last executing test programs: 7m34.894651564s ago: executing program 2 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 7m33.490800236s ago: executing program 2 (id=818): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, 0x0) r3 = syz_open_dev$loop(0x0, 0x8, 0x8080) ioctl$BLKREPORTZONE(r3, 0xc0101282, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000010c0)=""/4096, 0x1000) 7m31.504788826s ago: executing program 2 (id=821): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x3800844, &(0x7f0000000340)=ANY=[@ANYBLOB='nfs,nonumtail=0,uni_xlate=0,iocharset=cp950,utf8=0,uni_xlate=0,shortname=lower,codepage=866,umask=00000000000000000100002,shortname=win95,shortname=lower,uni_xlate=0,\x00aS'], 0x3, 0x366, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f00000005c0), 0x100) 7m25.85020001s ago: executing program 2 (id=831): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6b1, &(0x7f0000000240)="$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") r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r0, 0x10001, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000d1}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000a00), 0x800) 7m19.600843474s ago: executing program 2 (id=838): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) listen(r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b280, 0x3a0}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 7m16.951479683s ago: executing program 2 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 7m1.699158522s ago: executing program 32 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 6m24.802633906s ago: executing program 1 (id=915): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x1, 0x2c6, &(0x7f0000000c80)="$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") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x1692c2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 6m21.808367911s ago: executing program 1 (id=918): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x5608, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) r8 = socket(0x28, 0x5, 0x0) setrlimit(0x8, 0x0) listen(r8, 0x8b) ioctl$sock_TIOCOUTQ(r8, 0x5411, 0x0) 6m17.85957905s ago: executing program 1 (id=924): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setparam(r0, &(0x7f0000000040)=0xfff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bind$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000001e40)='syz0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2c40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0xe1ee4e2f06703565) flock(r6, 0x2) write$cgroup_type(r4, &(0x7f0000000280), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m13.094148812s ago: executing program 1 (id=927): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setparam(r0, &(0x7f0000000040)=0xfff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bind$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) flock(0xffffffffffffffff, 0x2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) 6m11.758725242s ago: executing program 1 (id=931): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x5608, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) r8 = socket(0x28, 0x5, 0x0) setrlimit(0x8, 0x0) listen(r8, 0x8b) ioctl$sock_TIOCOUTQ(r8, 0x5411, 0x0) 6m6.663988448s ago: executing program 1 (id=935): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffff6, 0x101) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) r6 = dup(r5) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000500)={{0x8, 0x2, 0xfffffffd, 0xff, 'syz1\x00', 0x80000000}, 0x1, [0x56, 0x4, 0xa71, 0x4, 0x10000, 0x4, 0x0, 0xfffffff7, 0xfffffff8, 0x2, 0x0, 0x80000001, 0x3e, 0x10001, 0x1ff, 0x0, 0x70, 0x1, 0x8, 0x7d0d, 0x6, 0xf, 0x9, 0xb, 0x8, 0x3, 0x6, 0x0, 0xfffffff7, 0x3, 0x1, 0x2, 0x2, 0x6, 0x9, 0x0, 0x40c1f881, 0x29b0, 0x1, 0x1a, 0x6, 0x6, 0x4, 0x8, 0x6, 0x6, 0xfff, 0x2, 0x5, 0xe1, 0x6, 0x3b233bf5, 0x1a, 0x81, 0x9, 0x4, 0x9, 0x10001, 0xc, 0x10001, 0x7d60, 0x64c2, 0x1000, 0x6, 0x81, 0x6, 0xfffffff9, 0x80000000, 0xd8, 0x6, 0x1, 0x9, 0x1, 0x7, 0x4, 0x10000, 0x5, 0xffffffff, 0x1000, 0x8, 0xd49b, 0x7f, 0x4, 0x2, 0xffff8001, 0x7, 0x4, 0x2e8d, 0x2, 0x2, 0x5, 0x800, 0x3, 0x1f, 0xffff, 0x7, 0xa7d, 0xfff, 0x6, 0x2, 0x1, 0x5, 0x9f0, 0x4, 0x8, 0x80000000, 0x2b5d, 0x8, 0x8724, 0x800, 0xffffffba, 0x4, 0x7f, 0x10001, 0x2, 0x5, 0x9, 0x6, 0xff, 0xffff, 0x73af9db5, 0xa4c, 0x6, 0x9072ee6, 0x5, 0x3, 0x5, 0x9]}) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = add_key(&(0x7f0000000240)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r7, 0x220c) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x4, 0x0, 0x2}, 0x4f, [0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0xffff9519, 0x40000000, 0x0, 0x2, 0xb, 0x0, 0xfffffe00, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x8000, 0x2, 0x3, 0x3, 0x7, 0x0, 0x5ff339ba, 0x200, 0x8, 0x0, 0xa345, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8, 0xf, 0x3562, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x200, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x5, 0x2], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x400000, 0x0, 0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x100, 0x0, 0x3ff1, 0x0, 0xfffffffb, 0x0, 0xfffffffd, 0x0, 0x4, 0x4, 0x16f50, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x20000000, 0x0, 0x0, 0x6], [0x0, 0x707, 0x101, 0x0, 0x7, 0x0, 0x6, 0x0, 0xfffffffd, 0x53, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x483534d7, 0x7, 0x1, 0x0, 0x6, 0xd, 0x10001, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x10000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffd, 0x80000000, 0x3b6, 0x68, 0x2, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1], [0x0, 0x0, 0x5, 0x200003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0xf, 0x4, 0x7fffffff, 0x5, 0x0, 0x0, 0x5, 0x48, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x81, 0x6, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x10000, 0x9, 0x101, 0x7, 0x0, 0x0, 0x40000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) 5m51.163356201s ago: executing program 33 (id=935): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffff6, 0x101) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) r6 = dup(r5) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000500)={{0x8, 0x2, 0xfffffffd, 0xff, 'syz1\x00', 0x80000000}, 0x1, [0x56, 0x4, 0xa71, 0x4, 0x10000, 0x4, 0x0, 0xfffffff7, 0xfffffff8, 0x2, 0x0, 0x80000001, 0x3e, 0x10001, 0x1ff, 0x0, 0x70, 0x1, 0x8, 0x7d0d, 0x6, 0xf, 0x9, 0xb, 0x8, 0x3, 0x6, 0x0, 0xfffffff7, 0x3, 0x1, 0x2, 0x2, 0x6, 0x9, 0x0, 0x40c1f881, 0x29b0, 0x1, 0x1a, 0x6, 0x6, 0x4, 0x8, 0x6, 0x6, 0xfff, 0x2, 0x5, 0xe1, 0x6, 0x3b233bf5, 0x1a, 0x81, 0x9, 0x4, 0x9, 0x10001, 0xc, 0x10001, 0x7d60, 0x64c2, 0x1000, 0x6, 0x81, 0x6, 0xfffffff9, 0x80000000, 0xd8, 0x6, 0x1, 0x9, 0x1, 0x7, 0x4, 0x10000, 0x5, 0xffffffff, 0x1000, 0x8, 0xd49b, 0x7f, 0x4, 0x2, 0xffff8001, 0x7, 0x4, 0x2e8d, 0x2, 0x2, 0x5, 0x800, 0x3, 0x1f, 0xffff, 0x7, 0xa7d, 0xfff, 0x6, 0x2, 0x1, 0x5, 0x9f0, 0x4, 0x8, 0x80000000, 0x2b5d, 0x8, 0x8724, 0x800, 0xffffffba, 0x4, 0x7f, 0x10001, 0x2, 0x5, 0x9, 0x6, 0xff, 0xffff, 0x73af9db5, 0xa4c, 0x6, 0x9072ee6, 0x5, 0x3, 0x5, 0x9]}) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = add_key(&(0x7f0000000240)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r7, 0x220c) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x4, 0x0, 0x2}, 0x4f, [0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0xffff9519, 0x40000000, 0x0, 0x2, 0xb, 0x0, 0xfffffe00, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x8000, 0x2, 0x3, 0x3, 0x7, 0x0, 0x5ff339ba, 0x200, 0x8, 0x0, 0xa345, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8, 0xf, 0x3562, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x200, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x5, 0x2], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x400000, 0x0, 0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x100, 0x0, 0x3ff1, 0x0, 0xfffffffb, 0x0, 0xfffffffd, 0x0, 0x4, 0x4, 0x16f50, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x20000000, 0x0, 0x0, 0x6], [0x0, 0x707, 0x101, 0x0, 0x7, 0x0, 0x6, 0x0, 0xfffffffd, 0x53, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x483534d7, 0x7, 0x1, 0x0, 0x6, 0xd, 0x10001, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x10000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffd, 0x80000000, 0x3b6, 0x68, 0x2, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1], [0x0, 0x0, 0x5, 0x200003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0xf, 0x4, 0x7fffffff, 0x5, 0x0, 0x0, 0x5, 0x48, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x81, 0x6, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x10000, 0x9, 0x101, 0x7, 0x0, 0x0, 0x40000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) 5m4.59970619s ago: executing program 5 (id=1015): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pread64(r5, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) r6 = socket(0x28, 0x5, 0x0) setrlimit(0x8, 0x0) listen(r6, 0x8b) ioctl$sock_TIOCOUTQ(r6, 0x5411, 0x0) 5m0.405549142s ago: executing program 5 (id=1021): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setparam(r0, &(0x7f0000000040)=0xfff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bind$packet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000001e40)='syz0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2c40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0xe1ee4e2f06703565) flock(r6, 0x2) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m58.643374409s ago: executing program 5 (id=1025): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffff6, 0x101) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) r6 = dup(r5) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000500)={{0x8, 0x2, 0xfffffffd, 0xff, 'syz1\x00', 0x80000000}, 0x1, [0x56, 0x4, 0xa71, 0x4, 0x10000, 0x4, 0x0, 0xfffffff7, 0xfffffff8, 0x2, 0x0, 0x80000001, 0x3e, 0x10001, 0x1ff, 0x0, 0x70, 0x1, 0x8, 0x7d0d, 0x6, 0xf, 0x9, 0xb, 0x8, 0x3, 0x6, 0x0, 0xfffffff7, 0x3, 0x1, 0x2, 0x2, 0x6, 0x9, 0x0, 0x40c1f881, 0x29b0, 0x1, 0x1a, 0x6, 0x6, 0x4, 0x8, 0x6, 0x6, 0xfff, 0x2, 0x5, 0xe1, 0x6, 0x3b233bf5, 0x1a, 0x81, 0x9, 0x4, 0x9, 0x10001, 0xc, 0x10001, 0x7d60, 0x64c2, 0x1000, 0x6, 0x81, 0x6, 0xfffffff9, 0x80000000, 0xd8, 0x6, 0x1, 0x9, 0x1, 0x7, 0x4, 0x10000, 0x5, 0xffffffff, 0x1000, 0x8, 0xd49b, 0x7f, 0x4, 0x2, 0xffff8001, 0x7, 0x4, 0x2e8d, 0x2, 0x2, 0x5, 0x800, 0x3, 0x1f, 0xffff, 0x7, 0xa7d, 0xfff, 0x6, 0x2, 0x1, 0x5, 0x9f0, 0x4, 0x8, 0x80000000, 0x2b5d, 0x8, 0x8724, 0x800, 0xffffffba, 0x4, 0x7f, 0x10001, 0x2, 0x5, 0x9, 0x6, 0xff, 0xffff, 0x73af9db5, 0xa4c, 0x6, 0x9072ee6, 0x5, 0x3, 0x5, 0x9]}) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = add_key(&(0x7f0000000240)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r7, 0x220c) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x0, 0x4, 0x0, 0x2}, 0x4f, [0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0xffff9519, 0x40000000, 0x0, 0x2, 0xb, 0x0, 0xfffffe00, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x8000, 0x2, 0x3, 0x3, 0x7, 0x0, 0x5ff339ba, 0x200, 0x8, 0x0, 0xa345, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8, 0xf, 0x3562, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x200, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x5, 0x2], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x400000, 0x0, 0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x100, 0x0, 0x3ff1, 0x0, 0xfffffffb, 0x0, 0xfffffffd, 0x0, 0x4, 0x4, 0x16f50, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x4000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x20000000, 0x0, 0x0, 0x6], [0x0, 0x707, 0x101, 0x0, 0x7, 0x0, 0x6, 0x0, 0xfffffffd, 0x53, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x483534d7, 0x7, 0x1, 0x0, 0x6, 0xd, 0x10001, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x10000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffd, 0x80000000, 0x3b6, 0x68, 0x2, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1], [0x0, 0x0, 0x5, 0x200003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0xf, 0x4, 0x7fffffff, 0x5, 0x0, 0x0, 0x5, 0x48, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x81, 0x6, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x10000, 0x9, 0x101, 0x7, 0x0, 0x0, 0x40000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) 4m55.984970709s ago: executing program 5 (id=1026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 4m54.444517442s ago: executing program 5 (id=1030): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setparam(r0, &(0x7f0000000040)=0xfff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000001e40)='syz0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2c40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0xe1ee4e2f06703565) flock(r6, 0x2) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m53.105322342s ago: executing program 5 (id=1033): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setparam(r0, &(0x7f0000000040)=0xfff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000001e40)='syz0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2c40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0xe1ee4e2f06703565) flock(r6, 0x2) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m35.386380018s ago: executing program 34 (id=1033): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setparam(r0, &(0x7f0000000040)=0xfff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000001e40)='syz0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2c40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0xe1ee4e2f06703565) flock(r6, 0x2) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m8.351855745s ago: executing program 3 (id=1258): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x8, 0x4e24, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000040)="a54c1a87d34920be", 0x8}], 0x2, &(0x7f0000000000)=ANY=[], 0x30}, 0x0) (fail_nth: 1) 2m8.246556816s ago: executing program 3 (id=1259): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000015c0), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2d, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xb23344771e251ab2}, 0x4000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000081000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000c6090000020000007baaf0ff00000000bf8700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bd9800000000000056080000000000008500000005000000b7983f146200000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r3, 0x9}, &(0x7f00000002c0)=0x8) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x8, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x4, 0x3022, 0x10, @local, @remote, 0x20, 0x40, 0x1fd, 0xf132}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000900)={'wg0\x00'}) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)="fba37e02bdb519f411ee119487eb30fd888cc30a22f93cbdc6935a7dd2a60a105bbd05c5af751d6ddd98acb2579f8a0adb2d9103205e243ecbb1630defe646da9d30e9e60674443a953cdcd1d81ae8b9f7de01b3d94101955e70cc1525cf4fbf705a0a28f0c33150ea096e489d0c96ca57d5b2d7e4541b01b8c5e846bb639cef7554de786064f1a6b32b18585849c2ee9b72afa08fdc84bc62b988fe4e463e24a3c257edc5d017e19e6ba8138f971702", 0xb0}, {&(0x7f0000000140)="6bd642348f039834a63491a2bfc7b3febdaca0f6c71f8a90bb1adaabbd71384a5a04ed188bac85d62e8f98cab4d17cb395e9b3dffa0fe43914ee7ea56223a04a60d11a0bb49a9cce0d45bb72c17e372eb5a31b1e2a08720516412cdf6cee46c0cba19eebd6808debec052cdb7d493e3152e991f0d5f0", 0x76}, {&(0x7f00000001c0)="5073d1031b99180b13064b8e92c74d30afb95d8a485054bd64bcf975e2d7bb07ac5ed7fba7d147d40d8115a7bfb0e7cd9be3a3a4601f2e3e544af95542c3244bb8", 0x41}, {&(0x7f0000000240)='i', 0x1}, {&(0x7f0000000280)="f2538bccf02e235ffecbcb884a961304e64d680464fd9c37a0a092a8ad64b56de502ecc701e718e22f8304ccb6760a7d5a3bb7c9cbf091ff3aafa7a5d350fd59", 0x40}, {&(0x7f00000002c0)="2b5ac975d0037e96f6f674dd2123ac0f63651114c36a9ef89e8457810d5bb46812356b23bd1dfa6c9498a68d53eb945fe01277f702f20f4f1e4df8aaca9be1bfacf060bbc46fa5bb5f8fde8d2d60c2e7a2248db96f54ef0b0e933da2b38573d3d47c3c39e24bee3196701cdf21e013c14ed76d9ed396eba7a4d1bec2a35a262016b3e9ba9ddbc785f6f3d966640f4c69c5fff9ead1ef3d8559770266601a20505baf21a996ca340ed39e25d404892775", 0xb0}, {&(0x7f0000000380)="446eb8cce02c30242a50389007bfe99c40f7f1c21c47be6f7aa4b60fc069649de17bff88d5a7b5dc9a33620b8c34b5c70b8b1de77b30d8974bbce1293d8204deb8f0fc173dfbabb829e4be5cd015399706b7cf896f1700dd78ee1d337a9b35c81113dd9949edcca84cc1753faec8284d58d026078e6df363d0e2714d5b1c3e4dc47c06e0e9070647471d2f7051c29a9a7646483133f3e1a5e5709bb3c35e1898734b5b87a8f2900549646f9551eb3b5833ed01f6afd3c191fb4e547c3bf35f0df854bcf7aca2ceba77e30ef99f6ed3ae9b", 0xd1}, {&(0x7f0000000480)="a079208554ac5739202ffbedfda81c8129a8973e39387e1b000462cd072f8c61ff0390a6b8097b384b58cdb438ebc3aaa0fd195ff075a374fef5b481bd4a9a9449296a627613e22965f88bd7dd916ac3c537e0d67a8eab029d5231b1cd90355d12", 0x61}, {&(0x7f0000000500)="9afef05b806f0b71cf", 0x9}], 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="68000000000000000000000007000000441cefb3e0000002000000067f000001ffffffcd0a01010200000003441c8b83ac1e01010800000064010100000000087f00b689205d69b41e40b73090b5089aec00010000000944209610000000aa00000001000000010000000000000008000000010000033f1c", @ANYRES32=r6, @ANYBLOB="00000000e00000020000000014000000000000000000000001000000ffffff7f0000000010000000000000000000000007000000"], 0xb0}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b40), r0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=0x0) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r8, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x22}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008810) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x100}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2m7.904531461s ago: executing program 3 (id=1262): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='RECLEV\nPHONEOUT\nSPEAKER \'CD\' 00000000000000000000\nDIGITAL2 \''], 0xb8) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 2m5.407581849s ago: executing program 3 (id=1275): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2810880, &(0x7f0000000300)=ANY=[], 0x8b, 0x28e, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x183741, 0x112) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x183741, 0x112) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x43) fcntl$setlease(r0, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) unshare(0x40480) syz_clone(0x80040180, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40100) (async) unshare(0x40100) 2m5.175252062s ago: executing program 3 (id=1276): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x1, 