ T5847] ath6kl: Failed to submit usb control message: -71 [ 451.681739][ T5847] ath6kl: unable to send the bmi data to the device: -71 [ 451.714794][ T5847] ath6kl: Unable to send get target info: -71 [ 451.754374][ T5847] ath6kl: Failed to init ath6kl core: -71 [ 451.760934][ T5847] ath6kl_usb 1-1:5.61: probe with driver ath6kl_usb failed with error -71 [ 451.878873][ T5847] usb 1-1: USB disconnect, device number 17 [ 452.757763][ T9577] loop2: detected capacity change from 0 to 32768 [ 452.918124][ T9585] tipc: Started in network mode [ 452.923309][ T9585] tipc: Node identity 6ec1ae085917, cluster identity 4711 [ 452.930863][ T9585] tipc: Enabled bearer , priority 0 [ 452.938219][ T9585] syzkaller0: entered promiscuous mode [ 452.943773][ T9585] syzkaller0: entered allmulticast mode [ 452.977107][ T9585] FAULT_INJECTION: forcing a failure. [ 452.977107][ T9585] name failslab, interval 1, probability 0, space 0, times 0 [ 452.988693][ T9577] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 452.992864][ T9585] CPU: 0 UID: 0 PID: 9585 Comm: syz.3.857 Not tainted syzkaller #0 PREEMPT(full) [ 452.992890][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 452.992904][ T9585] Call Trace: [ 452.992928][ T9585] [ 452.992937][ T9585] dump_stack_lvl+0x189/0x250 [ 452.992989][ T9585] ? __pfx____ratelimit+0x10/0x10 [ 452.993016][ T9585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.993053][ T9585] ? __pfx__printk+0x10/0x10 [ 452.993097][ T9585] ? __pfx___might_resched+0x10/0x10 [ 452.993127][ T9585] should_fail_ex+0x414/0x560 [ 452.993162][ T9585] should_failslab+0xa8/0x100 [ 452.993198][ T9585] __kmalloc_noprof+0xcb/0x7f0 [ 452.993224][ T9585] ? kfree+0x4d/0x6d0 [ 452.993245][ T9585] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 452.993284][ T9585] tomoyo_realpath_from_path+0xe3/0x5d0 [ 452.993315][ T9585] ? tomoyo_domain+0xd9/0x130 [ 452.993352][ T9585] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 452.993377][ T9585] tomoyo_path_number_perm+0x1e8/0x5a0 [ 452.993404][ T9585] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 452.993475][ T9585] ? __fget_files+0x2a/0x420 [ 452.993513][ T9585] ? __fget_files+0x3a0/0x420 [ 452.993542][ T9585] ? __fget_files+0x2a/0x420 [ 452.993578][ T9585] security_file_ioctl+0xcb/0x2d0 [ 452.993618][ T9585] __se_sys_ioctl+0x47/0x170 [ 452.993646][ T9585] do_syscall_64+0xfa/0xfa0 [ 452.993672][ T9585] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.993699][ T9585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.993722][ T9585] ? clear_bhb_loop+0x60/0xb0 [ 452.993751][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.993774][ T9585] RIP: 0033:0x7f793b18eec9 [ 452.993794][ T9585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.993815][ T9585] RSP: 002b:00007f793c093038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.993841][ T9585] RAX: ffffffffffffffda RBX: 00007f793b3e5fa0 RCX: 00007f793b18eec9 [ 452.993858][ T9585] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 452.993873][ T9585] RBP: 00007f793c093090 R08: 0000000000000000 R09: 0000000000000000 [ 452.993888][ T9585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.993902][ T9585] R13: 00007f793b3e6038 R14: 00007f793b3e5fa0 R15: 00007fff62d587e8 [ 452.993940][ T9585] [ 452.993949][ T9585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 453.264571][ T9585] tipc: Resetting bearer [ 453.282383][ T9584] tipc: Resetting bearer [ 453.433476][ T9584] tipc: Disabling bearer [ 453.480361][ T9588] (syz.2.855,9588,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 453.496631][ T9588] (syz.2.855,9588,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 453.505563][ T9588] (syz.2.855,9588,0):ocfs2_link:764 ERROR: status = -2 [ 453.512481][ T9588] (syz.2.855,9588,0):ocfs2_link:842 ERROR: status = -2 [ 453.733156][ T5842] ocfs2: Unmounting device (7,2) on (node local) [ 453.838783][ T9591] ubi: mtd0 is already attached to ubi31 [ 453.887124][ T9591] 9pnet_fd: Insufficient options for proto=fd [ 453.982709][ T9593] loop0: detected capacity change from 0 to 1024 [ 454.006319][ T9593] EXT4-fs: Ignoring removed bh option [ 454.071085][ T9593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.457040][ T9606] loop2: detected capacity change from 0 to 64 [ 454.859719][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.269629][ T9621] loop1: detected capacity change from 0 to 2048 [ 456.467614][ T9605] Trying to free block not in datazone [ 456.723911][ T9605] Trying to free block not in datazone [ 456.756382][ T9605] Trying to free block not in datazone [ 456.817732][ T9605] Trying to free block not in datazone [ 456.995600][ T9605] Trying to free block not in datazone [ 457.071082][ T9605] minix_free_block (loop2:6): bit already cleared [ 457.079532][ T9605] Trying to free block not in datazone [ 457.103372][ T9605] Trying to free block not in datazone [ 459.410869][ T5921] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 460.272419][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short [ 460.653944][ T5921] usb 3-1: not running at top speed; connect to a high speed hub [ 460.666550][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.762315][ T5921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.833258][ T5921] usb 3-1: string descriptor 0 read error: -22 [ 460.839901][ T5921] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.856054][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.884335][ T9658] loop0: detected capacity change from 0 to 2048 [ 461.546361][ T9664] loop4: detected capacity change from 0 to 2048 [ 461.565659][ T9658] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 461.577012][ T9658] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 461.584820][ T9658] UDF-fs: Scanning with blocksize 512 failed [ 461.603027][ T9658] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 461.636254][ T30] audit: type=1800 audit(1759448841.425:55): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.873" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 461.717459][ T5921] usb 3-1: 0:2 : does not exist [ 462.639330][ T9677] FAULT_INJECTION: forcing a failure. [ 462.639330][ T9677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.685538][ T9677] CPU: 1 UID: 0 PID: 9677 Comm: syz.4.878 Not tainted syzkaller #0 PREEMPT(full) [ 462.685564][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 462.685577][ T9677] Call Trace: [ 462.685585][ T9677] [ 462.685593][ T9677] dump_stack_lvl+0x189/0x250 [ 462.685623][ T9677] ? __pfx____ratelimit+0x10/0x10 [ 462.685645][ T9677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.685674][ T9677] ? __pfx__printk+0x10/0x10 [ 462.685703][ T9677] ? __might_fault+0xb0/0x130 [ 462.685738][ T9677] should_fail_ex+0x414/0x560 [ 462.685767][ T9677] _copy_from_user+0x2d/0xb0 [ 462.685786][ T9677] rfkill_fop_write+0x136/0x570 [ 462.685816][ T9677] ? __pfx_rfkill_fop_write+0x10/0x10 [ 462.685842][ T9677] ? security_file_permission+0x30/0x290 [ 462.685874][ T9677] ? rw_verify_area+0x255/0x4d0 [ 462.685901][ T9677] vfs_writev+0x4b6/0x960 [ 462.685934][ T9677] ? __pfx_rfkill_fop_write+0x10/0x10 [ 462.685964][ T9677] ? __pfx_vfs_writev+0x10/0x10 [ 462.686008][ T9677] ? __fget_files+0x2a/0x420 [ 462.686050][ T9677] ? __fget_files+0x3a0/0x420 [ 462.686074][ T9677] ? __fget_files+0x2a/0x420 [ 462.686107][ T9677] do_writev+0x14d/0x2d0 [ 462.686136][ T9677] ? __pfx_do_writev+0x10/0x10 [ 462.686168][ T9677] ? do_syscall_64+0xbe/0xfa0 [ 462.686194][ T9677] do_syscall_64+0xfa/0xfa0 [ 462.686223][ T9677] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.686245][ T9677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.686264][ T9677] ? clear_bhb_loop+0x60/0xb0 [ 462.686287][ T9677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.686305][ T9677] RIP: 0033:0x7fbfc938eec9 [ 462.686322][ T9677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.686339][ T9677] RSP: 002b:00007fbfca2a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 462.686359][ T9677] RAX: ffffffffffffffda RBX: 00007fbfc95e5fa0 RCX: 00007fbfc938eec9 [ 462.686373][ T9677] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 462.686385][ T9677] RBP: 00007fbfca2a6090 R08: 0000000000000000 R09: 0000000000000000 [ 462.686397][ T9677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.686408][ T9677] R13: 00007fbfc95e6038 R14: 00007fbfc95e5fa0 R15: 00007ffffc708438 [ 462.686438][ T9677] [ 463.154496][ T9681] loop3: detected capacity change from 0 to 256 [ 463.235118][ T9681] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 463.248185][ T9679] loop0: detected capacity change from 0 to 40427 [ 463.262788][ T5921] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 463.282960][ T5921] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 463.296086][ T9679] F2FS-fs (loop0): invalid crc value [ 463.302109][ T5921] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 463.343229][ T30] audit: type=1326 audit(1759448843.145:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793b18eec9 code=0x7ffc0000 [ 463.373772][ T9681] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 463.395820][ T9679] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 463.405532][ T9679] F2FS-fs (loop0): Start checkpoint disabled! [ 463.415643][ T9679] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 463.423527][ T9679] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 463.474617][ T9679] bio_check_eod: 164 callbacks suppressed [ 463.474636][ T9679] syz.0.879: attempt to access beyond end of device [ 463.474636][ T9679] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 463.494604][ T9679] syz.0.879: attempt to access beyond end of device [ 463.494604][ T9679] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 463.508635][ T9679] syz.0.879: attempt to access beyond end of device [ 463.508635][ T9679] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 463.520466][ T30] audit: type=1326 audit(1759448843.145:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793b18eec9 code=0x7ffc0000 [ 463.522723][ T9679] syz.0.879: attempt to access beyond end of device [ 463.522723][ T9679] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 463.560514][ T9679] syz.0.879: attempt to access beyond end of device [ 463.560514][ T9679] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 463.574982][ T9679] syz.0.879: attempt to access beyond end of device [ 463.574982][ T9679] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 463.589765][ T9679] syz.0.879: attempt to access beyond end of device [ 463.589765][ T9679] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 463.603861][ T9679] syz.0.879: attempt to access beyond end of device [ 463.603861][ T9679] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 463.617898][ T9679] syz.0.879: attempt to access beyond end of device [ 463.617898][ T9679] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 463.632494][ T9679] syz.0.879: attempt to access beyond end of device [ 463.632494][ T9679] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 463.717772][ T5921] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 463.741136][ T5921] usb 3-1: USB disconnect, device number 26 [ 463.790430][ T30] audit: type=1326 audit(1759448843.145:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f793b18eec9 code=0x7ffc0000 [ 463.980420][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 463.980447][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 463.980459][ T49] Workqueue: writeback wb_workfn (flush-7:0) [ 463.980497][ T49] Call Trace: [ 463.980504][ T49] [ 463.980512][ T49] dump_stack_lvl+0x189/0x250 [ 