last executing test programs: 3m25.764997157s ago: executing program 2 (id=589): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f00000001c0)=""/64) socket$netlink(0x10, 0x3, 0x0) 3m23.722652162s ago: executing program 2 (id=602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x103503, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000040)) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='hfs\x00', 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4040040}, 0x40) 3m22.786449107s ago: executing program 2 (id=605): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef\x1b\x03\xa4C\xbc(Vc!a\xc1\xe39#\xb0\xf6x\n\xe5\x10ULX\x8f\x85(\xee\x9f\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3m22.312780089s ago: executing program 2 (id=609): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000200040010000800034004000000", 0x58}], 0x1) 3m22.093346065s ago: executing program 2 (id=612): write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x2, 0x180000, 0x80000000, 0x107fff, 0x2, "4d0bfffe0000000000e2ffffffff0f00", 0x6, 0x14}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) setns(0xc9, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000314010000000000000000002500020073797a5f6465766963655f6e616d655f33325f63686172735f31323334353637000000000800410073697700070033006c6f00"], 0x48}}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0x0}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {r8, 0x10}}, 0x10) syz_clone3(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) write$tun(r5, &(0x7f0000000180)=ANY=[], 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507"], 0x28}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x15a6, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) 3m21.630176907s ago: executing program 2 (id=616): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x218004, &(0x7f0000000240)={[{@oldalloc}, {@nojournal_checksum}, {@jqfmt_vfsv0}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000440)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4e27e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m6.538761479s ago: executing program 32 (id=616): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x218004, &(0x7f0000000240)={[{@oldalloc}, {@nojournal_checksum}, {@jqfmt_vfsv0}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000440)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4e27e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m0.475973941s ago: executing program 1 (id=677): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r0, &(0x7f00000061c0)='dir=1 length=', 0xd) 3m0.298128285s ago: executing program 1 (id=678): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x1007, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0xfffffffe, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x8, 0x4000b, 0xffe, 0x200000, 0xaf, 0x0, 0x9, 0x1, 0x4]}) ioctl$COMEDI_INSNLIST(r2, 0x8008640b, &(0x7f00000917c0)={0x0, 0x0}) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', &(0x7f0000000140), 0x2150090, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES8=r2, @ANYRES16, @ANYRES64]) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6", 0x81}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) 3m0.149523179s ago: executing program 1 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000d000000fbdbdf251b0000000700210030"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000890) 2m58.549443322s ago: executing program 1 (id=682): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f0000000200)=[{0x2}, {0x2}], 0x2) semop(r0, 0x0, 0x0) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) 2m56.527691795s ago: executing program 1 (id=687): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x40000029) close(r0) 2m56.306294992s ago: executing program 1 (id=689): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, 0x0, 0x0) io_uring_setup(0x5d94, &(0x7f0000000000)={0x0, 0xb959, 0x20, 0x3, 0x3ac}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x8, 