0x2c6, &(0x7f0000000c80)="$eJzs3U1rE0Ecx/Hf7KZpamtdbaUgHqRa9CRtvYiXghRfgxdFbVIohha1gk9g8Sy+AO9F8AX4IjyJ4FlPnnwBva3MZpLMNrtJm5psgt8PRCfZefjPZrM7/0C6AvDfur3+c//Gb/swUqhQ0i0psJsuqSTpvBYqz7d3t3brtWq3jkKpouRhpKSl6aizsV3LamrbJS2cyD4racZ/DYMRx3H8q+ggUKSK+z/M2hhIk+7TGfqVx9leKO0VHUTBzIEO9EKzRccBACiWaVzfA3edn3Hr9yCQltxl37/+/zhdcLwnc1UHRYdQMO/6n2RZsbHv75lkUzvfS1I4uz1oZonHHccuHstqHFmpBaZJZ5WdyWISSzC1uVWvXd/YqVcDvdOa41Wbl7SmqstZnR7RLmYMl1bW0Xtr+vRmYfPQS9PJHCbsHFZz4p/LGrTfvX0U5qv5Zu6bSB9Vba3/SnF7j0Std+rORDv+5bzudp7cS1o1auXM8mwyyIX0ju06yzAvI5HbU3Go9BcEUTrOcmarsg61asxuJW8k189cZqvVHq3mbavPXqv20ZzfctDMB3PXLOqPvmjdW/8Hdm8vqfOTmd1JUtMdGc35ZOaGpaRm5L+0dzGzz6C/+SDNP05zP0DSez3STc0+e/nq8cN6vfa0s1DK3/QPCjaGwfQ8eoXX5ZEIo11oHgSjEk9/BXuOHe5B2yqUT7zrKjpW5c6Z+oXmqfMIHTZP0j0HHczZCaOl/abn13k7zIAwbPbkYRr5n5evLCcJgf0n6rJOj3st27weVzJyg8lWxVNeT8Z9P5+fAU3nZ3Ddcq59r97la9IV73mPnCvSOWmq61zHiVnXdz3g+38AAAAAAAAAAAAAAAAAAIBxM4xfa3jD8Rd9AAAAAAAAAAAAAAAAAAAAAADoQ/79fysa4P1/U78DOMH9f7vc4ARAL38DAAD//0EVdWo=") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x1692c2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2m3.500414367s ago: executing program 3 (id=1279): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) eventfd2(0x2, 0x80001) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180), 0xd, 0x5d8, &(0x7f0000000c00)="$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") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m3.076906933s ago: executing program 35 (id=1279): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) eventfd2(0x2, 0x80001) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180), 0xd, 0x5d8, &(0x7f0000000c00)="$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") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5.37111359s ago: executing program 6 (id=1803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffe0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) 5.136040133s ago: executing program 6 (id=1810): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4010) 5.102509494s ago: executing program 6 (id=1813): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 5.008773575s ago: executing program 6 (id=1815): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x2080, 0x18}}, 0x20}}, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4.064227099s ago: executing program 6 (id=1831): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 2.274988916s ago: executing program 7 (id=1856): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)='(', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)='0', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001000)="f61354896ddadd6dd551692941291945d2caf0abafead8cd7fd2f025a147883d47465e3249627f2b6d2b4369a2e4f351921ca1dc677d15439a9af8bfb6584ae738859237c725eca9fa90786a134c5eca039ee267ff15c8fa6256f89db34ac656eafeb770bb08cc8e70f3897c2be3cd0290b8ea22af63b5e42d3c548043b6aad2b85a18a853cfe5c0699a25f1d9fe71b4165504c43dbed4b9c5c2881197f1b385578aeb7c9e4766440192efba210730005f2f04c53d003b7f284691fec94044f0eb95deacb0d8751c47f2dc56f8339fff38a2fcdf2e17c75d1df832dce55851549eb665e6047eebd45e1b8a96d16d1f089ffec032500d5e4e29e5dae7c7e8d9b2f9a3584630d7ba795726f09718bbae7d839902b2c67309792df9d04e97491fc44f16653723b9279d1999165000a145020413a699e737d609763f0a42428d5e17ddd8f462962bc9b0c05f3d4beba1aad4766630ad210fc2aa7aa0a0206dbc2d238bdbe67c7301c6950e0927aa3cac744779a1d65d3db585add31e0c03bcc34128f07ceec2b35a30104c3b411beabb37673ab5a90b413355a6de2f15295cfbbda7c37c2266088095ef7bdee7810e1bca5e1b48938d78d89f2b1f92962887b8", 0x1be}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="972adec5b073159505dadf6e0c5a317a257e3c3f9104ed149ff8e2f86f314496e73486feee77608bf138956a2cdecb6d871dacc3b47555b430717290fd4bd00f8d0f7d9f7f8bd8ed83b18bf8153a81112639985ec17c4bcb76eef9f3d5624af7cf3013ef84cb860f3b04eb679e", 0x6d}], 0x1}}], 0x4, 0xc0) 2.058226219s ago: executing program 7 (id=1859): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3282b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.900294982s ago: executing program 7 (id=1861): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x12c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xfc, 0xfc, 0x0, 0x1, [@nested={0xf8, 0x8, 0x0, 0x1, [@typed={0xe, 0x131, 0x0, 0x0, @str='*\'&-.+*{.\x00'}, @nested={0xe4, 0xa7, 0x0, 0x1, [@typed={0x8, 0x14d, 0x0, 0x0, @uid}, @nested={0xd8, 0x11b, 0x0, 0x1, [@typed={0xc, 0x145, 0x0, 0x0, @str='ethtool\x00'}, @generic="1f1070a398d6493dd3ca13b59fdc7e32ebe748c30f9005e3a097f24cc017ab953d6a0905e908923e8b4d1da217ec80bb233f971de07aaaef7c5316e614982d31237fe25f6e3b8dcb3ca8f917eec4a6a057586a85bc7797ac98db22b78391bb722c5356a8697662b4be6014e2cbc66b616512b627d67cd21908d90a47c85b7f318b32896ab92b6909f2ec293cf0e851615e1a7f89f05e05f07a10c97814fb13606929790fd545e2f5cc9f9b392a091d4a7aa9d0120da2c6de99f0c380c887f4f7eac339988748dbaf"]}]}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x115}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.900151812s ago: executing program 8 (id=1862): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.753388564s ago: executing program 7 (id=1864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xb}}}]}, 0x38}}, 0x8800) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x9, 0x7}, {}, {0x10, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.588515456s ago: executing program 8 (id=1867): keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="042fb86a"], 0x4) 1.444478289s ago: executing program 7 (id=1869): syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x8daf, 0x0, 0x0, 0x0) 1.428650318s ago: executing program 8 (id=1870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.418474489s ago: executing program 0 (id=1871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.312436461s ago: executing program 7 (id=1872): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x20000000009) close_range(r0, 0xffffffffffffffff, 0x0) 1.258847271s ago: executing program 0 (id=1874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000008d991c9d00000008000300", @ANYRES32=r2, @ANYBLOB="14005a80"], 0x30}}, 0x0) 1.068384514s ago: executing program 0 (id=1876): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) 1.039412255s ago: executing program 8 (id=1877): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 966.886156ms ago: executing program 0 (id=1878): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414bb00000000180000000000000084000000070000000a0101020000000018"], 0x48}], 0x1, 0x0) 711.7965ms ago: executing program 6 (id=1881): r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000480)=@gcm_256={{0x304}, "ceca0d798ed8e425", "20ab911b6f17c685ed128c17d89c8fea982dc9a8048d8f18d0f2d32f3a3fa717", "c2a921f6", "192077c423d1f2f0"}, 0x38) recvfrom$inet6(r1, &(0x7f0000000300)=""/218, 0xda, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 548.382912ms ago: executing program 4 (id=1883): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xffa2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000380)={r2, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x13, r4, 0x0) 538.755342ms ago: executing program 4 (id=1884): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000200000007000000", @ANYRES32, @ANYBLOB="000001008a20000014001a80100004800c000180080001"], 0x34}, 0x1, 0x0, 0x0, 0x54005}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0005"], 0x34}}, 0x0) 487.599653ms ago: executing program 4 (id=1885): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000009800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f49f6a330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xb0, 0x0, 0x0, [{{0x5, 0x3, 0x9, 0x1000, 0x0, 0x3, {0x5, 0xf, 0x6, 0x1, 0x9, 0x8, 0x5, 0x2, 0x8, 0x8000, 0x0, r2, r3, 0x2, 0x7}}, {0x4, 0x100000001, 0x2, 0x5, '\'^'}}]}, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x100000) 344.374915ms ago: executing program 8 (id=1886): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1a}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 315.886416ms ago: executing program 8 (id=1887): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) preadv(r0, &(0x7f000000b6c0)=[{&(0x7f0000000880)=""/62, 0x3e}], 0x1, 0x21, 0x69f) 315.456346ms ago: executing program 4 (id=1888): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x101a}], 0x0, 0x0, 0x0}) 247.354987ms ago: executing program 4 (id=1889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000b40)={@multicast, @link_local, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "238f47", 0x14, 0x6, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x8, 0x0, 0x3ff}}}}}}}, 0x0) 140.480878ms ago: executing program 4 (id=1890): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x2) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000004c0)='B', 0x1}], 0x1) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 69.797009ms ago: executing program 0 (id=1891): get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000255000/0x2000)=nil, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=1892): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x9) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): 823] UDF-fs: Scanning with blocksize 512 failed [ 749.927734][ T9779] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 749.929910][ T9779] dlm: no local IP address has been set [ 749.939254][ T9779] dlm: cannot start dlm midcomms -107 [ 749.940885][ T9779] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 750.006153][ T9826] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 750.013131][ T9835] FAULT_INJECTION: forcing a failure. [ 750.013131][ T9835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.018945][ T9835] CPU: 0 PID: 9835 Comm: syz.3.1258 Not tainted 5.15.185-syzkaller #0 [ 750.021210][ T9835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 750.023947][ T9835] Call trace: [ 750.024875][ T9835] dump_backtrace+0x0/0x43c [ 750.026099][ T9835] show_stack+0x2c/0x3c [ 750.027297][ T9835] __dump_stack+0x30/0x40 [ 750.028527][ T9835] dump_stack_lvl+0xf8/0x160 [ 750.029814][ T9835] dump_stack+0x1c/0x5c [ 750.030919][ T9835] should_fail+0x3c0/0x51c [ 750.032118][ T9835] should_fail_usercopy+0x20/0x30 [ 750.033483][ T9835] __copy_msghdr_from_user+0xb8/0x4f8 [ 750.034907][ T9835] ___sys_sendmsg+0x140/0x240 [ 750.036169][ T9835] __arm64_sys_sendmsg+0x1a8/0x254 [ 750.037535][ T9835] invoke_syscall+0x98/0x2b8 [ 750.038793][ T9835] el0_svc_common+0x138/0x258 [ 750.040054][ T9835] do_el0_svc+0x58/0x14c [ 750.041216][ T9835] el0_svc+0x78/0x1e0 [ 750.042270][ T9835] el0t_64_sync_handler+0xcc/0xe4 [ 750.043664][ T9835] el0t_64_sync+0x1a0/0x1a4 [ 750.066362][ T9823] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 750.068504][ T9823] UDF-fs: Scanning with blocksize 1024 failed [ 750.099243][ T9823] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 750.101342][ T9823] UDF-fs: Scanning with blocksize 2048 failed [ 750.126361][ T9823] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 750.320278][ T9823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 750.406782][ T9401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.416495][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 750.418831][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 750.471789][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 750.474018][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 750.510306][ T9540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.582326][ T9862] loop4: detected capacity change from 0 to 8 [ 750.625221][ T9433] udevd[9433]: incorrect cramfs checksum on /dev/loop4 [ 750.629738][ T9862] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 750.642365][ T9864] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 750.657948][ T9433] udevd[9433]: incorrect cramfs checksum on /dev/loop4 [ 750.684528][ T9862] cramfs: bad data blocksize 3221485570 [ 750.800159][ T9433] udevd[9433]: incorrect cramfs checksum on /dev/loop4 [ 750.861017][ T9433] udevd[9433]: incorrect cramfs checksum on /dev/loop4 [ 750.985275][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 750.989234][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 751.059400][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 751.062671][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 751.113117][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 751.116635][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 751.148384][ T9540] device veth0_vlan entered promiscuous mode [ 751.206924][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 751.210094][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 751.287986][ T9540] device veth1_vlan entered promiscuous mode [ 751.411219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 751.414062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 751.426534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 751.428806][ T9894] loop4: detected capacity change from 0 to 1024 [ 751.429627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 751.445121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 751.447874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 751.464509][ T9401] device veth0_vlan entered promiscuous mode [ 751.510486][ T5389] device hsr_slave_0 left promiscuous mode [ 751.566625][ T5389] device hsr_slave_1 left promiscuous mode [ 751.660607][ T5389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.664456][ T5389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.668433][ T5389] device bridge_slave_1 left promiscuous mode [ 751.670223][ T5389] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.717356][ T5389] device bridge_slave_0 left promiscuous mode [ 751.719173][ T5389] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.774195][ T5389] device hsr_slave_0 left promiscuous mode [ 751.836321][ T5389] device hsr_slave_1 left promiscuous mode [ 751.864040][ T9899] loop0: detected capacity change from 0 to 32768 [ 751.916362][ T5389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.919148][ T5389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.921875][ T5389] device bridge_slave_1 left promiscuous mode [ 751.923719][ T5389] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.978223][ T5389] device bridge_slave_0 left promiscuous mode [ 751.980300][ T5389] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.020751][ T5389] device hsr_slave_0 left promiscuous mode [ 752.057563][ T5389] device hsr_slave_1 left promiscuous mode [ 752.063714][ T9894] loop4: detected capacity change from 0 to 32768 [ 752.147650][ T9894] ERROR: (device loop4): diAllocAG: numfree > numinos [ 752.147650][ T9894] [ 752.166154][ T5389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.168315][ T5389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.170359][ T9894] ialloc: diAlloc returned -5! [ 752.174246][ T5389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.179397][ T5389] device bridge_slave_1 left promiscuous mode [ 752.181166][ T5389] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.227094][ T5389] device bridge_slave_0 left promiscuous mode [ 752.229006][ T5389] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.276163][ T5389] device veth1_macvtap left promiscuous mode [ 752.278073][ T5389] device veth0_macvtap left promiscuous mode [ 752.279875][ T5389] device veth1_vlan left promiscuous mode [ 752.281509][ T5389] device veth0_vlan left promiscuous mode [ 752.597616][ T9902] FAULT_INJECTION: forcing a failure. [ 752.597616][ T9902] name failslab, interval 1, probability 0, space 0, times 1 [ 752.621308][ T9902] CPU: 0 PID: 9902 Comm: syz.0.1272 Not tainted 5.15.185-syzkaller #0 [ 752.623624][ T9902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 752.626396][ T9902] Call trace: [ 752.627313][ T9902] dump_backtrace+0x0/0x43c [ 752.628536][ T9902] show_stack+0x2c/0x3c [ 752.629697][ T9902] __dump_stack+0x30/0x40 [ 752.630835][ T9902] dump_stack_lvl+0xf8/0x160 [ 752.632056][ T9902] dump_stack+0x1c/0x5c [ 752.633251][ T9902] should_fail+0x3c0/0x51c [ 752.634494][ T9902] __should_failslab+0xbc/0x10c [ 752.635853][ T9902] should_failslab+0x10/0x28 [ 752.637158][ T9902] slab_pre_alloc_hook+0x64/0xec [ 752.638582][ T9902] __kmalloc+0xbc/0x44c [ 752.639738][ T9902] tomoyo_realpath_from_path+0xcc/0x510 [ 752.641341][ T9902] tomoyo_path_number_perm+0x1b0/0x518 [ 752.642906][ T9902] tomoyo_file_ioctl+0x2c/0x3c [ 752.644302][ T9902] security_file_ioctl+0x80/0xbc [ 752.645635][ T9902] __arm64_sys_ioctl+0xa8/0x1c8 [ 752.647070][ T9902] invoke_syscall+0x98/0x2b8 [ 752.648275][ T9902] el0_svc_common+0x138/0x258 [ 752.649556][ T9902] do_el0_svc+0x58/0x14c [ 752.650789][ T9902] el0_svc+0x78/0x1e0 [ 752.652017][ T9902] el0t_64_sync_handler+0xcc/0xe4 [ 752.653436][ T9902] el0t_64_sync+0x1a0/0x1a4 [ 752.668486][ T9902] ERROR: Out of memory at tomoyo_realpath_from_path. [ 752.724630][ T9905] FAULT_INJECTION: forcing a failure. [ 752.724630][ T9905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.738815][ T9905] CPU: 0 PID: 9905 Comm: syz.4.1271 Not tainted 5.15.185-syzkaller #0 [ 752.741052][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 752.743772][ T9905] Call trace: [ 752.744642][ T9905] dump_backtrace+0x0/0x43c [ 752.745904][ T9905] show_stack+0x2c/0x3c [ 752.747074][ T9905] __dump_stack+0x30/0x40 [ 752.748274][ T9905] dump_stack_lvl+0xf8/0x160 [ 752.749588][ T9905] dump_stack+0x1c/0x5c [ 752.750780][ T9905] should_fail+0x3c0/0x51c [ 752.752061][ T9905] should_fail_usercopy+0x20/0x30 [ 752.753422][ T9905] __copy_msghdr_from_user+0xb8/0x4f8 [ 752.754869][ T9905] ___sys_sendmsg+0x140/0x240 [ 752.756095][ T9905] __arm64_sys_sendmsg+0x1a8/0x254 [ 752.757546][ T9905] invoke_syscall+0x98/0x2b8 [ 752.758781][ T9905] el0_svc_common+0x138/0x258 [ 752.760107][ T9905] do_el0_svc+0x58/0x14c [ 752.761296][ T9905] el0_svc+0x78/0x1e0 [ 752.762430][ T9905] el0t_64_sync_handler+0xcc/0xe4 [ 752.763856][ T9905] el0t_64_sync+0x1a0/0x1a4 [ 752.770029][ T5389] team0 (unregistering): Port device team_slave_1 removed [ 752.783990][ T9906] loop0: detected capacity change from 0 to 64 [ 752.790183][ T5389] team0 (unregistering): Port device team_slave_0 removed [ 752.806031][ T5389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.868243][ T5389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.979228][ T9910] loop3: detected capacity change from 0 to 64 [ 753.042080][ T5389] bond0 (unregistering): Released all slaves [ 753.325068][ T5389] team0 (unregistering): Port device team_slave_1 removed [ 753.348059][ T5389] team0 (unregistering): Port device team_slave_0 removed [ 753.357450][ T5389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.376475][ T9908] loop4: detected capacity change from 0 to 32768 [ 753.388731][ T9908] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1274 (9908) [ 753.394154][ T5389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.412090][ T9908] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 753.414763][ T9908] BTRFS info (device loop4): turning on async discard [ 753.419191][ T9908] BTRFS info (device loop4): using free space tree [ 753.420922][ T9908] BTRFS info (device loop4): has skinny extents [ 753.607703][ T5389] bond0 (unregistering): Released all slaves [ 753.635647][ T9908] BTRFS info (device loop4): enabling ssd optimizations [ 753.676354][ T9908] FAULT_INJECTION: forcing a failure. [ 753.676354][ T9908] name failslab, interval 1, probability 0, space 0, times 0 [ 753.679932][ T9908] CPU: 1 PID: 9908 Comm: syz.4.1274 Not tainted 5.15.185-syzkaller #0 [ 