463.980541][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.980565][ T49] ? __pfx_queue_work_on+0x10/0x10 [ 463.980583][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 463.980606][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 463.980639][ T49] f2fs_handle_critical_error+0x37c/0x540 [ 463.980672][ T49] f2fs_write_end_io+0x886/0xb60 [ 463.980721][ T49] __submit_merged_bio+0x27a/0x6a0 [ 463.980742][ T49] ? up_write+0x1c4/0x420 [ 463.980771][ T49] __submit_merged_write_cond+0x44c/0x530 [ 463.980804][ T49] f2fs_sync_node_pages+0x1479/0x15e0 [ 463.980850][ T49] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 463.980873][ T49] ? __percpu_counter_sum+0x1c2/0x1e0 [ 463.980928][ T49] ? rcu_is_watching+0x15/0xb0 [ 463.980951][ T49] ? rcu_is_watching+0x15/0xb0 [ 463.980986][ T49] ? blk_start_plug+0x52/0x1b0 [ 463.981016][ T49] f2fs_write_node_pages+0x303/0x6e0 [ 463.981058][ T49] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 463.981100][ T49] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 463.981125][ T49] do_writepages+0x32e/0x550 [ 463.981164][ T49] ? reacquire_held_locks+0x127/0x1d0 [ 463.981184][ T49] ? writeback_sb_inodes+0x384/0x1010 [ 463.981218][ T49] __writeback_single_inode+0x145/0xff0 [ 463.981242][ T49] ? do_raw_spin_unlock+0x122/0x240 [ 463.981272][ T49] writeback_sb_inodes+0x6c7/0x1010 [ 463.981326][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 463.981401][ T49] ? rcu_is_watching+0x15/0xb0 [ 463.981434][ T49] wb_writeback+0x43b/0xaf0 [ 463.981467][ T49] ? queue_io+0x391/0x590 [ 463.981492][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 463.981526][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 463.981553][ T49] wb_workfn+0x409/0xef0 [ 463.981603][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 463.981640][ T49] ? __lock_acquire+0xab9/0xd20 [ 463.981682][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 463.981720][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 463.981740][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 463.981768][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 463.981801][ T49] process_scheduled_works+0xae1/0x17b0 [ 463.981867][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 463.981919][ T49] worker_thread+0x8a0/0xda0 [ 463.981971][ T49] kthread+0x711/0x8a0 [ 463.981998][ T49] ? __pfx_worker_thread+0x10/0x10 [ 463.982015][ T49] ? __pfx_kthread+0x10/0x10 [ 463.982050][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 463.982070][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.982086][ T49] ? __pfx_kthread+0x10/0x10 [ 463.982103][ T49] ret_from_fork+0x4bc/0x870 [ 463.982127][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 463.982153][ T49] ? __switch_to_asm+0x39/0x70 [ 463.982171][ T49] ? __switch_to_asm+0x33/0x70 [ 463.982188][ T49] ? __pfx_kthread+0x10/0x10 [ 463.982205][ T49] ret_from_fork_asm+0x1a/0x30 [ 463.982238][ T49] [ 464.305697][ T30] audit: type=1326 audit(1759448843.145:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793b18eec9 code=0x7ffc0000 [ 464.328106][ T30] audit: type=1326 audit(1759448843.145:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793b18eec9 code=0x7ffc0000 [ 464.350243][ T30] audit: type=1326 audit(1759448843.145:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f793b18eec9 code=0x7ffc0000 [ 464.373181][ T30] audit: type=1326 audit(1759448843.185:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793b18eec9 code=0x7ffc0000 [ 464.395773][ T30] audit: type=1326 audit(1759448843.185:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f793b18d97f code=0x7ffc0000 [ 464.418910][ T30] audit: type=1326 audit(1759448843.235:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.3.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793b18eec9 code=0x7ffc0000 [ 464.449687][ T49] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 464.466434][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 464.466472][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 464.466485][ T49] Workqueue: writeback wb_workfn (flush-7:0) [ 464.466525][ T49] Call Trace: [ 464.466533][ T49] [ 464.466542][ T49] dump_stack_lvl+0x189/0x250 [ 464.466585][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.466610][ T49] ? __pfx_queue_work_on+0x10/0x10 [ 464.466625][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 464.466641][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 464.466666][ T49] f2fs_handle_critical_error+0x37c/0x540 [ 464.466689][ T49] f2fs_write_end_io+0x886/0xb60 [ 464.466722][ T49] __submit_merged_bio+0x27a/0x6a0 [ 464.466737][ T49] ? up_write+0x1c4/0x420 [ 464.466757][ T49] __submit_merged_write_cond+0x44c/0x530 [ 464.466779][ T49] f2fs_sync_node_pages+0x1479/0x15e0 [ 464.466811][ T49] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 464.466826][ T49] ? __percpu_counter_sum+0x1c2/0x1e0 [ 464.466865][ T49] ? rcu_is_watching+0x15/0xb0 [ 464.466881][ T49] ? rcu_is_watching+0x15/0xb0 [ 464.466894][ T49] ? blk_start_plug+0x52/0x1b0 [ 464.466913][ T49] f2fs_write_node_pages+0x303/0x6e0 [ 464.466933][ T49] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 464.466961][ T49] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 464.466984][ T49] do_writepages+0x32e/0x550 [ 464.467004][ T49] ? reacquire_held_locks+0x127/0x1d0 [ 464.467017][ T49] ? writeback_sb_inodes+0x384/0x1010 [ 464.467041][ T49] __writeback_single_inode+0x145/0xff0 [ 464.467057][ T49] ? do_raw_spin_unlock+0x122/0x240 [ 464.467077][ T49] writeback_sb_inodes+0x6c7/0x1010 [ 464.467114][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 464.467164][ T49] ? rcu_is_watching+0x15/0xb0 [ 464.467185][ T49] wb_writeback+0x43b/0xaf0 [ 464.467207][ T49] ? queue_io+0x391/0x590 [ 464.467225][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 464.467248][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.467267][ T49] wb_workfn+0x409/0xef0 [ 464.467300][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 464.467325][ T49] ? __lock_acquire+0xab9/0xd20 [ 464.467354][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 464.467381][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.467394][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 464.467414][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 464.467437][ T49] process_scheduled_works+0xae1/0x17b0 [ 464.467482][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.467517][ T49] worker_thread+0x8a0/0xda0 [ 464.467552][ T49] kthread+0x711/0x8a0 [ 464.467571][ T49] ? __pfx_worker_thread+0x10/0x10 [ 464.467584][ T49] ? __pfx_kthread+0x10/0x10 [ 464.467602][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.467615][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.467630][ T49] ? __pfx_kthread+0x10/0x10 [ 464.467647][ T49] ret_from_fork+0x4bc/0x870 [ 464.467670][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 464.467697][ T49] ? __switch_to_asm+0x39/0x70 [ 464.467714][ T49] ? __switch_to_asm+0x33/0x70 [ 464.467730][ T49] ? __pfx_kthread+0x10/0x10 [ 464.467747][ T49] ret_from_fork_asm+0x1a/0x30 [ 464.467780][ T49] [ 464.467785][ T49] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 464.964878][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 464.964909][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 464.964923][ T49] Workqueue: writeback wb_workfn (flush-7:0) [ 464.964976][ T49] Call Trace: [ 464.964985][ T49] [ 464.964994][ T49] dump_stack_lvl+0x189/0x250 [ 464.965030][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.965058][ T49] ? __pfx_queue_work_on+0x10/0x10 [ 464.965079][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 464.965105][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 464.965146][ T49] f2fs_handle_critical_error+0x37c/0x540 [ 464.965185][ T49] f2fs_write_end_io+0x886/0xb60 [ 464.965240][ T49] __submit_merged_bio+0x27a/0x6a0 [ 464.965265][ T49] ? up_write+0x1c4/0x420 [ 464.965309][ T49] __submit_merged_write_cond+0x44c/0x530 [ 464.965345][ T49] f2fs_sync_node_pages+0x1479/0x15e0 [ 464.965397][ T49] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 464.965421][ T49] ? __percpu_counter_sum+0x1c2/0x1e0 [ 464.965484][ T49] ? rcu_is_watching+0x15/0xb0 [ 464.965511][ T49] ? rcu_is_watching+0x15/0xb0 [ 464.965531][ T49] ? blk_start_plug+0x52/0x1b0 [ 464.965563][ T49] f2fs_write_node_pages+0x303/0x6e0 [ 464.965596][ T49] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 464.965641][ T49] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 464.965665][ T49] do_writepages+0x32e/0x550 [ 464.965696][ T49] ? reacquire_held_locks+0x127/0x1d0 [ 464.965717][ T49] ? writeback_sb_inodes+0x384/0x1010 [ 464.965754][ T49] __writeback_single_inode+0x145/0xff0 [ 464.965780][ T49] ? do_raw_spin_unlock+0x122/0x240 [ 464.965812][ T49] writeback_sb_inodes+0x6c7/0x1010 [ 464.965871][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 464.965953][ T49] ? rcu_is_watching+0x15/0xb0 [ 464.965980][ T49] wb_writeback+0x43b/0xaf0 [ 464.966005][ T49] ? queue_io+0x391/0x590 [ 464.966026][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 464.966052][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.966074][ T49] wb_workfn+0x409/0xef0 [ 464.966113][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 464.966142][ T49] ? __lock_acquire+0xab9/0xd20 [ 464.966186][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 464.966214][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.966229][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 464.966251][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 464.966285][ T49] process_scheduled_works+0xae1/0x17b0 [ 464.966331][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.966367][ T49] worker_thread+0x8a0/0xda0 [ 464.966403][ T49] kthread+0x711/0x8a0 [ 464.966422][ T49] ? __pfx_worker_thread+0x10/0x10 [ 464.966435][ T49] ? __pfx_kthread+0x10/0x10 [ 464.966454][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.966468][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.966483][ T49] ? __pfx_kthread+0x10/0x10 [ 464.966500][ T49] ret_from_fork+0x4bc/0x870 [ 464.966523][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 464.966550][ T49] ? __switch_to_asm+0x39/0x70 [ 464.966567][ T49] ? __switch_to_asm+0x33/0x70 [ 464.966584][ T49] ? __pfx_kthread+0x10/0x10 [ 464.966601][ T49] ret_from_fork_asm+0x1a/0x30 [ 464.966634][ T49] [ 464.966640][ T49] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 466.940728][ T9707] loop4: detected capacity change from 0 to 1024 [ 466.979605][ T9711] loop3: detected capacity change from 0 to 2048 [ 467.640603][ T3513] hfsplus: b-tree write err: -5, ino 8 [ 468.051083][ T9721] loop3: detected capacity change from 0 to 1024 [ 469.043716][ T6891] hfsplus: b-tree write err: -5, ino 8 [ 471.538620][ T9750] loop4: detected capacity change from 0 to 4096 [ 472.029872][ T9762] loop0: detected capacity change from 0 to 2048 [ 472.361316][ T9752] loop2: detected capacity change from 0 to 4096 [ 472.460598][ T9752] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 472.653678][ T9750] loop4: detected capacity change from 0 to 2048 [ 472.788788][ T9750] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 473.079946][ T9750] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.121580][ T9752] ntfs3(loop2): ino=19, mi_enum_attr [ 473.132871][ T9752] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 473.150445][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 473.150460][ T30] audit: type=1800 audit(1759448852.955:76): pid=9750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.897" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 477.082131][ T9797] loop1: detected capacity change from 0 to 32768 [ 