0x41}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x10000) 2m44.73042302s ago: executing program 5 (id=715): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x5, 0x108) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0xfffa, 0x800}], 0x1, 0x0) waitid(0x1, 0x0, 0x0, 0x2, 0x0) socket(0x0, 0x3, 0x8) 2m43.719196816s ago: executing program 5 (id=723): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) write$cgroup_devices(r1, 0x0, 0xfffffeff) 2m43.527449052s ago: executing program 5 (id=725): prctl$PR_SET_SECUREBITS(0x1c, 0x12) 2m43.374370436s ago: executing program 5 (id=726): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f000000e340)={0x0, 0x0, 0x0, 0x0, &(0x7f000000e2c0)=[@cred={{0x1c}}], 0x20, 0x40000}, 0x4000) 2m41.091276387s ago: executing program 33 (id=689): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, 0x0, 0x0) io_uring_setup(0x5d94, &(0x7f0000000000)={0x0, 0xb959, 0x20, 0x3, 0x3ac}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x8, 0x41}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x10000) 2m41.013859088s ago: executing program 5 (id=730): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = io_uring_setup(0x34cf, &(0x7f0000000440)={0x0, 0x1539, 0x0, 0x1, 0x0, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) 2m40.518481042s ago: executing program 5 (id=734): mount(0x0, &(0x7f0000000540)='./proc/driver/rndis-000\x00', &(0x7f0000000180)='debugfs\x00', 0x922000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/driver/rndis-000\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x18015) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4$x25(r0, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000000c0)={0x0}) close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m24.704531132s ago: executing program 34 (id=734): mount(0x0, &(0x7f0000000540)='./proc/driver/rndis-000\x00', &(0x7f0000000180)='debugfs\x00', 0x922000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/driver/rndis-000\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x18015) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4$x25(r0, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000000c0)={0x0}) close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 29.348948513s ago: executing program 3 (id=1255): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000780)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5434, 0x0) munlockall() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86030082, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabd86dd6000000800283afffe8000000000000000000000000000aafe8000000000000000"], 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xb, &(0x7f0000000000)={[{}]}, 0x4, 0x562, &(0x7f0000001cc0)="$eJzs3VFP2+YawPHHFE5pWqGjc46qCtH2LT1HAommTmhTRb05Ps6b8LaJHdlOBVcVKlChhvaodNLgZutNt0nb5T5Ab/chtm+wy2nfYFfVLna5aUy2Ewg0IRQoQej/i1q/2I/9Pm8U+dELsS0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAst2TbOUuqxmvMq97cUuDX9tnePt70H2PJomtnP6/v9Ctixf9kdFSupKuu/Gsn8nL836RMpD9NyGi8GJXNi5f/fv+fw0Pt/fdJ6ESsb2w+W2w2l18OOpEBqWjPhL6pORWtTOirYqFg354rh6psqjpc+OxHXVNuoJ3ID9SUO61yxeKs0ufFb3iVklPV7ZX3buVtu6AeZOvaCULfu/0gG7pzplo1XiWJiTfHMffiD+JDE6lIOzWlVlaby7P9koyDcgcJyvcLytv5fC6Xz+cKd4t379n28Hsr7D3kvYjBf2gxWB/nRA4cwlCr/ktVjHjSkHlRXV+ulCQQX2o9tre0Cv/0f27rffvtrP/tKn9lZ/O4JPX/WvrTtV71v0cuJ/dalw3ZlGeyKE1pyrK8HHhGJ/uqiBZPjITii5GaOMka1VqjpCgFKYgtj2VOyhKKkrIY+ZtoCWVBQolEJ58oVwLR4kgkvgSiZEpcmRYlOSlKUWZFiZasLIgvDfGkIiVxpCpaVmQ1ed9n98lxOyh3kKD8PkH536j/2GO4dco68A7HewIHjmCrXf8BAAAAAMCZZSW/fY/n/yNyNWmVTVXbg04LAAAAAAAco+Qv/xPxYiRuXRWL+T8AAAAAAGeNlVxjZ4lIRq6nrfaVUPwSAAAAAACAMyL5+/+1eJGJW9fFYv4PAAAAAMBZ82Xfe+yH9fPW979KEIxYr+vz/7bWnDjOWTuX7ndu7xGj8vjF37cSw8mxCsOtQ7p6wrqUBm3fBPNda7HSLw/rQxKwxlp7705AvpYbacyNpXS51N6S9pIpm6rOun71fk4cZ2wo0vPRJ89XP5Vk+F95tTFLVlaby9knL5pLSS6v46O8XmvdQPG9+yjuk8ur5H4LyTUXXUc8klyI0eo3k/Zrd45/KN196AP6fCOTacxkJl1mdo9/NO4zl+01+lYWuSOO/I3cTGNuTt1MF12yyPfLIt+ZxaHeiwNkMdsvi9kjZgEAg7LSuwr9mRbxrb119xBnuZOp7m9kKo2ZGk9OrMPjXc7odr8zun3E6vbd9jMQ2sG9amzc7zd7qurbeIe3PfsNq3krfgvPvVr7v1xe39i8tbq2+HT56fLzfH62YN+x7bt5GUmG0VpQewAAXXR7xk675qbz/75P4bHu9JlV/2P7KwVZeSIvpClLMpNcbZB846DrUTPJPheSryHM9Jm1Zjqe8DLTZ1aX6XjQS0fsLz+lrV2xVsfjZQAAOEsm+9Thg9T/mV7z7m+TtR01N67l+8+OO2s5AAD4OHTwzspEX1hBYOqPc8VizonmtAp896EKTKmilfEiHbhzjlfRqh74ke/61bjxyJR0qMJGve4HkSr7gar7oZlPnvyuwoUw0j+oUNccLzJuWK9qJ9TK9b3IcSNVMqGr6o3/VU04p4Nk57CuXVM2rhMZ31Oh3whcnVUq1Loj0JS0F5myiZueqgem5gQL6pFfbdS0KunQDUw98tMDtvsyXtkPaslhs4N+swEAOCXWNzafLTabyy/7Nf57gJgejUGPEQAA7EaVBgAAAAAAAAAAAAAAAAAAAADg9DvkJX1nr3HpuA64tWuNJSI7MRfkFIz0EI3z7Y/LKcnnOBqfn440Tm1jsOclAB/fXwEAAP//3y1f8A==") 