753.682009][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 753.684681][ T9908] Call trace: [ 753.685517][ T9908] dump_backtrace+0x0/0x43c [ 753.686738][ T9908] show_stack+0x2c/0x3c [ 753.687900][ T9908] __dump_stack+0x30/0x40 [ 753.689129][ T9908] dump_stack_lvl+0xf8/0x160 [ 753.690382][ T9908] dump_stack+0x1c/0x5c [ 753.691535][ T9908] should_fail+0x3c0/0x51c [ 753.692742][ T9908] __should_failslab+0xbc/0x10c [ 753.694102][ T9908] should_failslab+0x10/0x28 [ 753.695375][ T9908] slab_pre_alloc_hook+0x64/0xec [ 753.696747][ T9908] __kmalloc+0xbc/0x44c [ 753.697882][ T9908] tomoyo_realpath_from_path+0xcc/0x510 [ 753.699415][ T9908] tomoyo_path_number_perm+0x1b0/0x518 [ 753.700949][ T9908] tomoyo_file_ioctl+0x2c/0x3c [ 753.702245][ T9908] security_file_ioctl+0x80/0xbc [ 753.703595][ T9908] __arm64_sys_ioctl+0xa8/0x1c8 [ 753.704899][ T9908] invoke_syscall+0x98/0x2b8 [ 753.706170][ T9908] el0_svc_common+0x138/0x258 [ 753.707448][ T9908] do_el0_svc+0x58/0x14c [ 753.708599][ T9908] el0_svc+0x78/0x1e0 [ 753.709719][ T9908] el0t_64_sync_handler+0xcc/0xe4 [ 753.711064][ T9908] el0t_64_sync+0x1a0/0x1a4 [ 753.725204][ T9908] ERROR: Out of memory at tomoyo_realpath_from_path. [ 753.819732][ T5389] team0 (unregistering): Port device team_slave_1 removed [ 753.830125][ T5389] team0 (unregistering): Port device team_slave_0 removed [ 753.839733][ T5389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.885320][ T5389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.124463][ T5389] bond0 (unregistering): Released all slaves [ 754.218480][ T9939] FAULT_INJECTION: forcing a failure. [ 754.218480][ T9939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 754.222104][ T9939] CPU: 0 PID: 9939 Comm: syz.4.1278 Not tainted 5.15.185-syzkaller #0 [ 754.224262][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 754.227040][ T9939] Call trace: [ 754.227911][ T9939] dump_backtrace+0x0/0x43c [ 754.229128][ T9939] show_stack+0x2c/0x3c [ 754.230318][ T9939] __dump_stack+0x30/0x40 [ 754.231531][ T9939] dump_stack_lvl+0xf8/0x160 [ 754.232809][ T9939] dump_stack+0x1c/0x5c [ 754.233925][ T9939] should_fail+0x3c0/0x51c [ 754.235104][ T9939] should_fail_alloc_page+0x74/0xa8 [ 754.236497][ T9939] prepare_alloc_pages+0x160/0x460 [ 754.237827][ T9939] __alloc_pages+0x108/0x470 [ 754.239052][ T9939] alloc_pages_vma+0x284/0x7a8 [ 754.240351][ T9939] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 754.241977][ T9939] handle_mm_fault+0x1904/0x2950 [ 754.243311][ T9939] do_page_fault+0x694/0xad4 [ 754.244601][ T9939] do_translation_fault+0xe0/0x130 [ 754.245964][ T9939] do_mem_abort+0x6c/0x1ac [ 754.247135][ T9939] el0_da+0x90/0x1fc [ 754.248180][ T9939] el0t_64_sync_handler+0xd8/0xe4 [ 754.249598][ T9939] el0t_64_sync+0x1a0/0x1a4 [ 754.279495][ T9401] device veth1_vlan entered promiscuous mode [ 754.287216][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 754.292799][ T9939] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 754.379282][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 754.382215][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 754.420135][ T9540] device veth0_macvtap entered promiscuous mode [ 754.437705][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 754.440532][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 754.443381][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 754.468070][ T9540] device veth1_macvtap entered promiscuous mode [ 754.478920][ T9401] device veth0_macvtap entered promiscuous mode [ 754.489533][ T9401] device veth1_macvtap entered promiscuous mode [ 754.535001][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.544836][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.560069][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.562959][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.565577][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.580331][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.587307][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.594985][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.608265][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.610965][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.613782][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.629159][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.632082][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.634873][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.649477][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.653772][ T9401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.663277][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 754.667843][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 754.682129][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 754.687053][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 754.695523][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 754.707008][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 754.710002][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 754.718658][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.721549][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.724222][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.757261][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.759969][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.762819][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.819321][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.826963][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 754.829916][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 754.858486][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.861367][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.863931][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.875942][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.878653][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.881581][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.884298][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.906080][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.931267][ T9401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.934766][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 754.939515][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 754.960736][ T9540] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.963062][ T9540] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.965369][ T9540] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.995011][ T9540] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.011174][ T9401] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.013751][ T9401] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.026150][ T9401] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.028571][ T9401] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.092794][ T9939] loop4: detected capacity change from 0 to 32768 [ 755.122884][ T9939] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1278 (9939) [ 755.253783][ T6844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.266051][ T9939] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 755.268617][ T9939] BTRFS info (device loop4): turning on async discard [ 755.282312][ T6844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.303448][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 755.312561][ T9939] BTRFS info (device loop4): using free space tree [ 755.334700][ T9939] BTRFS info (device loop4): has skinny extents [ 755.367904][ T6844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.370183][ T6844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.375070][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 755.427932][ T583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.430356][ T583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.491963][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 755.513727][ T583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.517699][ T583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.525366][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 755.569333][ T9939] BTRFS info (device loop4): enabling ssd optimizations [ 755.699727][ T9994] FAULT_INJECTION: forcing a failure. [ 755.699727][ T9994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 755.703512][ T9994] CPU: 0 PID: 9994 Comm: syz.0.1280 Not tainted 5.15.185-syzkaller #0 [ 755.705690][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 755.708429][ T9994] Call trace: [ 755.709313][ T9994] dump_backtrace+0x0/0x43c [ 755.710547][ T9994] show_stack+0x2c/0x3c [ 755.711712][ T9994] __dump_stack+0x30/0x40 [ 755.712870][ T9994] dump_stack_lvl+0xf8/0x160 [ 755.714064][ T9994] dump_stack+0x1c/0x5c [ 755.715250][ T9994] should_fail+0x3c0/0x51c [ 755.716420][ T9994] should_fail_alloc_page+0x74/0xa8 [ 755.717767][ T9994] prepare_alloc_pages+0x160/0x460 [ 755.719076][ T9994] __alloc_pages+0x108/0x470 [ 755.720275][ T9994] alloc_pages_vma+0x284/0x7a8 [ 755.721513][ T9994] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 755.723147][ T9994] handle_mm_fault+0x1904/0x2950 [ 755.724418][ T9994] do_page_fault+0x694/0xad4 [ 755.725724][ T9994] do_translation_fault+0xe0/0x130 [ 755.727079][ T9994] do_mem_abort+0x6c/0x1ac [ 755.728252][ T9994] el0_da+0x90/0x1fc [ 755.729305][ T9994] el0t_64_sync_handler+0xd8/0xe4 [ 755.730654][ T9994] el0t_64_sync+0x1a0/0x1a4 [ 755.763329][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 755.765330][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.791621][ T9994] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 757.510911][ T9994] loop0: detected capacity change from 0 to 32768 [ 757.736427][ T9791] Bluetooth: hci0: command 0x0409 tx timeout [ 757.746419][ T9994] XFS (loop0): Mounting V5 Filesystem [ 757.968406][ T9977] chnl_net:caif_netlink_parms(): no params data found [ 758.144278][ T9994] XFS (loop0): Ending clean mount [ 758.430078][ T4028] XFS (loop0): Unmounting Filesystem [ 758.473882][T10010] loop6: detected capacity change from 0 to 32768 [ 758.654252][ T9977] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.654949][T10009] loop4: detected capacity change from 0 to 32768 [ 758.734566][ T9977] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.742467][ T9977] device bridge_slave_0 entered promiscuous mode [ 758.766329][ T9977] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.768481][ T9977] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.771306][ T9977] device bridge_slave_1 entered promiscuous mode [ 758.825427][T10010] XFS (loop6): Mounting V5 Filesystem [ 758.909110][ T9977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.914171][ T9977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.003564][ T9977] team0: Port device team_slave_0 added [ 759.016008][T10009] XFS (loop4): Mounting V5 Filesystem [ 759.034670][ T9977] team0: Port device team_slave_1 added [ 759.233717][T10010] XFS (loop6): Ending clean mount [ 759.238797][T10009] XFS (loop4): Ending clean mount [ 759.317581][ T4038] XFS (loop4): Unmounting Filesystem [ 759.324938][ T9401] XFS (loop6): Unmounting Filesystem [ 759.367049][ T9977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.369109][ T9977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.379075][T10050] IPVS: length: 60 != 1270468584 [ 759.381615][T10050] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1284'. [ 759.397992][T10050] 9pnet: Insufficient options for proto=fd [ 759.406142][ T9977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.433449][ T9977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.436049][ T9977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.452189][ T9977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.565480][ T9977] device hsr_slave_0 entered promiscuous mode [ 759.624194][ T9977] device hsr_slave_1 entered promiscuous mode [ 759.687818][ T9977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 759.689981][ T9977] Cannot create hsr debugfs directory [ 759.816178][ T9791] Bluetooth: hci0: command 0x041b tx timeout [ 760.232016][T10066] loop0: detected capacity change from 0 to 512 [ 760.270049][ T9977] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 760.297061][T10066] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 760.323484][T10066] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 760.327312][T10066] EXT4-fs (loop0): couldn't read superblock of external journal [ 760.332200][ T9977] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 760.470099][T10075] loop6: detected capacity change from 0 to 1024 [ 760.534261][ T9977] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 760.648759][ T9977] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 760.689304][T10075] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 760.777428][T10087] loop0: detected capacity change from 0 to 64 [ 760.925789][T10093] FAULT_INJECTION: forcing a failure. [ 760.925789][T10093] name failslab, interval 1, probability 0, space 0, times 0 [ 760.933566][T10093] CPU: 1 PID: 10093 Comm: syz.4.1290 Not tainted 5.15.185-syzkaller #0 [ 760.935845][T10093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.938657][T10093] Call trace: [ 760.939523][T10093] dump_backtrace+0x0/0x43c [ 760.940823][T10093] show_stack+0x2c/0x3c [ 760.941903][T10093] __dump_stack+0x30/0x40 [ 760.943087][T10093] dump_stack_lvl+0xf8/0x160 [ 760.944389][T10093] dump_stack+0x1c/0x5c [ 760.945539][T10093] should_fail+0x3c0/0x51c [ 760.946757][T10093] __should_failslab+0xbc/0x10c [ 760.948043][T10093] should_failslab+0x10/0x28 [ 760.949365][T10093] slab_pre_alloc_hook+0x64/0xec [ 760.950716][T10093] __kmalloc+0xbc/0x44c [ 760.951960][T10093] tomoyo_realpath_from_path+0xcc/0x510 [ 760.953432][T10093] tomoyo_path_number_perm+0x1b0/0x518 [ 760.954883][T10093] tomoyo_file_ioctl+0x2c/0x3c [ 760.956252][T10093] security_file_ioctl+0x80/0xbc [ 760.957691][T10093] __arm64_sys_ioctl+0xa8/0x1c8 [ 760.959016][T10093] invoke_syscall+0x98/0x2b8 [ 760.960302][T10093] el0_svc_common+0x138/0x258 [ 760.961642][T10093] do_el0_svc+0x58/0x14c [ 760.962816][T10093] el0_svc+0x78/0x1e0 [ 760.963914][T10093] el0t_64_sync_handler+0xcc/0xe4 [ 760.965298][T10093] el0t_64_sync+0x1a0/0x1a4 [ 761.035211][T10093] ERROR: Out of memory at tomoyo_realpath_from_path. [ 761.598402][ T9977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.812305][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1291'. [ 761.896065][ T9791] Bluetooth: hci0: command 0x040f tx timeout [ 761.922309][ T9977] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.218702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 762.222066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 762.224674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 762.228280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 762.231382][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.233623][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.238711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 762.241719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 762.244684][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.246936][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.275366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 762.284706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 762.370900][T10141] loop4: detected capacity change from 0 to 512 [ 762.479025][T10141] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 762.479025][T10141] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 762.479025][T10141] [ 762.494679][T10141] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 762.601029][T10141] EXT4-fs (loop4): 1 truncate cleaned up [ 762.602742][T10141] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,init_itable,journal_ioprio=0x0000000000000003,data_err=abort,lazytime,minixdf,noquota,nouser_xattr,,errors=continue. Quota mode: none. [ 762.744299][T10141] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:299: inode #15: comm syz.4.1296: verity file has no extents [ 762.776089][T10141] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 762.837097][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 762.877770][ T5389] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.947682][T10152] FAULT_INJECTION: forcing a failure. [ 762.947682][T10152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 762.952354][T10152] CPU: 1 PID: 10152 Comm: syz.7.1298 Not tainted 5.15.185-syzkaller #0 [ 762.954760][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 762.957764][T10152] Call trace: [ 762.958756][T10152] dump_backtrace+0x0/0x43c [ 762.960102][T10152] show_stack+0x2c/0x3c [ 762.961280][T10152] __dump_stack+0x30/0x40 [ 762.962513][T10152] dump_stack_lvl+0xf8/0x160 [ 762.963868][T10152] dump_stack+0x1c/0x5c [ 762.965098][T10152] should_fail+0x3c0/0x51c [ 762.966400][T10152] should_fail_alloc_page+0x74/0xa8 [ 762.967929][T10152] prepare_alloc_pages+0x160/0x460 [ 762.969504][T10152] __alloc_pages+0x108/0x470 [ 762.970842][T10152] alloc_pages+0x34c/0x5c0 [ 762.972109][T10152] __get_free_pages+0x18/0x84 [ 762.973412][T10152] __tlb_remove_page_size+0x1cc/0x388 [ 762.975055][T10152] unmap_page_range+0xc80/0x1958 [ 762.976479][T10152] unmap_single_vma+0x13c/0x1e4 [ 762.977923][T10152] unmap_vmas+0x104/0x200 [ 762.979109][T10152] unmap_region+0x1b8/0x300 [ 762.980389][T10152] __do_munmap+0x870/0xc04 [ 762.981686][T10152] mmap_region+0x7b0/0x1390 [ 762.982927][T10152] do_mmap+0x67c/0xdb4 [ 762.984119][T10152] vm_mmap_pgoff+0x184/0x284 [ 762.985626][T10152] ksys_mmap_pgoff+0x11c/0x620 [ 762.987087][T10152] __arm64_sys_mmap+0xf8/0x110 [ 762.988553][T10152] invoke_syscall+0x98/0x2b8 [ 762.989858][T10152] el0_svc_common+0x138/0x258 [ 762.991227][T10152] do_el0_svc+0x58/0x14c [ 762.992415][T10152] el0_svc+0x78/0x1e0 [ 762.993650][T10152] el0t_64_sync_handler+0xcc/0xe4 [ 762.995207][T10152] el0t_64_sync+0x1a0/0x1a4 [ 764.237288][ T9792] Bluetooth: hci0: command 0x0419 tx timeout [ 764.330603][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 764.345982][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 764.355127][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 764.384432][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 764.408200][T10159] loop7: detected capacity change from 0 to 1024 [ 764.448662][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 764.456313][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 764.462292][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 764.599998][ T5389] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.166569][T10159] EXT4-fs warning (device loop7): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop7. [ 768.170730][ T9977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 768.180687][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 768.192501][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 768.224177][ T5389] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.305497][ T5389] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.679586][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 