477.442705][ T30] audit: type=1800 audit(1759448857.245:77): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.908" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 477.532261][ T9791] loop3: detected capacity change from 0 to 32768 [ 477.607789][ T30] audit: type=1800 audit(1759448857.415:78): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.907" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 477.842938][ T9801] loop0: detected capacity change from 0 to 32768 [ 477.883776][ T9801] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 478.296876][ T9811] (syz.0.911,9811,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 478.313300][ T9811] (syz.0.911,9811,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 478.321915][ T9811] (syz.0.911,9811,0):ocfs2_link:764 ERROR: status = -2 [ 478.328850][ T9811] (syz.0.911,9811,0):ocfs2_link:842 ERROR: status = -2 [ 478.717604][ T5837] ocfs2: Unmounting device (7,0) on (node local) [ 478.897153][ T9816] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.907062][ T9817] program syz.3.914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.897615][ T9816] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.930959][ T9826] FAULT_INJECTION: forcing a failure. [ 479.930959][ T9826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.947435][ T9826] CPU: 0 UID: 0 PID: 9826 Comm: syz.0.915 Not tainted syzkaller #0 PREEMPT(full) [ 479.947479][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 479.947492][ T9826] Call Trace: [ 479.947500][ T9826] [ 479.947509][ T9826] dump_stack_lvl+0x189/0x250 [ 479.947538][ T9826] ? __pfx____ratelimit+0x10/0x10 [ 479.947561][ T9826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.947586][ T9826] ? __pfx__printk+0x10/0x10 [ 479.947628][ T9826] should_fail_ex+0x414/0x560 [ 479.947659][ T9826] _copy_to_user+0x31/0xb0 [ 479.947681][ T9826] simple_read_from_buffer+0xe1/0x170 [ 479.947711][ T9826] proc_fail_nth_read+0x1b3/0x220 [ 479.947734][ T9826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.947759][ T9826] ? rw_verify_area+0x2a6/0x4d0 [ 479.947780][ T9826] ? __lock_acquire+0xab9/0xd20 [ 479.947805][ T9826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.947827][ T9826] vfs_read+0x200/0xa30 [ 479.947843][ T9826] ? fdget_pos+0x247/0x320 [ 479.947865][ T9826] ? __pfx___mutex_lock+0x10/0x10 [ 479.947884][ T9826] ? __pfx_vfs_read+0x10/0x10 [ 479.947901][ T9826] ? __fget_files+0x2a/0x420 [ 479.947923][ T9826] ? __fget_files+0x3a0/0x420 [ 479.947940][ T9826] ? __fget_files+0x2a/0x420 [ 479.947965][ T9826] ksys_read+0x145/0x250 [ 479.947983][ T9826] ? __pfx_ksys_read+0x10/0x10 [ 479.948002][ T9826] ? do_syscall_64+0xbe/0xfa0 [ 479.948034][ T9826] do_syscall_64+0xfa/0xfa0 [ 479.948049][ T9826] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.948064][ T9826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.948076][ T9826] ? clear_bhb_loop+0x60/0xb0 [ 479.948092][ T9826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.948105][ T9826] RIP: 0033:0x7fde9358d8dc [ 479.948117][ T9826] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 479.948129][ T9826] RSP: 002b:00007fde9443d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.948143][ T9826] RAX: ffffffffffffffda RBX: 00007fde937e5fa0 RCX: 00007fde9358d8dc [ 479.948153][ T9826] RDX: 000000000000000f RSI: 00007fde9443d0a0 RDI: 0000000000000004 [ 479.948161][ T9826] RBP: 00007fde9443d090 R08: 0000000000000000 R09: 0000000000000000 [ 479.948169][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.948177][ T9826] R13: 00007fde937e6038 R14: 00007fde937e5fa0 R15: 00007ffc2dfa9168 [ 479.948198][ T9826] [ 480.589128][ T9816] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.734286][ T9816] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.809568][ T9831] loop2: detected capacity change from 0 to 2048 [ 480.832235][ T9831] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 480.891871][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.055843][ T9836] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 481.085110][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.222156][ T5954] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.325698][ T5954] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.750017][ T9847] loop4: detected capacity change from 0 to 1024 [ 484.400279][ T36] hfsplus: b-tree write err: -5, ino 8 [ 484.471923][ T9848] loop1: detected capacity change from 0 to 4096 [ 484.516379][ T9848] ntfs3(loop1): Primary boot: invalid index size -127. [ 484.537776][ T9855] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.574879][ T9848] ntfs3(loop1): try to read out of volume at offset 0x1ffe00 [ 484.615476][ T9858] overlayfs: failed to resolve './file1': -2 [ 484.709601][ T9855] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.087029][ T9855] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.353248][ T9868] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.028267][ T9855] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.058108][ T9868] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.211857][ T9868] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.271244][ T3513] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.289949][ T3513] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.533741][ T9863] loop0: detected capacity change from 0 to 32768 [ 487.600871][ T9863] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 487.616564][ T9868] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.858614][ T1008] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.876378][ T1008] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.880527][ T5837] ocfs2: Unmounting device (7,0) on (node local) [ 488.542115][ T1008] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.752940][ T8372] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.799953][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.862226][ T5921] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 488.948941][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.182374][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 489.611951][ T9907] FAULT_INJECTION: forcing a failure. [ 489.611951][ T9907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.625532][ T9907] CPU: 1 UID: 0 PID: 9907 Comm: syz.1.937 Not tainted syzkaller #0 PREEMPT(full) [ 489.625555][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.625567][ T9907] Call Trace: [ 489.625575][ T9907] [ 489.625583][ T9907] dump_stack_lvl+0x189/0x250 [ 489.625610][ T9907] ? __pfx____ratelimit+0x10/0x10 [ 489.625632][ T9907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.625655][ T9907] ? __pfx__printk+0x10/0x10 [ 489.625684][ T9907] ? __might_fault+0xb0/0x130 [ 489.625716][ T9907] should_fail_ex+0x414/0x560 [ 489.625744][ T9907] _copy_from_user+0x2d/0xb0 [ 489.625762][ T9907] ___sys_sendmsg+0x158/0x2a0 [ 489.625791][ T9907] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.625849][ T9907] ? __fget_files+0x2a/0x420 [ 489.625874][ T9907] ? __fget_files+0x3a0/0x420 [ 489.625909][ T9907] __x64_sys_sendmsg+0x19b/0x260 [ 489.625936][ T9907] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 489.625970][ T9907] ? __pfx_ksys_write+0x10/0x10 [ 489.626001][ T9907] ? do_syscall_64+0xbe/0xfa0 [ 489.626027][ T9907] do_syscall_64+0xfa/0xfa0 [ 489.626050][ T9907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.626068][ T9907] ? asm_sysvec_call_function_single+0x1a/0x20 [ 489.626087][ T9907] ? clear_bhb_loop+0x60/0xb0 [ 489.626109][ T9907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.626127][ T9907] RIP: 0033:0x7fcc2b78eec9 [ 489.626143][ T9907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.626160][ T9907] RSP: 002b:00007fcc2c5e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.626180][ T9907] RAX: ffffffffffffffda RBX: 00007fcc2b9e6180 RCX: 00007fcc2b78eec9 [ 489.626194][ T9907] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 489.626206][ T9907] RBP: 00007fcc2c5e1090 R08: 0000000000000000 R09: 0000000000000000 [ 489.626218][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.626229][ T9907] R13: 00007fcc2b9e6218 R14: 00007fcc2b9e6180 R15: 00007ffdfafa53c8 [ 489.626260][ T9907] [ 489.919084][ T5921] usb 1-1: unable to get BOS descriptor or descriptor too short [ 489.933312][ T5921] usb 1-1: config 5 has an invalid interface number: 61 but max is 0 [ 489.943367][ T5921] usb 1-1: config 5 has no interface number 0 [ 489.949805][ T5921] usb 1-1: config 5 interface 61 has no altsetting 0 [ 489.987141][ T5921] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0a [ 489.996286][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.004349][ T5921] usb 1-1: Product: syz [ 490.008625][ T5921] usb 1-1: Manufacturer: syz [ 490.013362][ T5921] usb 1-1: SerialNumber: syz [ 490.507029][ T9915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.938'. [ 491.426673][ T5921] ath6kl: Failed to submit usb control message: -71 [ 491.648529][ T5921] ath6kl: unable to send the bmi data to the device: -71 [ 491.758551][ T5921] ath6kl: Unable to send get target info: -71 [ 491.810107][ T5921] ath6kl: Failed to init ath6kl core: -71 [ 491.950455][ T5921] ath6kl_usb 1-1:5.61: probe with driver ath6kl_usb failed with error -71 [ 491.996910][ T9925] loop3: detected capacity change from 0 to 2048 [ 492.030518][ T5921] usb 1-1: USB disconnect, device number 18 [ 492.081393][ T9925] loop3: detected capacity change from 0 to 512 [ 492.100436][ T9925] EXT4-fs: Ignoring removed orlov option [ 492.187855][ T9932] ubi: mtd0 is already attached to ubi31 [ 492.199904][ T9925] EXT4-fs: Ignoring removed orlov option [ 492.219330][ T9925] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 492.253888][ T9932] 9pnet_fd: Insufficient options for proto=fd [ 492.285927][ T9925] EXT4-fs (loop3): 1 orphan inode deleted [ 492.341947][ T9925] EXT4-fs (loop3): 1 truncate cleaned up [ 492.359479][ T9925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.669182][ T9925] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.940: iget: bad extra_isize 46 (inode size 256) [ 493.475242][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.081983][ T9945] loop1: detected capacity change from 0 to 40427 [ 494.220179][ T9945] F2FS-fs (loop1): invalid crc value [ 494.305115][ T9945] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 494.315351][ T9945] F2FS-fs (loop1): Start checkpoint disabled! [ 494.345103][ T9945] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 494.353983][ T9945] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 494.403192][ T9926] loop2: detected capacity change from 0 to 32768 [ 494.544339][ T9926] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 494.578972][ T30] audit: type=1800 audit(1759448874.375:79): pid=9945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.946" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 495.156084][ T36] bio_check_eod: 182 callbacks suppressed [ 495.156099][ T36] kworker/u8:2: attempt to access beyond end of device [ 495.156099][ T36] loop1: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 495.230972][ T9957] (syz.2.941,9957,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 495.247200][ T9957] (syz.2.941,9957,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 495.256211][ T9957] (syz.2.941,9957,0):ocfs2_link:764 ERROR: status = -2 [ 495.263227][ T9957] (syz.2.941,9957,0):ocfs2_link:842 ERROR: status = -2 [ 495.429848][ T36] kworker/u8:2: attempt to access beyond end of device [ 495.429848][ T36] loop1: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 495.603272][ T36] kworker/u8:2: attempt to access beyond end of device [ 495.603272][ T36] loop1: rw=1, sector=57344, nr_sectors = 12288 limit=40427 [ 495.635428][ T9955] loop3: detected capacity change from 0 to 32768 [ 495.649465][ T36] kworker/u8:2: attempt to access beyond end of device [ 495.649465][ T36] loop1: rw=1, sector=69632, nr_sectors = 8 limit=40427 [ 495.699543][ T5842] ocfs2: Unmounting device (7,2) on (node local) [ 495.778762][ T36] kworker/u8:2: attempt to access beyond end of device [ 495.778762][ T36] loop1: rw=1, sector=69640, nr_sectors = 8 limit=40427 [ 495.852925][ T36] kworker/u8:2: attempt to access beyond end of device [ 495.852925][ T36] loop1: rw=1, sector=69648, nr_sectors = 8 limit=40427 [ 495.909906][ T36] kworker/u8:2: attempt to access beyond end of device [ 495.909906][ T36] loop1: rw=1, sector=69656, nr_sectors = 8 limit=40427 [ 496.022129][ T36] kworker/u8:2: attempt to access beyond end of device [ 496.022129][ T36] loop1: rw=1, sector=69664, nr_sectors = 8 limit=40427 [ 496.081215][ T36] kworker/u8:2: attempt to access beyond end of device [ 496.081215][ T36] loop1: rw=1, sector=69672, nr_sectors = 8 limit=40427 [ 496.137218][ T36] kworker/u8:2: attempt to access beyond end of device [ 496.137218][ T36] loop1: rw=1, sector=69680, nr_sectors = 8 limit=40427 [ 496.430274][ T5847] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 497.040281][ T5847] usb 4-1: unable to get BOS descriptor or descriptor too short [ 497.091689][ T5847] usb 4-1: not running at top speed; connect to a high speed hub [ 497.139751][ T5847] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.174519][ T5847] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 497.338857][ T5847] usb 4-1: string descriptor 0 read error: -22 [ 497.360788][ T5847] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.204921][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.293412][ T5847] usb 4-1: 0:2 : does not exist [ 498.484842][ T9977] loop4: detected capacity change from 0 to 2048 [ 498.632460][ T9977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.817966][ T9977] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.953: bg 0: block 234: padding at end of block bitmap is not set [ 498.835467][ T9977] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 498.847873][ T9977] EXT4-fs (loop4): This should not happen!! Data will be lost [ 498.847873][ T9977] [ 500.162347][ T36] bio_check_eod: 1465 callbacks suppressed [ 500.162387][ T36] kworker/u8:2: attempt to access beyond end of device [ 500.162387][ T36] loop1: rw=1, sector=85504, nr_sectors = 8 limit=40427 [ 500.174398][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.208834][ T36] kworker/u8:2: attempt to access beyond end of device [ 500.208834][ T36] loop1: rw=1, sector=85512, nr_sectors = 8 limit=40427 [ 500.329449][ T5847] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 500.391591][ T36] kworker/u8:2: attempt to access beyond end of device [ 500.391591][ T36] loop1: rw=1, sector=85520, nr_sectors = 8 limit=40427 [ 500.406577][ T5847] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 500.441706][ T36] kworker/u8:2: attempt to access beyond end of device [ 500.441706][ T36] loop1: rw=1, sector=85528, nr_sectors = 8 limit=40427 [ 500.446228][ T5847] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 500.491674][ T36] kworker/u8:2: attempt to access beyond end of device [ 500.491674][ T36] loop1: rw=1, sector=85536, nr_sectors = 8 limit=40427 [ 500.516044][ T9987] loop4: detected capacity change from 0 to 2048 [ 500.528424][ T5847] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 500.570839][ T36] kworker/u8:2: attempt to access beyond end of device [ 500.570839][ T36] loop1: rw=1, sector=85544, nr_sectors = 8 limit=40427 [ 500.629130][ T5847] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 500.679786][ T36] kworker/u8:2: attempt to access beyond end of device [ 500.679786][ T36] loop1: rw=1, sector=85552, nr_sectors = 8 limit=40427 [ 500.793409][ T36] kworker/u8:2: attempt to access beyond end of device [ 500.793409][ T36] loop1: rw=1, sector=85560, nr_sectors = 8 limit=40427 [ 500.808622][ T36] kworker/u8:2: attempt to access beyond end of device [ 500.808622][ T36] loop1: rw=1, sector=85568, nr_sectors = 8 limit=40427 [ 501.433330][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.455990][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.603570][ T5847] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 501.633977][ T36] kworker/u8:2: attempt to access beyond end of device [ 501.633977][ T36] loop1: rw=1, sector=85576, nr_sectors = 8 limit=40427 [ 501.832197][ T5847] usb 4-1: USB disconnect, device number 14 [ 501.851136][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 501.851169][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.851184][ T36] Workqueue: writeback wb_workfn (flush-7:1) [ 501.851227][ T36] Call Trace: [ 501.851235][ T36] [ 501.851244][ T36] dump_stack_lvl+0x189/0x250 [ 501.851277][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.851301][ T36] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 501.851326][ T36] ? __pfx_queue_work_on+0x10/0x10 [ 501.851350][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 501.851373][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 501.851399][ T36] ? f2fs_hw_is_readonly+0x39b/0x470 [ 501.851430][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 501.851463][ T36] f2fs_write_end_io+0x886/0xb60 [ 501.851524][ T36] __submit_merged_bio+0x27a/0x6a0 [ 501.851550][ T36] ? _raw_spin_unlock+0x28/0x50 [ 501.851576][ T36] f2fs_submit_page_write+0x2088/0x21b0 [ 501.851625][ T36] ? __f2fs_is_valid_blkaddr+0xd2a/0x14f0 [ 501.851663][ T36] do_write_page+0x40f/0xac0 [ 501.851697][ T36] ? f2fs_encrypt_one_page+0xaf/0x940 [ 501.851731][ T36] f2fs_outplace_write_data+0x11a/0x220 [ 501.851767][ T36] f2fs_do_write_data_page+0x113e/0x1650 [ 501.851807][ T36] ? __pfx_f2fs_do_write_data_page+0x10/0x10 [ 501.851833][ T36] ? css_rstat_updated+0x23a/0x4f0 [ 501.851875][ T36] f2fs_write_single_data_page+0xb25/0x1760 [ 501.851920][ T36] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 501.851967][ T36] ? mlock_drain_local+0x79/0x490 [ 501.851996][ T36] ? mlock_drain_local+0x28e/0x490 [ 501.852031][ T36] f2fs_write_data_pages+0x195b/0x3000 [ 501.852109][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 501.852221][ T36] ? f2fs_write_meta_pages+0x357/0x450 [ 501.852262][ T36] ? __lock_acquire+0xab9/0xd20 [ 501.852297][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 501.852328][ T36] do_writepages+0x32e/0x550 [ 501.852356][ T36] ? reacquire_held_locks+0x127/0x1d0 [ 501.852375][ T36] ? writeback_sb_inodes+0x384/0x1010 [ 501.852408][ T36] __writeback_single_inode+0x145/0xff0 [ 501.852431][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 501.852463][ T36] writeback_sb_inodes+0x6c7/0x1010 [ 501.852525][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 501.852596][ T36] ? rcu_is_watching+0x15/0xb0 [ 501.852628][ T36] wb_writeback+0x43b/0xaf0 [ 501.852662][ T36] ? queue_io+0x391/0x590 [ 501.852690][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 501.852725][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.852754][ T36] wb_workfn+0x409/0xef0 [ 501.852804][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 501.852843][ T36] ? __lock_acquire+0xab9/0xd20 [ 501.852885][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 501.852924][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.852945][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 501.852975][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 501.853011][ T36] process_scheduled_works+0xae1/0x17b0 [ 501.853077][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 501.853130][ T36] worker_thread+0x8a0/0xda0 [ 501.853180][ T36] kthread+0x711/0x8a0 [ 501.853210][ T36] ? __pfx_worker_thread+0x10/0x10 [ 501.853230][ T36] ? __pfx_kthread+0x10/0x10 [ 501.853258][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.853280][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.853303][ T36] ? __pfx_kthread+0x10/0x10 [ 501.853330][ T36] ret_from_fork+0x4bc/0x870 [ 501.853366][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 501.853407][ T36] ? __switch_to_asm+0x39/0x70 [ 501.853434][ T36] ? __switch_to_asm+0x33/0x70 [ 501.853461][ T36] ? __pfx_kthread+0x10/0x10 [ 501.853495][ T36] ret_from_fork_asm+0x1a/0x30 [ 501.853546][ T36] [ 502.348314][ T36] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 502.581877][T10006] loop0: detected capacity change from 0 to 1024 [ 503.237644][T10002] loop2: detected capacity change from 0 to 2048 [ 503.320962][T10002] loop2: detected capacity change from 0 to 512 [ 503.409551][ T3513] hfsplus: b-tree write err: -5, ino 8 [ 503.419526][T10002] EXT4-fs: Ignoring removed orlov option [ 503.454727][T10002] EXT4-fs: Ignoring removed orlov option [ 503.474462][T10002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 503.913724][T10002] EXT4-fs (loop2): 1 orphan inode deleted [ 504.000742][T10002] EXT4-fs (loop2): 1 truncate cleaned up [ 504.137926][T10025] loop0: detected capacity change from 0 to 1024 [ 504.592294][T10002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.775757][T10002] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.959: iget: bad extra_isize 46 (inode size 256) [ 504.831464][T10019] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 505.349667][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.397695][ T36] hfsplus: b-tree write err: -5, ino 8 [ 505.907314][T10039] loop2: detected capacity change from 0 to 64 [ 506.106445][T10043] FAULT_INJECTION: forcing a failure. [ 506.106445][T10043] name failslab, interval 1, probability 0, space 0, times 0 [ 506.159249][T10043] CPU: 0 UID: 0 PID: 10043 Comm: syz.0.967 Not tainted syzkaller #0 PREEMPT(full) [ 506.159274][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 506.159286][T10043] Call Trace: [ 506.159293][T10043] [ 506.159301][T10043] dump_stack_lvl+0x189/0x250 [ 506.159329][T10043] ? __pfx____ratelimit+0x10/0x10 [ 506.159351][T10043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.159395][T10043] ? __pfx__printk+0x10/0x10 [ 506.159446][T10043] ? __pfx___might_resched+0x10/0x10 [ 506.159470][T10043] should_fail_ex+0x414/0x560 [ 506.159502][T10043] should_failslab+0xa8/0x100 [ 506.159531][T10043] __kmalloc_noprof+0xcb/0x7f0 [ 506.159553][T10043] ? kfree+0x4d/0x6d0 [ 506.159570][T10043] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 506.159603][T10043] tomoyo_realpath_from_path+0xe3/0x5d0 [ 506.159629][T10043] ? tomoyo_domain+0xd9/0x130 [ 506.159671][T10043] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 506.159690][T10043] tomoyo_path_number_perm+0x1e8/0x5a0 [ 506.159730][T10043] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 506.159791][T10043] ? __fget_files+0x2a/0x420 [ 506.159822][T10043] ? __fget_files+0x3a0/0x420 [ 506.159859][T10043] ? __fget_files+0x2a/0x420 [ 506.159886][T10043] security_file_ioctl+0xcb/0x2d0 [ 506.159917][T10043] __se_sys_ioctl+0x47/0x170 [ 506.159937][T10043] do_syscall_64+0xfa/0xfa0 [ 506.159957][T10043] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.159977][T10043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.159996][T10043] ? clear_bhb_loop+0x60/0xb0 [ 506.160019][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.160037][T10043] RIP: 0033:0x7fde9358eec9 [ 506.160053][T10043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.160070][T10043] RSP: 002b:00007fde9443d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.160089][T10043] RAX: ffffffffffffffda RBX: 00007fde937e5fa0 RCX: 00007fde9358eec9 [ 506.160104][T10043] RDX: 0000200000000140 RSI: 