768.682066][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 768.697034][T10187] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1304'. [ 768.705009][ T9977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.707643][T10187] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1304'. [ 768.724531][ T5389] tipc: Left network mode [ 769.135208][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 769.140773][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 769.315391][ T8289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 769.318397][ T8289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 769.321308][ T8289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 769.336909][ T8289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 769.395682][ T9977] device veth0_vlan entered promiscuous mode [ 769.448092][ T9977] device veth1_vlan entered promiscuous mode [ 769.569744][ T8289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 769.572774][ T8289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 769.601769][ T9977] device veth0_macvtap entered promiscuous mode [ 769.712424][ T9977] device veth1_macvtap entered promiscuous mode [ 769.888523][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.891551][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.894209][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.948172][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.951092][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.965848][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.976597][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.985906][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.998466][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.005869][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.010204][ T9977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.045170][ T8289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 770.056110][ T8289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 770.063558][ T8289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 770.078430][ T8289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 770.158994][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.162041][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.164736][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.201726][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.237472][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.240422][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.243149][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.275861][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.278614][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.295922][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.303087][ T9977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.317675][ T8289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 770.320757][ T8289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 770.389484][ T9977] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.391996][ T9977] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.394389][ T9977] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.457259][ T9977] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.483112][T10255] loop6: detected capacity change from 0 to 256 [ 770.524967][T10194] loop7: detected capacity change from 0 to 32768 [ 770.752989][ T5389] device hsr_slave_0 left promiscuous mode [ 770.786628][ T5389] device hsr_slave_1 left promiscuous mode [ 770.948718][ T5389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.951132][ T5389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.976152][ T5389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.978183][ T5389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.989743][ T5389] device bridge_slave_1 left promiscuous mode [ 770.991550][ T5389] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.070942][ T5389] device bridge_slave_0 left promiscuous mode [ 771.072983][ T5389] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.346194][ T5389] device veth1_macvtap left promiscuous mode [ 771.348034][ T5389] device veth0_macvtap left promiscuous mode [ 771.349735][ T5389] device veth1_vlan left promiscuous mode [ 771.351290][ T5389] device veth0_vlan left promiscuous mode [ 771.663774][T10275] FAULT_INJECTION: forcing a failure. [ 771.663774][T10275] name failslab, interval 1, probability 0, space 0, times 0 [ 771.667457][T10275] CPU: 1 PID: 10275 Comm: syz.7.1314 Not tainted 5.15.185-syzkaller #0 [ 771.669897][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 771.672638][T10275] Call trace: [ 771.673490][T10275] dump_backtrace+0x0/0x43c [ 771.674700][T10275] show_stack+0x2c/0x3c [ 771.675925][T10275] __dump_stack+0x30/0x40 [ 771.677242][T10275] dump_stack_lvl+0xf8/0x160 [ 771.678550][T10275] dump_stack+0x1c/0x5c [ 771.679716][T10275] should_fail+0x3c0/0x51c [ 771.680969][T10275] __should_failslab+0xbc/0x10c [ 771.682367][T10275] should_failslab+0x10/0x28 [ 771.683732][T10275] slab_pre_alloc_hook+0x64/0xec [ 771.685115][T10275] __kmalloc+0xbc/0x44c [ 771.686275][T10275] tomoyo_realpath_from_path+0xcc/0x510 [ 771.687803][T10275] tomoyo_path_number_perm+0x1b0/0x518 [ 771.689389][T10275] tomoyo_file_ioctl+0x2c/0x3c [ 771.690709][T10275] security_file_ioctl+0x80/0xbc [ 771.692109][T10275] __arm64_sys_ioctl+0xa8/0x1c8 [ 771.693448][T10275] invoke_syscall+0x98/0x2b8 [ 771.694842][T10275] el0_svc_common+0x138/0x258 [ 771.696223][T10275] do_el0_svc+0x58/0x14c [ 771.697327][T10275] el0_svc+0x78/0x1e0 [ 771.698474][T10275] el0t_64_sync_handler+0xcc/0xe4 [ 771.699911][T10275] el0t_64_sync+0x1a0/0x1a4 [ 771.701380][T10275] ERROR: Out of memory at tomoyo_realpath_from_path. [ 771.935453][T10281] FAULT_INJECTION: forcing a failure. [ 771.935453][T10281] name failslab, interval 1, probability 0, space 0, times 0 [ 771.948915][T10281] CPU: 1 PID: 10281 Comm: syz.7.1316 Not tainted 5.15.185-syzkaller #0 [ 771.951401][T10281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 771.954410][T10281] Call trace: [ 771.955318][T10281] dump_backtrace+0x0/0x43c [ 771.956616][T10281] show_stack+0x2c/0x3c [ 771.957835][T10281] __dump_stack+0x30/0x40 [ 771.959021][T10281] dump_stack_lvl+0xf8/0x160 [ 771.960410][T10281] dump_stack+0x1c/0x5c [ 771.961636][T10281] should_fail+0x3c0/0x51c [ 771.962852][T10281] __should_failslab+0xbc/0x10c [ 771.964228][T10281] should_failslab+0x10/0x28 [ 771.965526][T10281] slab_pre_alloc_hook+0x64/0xec [ 771.967051][T10281] kmem_cache_alloc+0x94/0x3e4 [ 771.968467][T10281] getname_flags+0xb8/0x450 [ 771.969792][T10281] user_path_at_empty+0x40/0x1a0 [ 771.971240][T10281] bpf_obj_get_user+0xc0/0x414 [ 771.972554][T10281] bpf_obj_get+0xcc/0x118 [ 771.973848][T10281] __sys_bpf+0x3c4/0x5f0 [ 771.975204][T10281] __arm64_sys_bpf+0x80/0x98 [ 771.976464][T10281] invoke_syscall+0x98/0x2b8 [ 771.977848][T10281] el0_svc_common+0x138/0x258 [ 771.979224][T10281] do_el0_svc+0x58/0x14c [ 771.980520][T10281] el0_svc+0x78/0x1e0 [ 771.981657][T10281] el0t_64_sync_handler+0xcc/0xe4 [ 771.983001][T10281] el0t_64_sync+0x1a0/0x1a4 [ 772.117409][ T5389] team0 (unregistering): Port device team_slave_1 removed [ 772.129179][ T5389] team0 (unregistering): Port device team_slave_0 removed [ 772.139396][ T5389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.235420][T10286] loop4: detected capacity change from 0 to 512 [ 772.262803][ T5389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.392847][T10286] EXT4-fs (loop4): Ignoring removed orlov option [ 772.399235][T10286] EXT4-fs (loop4): Ignoring removed nobh option [ 772.433989][T10286] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 3: comm syz.4.1317: lblock 0 mapped to illegal pblock 3 (length 1) [ 772.441437][T10286] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.1317: error -117 reading directory block [ 772.445181][T10286] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 772.451838][T10286] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,orlov,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,auto_da_alloc,grpjquota=.journal_checksum,barrier=0x0000000000000007,nobh,grpid,,,errors=continue. Quota mode: writeback. [ 772.542707][ T5389] bond0 (unregistering): Released all slaves [ 772.864022][ T4563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.867017][ T4563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.874244][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 773.072004][ T8289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.077510][ T8289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.083494][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 773.221583][T10318] FAULT_INJECTION: forcing a failure. [ 773.221583][T10318] name failslab, interval 1, probability 0, space 0, times 0 [ 773.255994][T10318] CPU: 1 PID: 10318 Comm: syz.4.1323 Not tainted 5.15.185-syzkaller #0 [ 773.258335][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 773.261120][T10318] Call trace: [ 773.262014][T10318] dump_backtrace+0x0/0x43c [ 773.263299][T10318] show_stack+0x2c/0x3c [ 773.264491][T10318] __dump_stack+0x30/0x40 [ 773.265719][T10318] dump_stack_lvl+0xf8/0x160 [ 773.267016][T10318] dump_stack+0x1c/0x5c [ 773.268173][T10318] should_fail+0x3c0/0x51c [ 773.269438][T10318] __should_failslab+0xbc/0x10c [ 773.270776][T10318] should_failslab+0x10/0x28 [ 773.272043][T10318] slab_pre_alloc_hook+0x64/0xec [ 773.273373][T10318] __kmalloc+0xbc/0x44c [ 773.274506][T10318] __arm64_sys_memfd_create+0x168/0x514 [ 773.276042][T10318] invoke_syscall+0x98/0x2b8 [ 773.277291][T10318] el0_svc_common+0x138/0x258 [ 773.278597][T10318] do_el0_svc+0x58/0x14c [ 773.279742][T10318] el0_svc+0x78/0x1e0 [ 773.280828][T10318] el0t_64_sync_handler+0xcc/0xe4 [ 773.282171][T10318] el0t_64_sync+0x1a0/0x1a4 [ 773.384146][T10328] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 773.397861][T10329] loop8: detected capacity change from 0 to 64 [ 773.403322][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1325'. [ 773.925519][T10345] loop7: detected capacity change from 0 to 1024 [ 774.077837][T10345] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 774.284186][T10361] FAULT_INJECTION: forcing a failure. [ 774.284186][T10361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.317333][T10361] CPU: 0 PID: 10361 Comm: syz.4.1330 Not tainted 5.15.185-syzkaller #0 [ 774.319817][T10361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 774.322685][T10361] Call trace: [ 774.323584][T10361] dump_backtrace+0x0/0x43c [ 774.324843][T10361] show_stack+0x2c/0x3c [ 774.326008][T10361] __dump_stack+0x30/0x40 [ 774.327161][T10361] dump_stack_lvl+0xf8/0x160 [ 774.328418][T10361] dump_stack+0x1c/0x5c [ 774.329751][T10361] should_fail+0x3c0/0x51c [ 774.330986][T10361] should_fail_usercopy+0x20/0x30 [ 774.332430][T10361] iovec_from_user+0xcc/0x688 [ 774.333697][T10361] __import_iovec+0x80/0x40c [ 774.334945][T10361] import_iovec+0x88/0xa4 [ 774.336282][T10361] ___sys_sendmsg+0x19c/0x240 [ 774.337613][T10361] __arm64_sys_sendmsg+0x1a8/0x254 [ 774.339052][T10361] invoke_syscall+0x98/0x2b8 [ 774.340297][T10361] el0_svc_common+0x138/0x258 [ 774.341632][T10361] do_el0_svc+0x58/0x14c [ 774.342776][T10361] el0_svc+0x78/0x1e0 [ 774.343895][T10361] el0t_64_sync_handler+0xcc/0xe4 [ 774.345222][T10361] el0t_64_sync+0x1a0/0x1a4 [ 774.346566][ C0] vkms_vblank_simulate: vblank timer overrun [ 774.603688][T10374] loop7: detected capacity change from 0 to 64 [ 774.910027][T10379] vim2m vim2m.0: vidioc_s_fmt queue busy [ 774.913354][T10379] tun0: tun_chr_ioctl cmd 1074025675 [ 774.914952][T10379] tun0: persist enabled [ 775.747860][T10379] tun0: tun_chr_ioctl cmd 1074025675 [ 775.749458][T10379] tun0: persist enabled [ 776.020250][T10391] loop0: detected capacity change from 0 to 64 [ 776.232521][T10400] loop4: detected capacity change from 0 to 128 [ 776.341104][T10400] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 776.356713][T10400] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 776.359472][T10400] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 776.361602][T10400] UDF-fs: Scanning with blocksize 512 failed [ 776.431110][T10400] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 776.444887][T10400] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 776.469671][T10407] FAULT_INJECTION: forcing a failure. [ 776.469671][T10407] name failslab, interval 1, probability 0, space 0, times 0 [ 776.474375][T10400] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 776.522273][T10400] UDF-fs: Scanning with blocksize 1024 failed [ 776.526703][T10407] CPU: 0 PID: 10407 Comm: syz.7.1337 Not tainted 5.15.185-syzkaller #0 [ 776.529043][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 776.531840][T10407] Call trace: [ 776.532723][T10407] dump_backtrace+0x0/0x43c [ 776.534034][T10407] show_stack+0x2c/0x3c [ 776.535186][T10407] __dump_stack+0x30/0x40 [ 776.536372][T10407] dump_stack_lvl+0xf8/0x160 [ 776.537635][T10407] dump_stack+0x1c/0x5c [ 776.538811][T10407] should_fail+0x3c0/0x51c [ 776.540069][T10407] __should_failslab+0xbc/0x10c [ 776.541411][T10407] should_failslab+0x10/0x28 [ 776.542657][T10407] slab_pre_alloc_hook+0x64/0xec [ 776.544004][T10407] __kmalloc+0xbc/0x44c [ 776.545153][T10407] __arm64_sys_memfd_create+0x168/0x514 [ 776.546715][T10407] invoke_syscall+0x98/0x2b8 [ 776.548021][T10407] el0_svc_common+0x138/0x258 [ 776.549290][T10407] do_el0_svc+0x58/0x14c [ 776.550480][T10407] el0_svc+0x78/0x1e0 [ 776.551602][T10407] el0t_64_sync_handler+0xcc/0xe4 [ 776.553004][T10407] el0t_64_sync+0x1a0/0x1a4 [ 776.554275][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.752303][T10400] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 776.789500][T10400] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 776.805536][T10400] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 776.812222][T10400] UDF-fs: Scanning with blocksize 2048 failed [ 776.817813][T10400] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 776.882712][T10400] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 776.885470][T10400] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 776.899036][T10400] UDF-fs: Scanning with blocksize 4096 failed [ 776.901056][T10400] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 777.249181][T10429] loop6: detected capacity change from 0 to 1024 [ 777.465235][T10429] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 778.536733][T10453] FAULT_INJECTION: forcing a failure. [ 778.536733][T10453] name failslab, interval 1, probability 0, space 0, times 0 [ 778.540505][T10453] CPU: 1 PID: 10453 Comm: syz.6.1344 Not tainted 5.15.185-syzkaller #0 [ 778.542945][T10453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 778.545960][T10453] Call trace: [ 778.546999][T10453] dump_backtrace+0x0/0x43c [ 778.548333][T10453] show_stack+0x2c/0x3c [ 778.549612][T10453] __dump_stack+0x30/0x40 [ 778.550912][T10453] dump_stack_lvl+0xf8/0x160 [ 778.552306][T10453] dump_stack+0x1c/0x5c [ 778.553567][T10453] should_fail+0x3c0/0x51c [ 778.554907][T10453] __should_failslab+0xbc/0x10c [ 778.556326][T10453] should_failslab+0x10/0x28 [ 778.557721][T10453] slab_pre_alloc_hook+0x64/0xec [ 778.559184][T10453] __kmalloc+0xbc/0x44c [ 778.560358][T10453] __arm64_sys_memfd_create+0x168/0x514 [ 778.562046][T10453] invoke_syscall+0x98/0x2b8 [ 778.563423][T10453] el0_svc_common+0x138/0x258 [ 778.564801][T10453] do_el0_svc+0x58/0x14c [ 778.566036][T10453] el0_svc+0x78/0x1e0 [ 778.567151][T10453] el0t_64_sync_handler+0xcc/0xe4 [ 778.568711][T10453] el0t_64_sync+0x1a0/0x1a4 [ 779.135586][T10476] loop6: detected capacity change from 0 to 256 [ 779.534883][T10439] loop4: detected capacity change from 0 to 32768 [ 779.575240][T10439] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 779.624152][T10439] BTRFS info (device loop4): force clearing of disk cache [ 779.640640][T10439] BTRFS info (device loop4): metadata ratio 0 [ 779.661238][T10496] loop6: detected capacity change from 0 to 512 [ 779.674559][T10439] BTRFS info (device loop4): enabling ssd optimizations [ 779.691660][T10439] BTRFS info (device loop4): using spread ssd allocation scheme [ 779.693923][T10439] BTRFS info (device loop4): using free space tree [ 779.728557][T10439] BTRFS info (device loop4): has skinny extents [ 781.654680][T10439] BTRFS error (device loop4): open_ctree failed: -22 [ 781.793428][T10555] loop8: detected capacity change from 0 to 64 [ 782.985389][T10569] loop4: detected capacity change from 0 to 1024 [ 783.175060][T10569] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 784.212910][T10562] loop7: detected capacity change from 0 to 32768 [ 784.248777][T10562] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1359 (10562) [ 784.283862][T10562] BTRFS info (device loop7): using crc32c (crc32c-generic) checksum algorithm [ 784.296932][T10562] BTRFS info (device loop7): turning on async discard [ 784.298819][T10562] BTRFS info (device loop7): using free space tree [ 784.300534][T10562] BTRFS info (device loop7): has skinny extents [ 784.355242][T10593] loop6: detected capacity change from 0 to 32768 [ 784.393535][T10593] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by syz.6.1362 (10593) [ 784.477004][T10593] FAULT_INJECTION: forcing a failure. [ 784.477004][T10593] name failslab, interval 1, probability 0, space 0, times 0 [ 784.480640][T10593] CPU: 0 PID: 10593 Comm: syz.6.1362 Not tainted 5.15.185-syzkaller #0 [ 784.482844][T10593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 784.485574][T10593] Call trace: [ 784.486489][T10593] dump_backtrace+0x0/0x43c [ 784.487780][T10593] show_stack+0x2c/0x3c [ 784.488906][T10593] __dump_stack+0x30/0x40 [ 784.490107][T10593] dump_stack_lvl+0xf8/0x160 [ 784.491366][T10593] dump_stack+0x1c/0x5c [ 784.492559][T10593] should_fail+0x3c0/0x51c [ 784.493797][T10593] __should_failslab+0xbc/0x10c [ 784.495149][T10593] should_failslab+0x10/0x28 [ 784.496417][T10593] slab_pre_alloc_hook+0x64/0xec [ 784.497767][T10593] __kmalloc+0xbc/0x44c [ 784.498901][T10593] tomoyo_encode+0x274/0x4a4 [ 784.500170][T10593] tomoyo_realpath_from_path+0x4bc/0x510 [ 784.501682][T10593] tomoyo_path_number_perm+0x1b0/0x518 [ 784.503127][T10593] tomoyo_file_ioctl+0x2c/0x3c [ 784.503792][T10594] loop4: detected capacity change from 0 to 32768 [ 784.504444][T10593] security_file_ioctl+0x80/0xbc [ 784.504473][T10593] __arm64_sys_ioctl+0xa8/0x1c8 [ 784.508871][T10593] invoke_syscall+0x98/0x2b8 [ 784.510143][T10593] el0_svc_common+0x138/0x258 [ 784.511415][T10593] do_el0_svc+0x58/0x14c [ 784.512577][T10593] el0_svc+0x78/0x1e0 [ 784.513656][T10593] el0t_64_sync_handler+0xcc/0xe4 [ 784.515045][T10593] el0t_64_sync+0x1a0/0x1a4 [ 784.516316][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.560787][T10594] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1361 (10594) [ 784.764981][T10562] BTRFS info (device loop7): enabling ssd optimizations [ 784.840953][ T9360] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (9360) [ 784.884906][ T9340] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by udevd (9340) [ 785.025375][T10593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 785.995171][T10663] FAULT_INJECTION: forcing a failure. [ 785.995171][T10663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.999840][T10663] CPU: 0 PID: 10663 Comm: syz.6.1366 Not tainted 5.15.185-syzkaller #0 [ 786.002112][T10663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 786.005026][T10663] Call trace: [ 786.005879][T10663] dump_backtrace+0x0/0x43c [ 786.007157][T10663] show_stack+0x2c/0x3c [ 786.008297][T10663] __dump_stack+0x30/0x40 [ 786.009522][T10663] dump_stack_lvl+0xf8/0x160 [ 786.010798][T10663] dump_stack+0x1c/0x5c [ 786.011923][T10663] should_fail+0x3c0/0x51c [ 786.013137][T10663] should_fail_usercopy+0x20/0x30 [ 786.014555][T10663] sctp_getsockopt_asconf_supported+0x4d4/0x74c [ 786.016325][T10663] sctp_getsockopt+0x2b0/0x9a0 [ 786.017710][T10663] sock_common_getsockopt+0xa8/0xc4 [ 786.019197][T10663] __sys_getsockopt+0x1e0/0x45c [ 786.020654][T10663] __arm64_sys_getsockopt+0xb8/0xd4 [ 786.022117][T10663] invoke_syscall+0x98/0x2b8 [ 786.023474][T10663] el0_svc_common+0x138/0x258 [ 786.024810][T10663] do_el0_svc+0x58/0x14c [ 786.026047][T10663] el0_svc+0x78/0x1e0 [ 786.027209][T10663] el0t_64_sync_handler+0xcc/0xe4 [ 786.028657][T10663] el0t_64_sync+0x1a0/0x1a4 [ 786.029910][ C0] vkms_vblank_simulate: vblank timer overrun [ 787.771104][T10708] loop0: detected capacity change from 0 to 64 [ 791.354058][T10735] loop7: detected capacity change from 0 to 1024 [ 791.567052][T10735] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 793.832009][T10763] loop8: detected capacity change from 0 to 1024 [ 795.737183][T10763] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 795.813223][T10788] loop4: detected capacity change from 0 to 1024 [ 795.912112][T10788] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 795.969869][T10790] loop6: detected capacity change from 0 to 4096 [ 797.954073][T10810] loop0: detected capacity change from 0 to 64 [ 799.002797][T10827] FAULT_INJECTION: forcing a failure. [ 799.002797][T10827] name failslab, interval 1, probability 0, space 0, times 0 [ 799.007279][T10827] CPU: 1 PID: 10827 Comm: syz.7.1393 Not tainted 5.15.185-syzkaller #0 [ 799.009604][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 799.012407][T10827] Call trace: [ 799.013316][T10827] dump_backtrace+0x0/0x43c [ 799.014553][T10827] show_stack+0x2c/0x3c [ 799.015698][T10827] __dump_stack+0x30/0x40 [ 799.016884][T10827] dump_stack_lvl+0xf8/0x160 [ 799.018190][T10827] dump_stack+0x1c/0x5c [ 799.019365][T10827] should_fail+0x3c0/0x51c [ 799.020586][T10827] __should_failslab+0xbc/0x10c [ 799.021944][T10827] should_failslab+0x10/0x28 [ 799.023239][T10827] slab_pre_alloc_hook+0x64/0xec [ 799.024613][T10827] __kmalloc+0xbc/0x44c [ 799.025771][T10827] __arm64_sys_memfd_create+0x168/0x514 [ 799.027302][T10827] invoke_syscall+0x98/0x2b8 [ 799.028649][T10827] el0_svc_common+0x138/0x258 [ 799.029965][T10827] do_el0_svc+0x58/0x14c [ 799.031167][T10827] el0_svc+0x78/0x1e0 [ 799.032303][T10827] el0t_64_sync_handler+0xcc/0xe4 [ 799.033653][T10827] el0t_64_sync+0x1a0/0x1a4 [ 800.701522][T10848] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1396'. [ 801.578911][ T26] audit: type=1326 audit(801.520:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.4.1398" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80ed78a8 code=0x0 [ 801.874750][T10848] loop7: detected capacity change from 0 to 32768 [ 801.942648][T10869] loop4: detected capacity change from 0 to 64 [ 803.021663][T10848] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 803.213080][T10847] loop8: detected capacity change from 0 to 32768 [ 803.312764][T10848] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 805.479792][ T9540] ocfs2: Unmounting device (7,7) on (node local) [ 806.063783][T10946] FAULT_INJECTION: forcing a failure. [ 806.063783][T10946] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 806.067667][T10946] CPU: 1 PID: 10946 Comm: syz.8.1407 Not tainted 5.15.185-syzkaller #0 [ 806.069752][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 806.072345][T10946] Call trace: [ 806.073145][T10946] dump_backtrace+0x0/0x43c [ 806.074329][T10946] show_stack+0x2c/0x3c [ 806.075447][T10946] __dump_stack+0x30/0x40 [ 806.076701][T10946] dump_stack_lvl+0xf8/0x160 [ 806.077920][T10946] dump_stack+0x1c/0x5c [ 806.079031][T10946] should_fail+0x3c0/0x51c [ 806.080228][T10946] should_fail_alloc_page+0x74/0xa8 [ 806.081561][T10946] prepare_alloc_pages+0x160/0x460 [ 806.082930][T10946] __alloc_pages+0x108/0x470 [ 806.084113][T10946] alloc_pages+0x34c/0x5c0 [ 806.085326][T10946] __get_free_pages+0x18/0x84 [ 806.086601][T10946] __tlb_remove_page_size+0x1cc/0x388 [ 806.088043][T10946] unmap_page_range+0xc80/0x1958 [ 806.089405][T10946] unmap_single_vma+0x13c/0x1e4 [ 806.090684][T10946] unmap_vmas+0x104/0x200 [ 806.091877][T10946] unmap_region+0x1b8/0x300 [ 806.093085][T10946] __do_munmap+0x870/0xc04 [ 806.094242][T10946] mmap_region+0x7b0/0x1390 [ 806.095447][T10946] do_mmap+0x67c/0xdb4 [ 806.096496][T10946] vm_mmap_pgoff+0x184/0x284 [ 806.097721][T10946] ksys_mmap_pgoff+0x11c/0x620 [ 806.099055][T10946] __arm64_sys_mmap+0xf8/0x110 [ 806.100403][T10946] invoke_syscall+0x98/0x2b8 [ 806.101748][T10946] el0_svc_common+0x138/0x258 [ 806.103043][T10946] do_el0_svc+0x58/0x14c [ 806.104240][T10946] el0_svc+0x78/0x1e0 [ 806.105294][T10946] el0t_64_sync_handler+0xcc/0xe4 [ 806.106678][T10946] el0t_64_sync+0x1a0/0x1a4 [ 811.063902][T10988] FAULT_INJECTION: forcing a failure. [ 811.063902][T10988] name failslab, interval 1, probability 0, space 0, times 0 [ 811.064075][T10988] CPU: 1 PID: 10988 Comm: syz.6.1412 Not tainted 5.15.185-syzkaller #0 [ 811.064088][T10988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 811.064095][T10988] Call trace: [ 811.064099][T10988] dump_backtrace+0x0/0x43c [ 811.064118][T10988] show_stack+0x2c/0x3c [ 811.064128][T10988] __dump_stack+0x30/0x40 [ 811.064138][T10988] dump_stack_lvl+0xf8/0x160 [ 811.064148][T10988] dump_stack+0x1c/0x5c [ 811.064156][T10988] should_fail+0x3c0/0x51c [ 811.064166][T10988] __should_failslab+0xbc/0x10c [ 811.064177][T10988] should_failslab+0x10/0x28 [ 811.064187][T10988] slab_pre_alloc_hook+0x64/0xec [ 811.064196][T10988] __kmalloc+0xbc/0x44c [ 811.064205][T10988] tomoyo_encode+0x274/0x4a4 [ 811.064216][T10988] tomoyo_realpath_from_path+0x4bc/0x510 [ 811.064226][T10988] tomoyo_path_number_perm+0x1b0/0x518 [ 811.064236][T10988] tomoyo_file_ioctl+0x2c/0x3c [ 811.064247][T10988] security_file_ioctl+0x80/0xbc [ 811.064257][T10988] __arm64_sys_ioctl+0xa8/0x1c8 [ 811.064268][T10988] invoke_syscall+0x98/0x2b8 [ 811.064278][T10988] el0_svc_common+0x138/0x258 [ 811.064288][T10988] do_el0_svc+0x58/0x14c [ 811.064297][T10988] el0_svc+0x78/0x1e0 [ 811.064307][T10988] el0t_64_sync_handler+0xcc/0xe4 [ 811.064316][T10988] el0t_64_sync+0x1a0/0x1a4 [ 811.064836][T10988] ERROR: Out of memory at tomoyo_realpath_from_path. [ 813.519235][T11012] loop0: detected capacity change from 0 to 64 [ 815.330126][T11037] FAULT_INJECTION: forcing a failure. [ 815.330126][T11037] name failslab, interval 1, probability 0, space 0, times 0 [ 815.383929][T11037] CPU: 1 PID: 11037 Comm: syz.4.1419 Not tainted 5.15.185-syzkaller #0 [ 815.386235][T11037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 815.389043][T11037] Call trace: [ 815.389939][T11037] dump_backtrace+0x0/0x43c [ 815.391157][T11037] show_stack+0x2c/0x3c [ 815.392355][T11037] __dump_stack+0x30/0x40 [ 815.393524][T11037] dump_stack_lvl+0xf8/0x160 [ 815.394841][T11037] dump_stack+0x1c/0x5c [ 815.395986][T11037] should_fail+0x3c0/0x51c [ 815.397225][T11037] __should_failslab+0xbc/0x10c [ 815.398524][T11037] should_failslab+0x10/0x28 [ 815.399716][T11037] slab_pre_alloc_hook+0x64/0xec [ 815.401013][T11037] kmem_cache_alloc_bulk+0x50/0x4b4 [ 815.402364][T11037] io_submit_sqes+0x4708/0x85bc [ 815.403649][T11037] __arm64_sys_io_uring_enter+0x2a0/0x1a90 [ 815.405234][T11037] invoke_syscall+0x98/0x2b8 [ 815.406494][T11037] el0_svc_common+0x138/0x258 [ 815.407803][T11037] do_el0_svc+0x58/0x14c [ 815.408977][T11037] el0_svc+0x78/0x1e0 [ 815.410084][T11037] el0t_64_sync_handler+0xcc/0xe4 [ 815.411502][T11037] el0t_64_sync+0x1a0/0x1a4 [ 816.497024][T11047] loop6: detected capacity change from 0 to 1024 [ 816.590072][T11047] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 816.599200][T11051] loop7: detected capacity change from 0 to 1024 [ 816.744168][T11051] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 817.179961][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 817.181759][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.355890][T11062] loop7: detected capacity change from 0 to 64 [ 817.965981][T11061] attempt to access beyond end of device [ 817.965981][T11061] loop7: rw=0, want=6106906644, limit=64 [ 817.969458][T11061] Buffer I/O error on dev loop7, logical block 3053453321, async page read [ 817.972470][T11061] Trying to free block not in datazone [ 818.378049][T11072] loop6: detected capacity change from 0 to 256 [ 818.532863][T11052] loop4: detected capacity change from 0 to 40427 [ 818.672533][T11052] F2FS-fs (loop4): invalid crc value [ 820.085211][T11052] F2FS-fs (loop4): Found nat_bits in checkpoint [ 820.381462][T11052] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 820.655860][T11091] sp0: Synchronizing with TNC [ 820.769419][T11087] loop6: detected capacity change from 0 to 256 [ 820.891098][T11087] FAT-fs (loop6): Directory bread(block 64) failed [ 820.905879][T11087] FAT-fs (loop6): Directory bread(block 65) failed [ 820.912107][T11087] FAT-fs (loop6): Directory bread(block 66) failed [ 820.924349][T11087] FAT-fs (loop6): Directory bread(block 67) failed [ 820.932081][T11087] FAT-fs (loop6): Directory bread(block 68) failed [ 820.952571][T11087] FAT-fs (loop6): Directory bread(block 69) failed [ 821.022108][T11087] FAT-fs (loop6): Directory bread(block 70) failed [ 821.023980][T11087] FAT-fs (loop6): Directory bread(block 71) failed [ 821.035988][T11087] FAT-fs (loop6): Directory bread(block 72) failed [ 821.037844][T11087] FAT-fs (loop6): Directory bread(block 73) failed [ 821.060807][T11075] loop7: detected capacity change from 0 to 32768 [ 821.176894][T11075] XFS (loop7): Mounting V5 Filesystem [ 821.436120][T11105] syz.4.1434 (11105) used obsolete PPPIOCDETACH ioctl [ 821.444856][T11086] [U] è [ 821.461985][T11075] XFS (loop7): Ending clean mount [ 821.485210][T11075] XFS (loop7): Quotacheck needed: Please wait. [ 821.674547][T11075] XFS (loop7): Quotacheck: Done. [ 822.504001][ T9540] XFS (loop7): Unmounting Filesystem [ 822.555674][T11116] loop4: detected capacity change from 0 to 1024 [ 822.645439][T11118] FAULT_INJECTION: forcing a failure. [ 822.645439][T11118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.651843][T11116] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 822.737132][T11118] CPU: 0 PID: 11118 Comm: syz.8.1438 Not tainted 5.15.185-syzkaller #0 [ 822.739617][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 822.742296][T11118] Call trace: [ 822.743192][T11118] dump_backtrace+0x0/0x43c [ 822.744536][T11118] show_stack+0x2c/0x3c [ 822.745813][T11118] __dump_stack+0x30/0x40 [ 822.746951][T11118] dump_stack_lvl+0xf8/0x160 [ 822.748181][T11118] dump_stack+0x1c/0x5c [ 822.749368][T11118] should_fail+0x3c0/0x51c [ 822.750629][T11118] should_fail_usercopy+0x20/0x30 [ 822.752017][T11118] simple_read_from_buffer+0xd0/0x264 [ 822.753519][T11118] proc_fail_nth_read+0x19c/0x244 [ 822.754997][T11118] vfs_read+0x278/0xa10 [ 822.756106][T11118] ksys_read+0x120/0x210 [ 822.757302][T11118] __arm64_sys_read+0x7c/0x90 [ 822.758578][T11118] invoke_syscall+0x98/0x2b8 [ 822.759819][T11118] el0_svc_common+0x138/0x258 [ 822.761128][T11118] do_el0_svc+0x58/0x14c [ 822.762255][T11118] el0_svc+0x78/0x1e0 [ 822.763371][T11118] el0t_64_sync_handler+0xcc/0xe4 [ 822.764775][T11118] el0t_64_sync+0x1a0/0x1a4 [ 822.982721][T11127] FAULT_INJECTION: forcing a failure. [ 822.982721][T11127] name failslab, interval 1, probability 0, space 0, times 0 [ 823.033835][T11127] CPU: 1 PID: 11127 Comm: syz.4.1441 Not tainted 5.15.185-syzkaller #0 [ 823.036249][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 823.039014][T11127] Call trace: [ 823.039942][T11127] dump_backtrace+0x0/0x43c [ 823.041209][T11127] show_stack+0x2c/0x3c [ 823.042350][T11127] __dump_stack+0x30/0x40 [ 823.043523][T11127] dump_stack_lvl+0xf8/0x160 [ 823.044934][T11127] dump_stack+0x1c/0x5c [ 823.046122][T11127] should_fail+0x3c0/0x51c [ 823.047370][T11127] __should_failslab+0xbc/0x10c [ 823.048729][T11127] should_failslab+0x10/0x28 [ 823.050013][T11127] slab_pre_alloc_hook+0x64/0xec [ 823.051357][T11127] kmem_cache_alloc_node+0x98/0x41c [ 823.052837][T11127] __alloc_skb+0x134/0x67c [ 823.054053][T11127] netlink_sendmsg+0x548/0x9cc [ 823.055413][T11127] ____sys_sendmsg+0x61c/0x920 [ 823.056782][T11127] ___sys_sendmsg+0x1d0/0x240 [ 823.058082][T11127] __arm64_sys_sendmsg+0x1a8/0x254 [ 823.059627][T11127] invoke_syscall+0x98/0x2b8 [ 823.060911][T11127] el0_svc_common+0x138/0x258 [ 823.062167][T11127] do_el0_svc+0x58/0x14c [ 823.063399][T11127] el0_svc+0x78/0x1e0 [ 823.064545][T11127] el0t_64_sync_handler+0xcc/0xe4 [ 823.065979][T11127] el0t_64_sync+0x1a0/0x1a4 [ 823.067389][ C1] vkms_vblank_simulate: vblank timer overrun [ 823.244252][T11120] loop6: detected capacity change from 0 to 32768 [ 823.483272][T11149] FAULT_INJECTION: forcing a failure. [ 823.483272][T11149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.498287][T11149] CPU: 0 PID: 11149 Comm: syz.8.1447 Not tainted 5.15.185-syzkaller #0 [ 823.500607][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 823.503345][T11149] Call trace: [ 823.504256][T11149] dump_backtrace+0x0/0x43c [ 823.505479][T11149] show_stack+0x2c/0x3c [ 823.506577][T11149] __dump_stack+0x30/0x40 [ 823.507801][T11149] dump_stack_lvl+0xf8/0x160 [ 823.509015][T11149] dump_stack+0x1c/0x5c [ 823.510137][T11149] should_fail+0x3c0/0x51c [ 823.511330][T11149] should_fail_usercopy+0x20/0x30 [ 823.512716][T11149] __arm64_sys_memfd_create+0x1a8/0x514 [ 823.514194][T11149] invoke_syscall+0x98/0x2b8 [ 823.515408][T11149] el0_svc_common+0x138/0x258 [ 823.516647][T11149] do_el0_svc+0x58/0x14c [ 823.517737][T11149] el0_svc+0x78/0x1e0 [ 823.518873][T11149] el0t_64_sync_handler+0xcc/0xe4 [ 823.520247][T11149] el0t_64_sync+0x1a0/0x1a4 [ 823.537912][T11120] XFS (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 823.540302][T11120] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 823.544039][T11120] XFS (loop6): Mounting V5 Filesystem [ 823.707817][T11126] loop0: detected capacity change from 0 to 32768 [ 823.787869][T11120] XFS (loop6): Ending clean mount [ 823.791677][T11120] XFS (loop6): Quotacheck needed: Please wait. [ 823.840325][T11158] loop8: detected capacity change from 0 to 512 [ 823.846113][T11126] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1440 (11126) [ 823.879573][T11120] XFS (loop6): Quotacheck: Done. [ 823.950899][T11126] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 823.953414][T11126] BTRFS info (device loop0): enabling auto defrag [ 823.962416][ T9401] XFS (loop6): Unmounting Filesystem [ 823.991685][T11126] BTRFS info (device loop0): max_inline at 0 [ 823.993483][T11126] BTRFS info (device loop0): enabling ssd optimizations [ 823.995647][T11126] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 824.000623][T11126] BTRFS info (device loop0): use lzo compression, level 0 [ 824.002806][T11126] BTRFS info (device loop0): using free space tree [ 824.004598][T11126] BTRFS info (device loop0): has skinny extents [ 825.053167][T11188] FAULT_INJECTION: forcing a failure. [ 825.053167][T11188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.056994][T11188] CPU: 1 PID: 11188 Comm: syz.7.1453 Not tainted 5.15.185-syzkaller #0 [ 825.059271][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 825.061914][T11188] Call trace: [ 825.062847][T11188] dump_backtrace+0x0/0x43c [ 825.064052][T11188] show_stack+0x2c/0x3c [ 825.065094][T11188] __dump_stack+0x30/0x40 [ 825.066264][T11188] dump_stack_lvl+0xf8/0x160 [ 825.067483][T11188] dump_stack+0x1c/0x5c [ 825.068581][T11188] should_fail+0x3c0/0x51c [ 825.069714][T11188] should_fail_usercopy+0x20/0x30 [ 825.071105][T11188] __arm64_sys_memfd_create+0x1a8/0x514 [ 825.072663][T11188] invoke_syscall+0x98/0x2b8 [ 825.073904][T11188] el0_svc_common+0x138/0x258 [ 825.075111][T11188] do_el0_svc+0x58/0x14c [ 825.076324][T11188] el0_svc+0x78/0x1e0 [ 825.077399][T11188] el0t_64_sync_handler+0xcc/0xe4 [ 825.078693][T11188] el0t_64_sync+0x1a0/0x1a4 [ 825.080039][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.185840][T11181] loop4: detected capacity change from 0 to 1024 [ 825.217505][T11181] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 825.556457][T11200] loop7: detected capacity change from 0 to 128 [ 825.683470][T11200] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 825.692760][T11200] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 825.697904][T11200] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 825.700459][T11200] UDF-fs: Scanning with blocksize 512 failed [ 825.703318][T11200] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 825.717683][T11200] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 825.720442][T11200] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 825.801124][T11207] FAULT_INJECTION: forcing a failure. [ 825.801124][T11207] name failslab, interval 1, probability 0, space 0, times 0 [ 825.804709][T11207] CPU: 0 PID: 11207 Comm: syz.4.1458 Not tainted 5.15.185-syzkaller #0 [ 825.807056][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 825.809905][T11207] Call trace: [ 825.810848][T11207] dump_backtrace+0x0/0x43c [ 825.812129][T11207] show_stack+0x2c/0x3c [ 825.813251][T11207] __dump_stack+0x30/0x40 [ 825.814420][T11207] dump_stack_lvl+0xf8/0x160 [ 825.814990][T11206] loop6: detected capacity change from 0 to 4096 [ 825.815688][T11207] dump_stack+0x1c/0x5c [ 825.818589][T11207] should_fail+0x3c0/0x51c [ 825.819843][T11207] __should_failslab+0xbc/0x10c [ 825.821112][T11207] should_failslab+0x10/0x28 [ 825.822375][T11207] slab_pre_alloc_hook+0x64/0xec [ 825.823688][T11207] kmem_cache_alloc_node+0x98/0x41c [ 825.825098][T11207] __alloc_skb+0x134/0x67c [ 825.826259][T11207] netlink_sendmsg+0x548/0x9cc [ 825.827573][T11207] ____sys_sendmsg+0x61c/0x920 [ 825.828875][T11207] ___sys_sendmsg+0x1d0/0x240 [ 825.830161][T11207] __arm64_sys_sendmsg+0x1a8/0x254 [ 825.830336][T11200] UDF-fs: Scanning with blocksize 1024 failed [ 825.831546][T11207] invoke_syscall+0x98/0x2b8 [ 825.834665][T11207] el0_svc_common+0x138/0x258 [ 825.835927][T11207] do_el0_svc+0x58/0x14c [ 825.837038][T11207] el0_svc+0x78/0x1e0 [ 825.838085][T11207] el0t_64_sync_handler+0xcc/0xe4 [ 825.839410][T11207] el0t_64_sync+0x1a0/0x1a4 [ 825.859730][T11200] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 825.863156][T11200] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 