000000004400ae8f RDI: 0000000000000005 [ 506.160116][T10043] RBP: 00007fde9443d090 R08: 0000000000000000 R09: 0000000000000000 [ 506.160127][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.160137][T10043] R13: 00007fde937e6038 R14: 00007fde937e5fa0 R15: 00007ffc2dfa9168 [ 506.160169][T10043] [ 506.435838][T10043] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.455468][T10044] kvm: pic: non byte write [ 506.594625][T10051] loop3: detected capacity change from 0 to 164 [ 507.128152][T10060] loop1: detected capacity change from 0 to 1024 [ 508.807122][ T12] hfsplus: b-tree write err: -5, ino 8 [ 509.554752][T10081] loop0: detected capacity change from 0 to 512 [ 509.763848][T10081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.491859][T10081] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.833998][T10100] loop2: detected capacity change from 0 to 2048 [ 511.901912][T10100] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 512.023596][T10101] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 512.150141][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.069101][T10106] netlink: 'syz.0.983': attribute type 1 has an invalid length. [ 514.152265][T10109] netlink: 'syz.3.984': attribute type 1 has an invalid length. [ 514.190819][T10110] FAULT_INJECTION: forcing a failure. [ 514.190819][T10110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.217451][T10110] CPU: 0 UID: 0 PID: 10110 Comm: syz.0.983 Not tainted syzkaller #0 PREEMPT(full) [ 514.217477][T10110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.217488][T10110] Call Trace: [ 514.217495][T10110] [ 514.217503][T10110] dump_stack_lvl+0x189/0x250 [ 514.217529][T10110] ? __pfx____ratelimit+0x10/0x10 [ 514.217551][T10110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.217574][T10110] ? __pfx__printk+0x10/0x10 [ 514.217602][T10110] ? __might_fault+0xb0/0x130 [ 514.217634][T10110] should_fail_ex+0x414/0x560 [ 514.217662][T10110] _copy_from_user+0x2d/0xb0 [ 514.217680][T10110] ___sys_sendmsg+0x158/0x2a0 [ 514.217708][T10110] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.217765][T10110] ? __fget_files+0x2a/0x420 [ 514.217789][T10110] ? __fget_files+0x3a0/0x420 [ 514.217822][T10110] __x64_sys_sendmsg+0x19b/0x260 [ 514.217849][T10110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 514.217882][T10110] ? __pfx_ksys_write+0x10/0x10 [ 514.217906][T10110] ? do_syscall_64+0xbe/0xfa0 [ 514.217932][T10110] do_syscall_64+0xfa/0xfa0 [ 514.217952][T10110] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.217973][T10110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.217991][T10110] ? clear_bhb_loop+0x60/0xb0 [ 514.218014][T10110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.218031][T10110] RIP: 0033:0x7fde9358eec9 [ 514.218047][T10110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.218064][T10110] RSP: 002b:00007fde943fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.218084][T10110] RAX: ffffffffffffffda RBX: 00007fde937e6180 RCX: 00007fde9358eec9 [ 514.218098][T10110] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000005 [ 514.218110][T10110] RBP: 00007fde943fb090 R08: 0000000000000000 R09: 0000000000000000 [ 514.218121][T10110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.218131][T10110] R13: 00007fde937e6218 R14: 00007fde937e6180 R15: 00007ffc2dfa9168 [ 514.218161][T10110] [ 514.516783][T10106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.637717][T10109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.534376][T10122] loop4: detected capacity change from 0 to 1024 [ 515.626595][T10113] bond1: (slave veth3): Enslaving as an active interface with a down link [ 515.665016][T10117] bond1: (slave veth0_to_bond): making interface the new active one [ 515.676183][T10117] veth0_to_bond: entered promiscuous mode [ 515.683314][T10117] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 516.019910][ T12] hfsplus: b-tree write err: -5, ino 8 [ 516.111805][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 516.215940][T10137] loop4: detected capacity change from 0 to 4096 [ 516.267171][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 516.311833][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 516.337092][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.409087][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 516.431846][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.452328][ T24] usb 2-1: Product: syz [ 516.456522][ T24] usb 2-1: Manufacturer: syz [ 516.487346][ T24] usb 2-1: SerialNumber: syz [ 516.507629][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 516.523775][ T24] hub 2-1:1.0: probe with driver hub failed with error -5 [ 516.661832][ T9909] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 516.844116][ T9909] usb 4-1: Using ep0 maxpacket: 32 [ 516.870288][ T9909] usb 4-1: config 0 has an invalid interface number: 201 but max is 0 [ 516.916862][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 516.933102][ T9909] usb 4-1: config 0 has no interface number 0 [ 516.946884][ T9909] usb 4-1: config 0 interface 201 has no altsetting 0 [ 517.033042][ T9909] usb 4-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 517.127014][ T24] usb 2-1: USB disconnect, device number 19 [ 517.159991][ T9909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.262704][ T9909] usb 4-1: Product: syz [ 517.321346][ T9909] usb 4-1: Manufacturer: syz [ 517.347645][ T24] usblp0: removed [ 517.361980][ T9909] usb 4-1: SerialNumber: syz [ 517.385407][ T9909] usb 4-1: config 0 descriptor?? [ 517.419890][ T9909] go7007 4-1:0.201: probe with driver go7007 failed with error -12 [ 517.603450][ T9909] usb 4-1: USB disconnect, device number 15 [ 518.317880][T10165] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.730283][T10165] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.429791][T10165] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.220143][T10165] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.287924][T10182] ubi: mtd0 is already attached to ubi31 [ 521.418146][T10182] 9pnet_fd: Insufficient options for proto=fd [ 521.531981][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.592127][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.640493][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.695561][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.137938][T10186] loop1: detected capacity change from 0 to 32768 [ 523.208764][T10186] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 523.368522][T10186] XFS (loop1): Ending clean mount [ 524.145972][T10186] XFS (loop1): Quotacheck needed: Please wait. [ 524.568647][T10190] loop2: detected capacity change from 0 to 32768 [ 524.670912][T10186] XFS (loop1): Quotacheck: Done. [ 524.763779][T10190] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 524.815782][ T5856] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 525.116071][T10229] (syz.2.1002,10229,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 525.132534][T10229] (syz.2.1002,10229,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 525.141240][T10229] (syz.2.1002,10229,1):ocfs2_link:764 ERROR: status = -2 [ 525.148353][T10229] (syz.2.1002,10229,1):ocfs2_link:842 ERROR: status = -2 [ 525.383299][ T5842] ocfs2: Unmounting device (7,2) on (node local) [ 526.269310][T10225] loop0: detected capacity change from 0 to 32768 [ 526.474395][T10225] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 526.628213][T10246] loop3: detected capacity change from 0 to 1024 [ 527.328122][T10251] (syz.0.1012,10251,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 527.344435][T10251] (syz.0.1012,10251,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 527.354497][T10251] (syz.0.1012,10251,0):ocfs2_link:764 ERROR: status = -2 [ 527.361563][T10251] (syz.0.1012,10251,0):ocfs2_link:842 ERROR: status = -2 [ 527.621086][ T49] hfsplus: b-tree write err: -5, ino 8 [ 527.644899][ T5837] ocfs2: Unmounting device (7,0) on (node local) [ 527.854511][T10257] loop1: detected capacity change from 0 to 2048 [ 527.942138][T10257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.747243][T10260] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 529.741563][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.396392][ T7277] veth0_to_bond: left promiscuous mode [ 533.133880][T10283] loop4: detected capacity change from 0 to 32768 [ 533.149223][T10283] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1026 (10283) [ 533.205361][T10283] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 533.215614][T10283] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 533.444474][T10283] BTRFS info (device loop4): enabling ssd optimizations [ 533.451547][T10283] BTRFS info (device loop4): enabling free space tree [ 533.459662][T10283] BTRFS info (device loop4): use zstd compression, level 3 [ 533.488520][T10297] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.636379][T10297] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.262579][T10273] loop2: detected capacity change from 0 to 32768 [ 534.270419][T10297] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.339209][T10273] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 534.360045][T10297] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.544422][ T65] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.556614][T10273] XFS (loop2): Ending clean mount [ 534.557128][T10278] loop0: detected capacity change from 0 to 32768 [ 534.584696][T10273] XFS (loop2): Quotacheck needed: Please wait. [ 534.626286][ T65] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.671546][ T30] audit: type=1800 audit(1759448914.475:80): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1025" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 534.710208][ T65] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.761233][ T3513] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.800451][T10273] XFS (loop2): Quotacheck: Done. [ 534.944096][ T5842] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 534.981853][ T5953] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 535.054212][T10324] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.142474][ T5953] usb 2-1: device descriptor read/64, error -71 [ 535.260700][T10327] FAULT_INJECTION: forcing a failure. [ 535.260700][T10327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.273986][T10327] CPU: 1 UID: 0 PID: 10327 Comm: syz.0.1032 Not tainted syzkaller #0 PREEMPT(full) [ 535.274010][T10327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 535.274022][T10327] Call Trace: [ 535.274030][T10327] [ 535.274039][T10327] dump_stack_lvl+0x189/0x250 [ 535.274071][T10327] ? __pfx____ratelimit+0x10/0x10 [ 535.274093][T10327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.274134][T10327] ? __pfx__printk+0x10/0x10 [ 535.274168][T10327] ? __might_fault+0xb0/0x130 [ 535.274208][T10327] should_fail_ex+0x414/0x560 [ 535.274240][T10327] _copy_from_user+0x2d/0xb0 [ 535.274263][T10327] get_timespec64+0x8e/0x1a0 [ 535.274296][T10327] ? __pfx_get_timespec64+0x10/0x10 [ 535.274340][T10327] __x64_sys_recvmmsg+0x143/0x240 [ 535.274375][T10327] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 535.274419][T10327] ? do_syscall_64+0xbe/0xfa0 [ 535.274451][T10327] do_syscall_64+0xfa/0xfa0 [ 535.274479][T10327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.274500][T10327] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 535.274522][T10327] ? clear_bhb_loop+0x60/0xb0 [ 535.274549][T10327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.274571][T10327] RIP: 0033:0x7fde9358eec9 [ 535.274590][T10327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.274610][T10327] RSP: 