825.869397][T11200] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 825.873915][T11200] UDF-fs: Scanning with blocksize 2048 failed [ 825.879108][T11200] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 825.889882][T11200] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 825.893904][T11200] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 825.906472][T11200] UDF-fs: Scanning with blocksize 4096 failed [ 825.910543][T11200] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 826.116627][T11206] ntfs: volume version 3.1. [ 826.519352][T11211] FAULT_INJECTION: forcing a failure. [ 826.519352][T11211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.529582][T11211] CPU: 1 PID: 11211 Comm: syz.0.1457 Not tainted 5.15.185-syzkaller #0 [ 826.531845][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 826.534594][T11211] Call trace: [ 826.535427][T11211] dump_backtrace+0x0/0x43c [ 826.536671][T11211] show_stack+0x2c/0x3c [ 826.537801][T11211] __dump_stack+0x30/0x40 [ 826.539001][T11211] dump_stack_lvl+0xf8/0x160 [ 826.540286][T11211] dump_stack+0x1c/0x5c [ 826.541414][T11211] should_fail+0x3c0/0x51c [ 826.542640][T11211] should_fail_usercopy+0x20/0x30 [ 826.544020][T11211] simple_read_from_buffer+0xd0/0x264 [ 826.545473][T11211] proc_fail_nth_read+0x19c/0x244 [ 826.546857][T11211] vfs_read+0x278/0xa10 [ 826.547983][T11211] ksys_read+0x120/0x210 [ 826.549110][T11211] __arm64_sys_read+0x7c/0x90 [ 826.550370][T11211] invoke_syscall+0x98/0x2b8 [ 826.551606][T11211] el0_svc_common+0x138/0x258 [ 826.552846][T11211] do_el0_svc+0x58/0x14c [ 826.553981][T11211] el0_svc+0x78/0x1e0 [ 826.555022][T11211] el0t_64_sync_handler+0xcc/0xe4 [ 826.556415][T11211] el0t_64_sync+0x1a0/0x1a4 [ 826.663659][T11200] loop7: detected capacity change from 0 to 1024 [ 826.689979][T11214] loop6: detected capacity change from 0 to 64 [ 826.753501][ T5347] Bluetooth: hci3: Frame reassembly failed (-84) [ 826.892030][T11220] loop0: detected capacity change from 0 to 64 [ 827.412626][T11228] loop8: detected capacity change from 0 to 1024 [ 827.628019][T11228] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 828.437645][T11244] capability: warning: `syz.8.1470' uses 32-bit capabilities (legacy support in use) [ 828.852150][ T4718] Bluetooth: hci3: command 0x1003 tx timeout [ 828.854086][ T4034] Bluetooth: hci3: sending frame failed (-49) [ 829.783892][T11247] FAULT_INJECTION: forcing a failure. [ 829.783892][T11247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.800940][T11247] CPU: 1 PID: 11247 Comm: syz.7.1471 Not tainted 5.15.185-syzkaller #0 [ 829.803238][T11247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 829.806083][T11247] Call trace: [ 829.807076][T11247] dump_backtrace+0x0/0x43c [ 829.808305][T11247] show_stack+0x2c/0x3c [ 829.809519][T11247] __dump_stack+0x30/0x40 [ 829.810790][T11247] dump_stack_lvl+0xf8/0x160 [ 829.812049][T11247] dump_stack+0x1c/0x5c [ 829.813190][T11247] should_fail+0x3c0/0x51c [ 829.814490][T11247] should_fail_usercopy+0x20/0x30 [ 829.815911][T11247] iovec_from_user+0xcc/0x688 [ 829.817198][T11247] __import_iovec+0x80/0x40c [ 829.818525][T11247] import_iovec+0x88/0xa4 [ 829.819709][T11247] ___sys_sendmsg+0x19c/0x240 [ 829.821026][T11247] __arm64_sys_sendmsg+0x1a8/0x254 [ 829.822365][T11247] invoke_syscall+0x98/0x2b8 [ 829.823705][T11247] el0_svc_common+0x138/0x258 [ 829.825078][T11247] do_el0_svc+0x58/0x14c [ 829.826259][T11247] el0_svc+0x78/0x1e0 [ 829.827418][T11247] el0t_64_sync_handler+0xcc/0xe4 [ 829.828838][T11247] el0t_64_sync+0x1a0/0x1a4 [ 829.830251][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.949291][T11249] loop7: detected capacity change from 0 to 512 [ 829.969473][T11249] EXT4-fs (loop7): Ignoring removed nobh option [ 829.977408][T11249] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 2565)! [ 830.001849][T11249] EXT4-fs (loop7): group descriptors corrupted! [ 830.018099][T11250] Soft offlining pfn 0x121208 at process virtual address 0x20000000 [ 830.028773][T11250] Soft offlining pfn 0x12a94d at process virtual address 0x20001000 [ 830.034273][T11250] Soft offlining pfn 0x130001 at process virtual address 0x20002000 [ 830.044772][T11250] Soft offlining pfn 0x12b51f at process virtual address 0x20003000 [ 830.050330][T11250] Soft offlining pfn 0x137c70 at process virtual address 0x20004000 [ 830.052907][T11250] Soft offlining pfn 0x12af45 at process virtual address 0x20005000 [ 830.062285][T11250] Soft offlining pfn 0x12af46 at process virtual address 0x20006000 [ 830.064633][T11250] Soft offlining pfn 0x12af47 at process virtual address 0x20007000 [ 830.074070][T11250] Soft offlining pfn 0x12b04c at process virtual address 0x20008000 [ 830.114784][T11250] Soft offlining pfn 0x12b04d at process virtual address 0x20009000 [ 830.118108][T11250] Soft offlining pfn 0x12b04e at process virtual address 0x2000a000 [ 830.123401][T11250] Soft offlining pfn 0x12b04f at process virtual address 0x2000b000 [ 830.151510][T11244] mmap: syz.8.1470 (11244) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 830.164498][T11250] Soft offlining pfn 0x12add0 at process virtual address 0x2000c000 [ 830.169230][T11250] Soft offlining pfn 0x12add1 at process virtual address 0x2000d000 [ 830.172819][T11250] Soft offlining pfn 0x12add2 at process virtual address 0x2000e000 [ 830.175445][T11250] Soft offlining pfn 0x12add3 at process virtual address 0x2000f000 [ 830.188508][T11250] Soft offlining pfn 0x12a994 at process virtual address 0x20010000 [ 830.196242][T11250] Soft offlining pfn 0x12a995 at process virtual address 0x20011000 [ 830.198823][T11250] Soft offlining pfn 0x12a996 at process virtual address 0x20012000 [ 830.203366][T11237] loop4: detected capacity change from 0 to 32768 [ 830.205625][T11250] Soft offlining pfn 0x12a997 at process virtual address 0x20013000 [ 830.231443][T11250] Soft offlining pfn 0x121337 at process virtual address 0x20014000 [ 830.234278][T11250] soft_offline: 0x121337: invalidated [ 830.246503][T11250] Soft offlining pfn 0x137ade at process virtual address 0x20015000 [ 830.264436][T11250] Soft offlining pfn 0x13bb97 at process virtual address 0x20016000 [ 830.268927][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1475'. [ 830.276393][T11250] Soft offlining pfn 0x12c672 at process virtual address 0x20017000 [ 830.279062][T11250] Soft offlining pfn 0x139582 at process virtual address 0x20018000 [ 830.282139][T11250] Soft offlining pfn 0x11f768 at process virtual address 0x20019000 [ 830.285039][T11237] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 830.287831][T11237] dlm: no local IP address has been set [ 830.289601][T11237] dlm: cannot start dlm midcomms -107 [ 830.292216][T11237] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 830.314997][T11250] Soft offlining pfn 0x139555 at process virtual address 0x2001a000 [ 830.333982][T11250] Soft offlining pfn 0x11ed99 at process virtual address 0x2001b000 [ 830.372241][T11250] Soft offlining pfn 0x11dac0 at process virtual address 0x2001c000 [ 830.384438][T11250] Soft offlining pfn 0x13787a at process virtual address 0x2001d000 [ 830.391898][T11250] Soft offlining pfn 0x12c259 at process virtual address 0x2001e000 [ 830.394695][T11250] Soft offlining pfn 0x1213c9 at process virtual address 0x2001f000 [ 830.401446][T11250] Soft offlining pfn 0x13de98 at process virtual address 0x20020000 [ 830.412924][T11263] binder: BINDER_SET_CONTEXT_MGR already set [ 830.415276][T11263] binder: 11260:11263 ioctl 4018620d 20000040 returned -16 [ 830.419042][T11250] Soft offlining pfn 0x137c62 at process virtual address 0x20021000 [ 830.421495][T11250] Soft offlining pfn 0x11fc7f at process virtual address 0x20022000 [ 830.444089][T11263] binder: 11260:11263 Acquire 1 refcount change on invalid ref 3 ret -22 [ 830.453047][T11263] binder: 11260:11263 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 830.616795][T11266] loop4: detected capacity change from 0 to 1024 [ 830.936373][ T4562] Bluetooth: hci3: command 0x1001 tx timeout [ 830.948307][ T4034] Bluetooth: hci3: sending frame failed (-49) [ 831.402669][T11266] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 831.670778][T11273] loop8: detected capacity change from 0 to 32768 [ 831.690396][T11273] XFS (loop8): Mounting V5 Filesystem [ 831.729940][T11273] XFS (loop8): Ending clean mount [ 831.758846][ T9977] XFS (loop8): Unmounting Filesystem [ 833.016139][ T4562] Bluetooth: hci3: command 0x1009 tx timeout [ 833.855685][T11294] loop8: detected capacity change from 0 to 64 [ 834.831834][T11306] loop4: detected capacity change from 0 to 2048 [ 834.897710][T11306] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 834.971939][T11286] loop0: detected capacity change from 0 to 40427 [ 835.136123][T11286] loop0: detected capacity change from 0 to 4096 [ 835.203601][T11286] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 835.260847][T11286] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 835.279094][T11286] ntfs3: loop0: Failed to load $MFT. [ 835.739225][T11311] loop4: detected capacity change from 0 to 32768 [ 836.455359][T11307] loop7: detected capacity change from 0 to 32768 [ 836.572675][T11311] XFS (loop4): Mounting V5 Filesystem [ 836.633992][T11307] XFS (loop7): Mounting V5 Filesystem [ 836.805636][T11311] XFS (loop4): Ending clean mount [ 836.848772][T11307] XFS (loop7): Ending clean mount [ 836.983124][T11345] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1494'. [ 837.012343][ T9540] XFS (loop7): Unmounting Filesystem [ 837.142038][ T4038] XFS (loop4): Unmounting Filesystem [ 837.183705][T11350] udc-core: couldn't find an available UDC or it's busy [ 837.185719][T11350] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 837.484596][T11362] FAULT_INJECTION: forcing a failure. [ 837.484596][T11362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.673869][T11362] CPU: 1 PID: 11362 Comm: syz.8.1499 Not tainted 5.15.185-syzkaller #0 [ 837.676164][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 837.678957][T11362] Call trace: [ 837.679864][T11362] dump_backtrace+0x0/0x43c [ 837.681127][T11362] show_stack+0x2c/0x3c [ 837.682208][T11362] __dump_stack+0x30/0x40 [ 837.683352][T11362] dump_stack_lvl+0xf8/0x160 [ 837.684691][T11362] dump_stack+0x1c/0x5c [ 837.685806][T11362] should_fail+0x3c0/0x51c [ 837.686975][T11362] should_fail_usercopy+0x20/0x30 [ 837.688420][T11362] simple_read_from_buffer+0xd0/0x264 [ 837.689912][T11362] proc_fail_nth_read+0x19c/0x244 [ 837.691328][T11362] vfs_read+0x278/0xa10 [ 837.692399][T11362] ksys_read+0x120/0x210 [ 837.693528][T11362] __arm64_sys_read+0x7c/0x90 [ 837.694827][T11362] invoke_syscall+0x98/0x2b8 [ 837.696079][T11362] el0_svc_common+0x138/0x258 [ 837.697308][T11362] do_el0_svc+0x58/0x14c [ 837.698510][T11362] el0_svc+0x78/0x1e0 [ 837.699588][T11362] el0t_64_sync_handler+0xcc/0xe4 [ 837.700901][T11362] el0t_64_sync+0x1a0/0x1a4 [ 837.962915][T11348] loop0: detected capacity change from 0 to 32768 [ 838.189564][T11447] FAULT_INJECTION: forcing a failure. [ 838.189564][T11447] name failslab, interval 1, probability 0, space 0, times 0 [ 838.193181][T11447] CPU: 0 PID: 11447 Comm: syz.8.1501 Not tainted 5.15.185-syzkaller #0 [ 838.195447][T11447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 838.198134][T11447] Call trace: [ 838.199028][T11447] dump_backtrace+0x0/0x43c [ 838.200284][T11447] show_stack+0x2c/0x3c [ 838.201398][T11447] __dump_stack+0x30/0x40 [ 838.202550][T11447] dump_stack_lvl+0xf8/0x160 [ 838.203888][T11447] dump_stack+0x1c/0x5c [ 838.205052][T11447] should_fail+0x3c0/0x51c [ 838.206273][T11447] __should_failslab+0xbc/0x10c [ 838.207548][T11447] should_failslab+0x10/0x28 [ 838.208824][T11447] slab_pre_alloc_hook+0x64/0xec [ 838.210170][T11447] kmem_cache_alloc+0x94/0x3e4 [ 838.211500][T11447] security_inode_alloc+0x38/0x11c [ 838.212894][T11447] inode_init_always+0x670/0xa84 [ 838.214198][T11447] new_inode_pseudo+0x7c/0x1fc [ 838.215499][T11447] __sock_create+0x140/0x8b4 [ 838.216797][T11447] __sys_socket+0xf0/0x18c [ 838.217967][T11447] __arm64_sys_socket+0x7c/0x94 [ 838.219298][T11447] invoke_syscall+0x98/0x2b8 [ 838.220579][T11447] el0_svc_common+0x138/0x258 [ 838.221872][T11447] do_el0_svc+0x58/0x14c [ 838.223118][T11447] el0_svc+0x78/0x1e0 [ 838.224204][T11447] el0t_64_sync_handler+0xcc/0xe4 [ 838.225622][T11447] el0t_64_sync+0x1a0/0x1a4 [ 838.226949][ C0] vkms_vblank_simulate: vblank timer overrun [ 838.229803][T11447] socket: no more sockets [ 839.464666][T11348] XFS (loop0): Mounting V5 Filesystem [ 839.626839][T11348] XFS (loop0): Ending clean mount [ 839.735847][ T4178] Bluetooth: hci1: command 0x0406 tx timeout [ 839.745083][ T4028] XFS (loop0): Unmounting Filesystem [ 840.653679][T11467] loop4: detected capacity change from 0 to 512 [ 840.671865][T11469] FAULT_INJECTION: forcing a failure. [ 840.671865][T11469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.675383][T11469] CPU: 0 PID: 11469 Comm: syz.6.1507 Not tainted 5.15.185-syzkaller #0 [ 840.677643][T11469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 840.680385][T11469] Call trace: [ 840.681263][T11469] dump_backtrace+0x0/0x43c [ 840.682540][T11469] show_stack+0x2c/0x3c [ 840.683711][T11469] __dump_stack+0x30/0x40 [ 840.684902][T11469] dump_stack_lvl+0xf8/0x160 [ 840.686179][T11469] dump_stack+0x1c/0x5c [ 840.687251][T11469] should_fail+0x3c0/0x51c [ 840.688440][T11469] should_fail_usercopy+0x20/0x30 [ 840.689818][T11469] simple_read_from_buffer+0xd0/0x264 [ 840.691296][T11469] proc_fail_nth_read+0x19c/0x244 [ 840.692665][T11469] vfs_read+0x278/0xa10 [ 840.693836][T11469] ksys_read+0x120/0x210 [ 840.694992][T11469] __arm64_sys_read+0x7c/0x90 [ 840.696253][T11469] invoke_syscall+0x98/0x2b8 [ 840.697494][T11469] el0_svc_common+0x138/0x258 [ 840.698743][T11469] do_el0_svc+0x58/0x14c [ 840.699889][T11469] el0_svc+0x78/0x1e0 [ 840.700979][T11469] el0t_64_sync_handler+0xcc/0xe4 [ 840.702376][T11469] el0t_64_sync+0x1a0/0x1a4 [ 840.703723][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.729505][T11467] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 840.732374][T11467] EXT4-fs (loop4): couldn't read superblock of external journal [ 840.755189][T11462] loop8: detected capacity change from 0 to 32768 [ 840.964285][T11477] FAULT_INJECTION: forcing a failure. [ 840.964285][T11477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.969724][T11477] CPU: 0 PID: 11477 Comm: syz.4.1509 Not tainted 5.15.185-syzkaller #0 [ 840.971994][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 840.974677][T11477] Call trace: [ 840.975531][T11477] dump_backtrace+0x0/0x43c [ 840.976799][T11477] show_stack+0x2c/0x3c [ 840.977900][T11477] __dump_stack+0x30/0x40 [ 840.979062][T11477] dump_stack_lvl+0xf8/0x160 [ 840.980311][T11477] dump_stack+0x1c/0x5c [ 840.981404][T11477] should_fail+0x3c0/0x51c [ 840.982569][T11477] should_fail_usercopy+0x20/0x30 [ 840.984068][T11477] strncpy_from_user+0x48/0x598 [ 840.985331][T11477] getname_flags+0xec/0x450 [ 840.986573][T11477] __arm64_sys_mknodat+0x9c/0xcc [ 840.987878][T11477] invoke_syscall+0x98/0x2b8 [ 840.989132][T11477] el0_svc_common+0x138/0x258 [ 840.990374][T11477] do_el0_svc+0x58/0x14c [ 840.991611][T11477] el0_svc+0x78/0x1e0 [ 840.992664][T11477] el0t_64_sync_handler+0xcc/0xe4 [ 840.994090][T11477] el0t_64_sync+0x1a0/0x1a4 [ 841.006540][T11454] loop7: detected capacity change from 0 to 40427 [ 841.094626][T11454] F2FS-fs (loop7): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 841.097034][T11454] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 841.105510][T11479] loop4: detected capacity change from 0 to 256 [ 841.112893][T11454] F2FS-fs (loop7): Unrecognized mount option "º" or missing value [ 841.276780][T11479] exfat: Deprecated parameter 'utf8' [ 841.278390][T11479] exfat: Deprecated parameter 'namecase' [ 842.597363][T11479] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 842.855507][T11493] loop6: detected capacity change from 0 to 128 [ 843.052752][T11493] FAT-fs (loop6): bogus sectors per cluster 0 [ 843.054682][T11493] FAT-fs (loop6): Can't find a valid FAT filesystem [ 843.704021][T11503] loop0: detected capacity change from 0 to 164 [ 843.807906][T11503] Unable to read rock-ridge attributes [ 844.672881][T11507] FAULT_INJECTION: forcing a failure. [ 844.672881][T11507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.676648][T11507] CPU: 1 PID: 11507 Comm: syz.4.1520 Not tainted 5.15.185-syzkaller #0 [ 844.678877][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 844.681610][T11507] Call trace: [ 844.682411][T11507] dump_backtrace+0x0/0x43c [ 844.683646][T11507] show_stack+0x2c/0x3c [ 844.684774][T11507] __dump_stack+0x30/0x40 [ 844.685972][T11507] dump_stack_lvl+0xf8/0x160 [ 844.687243][T11507] dump_stack+0x1c/0x5c [ 844.688337][T11507] should_fail+0x3c0/0x51c [ 844.689538][T11507] should_fail_usercopy+0x20/0x30 [ 844.690918][T11507] strncpy_from_user+0x48/0x598 [ 844.692210][T11507] getname_flags+0xec/0x450 [ 844.693449][T11507] user_path_at_empty+0x40/0x1a0 [ 844.694790][T11507] bpf_obj_get_user+0xc0/0x414 [ 844.696114][T11507] bpf_obj_get+0xcc/0x118 [ 844.697336][T11507] __sys_bpf+0x3c4/0x5f0 [ 844.698488][T11507] __arm64_sys_bpf+0x80/0x98 [ 844.699807][T11507] invoke_syscall+0x98/0x2b8 [ 844.701103][T11507] el0_svc_common+0x138/0x258 [ 844.702342][T11507] do_el0_svc+0x58/0x14c [ 844.703507][T11507] el0_svc+0x78/0x1e0 [ 844.704631][T11507] el0t_64_sync_handler+0xcc/0xe4 [ 844.706016][T11507] el0t_64_sync+0x1a0/0x1a4 [ 844.817608][T11511] loop4: detected capacity change from 0 to 64 [ 844.837352][T11514] loop0: detected capacity change from 0 to 256 [ 845.060347][T11510] loop6: detected capacity change from 0 to 4096 [ 845.112209][T11510] ntfs: (device loop6): parse_options(): Unrecognized mount option «. [ 845.137360][T11510] overlayfs: overlapping lowerdir path [ 845.199528][T11510] EXT2-fs (nullb0): error: can't find an ext2 filesystem on dev nullb0. [ 845.240785][T11519] FAULT_INJECTION: forcing a failure. [ 845.240785][T11519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.244617][T11519] CPU: 1 PID: 11519 Comm: syz.8.1518 Not tainted 5.15.185-syzkaller #0 [ 845.246872][T11519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 845.249738][T11519] Call trace: [ 845.250609][T11519] dump_backtrace+0x0/0x43c [ 845.251900][T11519] show_stack+0x2c/0x3c [ 845.253108][T11519] __dump_stack+0x30/0x40 [ 845.254303][T11519] dump_stack_lvl+0xf8/0x160 [ 845.255579][T11519] dump_stack+0x1c/0x5c [ 845.256718][T11519] should_fail+0x3c0/0x51c [ 845.257944][T11519] should_fail_usercopy+0x20/0x30 [ 845.259333][T11519] simple_read_from_buffer+0xd0/0x264 [ 845.260916][T11519] proc_fail_nth_read+0x19c/0x244 [ 845.262299][T11519] vfs_read+0x278/0xa10 [ 845.263472][T11519] ksys_read+0x120/0x210 [ 845.264621][T11519] __arm64_sys_read+0x7c/0x90 [ 845.265948][T11519] invoke_syscall+0x98/0x2b8 [ 845.267219][T11519] el0_svc_common+0x138/0x258 [ 845.268603][T11519] do_el0_svc+0x58/0x14c [ 845.269751][T11519] el0_svc+0x78/0x1e0 [ 