002b:00007fde943fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 535.274633][T10327] RAX: ffffffffffffffda RBX: 00007fde937e6180 RCX: 00007fde9358eec9 [ 535.274649][T10327] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: 0000000000000006 [ 535.274663][T10327] RBP: 00007fde943fb090 R08: 0000200000008000 R09: 0000000000000000 [ 535.274677][T10327] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000001 [ 535.274691][T10327] R13: 00007fde937e6218 R14: 00007fde937e6180 R15: 00007ffc2dfa9168 [ 535.274727][T10327] [ 535.761393][ T5953] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 536.051892][ T5953] usb 2-1: device descriptor read/64, error -71 [ 536.063359][T10324] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.137963][ T5841] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 536.167497][ T5953] usb usb2-port1: attempt power cycle [ 536.310574][T10324] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.556596][T10324] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.611888][ T5953] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 536.912499][ T5953] usb 2-1: device descriptor read/8, error -71 [ 537.076403][T10347] FAULT_INJECTION: forcing a failure. [ 537.076403][T10347] name failslab, interval 1, probability 0, space 0, times 0 [ 537.121907][T10347] CPU: 1 UID: 0 PID: 10347 Comm: syz.2.1039 Not tainted syzkaller #0 PREEMPT(full) [ 537.121934][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 537.121945][T10347] Call Trace: [ 537.121953][T10347] [ 537.121961][T10347] dump_stack_lvl+0x189/0x250 [ 537.121988][T10347] ? __pfx____ratelimit+0x10/0x10 [ 537.122010][T10347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.122033][T10347] ? __pfx__printk+0x10/0x10 [ 537.122066][T10347] ? __pfx___might_resched+0x10/0x10 [ 537.122089][T10347] should_fail_ex+0x414/0x560 [ 537.122115][T10347] should_failslab+0xa8/0x100 [ 537.122143][T10347] __kmalloc_noprof+0xcb/0x7f0 [ 537.122164][T10347] ? kfree+0x4d/0x6d0 [ 537.122180][T10347] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 537.122210][T10347] tomoyo_realpath_from_path+0xe3/0x5d0 [ 537.122235][T10347] ? tomoyo_domain+0xd9/0x130 [ 537.122264][T10347] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 537.122284][T10347] tomoyo_path_number_perm+0x1e8/0x5a0 [ 537.122306][T10347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 537.122362][T10347] ? __fget_files+0x2a/0x420 [ 537.122391][T10347] ? __fget_files+0x3a0/0x420 [ 537.122415][T10347] ? __fget_files+0x2a/0x420 [ 537.122443][T10347] security_file_ioctl+0xcb/0x2d0 [ 537.122482][T10347] __se_sys_ioctl+0x47/0x170 [ 537.122504][T10347] do_syscall_64+0xfa/0xfa0 [ 537.122526][T10347] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.122548][T10347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.122566][T10347] ? clear_bhb_loop+0x60/0xb0 [ 537.122590][T10347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.122607][T10347] RIP: 0033:0x7fa594d8eec9 [ 537.122624][T10347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.122641][T10347] RSP: 002b:00007fa595bca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.122661][T10347] RAX: ffffffffffffffda RBX: 00007fa594fe5fa0 RCX: 00007fa594d8eec9 [ 537.122675][T10347] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 537.122687][T10347] RBP: 00007fa595bca090 R08: 0000000000000000 R09: 0000000000000000 [ 537.122699][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.122710][T10347] R13: 00007fa594fe6038 R14: 00007fa594fe5fa0 R15: 00007fff2ef43948 [ 537.122741][T10347] [ 537.122749][T10347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 537.179049][ T5953] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 537.209790][T10349] loop4: detected capacity change from 0 to 4096 [ 537.220139][T10347] loop2: detected capacity change from 0 to 7 [ 537.395133][T10347] Dev loop2: unable to read RDB block 7 [ 537.441112][T10347] loop2: unable to read partition table [ 537.468848][ T5953] usb 2-1: device descriptor read/8, error -71 [ 537.489680][T10347] loop2: partition table beyond EOD, truncated [ 537.550374][T10347] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 538.090408][ T5953] usb usb2-port1: unable to enumerate USB device [ 539.385885][T10369] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1045'. [ 539.431408][T10369] netlink: 352 bytes leftover after parsing attributes in process `syz.0.1045'. [ 539.564607][T10373] FAULT_INJECTION: forcing a failure. [ 539.564607][T10373] name failslab, interval 1, probability 0, space 0, times 0 [ 539.595449][T10373] CPU: 1 UID: 0 PID: 10373 Comm: syz.4.1047 Not tainted syzkaller #0 PREEMPT(full) [ 539.595474][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 539.595486][T10373] Call Trace: [ 539.595493][T10373] [ 539.595501][T10373] dump_stack_lvl+0x189/0x250 [ 539.595536][T10373] ? __pfx____ratelimit+0x10/0x10 [ 539.595557][T10373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.595581][T10373] ? __pfx__printk+0x10/0x10 [ 539.595615][T10373] ? __pfx___might_resched+0x10/0x10 [ 539.595638][T10373] should_fail_ex+0x414/0x560 [ 539.595667][T10373] should_failslab+0xa8/0x100 [ 539.595696][T10373] __kmalloc_noprof+0xcb/0x7f0 [ 539.595722][T10373] ? kfree+0x4d/0x6d0 [ 539.595739][T10373] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 539.595769][T10373] tomoyo_realpath_from_path+0xe3/0x5d0 [ 539.595795][T10373] ? tomoyo_domain+0xd9/0x130 [ 539.595824][T10373] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 539.595844][T10373] tomoyo_path_number_perm+0x1e8/0x5a0 [ 539.595866][T10373] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 539.595921][T10373] ? __fget_files+0x2a/0x420 [ 539.595951][T10373] ? __fget_files+0x3a0/0x420 [ 539.595976][T10373] ? __fget_files+0x2a/0x420 [ 539.596005][T10373] security_file_ioctl+0xcb/0x2d0 [ 539.596037][T10373] __se_sys_ioctl+0x47/0x170 [ 539.596059][T10373] do_syscall_64+0xfa/0xfa0 [ 539.596080][T10373] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.596102][T10373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.596121][T10373] ? clear_bhb_loop+0x60/0xb0 [ 539.596144][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.596162][T10373] RIP: 0033:0x7fbfc938eec9 [ 539.596177][T10373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.596192][T10373] RSP: 002b:00007fbfca2a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.596211][T10373] RAX: ffffffffffffffda RBX: 00007fbfc95e5fa0 RCX: 00007fbfc938eec9 [ 539.596222][T10373] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 539.596229][T10373] RBP: 00007fbfca2a6090 R08: 0000000000000000 R09: 0000000000000000 [ 539.596245][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.596253][T10373] R13: 00007fbfc95e6038 R14: 00007fbfc95e5fa0 R15: 00007ffffc708438 [ 539.596275][T10373] [ 539.596396][T10373] ERROR: Out of memory at tomoyo_realpath_from_path. [ 539.848075][T10373] kvm: pic: non byte write [ 539.908280][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.046602][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.126209][T10217] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.167566][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.177796][T10382] loop4: detected capacity change from 0 to 512 [ 540.232718][T10382] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1050: iget: bad i_size value: -432345564227567606 [ 540.310174][T10382] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1050: couldn't read orphan inode 15 (err -117) [ 540.403806][T10382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.866702][T10390] loop0: detected capacity change from 0 to 512 [ 541.247358][T10390] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1052: bad orphan inode 15 [ 541.284901][T10367] loop2: detected capacity change from 0 to 32768 [ 541.313610][T10390] ext4_test_bit(bit=14, block=18) = 1 [ 541.365048][T10390] is_bad_inode(inode)=0 [ 541.369258][T10390] NEXT_ORPHAN(inode)=1023 [ 541.387071][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.423112][T10367] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 541.459244][T10390] max_ino=32 [ 541.463994][T10390] i_nlink=0 [ 541.489543][T10390] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2967: inode #15: comm syz.0.1052: corrupted xattr block 19: invalid header [ 541.879517][T10390] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 541.929097][T10390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 542.004163][T10367] XFS (loop2): Ending clean mount [ 542.127602][T10390] ext4 filesystem being mounted at /211/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 542.174348][T10367] XFS (loop2): Quotacheck needed: Please wait. [ 542.317255][T10367] XFS (loop2): Quotacheck: Done. [ 542.405649][ T5952] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 542.462600][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 542.480805][ T5842] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 542.634754][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 542.683799][ T5952] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 542.840956][ T5952] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 542.869820][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 542.998835][ T5952] usb 5-1: Product: syz [ 543.092050][ T5952] usb 5-1: Manufacturer: syz [ 543.096695][ T5952] usb 5-1: SerialNumber: syz [ 543.138533][ T5953] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 543.156395][ T5952] usb 5-1: config 0 descriptor?? [ 543.180707][ T5952] pwc: Philips SPC 880NC USB webcam detected. [ 543.282443][T10422] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.342209][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 544.045191][ T5953] usb 1-1: unable to get BOS descriptor or descriptor too short [ 544.056037][ T5953] usb 1-1: config 5 has an invalid interface number: 61 but max is 0 [ 544.069630][T10422] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.106984][ T5953] usb 1-1: config 5 has no interface number 0 [ 544.117227][ T5953] usb 1-1: config 5 interface 61 has no altsetting 0 [ 544.125194][ T5952] pwc: Warning: more than 1 configuration available. [ 544.134980][ T5952] pwc: Failed to set LED on/off time (-71) [ 544.147050][ T5952] pwc: send_video_command error -71 [ 544.153551][ T5953] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0a [ 544.169298][ T5952] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 544.220189][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.231614][ T5952] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 544.241191][ T5953] usb 1-1: Product: syz [ 544.252135][ T5953] usb 1-1: Manufacturer: syz [ 544.258257][T10422] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.267129][ T5953] usb 1-1: SerialNumber: syz [ 544.277541][ T5952] usb 5-1: USB disconnect, device number 19 [ 544.409662][T10422] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.510924][T10430] FAULT_INJECTION: forcing a failure. [ 544.510924][T10430] name failslab, interval 1, probability 0, space 0, times 0 [ 544.524868][T10430] CPU: 0 UID: 0 PID: 10430 Comm: syz.3.1060 Not tainted syzkaller #0 PREEMPT(full) [ 544.524898][T10430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 544.524912][T10430] Call Trace: [ 544.524921][T10430] [ 544.524930][T10430] dump_stack_lvl+0x189/0x250 [ 544.524967][T10430] ? __pfx____ratelimit+0x10/0x10 [ 544.524992][T10430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.525019][T10430] ? __pfx__printk+0x10/0x10 [ 544.525055][T10430] ? __pfx___might_resched+0x10/0x10 [ 544.525076][T10430] ? fs_reclaim_acquire+0x7d/0x100 [ 544.525110][T10430] should_fail_ex+0x414/0x560 [ 544.525141][T10430] should_failslab+0xa8/0x100 [ 544.525174][T10430] __kmalloc_cache_noprof+0x6f/0x6f0 [ 544.525201][T10430] ? __se_sys_memfd_create+0x211/0x780 [ 544.525242][T10430] __se_sys_memfd_create+0x211/0x780 [ 544.525293][T10430] do_syscall_64+0xfa/0xfa0 [ 544.525330][T10430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.525349][T10430] ? asm_sysvec_call_function_single+0x1a/0x20 [ 544.525369][T10430] ? clear_bhb_loop+0x60/0xb0 [ 544.525393][T10430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.525412][T10430] RIP: 0033:0x7f793b18eec9 [ 544.525429][T10430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.525446][T10430] RSP: 002b:00007f793c071e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 544.525472][T10430] RAX: ffffffffffffffda RBX: 0000000000000583 RCX: 00007f793b18eec9 [ 544.525487][T10430] RDX: 00007f793c071ef0 RSI: 0000000000000000 RDI: 00007f793b212960 [ 544.525500][T10430] RBP: 0000200000000b40 R08: 00007f793c071bb7 R09: 00007f793c071e40 [ 544.525513][T10430] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 544.525526][T10430] R13: 00007f793c071ef0 R14: 00007f793c071eb0 R15: 00002000000000c0 [ 544.525572][T10430] [ 545.044036][ T5953] ath6kl: Failed to submit usb control message: -71 [ 545.050725][ T5953] ath6kl: unable to send the bmi data to the device: -71 [ 545.058181][ T5953] ath6kl: Unable to send get target info: -71 [ 545.077928][ T5953] ath6kl: Failed to init ath6kl core: -71 [ 545.085546][ T5953] ath6kl_usb 1-1:5.61: probe with driver ath6kl_usb failed with error -71 [ 545.107719][ T5953] usb 1-1: USB disconnect, device number 19 [ 545.202209][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.291971][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.371521][ T6712] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.432410][ T6712] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.603193][T10445] loop4: detected capacity change from 0 to 1024 [ 545.958760][T10451] Invalid source name [ 545.967568][T10451] UBIFS error (pid: 10451): cannot open "./file1", error -22 [ 546.293675][T10445] loop4: detected capacity change from 0 to 2048 [ 546.307978][T10445] udf: Bad value for 'session' [ 546.830909][T10459] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 546.883978][T10463] loop2: detected capacity change from 0 to 256 [ 546.903031][T10463] vfat: Unknown parameter 'uni_xwate' [ 547.646435][T10472] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.694673][T10473] overlayfs: failed to resolve './file1': -2 [ 547.790314][T10452] loop1: detected capacity change from 0 to 32768 [ 547.850385][T10452] ocfs2: Unknown parameter '00000000000000000000' [ 547.865307][T10472] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.224078][T10483] FAULT_INJECTION: forcing a failure. [ 548.224078][T10483] name failslab, interval 1, probability 0, space 0, times 0 [ 548.239438][T10483] CPU: 0 UID: 0 PID: 10483 Comm: syz.4.1075 Not tainted syzkaller #0 PREEMPT(full) [ 548.239463][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 548.239474][T10483] Call Trace: [ 548.239481][T10483] [ 548.239489][T10483] dump_stack_lvl+0x189/0x250 [ 548.239517][T10483] ? __pfx____ratelimit+0x10/0x10 [ 548.239539][T10483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.239561][T10483] ? __pfx__printk+0x10/0x10 [ 548.239594][T10483] ? __pfx___might_resched+0x10/0x10 [ 548.239616][T10483] should_fail_ex+0x414/0x560 [ 548.239643][T10483] should_failslab+0xa8/0x100 [ 548.239671][T10483] kmem_cache_alloc_noprof+0x74/0x6e0 [ 548.239694][T10483] ? getname_flags+0xb8/0x540 [ 548.239724][T10483] getname_flags+0xb8/0x540 [ 548.239754][T10483] __x64_sys_unlinkat+0xac/0xf0 [ 548.239778][T10483] do_syscall_64+0xfa/0xfa0 [ 548.239802][T10483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.239815][T10483] ? asm_sysvec_call_function_single+0x1a/0x20 [ 548.239828][T10483] ? clear_bhb_loop+0x60/0xb0 [ 548.239843][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.239856][T10483] RIP: 0033:0x7fbfc938eec9 [ 548.239868][T10483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.239879][T10483] RSP: 002b:00007fbfca264038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 548.239893][T10483] RAX: ffffffffffffffda RBX: 00007fbfc95e6180 RCX: 00007fbfc938eec9 [ 548.239902][T10483] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 548.239912][T10483] RBP: 00007fbfca264090 R08: 0000000000000000 R09: 0000000000000000 [ 548.239919][T10483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.239927][T10483] R13: 00007fbfc95e6218 R14: 00007fbfc95e6180 R15: 00007ffffc708438 [ 548.239948][T10483] [ 548.733365][T10472] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.776495][T10472] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.949527][T10486] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.378633][T10489] loop4: detected capacity change from 0 to 164 [ 549.405813][ T7277] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.429637][T10486] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.451247][T10489] Unable to read rock-ridge attributes [ 549.564460][T10489] Unable to read rock-ridge attributes [ 549.609037][ T7277] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.685461][T10486] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.799461][ T7277] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.073986][T10486] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.120624][ T7277] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.933447][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.977640][T10217] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.080136][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.113656][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.331706][T10506] loop2: detected capacity change from 0 to 2048 [ 553.890498][T10506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.402205][T10518] loop3: detected capacity change from 0 to 2048 [ 554.674570][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.179994][T10524] FAULT_INJECTION: forcing a failure. [ 555.179994][T10524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.181811][T10524] [ 555.181819][T10524] ====================================================== [ 555.181825][T10524] WARNING: possible circular locking dependency detected [ 555.181835][T10524] syzkaller #0 Not tainted [ 555.181842][T10524] ------------------------------------------------------ [ 555.181848][T10524] syz.0.1085/10524 is trying to acquire lock: [ 555.181855][T10524] ffffffff8dd31260 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 555.181899][T10524] [ 555.181899][T10524] but task is already holding lock: [ 555.181904][T10524] ffff8880b863a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 555.181941][T10524] [ 555.181941][T10524] which lock already depends on the new lock. [ 555.181941][T10524] [ 555.181946][T10524] [ 555.181946][T10524] the existing dependency chain (in reverse order) is: [ 555.181951][T10524] [ 555.181951][T10524] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 555.181968][T10524] lock_acquire+0x120/0x360 [ 555.181988][T10524] _raw_spin_lock_nested+0x32/0x50 [ 555.182005][T10524] raw_spin_rq_lock_nested+0x2a/0x140 [ 555.182024][T10524] task_rq_lock+0xbc/0x470 [ 555.182044][T10524] cgroup_move_task+0x92/0x2a0 [ 555.182057][T10524] css_set_move_task+0x658/0x9e0 [ 555.182072][T10524] cgroup_post_fork+0x1ef/0x790 [ 555.182087][T10524] copy_process+0x3862/0x3c00 [ 555.182098][T10524] kernel_clone+0x21e/0x840 [ 555.182112][T10524] user_mode_thread+0xdd/0x140 [ 555.182125][T10524] rest_init+0x23/0x300 [ 555.182144][T10524] start_kernel+0x3ae/0x410 [ 555.182160][T10524] x86_64_start_reservations+0x24/0x30 [ 555.182173][T10524] x86_64_start_kernel+0x143/0x1c0 [ 555.182185][T10524] common_startup_64+0x13e/0x147 [ 555.182201][T10524] [ 555.182201][T10524] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 555.182218][T10524] lock_acquire+0x120/0x360 [ 555.182237][T10524] _raw_spin_lock_irqsave+0xa7/0xf0 [ 555.182250][T10524] try_to_wake_up+0x67/0x12b0 [ 555.182265][T10524] __wake_up_common_lock+0x137/0x1f0 [ 555.182282][T10524] tty_port_default_wakeup+0xfb/0x170 [ 555.182296][T10524] serial8250_tx_chars+0x72e/0x970 [ 555.182316][T10524] serial8250_handle_irq+0x633/0xbb0 [ 555.182336][T10524] serial8250_default_handle_irq+0xbf/0x200 [ 555.182350][T10524] serial8250_interrupt+0x8d/0x180 [ 555.182366][T10524] __handle_irq_event_percpu+0x295/0xab0 [ 555.182383][T10524] handle_irq_event+0x8b/0x1e0 [ 555.182398][T10524] handle_edge_irq+0x23b/0xa10 [ 555.182412][T10524] __common_interrupt+0x141/0x1f0 [ 555.182430][T10524] common_interrupt+0xb6/0xe0 [ 555.182451][T10524] asm_common_interrupt+0x26/0x40 [ 555.182463][T10524] pv_native_safe_halt+0x13/0x20 [ 555.182477][T10524] default_idle+0x13/0x20 [ 555.182494][T10524] default_idle_call+0x73/0xb0 [ 555.182513][T10524] do_idle+0x1e7/0x510 [ 555.182524][T10524] cpu_startup_entry+0x44/0x60 [ 555.182535][T10524] rest_init+0x2de/0x300 [ 555.182554][T10524] start_kernel+0x3ae/0x410 [ 555.182571][T10524] x86_64_start_reservations+0x24/0x30 [ 555.182583][T10524] x86_64_start_kernel+0x143/0x1c0 [ 555.182595][T10524] common_startup_64+0x13e/0x147 [ 555.182610][T10524] [ 555.182610][T10524] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 555.182628][T10524] lock_acquire+0x120/0x360 [ 555.182647][T10524] _raw_spin_lock_irqsave+0xa7/0xf0 [ 555.182659][T10524] __wake_up_common_lock+0x2f/0x1f0 [ 555.182676][T10524] tty_port_default_wakeup+0xfb/0x170 [ 555.182688][T10524] serial8250_tx_chars+0x72e/0x970 [ 555.182708][T10524] serial8250_handle_irq+0x633/0xbb0 [ 555.182727][T10524] serial8250_default_handle_irq+0xbf/0x200 [ 555.182741][T10524] serial8250_interrupt+0x8d/0x180 [ 555.182758][T10524] __handle_irq_event_percpu+0x295/0xab0 [ 555.182774][T10524] handle_irq_event+0x8b/0x1e0 [ 555.182789][T10524] handle_edge_irq+0x23b/0xa10 [ 555.182807][T10524] __common_interrupt+0x141/0x1f0 [ 555.182826][T10524] common_interrupt+0xb6/0xe0 [ 555.182846][T10524] asm_common_interrupt+0x26/0x40 [ 555.182858][T10524] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 555.182872][T10524] uart_port_unlock_deref+0x111/0x2f0 [ 555.182891][T10524] uart_write+0xe8/0x130 [ 555.182909][T10524] n_tty_write+0xd27/0x1200 [ 555.182923][T10524] file_tty_write+0x559/0xa20 [ 555.182941][T10524] vfs_write+0x5c9/0xb30 [ 555.182956][T10524] ksys_write+0x145/0x250 [ 555.182970][T10524] do_syscall_64+0xfa/0xfa0 [ 555.182985][T10524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.182998][T10524] [ 555.182998][T10524] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 555.183015][T10524] lock_acquire+0x120/0x360 [ 555.183035][T10524] _raw_spin_lock_irqsave+0xa7/0xf0 [ 555.183048][T10524] serial8250_console_write+0x17e/0x1ba0 [ 555.183060][T10524] console_flush_all+0x6f3/0xb10 [ 555.183075][T10524] console_unlock+0xbb/0x190 [ 555.183088][T10524] vprintk_emit+0x4c5/0x590 [ 555.183101][T10524] _printk+0xcf/0x120 [ 555.183120][T10524] register_console+0xa8b/0xf90 [ 555.183136][T10524] univ8250_console_init+0x3a/0x70 [ 555.183148][T10524] console_init+0x10e/0x430 [ 555.183159][T10524] start_kernel+0x254/0x410 [ 555.183175][T10524] x86_64_start_reservations+0x24/0x30 [ 555.183188][T10524] x86_64_start_kernel+0x143/0x1c0 [ 555.183199][T10524] common_startup_64+0x13e/0x147 [ 555.183215][T10524] [ 555.183215][T10524] -> #0 (console_owner){-.-.