845.270894][T11519] el0t_64_sync_handler+0xcc/0xe4 [ 845.272310][T11519] el0t_64_sync+0x1a0/0x1a4 [ 845.299629][T11510] loop6: detected capacity change from 0 to 512 [ 845.400876][T11510] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 845.402962][T11510] EXT4-fs (loop6): Unrecognized mount option "smackfsfloor=þ" or missing value [ 845.425603][T11495] loop7: detected capacity change from 0 to 32768 [ 845.636012][T11495] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1516 (11495) [ 846.448999][T11495] BTRFS info (device loop7): using crc32c (crc32c-generic) checksum algorithm [ 846.451574][T11495] BTRFS info (device loop7): metadata ratio 4 [ 846.456568][T11531] FAULT_INJECTION: forcing a failure. [ 846.456568][T11531] name failslab, interval 1, probability 0, space 0, times 0 [ 846.460348][T11531] CPU: 1 PID: 11531 Comm: syz.0.1527 Not tainted 5.15.185-syzkaller #0 [ 846.462651][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 846.465525][T11531] Call trace: [ 846.466419][T11531] dump_backtrace+0x0/0x43c [ 846.467678][T11531] show_stack+0x2c/0x3c [ 846.468775][T11531] __dump_stack+0x30/0x40 [ 846.469937][T11531] dump_stack_lvl+0xf8/0x160 [ 846.471158][T11531] dump_stack+0x1c/0x5c [ 846.472265][T11531] should_fail+0x3c0/0x51c [ 846.473432][T11531] __should_failslab+0xbc/0x10c [ 846.474732][T11531] should_failslab+0x10/0x28 [ 846.475944][T11531] slab_pre_alloc_hook+0x64/0xec [ 846.477292][T11531] __kmalloc_node_track_caller+0x70/0x3bc [ 846.478881][T11531] kmalloc_reserve+0xe4/0x26c [ 846.480107][T11531] __alloc_skb+0x23c/0x67c [ 846.481312][T11531] netlink_sendmsg+0x548/0x9cc [ 846.482659][T11531] ____sys_sendmsg+0x61c/0x920 [ 846.483958][T11531] ___sys_sendmsg+0x1d0/0x240 [ 846.485280][T11531] __arm64_sys_sendmsg+0x1a8/0x254 [ 846.486669][T11531] invoke_syscall+0x98/0x2b8 [ 846.487956][T11531] el0_svc_common+0x138/0x258 [ 846.489228][T11531] do_el0_svc+0x58/0x14c [ 846.490354][T11531] el0_svc+0x78/0x1e0 [ 846.491412][T11531] el0t_64_sync_handler+0xcc/0xe4 [ 846.492798][T11531] el0t_64_sync+0x1a0/0x1a4 [ 846.502844][T11495] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 846.522299][T11495] BTRFS info (device loop7): force lzo compression, level 0 [ 846.556480][T11495] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 846.615534][T11495] BTRFS info (device loop7): trying to use backup root at mount time [ 846.651748][T11495] BTRFS info (device loop7): doing ref verification [ 846.675080][T11495] BTRFS info (device loop7): disabling tree log [ 846.696589][T11495] BTRFS info (device loop7): using free space tree [ 846.700500][T11532] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1526'. [ 846.735096][T11495] BTRFS info (device loop7): has skinny extents [ 846.873877][T11495] BTRFS error (device loop7): open_ctree failed: -12 [ 846.889908][ T9433] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by udevd (9433) [ 846.944048][T11557] FAULT_INJECTION: forcing a failure. [ 846.944048][T11557] name failslab, interval 1, probability 0, space 0, times 0 [ 846.962445][T11557] CPU: 0 PID: 11557 Comm: syz.8.1530 Not tainted 5.15.185-syzkaller #0 [ 846.964871][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 846.967596][T11557] Call trace: [ 846.968461][T11557] dump_backtrace+0x0/0x43c [ 846.969673][T11557] show_stack+0x2c/0x3c [ 846.970815][T11557] __dump_stack+0x30/0x40 [ 846.971974][T11557] dump_stack_lvl+0xf8/0x160 [ 846.973237][T11557] dump_stack+0x1c/0x5c [ 846.974364][T11557] should_fail+0x3c0/0x51c [ 846.975569][T11557] __should_failslab+0xbc/0x10c [ 846.976951][T11557] should_failslab+0x10/0x28 [ 846.978189][T11557] slab_pre_alloc_hook+0x64/0xec [ 846.979670][T11557] kmem_cache_alloc+0x94/0x3e4 [ 846.980986][T11557] shmem_alloc_inode+0x20/0x38 [ 846.982299][T11557] new_inode_pseudo+0x68/0x1fc [ 846.983662][T11557] new_inode+0x38/0x174 [ 846.984860][T11557] shmem_get_inode+0x2d8/0x96c [ 846.986231][T11557] __shmem_file_setup+0xf8/0x264 [ 846.987591][T11557] shmem_file_setup+0x40/0x54 [ 846.988955][T11557] __arm64_sys_memfd_create+0x37c/0x514 [ 846.990484][T11557] invoke_syscall+0x98/0x2b8 [ 846.991816][T11557] el0_svc_common+0x138/0x258 [ 846.993155][T11557] do_el0_svc+0x58/0x14c [ 846.994314][T11557] el0_svc+0x78/0x1e0 [ 846.995474][T11557] el0t_64_sync_handler+0xcc/0xe4 [ 846.996906][T11557] el0t_64_sync+0x1a0/0x1a4 [ 846.998234][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.403671][T11579] FAULT_INJECTION: forcing a failure. [ 848.403671][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 848.432866][T11579] CPU: 0 PID: 11579 Comm: syz.6.1538 Not tainted 5.15.185-syzkaller #0 [ 848.435197][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 848.437919][T11579] Call trace: [ 848.438824][T11579] dump_backtrace+0x0/0x43c [ 848.440006][T11579] show_stack+0x2c/0x3c [ 848.441148][T11579] __dump_stack+0x30/0x40 [ 848.442368][T11579] dump_stack_lvl+0xf8/0x160 [ 848.443657][T11579] dump_stack+0x1c/0x5c [ 848.444824][T11579] should_fail+0x3c0/0x51c [ 848.446056][T11579] __should_failslab+0xbc/0x10c [ 848.447452][T11579] should_failslab+0x10/0x28 [ 848.448690][T11579] slab_pre_alloc_hook+0x64/0xec [ 848.450057][T11579] kmem_cache_alloc+0x94/0x3e4 [ 848.451334][T11579] shmem_alloc_inode+0x20/0x38 [ 848.452598][T11579] new_inode_pseudo+0x68/0x1fc [ 848.453918][T11579] new_inode+0x38/0x174 [ 848.455026][T11579] shmem_get_inode+0x2d8/0x96c [ 848.456320][T11579] __shmem_file_setup+0xf8/0x264 [ 848.457640][T11579] shmem_file_setup+0x40/0x54 [ 848.458900][T11579] __arm64_sys_memfd_create+0x37c/0x514 [ 848.460367][T11579] invoke_syscall+0x98/0x2b8 [ 848.461605][T11579] el0_svc_common+0x138/0x258 [ 848.462842][T11579] do_el0_svc+0x58/0x14c [ 848.463991][T11579] el0_svc+0x78/0x1e0 [ 848.465059][T11579] el0t_64_sync_handler+0xcc/0xe4 [ 848.466451][T11579] el0t_64_sync+0x1a0/0x1a4 [ 848.467770][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.762303][T11585] loop8: detected capacity change from 0 to 4096 [ 849.779463][T11595] FAULT_INJECTION: forcing a failure. [ 849.779463][T11595] name failslab, interval 1, probability 0, space 0, times 0 [ 849.783006][T11595] CPU: 1 PID: 11595 Comm: syz.7.1543 Not tainted 5.15.185-syzkaller #0 [ 849.785254][T11595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 849.788000][T11595] Call trace: [ 849.788872][T11595] dump_backtrace+0x0/0x43c [ 849.790058][T11595] show_stack+0x2c/0x3c [ 849.791346][T11595] __dump_stack+0x30/0x40 [ 849.792516][T11595] dump_stack_lvl+0xf8/0x160 [ 849.793731][T11595] dump_stack+0x1c/0x5c [ 849.794913][T11595] should_fail+0x3c0/0x51c [ 849.796161][T11595] __should_failslab+0xbc/0x10c [ 849.797504][T11595] should_failslab+0x10/0x28 [ 849.798793][T11595] slab_pre_alloc_hook+0x64/0xec [ 849.800197][T11595] kmem_cache_alloc+0x94/0x3e4 [ 849.801441][T11595] shmem_alloc_inode+0x20/0x38 [ 849.802775][T11595] new_inode_pseudo+0x68/0x1fc [ 849.804062][T11595] new_inode+0x38/0x174 [ 849.805169][T11595] shmem_get_inode+0x2d8/0x96c [ 849.806604][T11595] __shmem_file_setup+0xf8/0x264 [ 849.807939][T11595] shmem_file_setup+0x40/0x54 [ 849.809235][T11595] __arm64_sys_memfd_create+0x37c/0x514 [ 849.810771][T11595] invoke_syscall+0x98/0x2b8 [ 849.812078][T11595] el0_svc_common+0x138/0x258 [ 849.813408][T11595] do_el0_svc+0x58/0x14c [ 849.814670][T11595] el0_svc+0x78/0x1e0 [ 849.815778][T11595] el0t_64_sync_handler+0xcc/0xe4 [ 849.817241][T11595] el0t_64_sync+0x1a0/0x1a4 [ 850.076656][T11608] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1547'. [ 850.136298][ T4718] Bluetooth: hci5: command 0x0406 tx timeout [ 850.168329][T11612] capability: warning: `syz.8.1549' uses deprecated v2 capabilities in a way that may be insecure [ 850.266996][T11614] loop8: detected capacity change from 0 to 64 [ 851.900779][T11625] loop8: detected capacity change from 0 to 512 [ 853.778118][T11625] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 853.815345][T11625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 853.838480][T11625] System zones: 1-12 [ 853.872093][T11645] FAULT_INJECTION: forcing a failure. [ 853.872093][T11645] name failslab, interval 1, probability 0, space 0, times 0 [ 853.875581][T11645] CPU: 1 PID: 11645 Comm: syz.0.1557 Not tainted 5.15.185-syzkaller #0 [ 853.877836][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 853.880501][T11645] Call trace: [ 853.881377][T11645] dump_backtrace+0x0/0x43c [ 853.882550][T11645] show_stack+0x2c/0x3c [ 853.883693][T11645] __dump_stack+0x30/0x40 [ 853.884828][T11645] dump_stack_lvl+0xf8/0x160 [ 853.886037][T11645] dump_stack+0x1c/0x5c [ 853.887251][T11645] should_fail+0x3c0/0x51c [ 853.888612][T11645] __should_failslab+0xbc/0x10c [ 853.889877][T11645] should_failslab+0x10/0x28 [ 853.891111][T11645] slab_pre_alloc_hook+0x64/0xec [ 853.892392][T11645] __kmalloc_node_track_caller+0x70/0x3bc [ 853.893944][T11645] kmalloc_reserve+0xe4/0x26c [ 853.895181][T11645] __alloc_skb+0x23c/0x67c [ 853.896323][T11645] netlink_sendmsg+0x548/0x9cc [ 853.897595][T11645] ____sys_sendmsg+0x61c/0x920 [ 853.898872][T11645] ___sys_sendmsg+0x1d0/0x240 [ 853.900123][T11645] __arm64_sys_sendmsg+0x1a8/0x254 [ 853.901497][T11645] invoke_syscall+0x98/0x2b8 [ 853.902802][T11645] el0_svc_common+0x138/0x258 [ 853.904065][T11645] do_el0_svc+0x58/0x14c [ 853.905239][T11645] el0_svc+0x78/0x1e0 [ 853.906273][T11645] el0t_64_sync_handler+0xcc/0xe4 [ 853.907609][T11645] el0t_64_sync+0x1a0/0x1a4 [ 853.948352][T11625] EXT4-fs (loop8): orphan cleanup on readonly fs [ 853.950123][T11625] EXT4-fs error (device loop8): ext4_read_inode_bitmap:168: comm syz.8.1552: Inode bitmap for bg 0 marked uninitialized [ 853.954153][T11625] EXT4-fs (loop8): Remounting filesystem read-only [ 853.962286][T11625] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 853.988053][T11625] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #2: block 5: comm syz.8.1552: lblock 0 mapped to illegal pblock 5 (length 1) [ 853.997806][T11625] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1552: error -117 reading directory block [ 854.015025][T11625] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #2: block 5: comm syz.8.1552: lblock 0 mapped to illegal pblock 5 (length 1) [ 854.022919][T11643] loop4: detected capacity change from 0 to 128 [ 854.033541][T11625] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1552: error -117 reading directory block [ 854.067193][T11643] UBIFS error (pid: 11643): cannot open "/dev/loop4", error -22 [ 854.070018][T11648] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 854.222705][T11652] loop7: detected capacity change from 0 to 4096 [ 854.260644][T11658] loop6: detected capacity change from 0 to 64 [ 856.925068][T11666] FAULT_INJECTION: forcing a failure. [ 856.925068][T11666] name failslab, interval 1, probability 0, space 0, times 0 [ 856.928751][T11666] CPU: 1 PID: 11666 Comm: syz.4.1564 Not tainted 5.15.185-syzkaller #0 [ 856.931063][T11666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 856.933838][T11666] Call trace: [ 856.934769][T11666] dump_backtrace+0x0/0x43c [ 856.936037][T11666] show_stack+0x2c/0x3c [ 856.937173][T11666] __dump_stack+0x30/0x40 [ 856.938373][T11666] dump_stack_lvl+0xf8/0x160 [ 856.939626][T11666] dump_stack+0x1c/0x5c [ 856.940788][T11666] should_fail+0x3c0/0x51c [ 856.942029][T11666] __should_failslab+0xbc/0x10c [ 856.943423][T11666] should_failslab+0x10/0x28 [ 856.944712][T11666] slab_pre_alloc_hook+0x64/0xec [ 856.946082][T11666] kmem_cache_alloc+0x94/0x3e4 [ 856.947371][T11666] shmem_alloc_inode+0x20/0x38 [ 856.948639][T11666] new_inode_pseudo+0x68/0x1fc [ 856.950003][T11666] new_inode+0x38/0x174 [ 856.951167][T11666] shmem_get_inode+0x2d8/0x96c [ 856.952486][T11666] __shmem_file_setup+0xf8/0x264 [ 856.953888][T11666] shmem_file_setup+0x40/0x54 [ 856.955258][T11666] __arm64_sys_memfd_create+0x37c/0x514 [ 856.956729][T11666] invoke_syscall+0x98/0x2b8 [ 856.957970][T11666] el0_svc_common+0x138/0x258 [ 856.959241][T11666] do_el0_svc+0x58/0x14c [ 856.960374][T11666] el0_svc+0x78/0x1e0 [ 856.961577][T11666] el0t_64_sync_handler+0xcc/0xe4 [ 856.963065][T11666] el0t_64_sync+0x1a0/0x1a4 [ 857.015284][T11652] ntfs: volume version 3.1. [ 858.278773][T11676] loop4: detected capacity change from 0 to 512 [ 858.420357][T11676] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 858.422393][T11676] UDF-fs: Scanning with blocksize 512 failed [ 858.505616][T11676] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 858.554490][T11676] UDF-fs: Scanning with blocksize 1024 failed [ 858.610586][T11676] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 858.612613][T11676] UDF-fs: Scanning with blocksize 2048 failed [ 858.615065][T11676] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 858.628586][T11676] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 858.728582][T11688] FAULT_INJECTION: forcing a failure. [ 858.728582][T11688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.736163][T11688] CPU: 0 PID: 11688 Comm: syz.6.1571 Not tainted 5.15.185-syzkaller #0 [ 858.738582][T11688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 858.741311][T11688] Call trace: [ 858.742216][T11688] dump_backtrace+0x0/0x43c [ 858.742326][T11680] loop7: detected capacity change from 0 to 4096 [ 858.743438][T11688] show_stack+0x2c/0x3c [ 858.746190][T11688] __dump_stack+0x30/0x40 [ 858.747386][T11688] dump_stack_lvl+0xf8/0x160 [ 858.748668][T11688] dump_stack+0x1c/0x5c [ 858.749809][T11688] should_fail+0x3c0/0x51c [ 858.751003][T11688] should_fail_usercopy+0x20/0x30 [ 858.752438][T11688] simple_read_from_buffer+0xd0/0x264 [ 858.753997][T11688] proc_fail_nth_read+0x19c/0x244 [ 858.755387][T11688] vfs_read+0x278/0xa10 [ 858.756508][T11688] ksys_read+0x120/0x210 [ 858.757672][T11688] __arm64_sys_read+0x7c/0x90 [ 858.758950][T11688] invoke_syscall+0x98/0x2b8 [ 858.760167][T11688] el0_svc_common+0x138/0x258 [ 858.761449][T11688] do_el0_svc+0x58/0x14c [ 858.762612][T11688] el0_svc+0x78/0x1e0 [ 858.763701][T11688] el0t_64_sync_handler+0xcc/0xe4 [ 858.765154][T11688] el0t_64_sync+0x1a0/0x1a4 [ 858.908733][T11680] 9pnet: Insufficient options for proto=fd [ 859.346794][T11705] loop6: detected capacity change from 0 to 256 [ 859.357345][T11686] loop8: detected capacity change from 0 to 32768 [ 860.256350][T11705] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 860.322710][T11708] FAULT_INJECTION: forcing a failure. [ 860.322710][T11708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.372219][T11708] CPU: 1 PID: 11708 Comm: syz.7.1578 Not tainted 5.15.185-syzkaller #0 [ 860.374646][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 860.377414][T11708] Call trace: [ 860.378281][T11708] dump_backtrace+0x0/0x43c [ 860.379564][T11708] show_stack+0x2c/0x3c [ 860.380751][T11708] __dump_stack+0x30/0x40 [ 860.381928][T11708] dump_stack_lvl+0xf8/0x160 [ 860.383151][T11708] dump_stack+0x1c/0x5c [ 860.384348][T11708] should_fail+0x3c0/0x51c [ 860.385546][T11708] should_fail_usercopy+0x20/0x30 [ 860.386931][T11708] _copy_from_iter+0x1e0/0xf2c [ 860.388242][T11708] packet_sendmsg+0x2678/0x3fd4 [ 860.389535][T11708] ____sys_sendmsg+0x61c/0x920 [ 860.390857][T11708] ___sys_sendmsg+0x1d0/0x240 [ 860.392118][T11708] __arm64_sys_sendmsg+0x1a8/0x254 [ 860.393468][T11708] invoke_syscall+0x98/0x2b8 [ 860.394738][T11708] el0_svc_common+0x138/0x258 [ 860.396052][T11708] do_el0_svc+0x58/0x14c [ 860.397264][T11708] el0_svc+0x78/0x1e0 [ 860.398315][T11708] el0t_64_sync_handler+0xcc/0xe4 [ 860.399647][T11708] el0t_64_sync+0x1a0/0x1a4 [ 860.578106][T11686] loop8: detected capacity change from 0 to 256 [ 860.664175][T11690] loop4: detected capacity change from 0 to 40427 [ 860.710020][T11690] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 860.724093][T11690] F2FS-fs (loop4): invalid crc value [ 860.738472][T11690] F2FS-fs (loop4): Found nat_bits in checkpoint [ 860.761635][T11690] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 861.285064][ T4038] attempt to access beyond end of device [ 861.285064][ T4038] loop4: rw=2049, want=45112, limit=40427 [ 861.507935][T11815] syz.8.1609 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 862.488023][T11916] device syzkaller0 entered promiscuous mode [ 863.696442][T12014] udc-core: couldn't find an available UDC or it's busy [ 863.718288][T12014] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 863.779458][T12021] udc-core: couldn't find an available UDC or it's busy [ 863.781463][T12021] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 863.933548][T12026] udc-core: couldn't find an available UDC or it's busy [ 863.935539][T12026] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 864.019735][T12028] udc-core: couldn't find an available UDC or it's busy [ 864.021861][T12028] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 864.026018][ T4562] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 864.231608][T12028] udc-core: couldn't find an available UDC or it's busy [ 864.233582][T12028] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 864.260776][T12032] udc-core: couldn't find an available UDC or it's busy [ 864.262766][T12032] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 864.313180][T12035] udc-core: couldn't find an available UDC or it's busy [ 864.315269][T12035] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 864.386004][ T4562] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 864.388330][ T4562] usb 1-1: config 0 has no interface number 0 [ 864.390177][ T4562] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 864.474233][T12038] udc-core: couldn't find an available UDC or it's busy [ 864.476840][T12038] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 864.546028][ T4562] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 864.548668][ T4562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.551082][ T4562] usb 1-1: Product: syz [ 864.552355][ T4562] usb 1-1: Manufacturer: syz [ 864.553730][ T4562] usb 1-1: SerialNumber: syz [ 864.573305][ T4562] usb 1-1: config 0 descriptor?? [ 864.626095][ T4562] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 864.766953][T12047] udc-core: couldn't find an available UDC or it's busy [ 864.769069][T12047] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 864.901317][T12052] udc-core: couldn't find an available UDC or it's busy [ 864.903480][T12052] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 864.906728][T12053] udc-core: couldn't find an available UDC or it's busy [ 864.908731][T12053] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 865.047297][T12058] udc-core: couldn't find an available UDC or it's busy [ 865.049282][T12058] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 865.344250][ T8636] usb 1-1: USB disconnect, device number 9 [ 865.367359][ T8636] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 865.576965][T12080] udc-core: couldn't find an available UDC or it's busy [ 865.579080][T12080] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 865.619066][T12078] udc-core: couldn't find an available UDC or it's busy [ 865.621083][T12078] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 865.622639][T12082] udc-core: couldn't find an available UDC or it's busy [ 865.625145][T12082] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 865.631975][T12078] udc-core: couldn't find an available UDC or it's busy [ 865.638857][T12078] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 865.647025][T12084] udc-core: couldn't find an available UDC or it's busy [ 865.654028][T12084] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 865.667106][T12084] udc-core: couldn't find an available UDC or it's busy [ 865.669023][T12084] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 865.975944][ T8636] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 866.127829][T12091] udc-core: couldn't find an available UDC or it's busy [ 866.129791][T12091] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 866.170631][T12094] udc-core: couldn't find an available UDC or it's busy [ 866.172543][T12094] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 866.216737][ T8636] usb 1-1: Using ep0 maxpacket: 8 [ 866.221616][T12097] udc-core: couldn't find an available UDC or it's busy [ 866.223689][T12097] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 866.238770][T12100] udc-core: couldn't find an available UDC or it's busy [ 866.240735][T12100] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 866.335922][ T8636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 866.339072][ T8636] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 866.341728][ T8636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.346244][ T8636] usb 1-1: config 0 descriptor?? [ 866.610144][ T8636] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 866.663657][T12109] udc-core: couldn't find an available UDC or it's busy [ 866.666766][T12109] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 866.712595][T12112] udc-core: couldn't find an available UDC or it's busy [ 866.714565][T12112] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 866.798840][T12116] udc-core: couldn't find an available UDC or it's busy [ 866.800983][T12116] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 866.846519][T12121] udc-core: couldn't find an available UDC or it's busy [ 866.848417][T12121] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 867.256974][T12124] udc-core: couldn't find an available UDC or it's busy [ 867.259011][T12124] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 867.396433][T12127] udc-core: couldn't find an available UDC or it's busy [ 867.398379][T12127] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 867.466234][T12124] udc-core: couldn't find an available UDC or it's busy [ 867.468211][T12124] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 867.535423][T12130] udc-core: couldn't find an available UDC or it's busy [ 867.537524][T12130] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 867.587691][T12133] udc-core: couldn't find an available UDC or it's busy [ 867.590327][T12133] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 867.604180][T12127] udc-core: couldn't find an available UDC or it's busy [ 867.606382][T12127] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 868.011550][T12136] udc-core: couldn't find an available UDC or it's busy [ 868.013664][T12136] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 868.264182][T12158] udc-core: couldn't find an available UDC or it's busy [ 868.266463][T12158] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 868.729766][ T4494] usb 1-1: USB disconnect, device number 10 [ 870.723158][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 870.729912][T12367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1766'. [ 870.742941][T12367] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.745576][T12367] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.748339][T12367] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.750821][T12367] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.835411][T12375] udc-core: couldn't find an available UDC or it's busy [ 870.837656][T12375] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 870.862526][T12375] udc-core: couldn't find an available UDC or it's busy [ 870.864383][T12375] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 870.940750][T12367] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.943465][T12367] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.946432][T12367] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.948880][T12367] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.077580][T12375] udc-core: couldn't find an available UDC or it's busy [ 871.079658][T12375] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 871.097225][T12375] udc-core: couldn't find an available UDC or it's busy [ 871.101628][T12375] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 871.106829][T12375] udc-core: couldn't find an available UDC or it's busy [ 871.108767][T12375] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 871.322769][T12375] udc-core: couldn't find an available UDC or it's busy [ 871.330986][T12375] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 871.412173][T12418] binder: 12417:12418 ioctl c0306201 0 returned -14 [ 871.725864][ T9791] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 871.976166][ T9791] usb 1-1: Using ep0 maxpacket: 32 [ 872.000969][T12444] binder: 12443:12444 got reply transaction with no transaction stack [ 872.003369][T12444] binder: 12443:12444 transaction failed 29201/-71, size 0-0 line 2822 [ 872.011634][ T4718] binder: undelivered TRANSACTION_ERROR: 29201 [ 872.106073][ T9791] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 872.108461][ T9791] usb 1-1: config 0 has no interface number 0 [ 872.233767][T12453] TCP: TCP_TX_DELAY enabled [ 872.270676][ T9791] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 872.273322][ T9791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.275624][ T9791] usb 1-1: Product: syz [ 872.279012][ T9791] usb 1-1: Manufacturer: syz [ 872.280307][ T9791] usb 1-1: SerialNumber: syz [ 872.289174][ T9791] usb 1-1: config 0 descriptor?? [ 872.305243][T12457] udc-core: couldn't find an available UDC or it's busy [ 872.308512][T12457] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 872.316153][T12457] udc-core: couldn't find an available UDC or it's busy [ 872.318350][T12457] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 872.333039][ T9791] smsc95xx v2.0.0 [ 872.337934][T12457] udc-core: couldn't find an available UDC or it's busy [ 872.339942][T12457] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 872.603380][T12477] binder: 12475:12477 tried to acquire reference to desc 0, got 1 instead [ 872.611929][T12477] binder: 12475:12477 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 872.614184][T12477] binder: 12475:12477 got transaction to context manager from process owning it [ 872.620043][T12477] binder: 12475:12477 transaction failed 29201/-22, size 0-0 line 2908 [ 872.623069][ T4718] binder: undelivered TRANSACTION_ERROR: 29201 [ 872.733474][T12489] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1796'. [ 872.754961][T12492] 9pnet_virtio: no channels available for device syz [ 872.786077][ T9791] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 872.789036][ T9791] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 873.498654][T12581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 873.501370][T12581] IPv6: NLM_F_CREATE should be set when creating new route [ 873.507967][ T9791] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 873.512802][ T9791] smsc95xx: probe of 1-1:0.67 failed with error -32 [ 874.026598][T12615] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1826'. [ 874.059470][T12615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.101406][T12615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.156003][T12615] bond0 (unregistering): Released all slaves [ 874.553436][ T9791] usb 1-1: USB disconnect, device number 11 [ 875.764872][T12776] tipc: Started in network mode [ 875.769347][T12776] tipc: Node identity , cluster identity 4711 [ 875.776378][T12776] tipc: Failed to obtain node identity [ 875.786154][T12776] tipc: Enabling of bearer rejected, failed to enable media [ 876.002944][T12789] binder: 12788:12789 tried to acquire reference to desc 0, got 1 instead [ 876.015407][T12789] binder: 12788:12789 ioctl c0306201 20000a00 returned -14 [ 876.045674][ T8636] binder: undelivered transaction 22, process died. [ 876.128535][T12795] netlink: 'syz.4.1855': attribute type 11 has an invalid length. [ 876.315581][T12809] netlink: 'syz.8.1857': attribute type 9 has an invalid length. [ 876.349160][T12812] (unnamed net_device) (uninitialized): (slave batadv_slave_1): Device is not bonding slave [ 876.351948][T12812] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_1) [ 876.407987][T12817] 9pnet_virtio: no channels available for device syz [ 876.477589][T12821] netlink: 'syz.7.1861': attribute type 8 has an invalid length. [ 876.487463][T12821] netlink: 'syz.7.1861': attribute type 1 has an invalid length. [ 876.499143][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1862'. [ 876.968732][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1871'. [ 877.216622][T11401] Bluetooth: hci3: Frame reassembly failed (-84) [ 877.391075][T12918] udc-core: couldn't find an available UDC or it's busy [ 877.397649][T12918] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 877.401709][T12918] udc-core: couldn't find an available UDC or it's busy [ 877.431737][T12918] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 877.986857][T12952] binder: 12951:12952 tried to acquire reference to desc 0, got 1 instead [ 877.990329][T12952] binder: 12951:12952 got transaction with invalid offset (24, min 24 max 40) or object. [ 877.993479][T12952] binder: 12951:12952 transaction failed 29201/-22, size 40-24 line 3199 [ 877.999122][ T4694] binder: undelivered TRANSACTION_ERROR: 29201 [ 878.075658][T12959] binder: 12958:12959 tried to acquire reference to desc 0, got 1 instead [ 878.079344][T12959] binder: 12958:12959 got transaction with unaligned buffers size, 4122 [ 878.081948][T12959] binder: 12958:12959 transaction failed 29201/-22, size 0-0 line 3141 [ 878.084814][ T4694] binder: undelivered TRANSACTION_ERROR: 29201 [ 878.322985][T12977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1891'. [ 878.390086][T12980] [ 878.390724][T12980] ====================================================== [ 878.392688][T12980] WARNING: possible circular locking dependency detected [ 878.394640][T12980] 5.15.185-syzkaller #0 Not tainted [ 878.396087][T12980] ------------------------------------------------------ [ 878.398046][T12980] syz.0.1892/12980 is trying to acquire lock: [ 878.399767][T12980] ffff0000f0e90d20 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xbb4/0x1584 [ 878.402410][T12980] [ 878.402410][T12980] but task is already holding lock: [ 878.404410][T12980] ffff0000c56adba0 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x830/0x10f0 [ 878.406973][T12980] [ 878.406973][T12980] which lock already depends on the new lock. [ 878.406973][T12980] [ 878.409750][T12980] [ 878.409750][T12980] the existing dependency chain (in reverse order) is: [ 878.412209][T12980] [ 878.412209][T12980] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 878.414408][T12980] _raw_spin_lock+0xb0/0x10c [ 878.415895][T12980] __inet_hash+0xd0/0x858 [ 878.417225][T12980] inet6_hash+0x74/0x9c [ 878.418502][T12980] inet_csk_listen_start+0x1e4/0x2c8 [ 878.420116][T12980] inet_listen+0x290/0x694 [ 878.421468][T12980] __sys_listen+0x198/0x21c [ 878.422842][T12980] __arm64_sys_listen+0x5c/0x74 [ 878.424248][T12980] invoke_syscall+0x98/0x2b8 [ 878.425722][T12980] el0_svc_common+0x138/0x258 [ 878.427114][T12980] do_el0_svc+0x58/0x14c [ 878.428428][T12980] el0_svc+0x78/0x1e0 [ 878.429678][T12980] el0t_64_sync_handler+0xcc/0xe4 [ 878.431208][T12980] el0t_64_sync+0x1a0/0x1a4 [ 878.432672][T12980] [ 878.432672][T12980] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 878.434796][T12980] __lock_acquire+0x2928/0x651c [ 878.436330][T12980] lock_acquire+0x1f4/0x620 [ 878.437725][T12980] mptcp_diag_get_info+0x1fc/0x868 [ 878.439271][T12980] inet_sk_diag_fill+0xbb4/0x1584 [ 878.440829][T12980] mptcp_diag_dump+0xb5c/0x10f0 [ 878.442315][T12980] __inet_diag_dump+0x1dc/0x350 [ 878.443815][T12980] inet_diag_dump+0x4c/0x5c [ 878.445203][T12980] netlink_dump+0x49c/0xab4 [ 878.446576][T12980] __netlink_dump_start+0x480/0x6f0 [ 878.448203][T12980] inet_diag_handler_cmd+0x190/0x268 [ 878.449808][T12980] sock_diag_rcv_msg+0x168/0x390 [ 878.451285][T12980] netlink_rcv_skb+0x208/0x3c4 [ 878.452672][T12980] sock_diag_rcv+0x3c/0x54 [ 878.453952][T12980] netlink_unicast+0x60c/0x89c [ 878.455422][T12980] netlink_sendmsg+0x6e8/0x9cc [ 878.456907][T12980] sock_write_iter+0x23c/0x31c [ 878.458350][T12980] do_iter_readv_writev+0x3a0/0x4f8 [ 878.459919][T12980] do_iter_write+0x1c4/0x670 [ 878.461348][T12980] do_writev+0x1e0/0x380 [ 878.462698][T12980] __arm64_sys_writev+0x80/0x94 [ 878.464193][T12980] invoke_syscall+0x98/0x2b8 [ 878.465581][T12980] el0_svc_common+0x138/0x258 [ 878.467023][T12980] do_el0_svc+0x58/0x14c [ 878.468313][T12980] el0_svc+0x78/0x1e0 [ 878.469526][T12980] el0t_64_sync_handler+0xcc/0xe4 [ 878.471054][T12980] el0t_64_sync+0x1a0/0x1a4 [ 878.472456][T12980] [ 878.472456][T12980] other info that might help us debug this: [ 878.472456][T12980] [ 878.475261][T12980] Possible unsafe locking scenario: [ 878.475261][T12980] [ 878.477358][T12980] CPU0 CPU1 [ 878.478795][T12980] ---- ---- [ 878.480242][T12980] lock(&h->lhash2[i].lock); [ 878.481549][T12980] lock(sk_lock-AF_INET6); [ 878.483490][T12980] lock(&h->lhash2[i].lock); [ 878.485508][T12980] lock(sk_lock-AF_INET6); [ 878.486808][T12980] [ 878.486808][T12980] *** DEADLOCK *** [ 878.486808][T12980] [ 878.489030][T12980] 6 locks held by syz.0.1892/12980: [ 878.490479][T12980] #0: ffff8000162921a8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x2c/0x54 [ 878.493088][T12980] #1: ffff800016292068 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x214/0x390 [ 878.496086][T12980] #2: ffff0000d0637690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x108/0x6f0 [ 878.499081][T12980] #3: ffff800016369088 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x170/0x350 [ 878.501955][T12980] #4: ffff8000143311e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 878.504734][T12980] #5: ffff0000c56adba0 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x830/0x10f0 [ 878.507629][T12980] [ 878.507629][T12980] stack backtrace: [ 878.509225][T12980] CPU: 0 PID: 12980 Comm: syz.0.1892 Not tainted 5.15.185-syzkaller #0 [ 878.511499][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 878.514394][T12980] Call trace: [ 878.515387][T12980] dump_backtrace+0x0/0x43c [ 878.516718][T12980] show_stack+0x2c/0x3c [ 878.517946][T12980] __dump_stack+0x30/0x40 [ 878.519139][T12980] dump_stack_lvl+0xf8/0x160 [ 878.520449][T12980] dump_stack+0x1c/0x5c [ 878.521629][T12980] print_circular_bug+0x148/0x1b0 [ 878.523080][T12980] check_noncircular+0x240/0x2d4 [ 878.524511][T12980] __lock_acquire+0x2928/0x651c [ 878.525933][T12980] lock_acquire+0x1f4/0x620 [ 878.527269][T12980] mptcp_diag_get_info+0x1fc/0x868 [ 878.528844][T12980] inet_sk_diag_fill+0xbb4/0x1584 [ 878.530238][T12980] mptcp_diag_dump+0xb5c/0x10f0 [ 878.531598][T12980] __inet_diag_dump+0x1dc/0x350 [ 878.532972][T12980] inet_diag_dump+0x4c/0x5c [ 878.534195][T12980] netlink_dump+0x49c/0xab4 [ 878.535486][T12980] __netlink_dump_start+0x480/0x6f0 [ 878.536957][T12980] inet_diag_handler_cmd+0x190/0x268 [ 878.538432][T12980] sock_diag_rcv_msg+0x168/0x390 [ 878.539780][T12980] netlink_rcv_skb+0x208/0x3c4 [ 878.541097][T12980] sock_diag_rcv+0x3c/0x54 [ 878.542383][T12980] netlink_unicast+0x60c/0x89c [ 878.543734][T12980] netlink_sendmsg+0x6e8/0x9cc [ 878.545054][T12980] sock_write_iter+0x23c/0x31c [ 878.546437][T12980] do_iter_readv_writev+0x3a0/0x4f8 [ 878.547967][T12980] do_iter_write+0x1c4/0x670 [ 878.549245][T12980] do_writev+0x1e0/0x380 [ 878.550462][T12980] __arm64_sys_writev+0x80/0x94 [ 878.551861][T12980] invoke_syscall+0x98/0x2b8 [ 878.553136][T12980] el0_svc_common+0x138/0x258 [ 878.554484][T12980] do_el0_svc+0x58/0x14c [ 878.555703][T12980] el0_svc+0x78/0x1e0 [ 878.556871][T12980] el0t_64_sync_handler+0xcc/0xe4 [ 878.558250][T12980] el0t_64_sync+0x1a0/0x1a4 [ 878.560848][T12980] BUG: sleeping function called from invalid context at net/core/sock.c:3283 [ 878.563361][T12980] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12980, name: syz.0.1892 [ 878.566515][T12980] INFO: lockdep is turned off. [ 878.567907][T12980] Preemption disabled at: [ 878.567918][T12980] [] mptcp_diag_dump+0x830/0x10f0 [ 878.571081][T12980] CPU: 0 PID: 12980 Comm: syz.0.1892 Not tainted 5.15.185-syzkaller #0 [ 878.573362][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 878.576091][T12980] Call trace: [ 878.577018][T12980] dump_backtrace+0x0/0x43c [ 878.578341][T12980] show_stack+0x2c/0x3c [ 878.579463][T12980] __dump_stack+0x30/0x40 [ 878.580649][T12980] dump_stack_lvl+0xf8/0x160 [ 878.581866][T12980] dump_stack+0x1c/0x5c [ 878.583027][T12980] ___might_sleep+0x358/0x4d4 [ 878.584319][T12980] __might_sleep+0x98/0x124 [ 878.585534][T12980] __lock_sock_fast+0x3c/0xec [ 878.586828][T12980] mptcp_diag_get_info+0x204/0x868 [ 878.588249][T12980] inet_sk_diag_fill+0xbb4/0x1584 [ 878.589626][T12980] mptcp_diag_dump+0xb5c/0x10f0 [ 878.590928][T12980] __inet_diag_dump+0x1dc/0x350 [ 878.592280][T12980] inet_diag_dump+0x4c/0x5c [ 878.593445][T12980] netlink_dump+0x49c/0xab4 [ 878.594703][T12980] __netlink_dump_start+0x480/0x6f0 [ 878.596130][T12980] inet_diag_handler_cmd+0x190/0x268 [ 878.597577][T12980] sock_diag_rcv_msg+0x168/0x390 [ 878.598929][T12980] netlink_rcv_skb+0x208/0x3c4 [ 878.600188][T12980] sock_diag_rcv+0x3c/0x54 [ 878.601444][T12980] netlink_unicast+0x60c/0x89c [ 878.602800][T12980] netlink_sendmsg+0x6e8/0x9cc [ 878.604076][T12980] sock_write_iter+0x23c/0x31c [ 878.605387][T12980] do_iter_readv_writev+0x3a0/0x4f8 [ 878.606891][T12980] do_iter_write+0x1c4/0x670 [ 878.608138][T12980] do_writev+0x1e0/0x380 [ 878.609339][T12980] __arm64_sys_writev+0x80/0x94 [ 878.610670][T12980] invoke_syscall+0x98/0x2b8 [ 878.611902][T12980] el0_svc_common+0x138/0x258 [ 878.613137][T12980] do_el0_svc+0x58/0x14c [ 878.614301][T12980] el0_svc+0x78/0x1e0 [ 878.615340][T12980] el0t_64_sync_handler+0xcc/0xe4 [ 878.616697][T12980] el0t_64_sync+0x1a0/0x1a4 [ 878.634753][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 878.639633][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.937812][ T8636] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 878.940119][ T8636] Bluetooth: hci5: Injecting HCI hardware error event [ 878.942068][ T4029] Bluetooth: hci5: hardware error 0x00 [ 879.255962][ T4034] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 879.255980][ T4074] Bluetooth: hci3: command 0xfc11 tx timeout [ 880.695929][ T4074] Bluetooth: hci0: command 0x0406 tx timeout