}-{0:0}: [ 555.183232][T10524] validate_chain+0xb9b/0x2140 [ 555.183245][T10524] __lock_acquire+0xab9/0xd20 [ 555.183264][T10524] lock_acquire+0x120/0x360 [ 555.183283][T10524] console_flush_all+0x69c/0xb10 [ 555.183298][T10524] console_unlock+0xbb/0x190 [ 555.183311][T10524] vprintk_emit+0x4c5/0x590 [ 555.183325][T10524] _printk+0xcf/0x120 [ 555.183347][T10524] should_fail_ex+0x3f5/0x560 [ 555.183362][T10524] strncpy_from_user+0x36/0x290 [ 555.183375][T10524] strncpy_from_user_nofault+0x72/0x150 [ 555.183394][T10524] bpf_probe_read_user_str+0x2a/0x70 [ 555.183417][T10524] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 555.183427][T10524] bpf_trace_run4+0x28e/0x4a0 [ 555.183443][T10524] __bpf_trace_sched_switch+0x17a/0x1e0 [ 555.183458][T10524] __traceiter_sched_switch+0x9d/0xd0 [ 555.183473][T10524] __schedule+0x238f/0x4cc0 [ 555.183485][T10524] preempt_schedule_notrace+0xd1/0x110 [ 555.183498][T10524] preempt_schedule_notrace_thunk+0x16/0x30 [ 555.183510][T10524] rcu_is_watching+0x7f/0xb0 [ 555.183521][T10524] lock_release+0x4b/0x3e0 [ 555.183538][T10524] sb_end_write+0x26/0x1c0 [ 555.183555][T10524] vfs_write+0x956/0xb30 [ 555.183567][T10524] ksys_write+0x145/0x250 [ 555.183580][T10524] do_syscall_64+0xfa/0xfa0 [ 555.183593][T10524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.183605][T10524] [ 555.183605][T10524] other info that might help us debug this: [ 555.183605][T10524] [ 555.183609][T10524] Chain exists of: [ 555.183609][T10524] console_owner --> &p->pi_lock --> &rq->__lock [ 555.183609][T10524] [ 555.183628][T10524] Possible unsafe locking scenario: [ 555.183628][T10524] [ 555.183632][T10524] CPU0 CPU1 [ 555.183636][T10524] ---- ---- [ 555.183640][T10524] lock(&rq->__lock); [ 555.183648][T10524] lock(&p->pi_lock); [ 555.183656][T10524] lock(&rq->__lock); [ 555.183665][T10524] lock(console_owner); [ 555.183673][T10524] [ 555.183673][T10524] *** DEADLOCK *** [ 555.183673][T10524] [ 555.183676][T10524] 6 locks held by syz.0.1085/10524: [ 555.183684][T10524] #0: ffff8880298a5978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 555.183718][T10524] #1: ffff888027bea420 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 555.183750][T10524] #2: ffff8880b863a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 555.183785][T10524] #3: ffffffff8dd3d2e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 555.183822][T10524] #4: ffffffff8dd312c0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 555.183856][T10524] #5: ffffffff8dc18b90 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 555.183887][T10524] [ 555.183887][T10524] stack backtrace: [ 555.183894][T10524] CPU: 1 UID: 0 PID: 10524 Comm: syz.0.1085 Not tainted syzkaller #0 PREEMPT(full) [ 555.183908][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 555.183917][T10524] Call Trace: [ 555.183922][T10524] [ 555.183928][T10524] dump_stack_lvl+0x189/0x250 [ 555.183945][T10524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.183961][T10524] ? __pfx__printk+0x10/0x10 [ 555.183980][T10524] ? print_lock_name+0xde/0x100 [ 555.184000][T10524] print_circular_bug+0x2ee/0x310 [ 555.184015][T10524] check_noncircular+0x134/0x160 [ 555.184031][T10524] validate_chain+0xb9b/0x2140 [ 555.184051][T10524] __lock_acquire+0xab9/0xd20 [ 555.184075][T10524] ? console_flush_all+0x13a/0xb10 [ 555.184090][T10524] lock_acquire+0x120/0x360 [ 555.184108][T10524] ? console_flush_all+0x13a/0xb10 [ 555.184145][T10524] ? do_raw_spin_unlock+0x122/0x240 [ 555.184163][T10524] ? console_flush_all+0x13a/0xb10 [ 555.184181][T10524] console_flush_all+0x69c/0xb10 [ 555.184198][T10524] ? console_flush_all+0x13a/0xb10 [ 555.184217][T10524] ? console_flush_all+0x13a/0xb10 [ 555.184237][T10524] ? __pfx_console_flush_all+0x10/0x10 [ 555.184255][T10524] ? fixup_exception+0x1122/0x20b0 [ 555.184273][T10524] ? is_printk_cpu_sync_owner+0x32/0x40 [ 555.184295][T10524] console_unlock+0xbb/0x190 [ 555.184310][T10524] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 555.184328][T10524] ? __pfx_console_unlock+0x10/0x10 [ 555.184348][T10524] vprintk_emit+0x4c5/0x590 [ 555.184364][T10524] ? __pfx_vprintk_emit+0x10/0x10 [ 555.184379][T10524] ? do_user_addr_fault+0x1002/0x1380 [ 555.184402][T10524] ? __bad_area_nosemaphore+0x11a/0x780 [ 555.184425][T10524] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 555.184455][T10524] _printk+0xcf/0x120 [ 555.184476][T10524] ? __pfx____ratelimit+0x10/0x10 [ 555.184493][T10524] ? __pfx__printk+0x10/0x10 [ 555.184516][T10524] ? strncpy_from_user+0x24e/0x290 [ 555.184535][T10524] should_fail_ex+0x3f5/0x560 [ 555.184554][T10524] strncpy_from_user+0x36/0x290 [ 555.184572][T10524] strncpy_from_user_nofault+0x72/0x150 [ 555.184602][T10524] bpf_probe_read_user_str+0x2a/0x70 [ 555.184619][T10524] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 555.184631][T10524] bpf_trace_run4+0x28e/0x4a0 [ 555.184651][T10524] ? bpf_trace_run4+0x19c/0x4a0 [ 555.184671][T10524] ? __pfx_bpf_trace_run4+0x10/0x10 [ 555.184694][T10524] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 555.184715][T10524] __bpf_trace_sched_switch+0x17a/0x1e0 [ 555.184735][T10524] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 555.184755][T10524] ? rcu_read_lock_sched_held+0x89/0x100 [ 555.184773][T10524] ? __schedule+0x22e9/0x4cc0 [ 555.184790][T10524] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 555.184817][T10524] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 555.184836][T10524] __traceiter_sched_switch+0x9d/0xd0 [ 555.184857][T10524] __schedule+0x238f/0x4cc0 [ 555.184878][T10524] ? __lock_acquire+0xab9/0xd20 [ 555.184904][T10524] ? __pfx___schedule+0x10/0x10 [ 555.184918][T10524] ? __might_fault+0xb0/0x130 [ 555.184937][T10524] ? _parse_integer_limit+0x1ae/0x1f0 [ 555.184962][T10524] ? vfs_write+0x956/0xb30 [ 555.184978][T10524] preempt_schedule_notrace+0xd1/0x110 [ 555.184995][T10524] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 555.185015][T10524] ? vfs_write+0x956/0xb30 [ 555.185032][T10524] preempt_schedule_notrace_thunk+0x16/0x30 [ 555.185049][T10524] rcu_is_watching+0x7f/0xb0 [ 555.185064][T10524] lock_release+0x4b/0x3e0 [ 555.185085][T10524] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 555.185104][T10524] sb_end_write+0x26/0x1c0 [ 555.185125][T10524] vfs_write+0x956/0xb30 [ 555.185145][T10524] ? __pfx_vfs_write+0x10/0x10 [ 555.185163][T10524] ? __fget_files+0x2a/0x420 [ 555.185184][T10524] ? __fget_files+0x3a0/0x420 [ 555.185204][T10524] ? __fget_files+0x2a/0x420 [ 555.185227][T10524] ksys_write+0x145/0x250 [ 555.185245][T10524] ? __pfx_ksys_write+0x10/0x10 [ 555.185282][T10524] ? do_syscall_64+0xbe/0xfa0 [ 555.185301][T10524] do_syscall_64+0xfa/0xfa0 [ 555.185329][T10524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.185342][T10524] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 555.185354][T10524] ? clear_bhb_loop+0x60/0xb0 [ 555.185368][T10524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.185381][T10524] RIP: 0033:0x7fde9358d97f [ 555.185392][T10524] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 555.185404][T10524] RSP: 002b:00007fde943fb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 555.185416][T10524] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007fde9358d97f [ 555.185425][T10524] RDX: 0000000000000001 RSI: 00007fde943fb090 RDI: 000000000000000a [ 555.185434][T10524] RBP: 00007fde943fb090 R08: 0000000000000000 R09: 00007fde943fadf7 [ 555.185442][T10524] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 555.185450][T10524] R13: 00007fde937e6218 R14: 00007fde937e6180 R15: 00007ffc2dfa9168 [ 555.185466][T10524] [ 556.474876][T10524] CPU: 1 UID: 0 PID: 10524 Comm: syz.0.1085 Not tainted syzkaller #0 PREEMPT(full) [ 556.474897][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 556.474908][T10524] Call Trace: [ 556.474916][T10524] [ 556.474924][T10524] dump_stack_lvl+0x189/0x250 [ 556.474947][T10524] ? __pfx____ratelimit+0x10/0x10 [ 556.474964][T10524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.474983][T10524] ? __pfx__printk+0x10/0x10 [ 556.475007][T10524] ? strncpy_from_user+0x24e/0x290 [ 556.475028][T10524] should_fail_ex+0x414/0x560 [ 556.475047][T10524] strncpy_from_user+0x36/0x290 [ 556.475066][T10524] strncpy_from_user_nofault+0x72/0x150 [ 556.475091][T10524] bpf_probe_read_user_str+0x2a/0x70 [ 556.475108][T10524] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 556.475121][T10524] bpf_trace_run4+0x28e/0x4a0 [ 556.475142][T10524] ? bpf_trace_run4+0x19c/0x4a0 [ 556.475162][T10524] ? __pfx_bpf_trace_run4+0x10/0x10 [ 556.475185][T10524] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 556.475207][T10524] __bpf_trace_sched_switch+0x17a/0x1e0 [ 556.475228][T10524] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 556.475248][T10524] ? rcu_read_lock_sched_held+0x89/0x100 [ 556.475284][T10524] ? __schedule+0x22e9/0x4cc0 [ 556.475307][T10524] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 556.475337][T10524] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 556.475353][T10524] __traceiter_sched_switch+0x9d/0xd0 [ 556.475371][T10524] __schedule+0x238f/0x4cc0 [ 556.475389][T10524] ? __lock_acquire+0xab9/0xd20 [ 556.475411][T10524] ? __pfx___schedule+0x10/0x10 [ 556.475428][T10524] ? __might_fault+0xb0/0x130 [ 556.475444][T10524] ? _parse_integer_limit+0x1ae/0x1f0 [ 556.475465][T10524] ? vfs_write+0x956/0xb30 [ 556.475480][T10524] preempt_schedule_notrace+0xd1/0x110 [ 556.475495][T10524] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 556.475511][T10524] ? vfs_write+0x956/0xb30 [ 556.475525][T10524] preempt_schedule_notrace_thunk+0x16/0x30 [ 556.475541][T10524] rcu_is_watching+0x7f/0xb0 [ 556.475554][T10524] lock_release+0x4b/0x3e0 [ 556.475572][T10524] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 556.475588][T10524] sb_end_write+0x26/0x1c0 [ 556.475607][T10524] vfs_write+0x956/0xb30 [ 556.475624][T10524] ? __pfx_vfs_write+0x10/0x10 [ 556.475639][T10524] ? __fget_files+0x2a/0x420 [ 556.475657][T10524] ? __fget_files+0x3a0/0x420 [ 556.475674][T10524] ? __fget_files+0x2a/0x420 [ 556.475693][T10524] ksys_write+0x145/0x250 [ 556.475709][T10524] ? __pfx_ksys_write+0x10/0x10 [ 556.475725][T10524] ? do_syscall_64+0xbe/0xfa0 [ 556.475741][T10524] do_syscall_64+0xfa/0xfa0 [ 556.475756][T10524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.475769][T10524] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 556.475781][T10524] ? clear_bhb_loop+0x60/0xb0 [ 556.475795][T10524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.475808][T10524] RIP: 0033:0x7fde9358d97f [ 556.475820][T10524] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 556.475832][T10524] RSP: 002b:00007fde943fb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 556.475846][T10524] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007fde9358d97f [ 556.475855][T10524] RDX: 0000000000000001 RSI: 00007fde943fb090 RDI: 000000000000000a [ 556.475863][T10524] RBP: 00007fde943fb090 R08: 0000000000000000 R09: 00007fde943fadf7 [ 556.475872][T10524] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 556.475879][T10524] R13: 00007fde937e6218 R14: 00007fde937e6180 R15: 00007ffc2dfa9168 [ 556.475895][T10524] [ 556.928562][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1085'. [ 557.247902][T10531] loop2: detected capacity change from 0 to 32768 [ 557.275930][T10531] ERROR: (device loop2): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 557.275930][T10531] [ 557.305272][T10531] ERROR: (device loop2): remounting filesystem as read-only [ 557.312815][T10531] ERROR: (device loop2): jfs_unlink: [ 557.312815][T10531] [ 557.340983][ T5842] ERROR: (device loop2): xtTruncate: xt_getpage: xtree page corrupt [ 557.340983][ T5842] [ 562.824768][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.831231][ T1300] ieee802154 phy1 wpan1: encryption failed: -22