28.421229307s ago: executing program 3 (id=1257): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$eJzs3dFvW1cZAPDv3sSx02VLNvYACFgZg4KqOo27VdMeYDwhhCYh9ghSFxI3qmrXUe2MJfSh+x+QmMQL8MgfgOBtT7zzguCNl/GANKACNRNINbrX14mbxq1LnDjEv590dc851/Z3znXvPfbX1ieAqXU+Iu5GxFxEvBMRi0V7UmzxZm/LHnf/3p213Xt31pLodt/+e5Ifz9pi4DmZZ4rXrETE974V8cPk0bjt7Z2bq41G/XYv5Pxyp7m53N7euXSjubpR36jfqtWurly9/PqV12rjGehMxEvNuaLy+Y9+f/drP866tVC09MdxSFePpPd6pb04mdmI+M6Y40zKTDGeuf/t6eM+3TylNCJeiIiX8+t/MWbydxMAOMu63cXoLg7WAYCzLs1zYElaLXIBC5Gm1Wovh/dinEsbrXbn4vXW1q31Xq5sKUrp9RuN+uUiV7gUpSSrr+Tl/XrtQP1KRDwfET8pz+f16lqrsT7JDz4AMMWeOTD//6vcm/8BgDOu8nB1aVL9AABOTmXSHQAATpz5HwCmj/kfAKaP+R8Apo/5HwCmj/kfAKbKd996K9u6u8XvX6+/u711s/XupfV6+2a1ubVWXWvd3qxutFob+W/2NJ/0eo1Wa3Pl1dh6b+nrm+3Ocnt751qztXWrcy3/Xe9r9dKJjAoAeJznX/rwT0lE3H1jPsoxn7f113IwV8PZlk66A8DEzEy6A8DEWO0LptcRvuNLD8AZkS/E+qBYFOSQ45WIIjs4YMhjh/BRA06ZC5/Zz/9nW8j/w9QYyP/7V8AwZeT/YXr5Ug7Tq9tNRl3zP0Z9IABwusnxA8nhzS8U+18Vfznwg/WDj/jgOHsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1t//d9qlPO1wBciTavViGcjYilKyfUbjfrliHguIv5YLpWz+sqE+wwAHFX616RY/+vC4isLB4/OJZ+U831E/Ohnb//0vdVO5/YfsvZ/7LV3Pijaa08dfH48YwAAHqc/T+f7gS/y9+/dWetvJ9mfj78ZEZVe/N17c7G7F382ZvN9JUoRce6fSVHvSQZyF0dx9/2IuPKbIuKgfxcrJPdWPj0YP4v97Ljif/qw85/EQp6D6cdPH4qf5sd6++xcfGoMfYFp82F2/3nzsOsvjfP5vn/9xYO96+/nvbbZMcQv7n/ZS63t5vfA/fj9+9/MkPvf+VFjvPq7b/dKj37d+vj9iM/ORvRjZ1t/Leh+/GRI/FdGCX4+4s+f+8LLww53fxFxIR6Ovx9hv7TcaW4ut7d3Lt1orm7UN+q3arWrK1cvv37ltdpynqNeHj4b/O2Ni88NO5aN/9yQ+JUnjP/Lo4w/In75n3e+/8XHxP/qlw6Ln8aLj4mfzYlfGTH+6rlfV4Ydy+KvDxn/k97/iyPG/+gvO48sGw4ATE57e+fmaqNRv50VylEU9lqOp9D/IHESsU5XoRSnohv/R4X+n5VeS1Ya8em/jWPpT3noO/iNh1ruF/0+htMyF0/1rG53sCUZ9bQMu2OMI+sGnAZ7F31EfDLpzgAAAAAAAAAAAAAAAIc6vv+/le61THqMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF3/DQAA///Xj86C") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x8) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 26.666731141s ago: executing program 3 (id=1261): unshare(0x2a020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 26.501828046s ago: executing program 6 (id=1262): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 26.306575831s ago: executing program 6 (id=1264): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x40, 0x98) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 26.053338667s ago: executing program 3 (id=1266): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = io_uring_setup(0x34cf, &(0x7f0000000440)={0x0, 0x1539, 0x0, 0x1, 0x0, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) 25.962143719s ago: executing program 6 (id=1267): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 24.570598795s ago: executing program 3 (id=1268): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r2, 0x211, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2400c050}, 0x0) 22.222540695s ago: executing program 3 (id=1270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) pipe2(&(0x7f00000000c0), 0x4000) r4 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0x26}, 0x18) open_tree(r4, &(0x7f00000002c0)='./mnt\x00', 0x1) semctl$SEM_STAT(0x0, 0x4, 0x12, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="823dba6ae312b0b1233069d97a048730330ee84c50f8631c9b7e9c2d6e6735b865", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYRES8, @ANYRES8], 0x1, 0x1ef, &(0x7f0000000300)="$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") lstat(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x8, 0x2}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r5, 0x5, &(0x7f0000000280)={0x1, 0x4, 0x2f, 0x200400b, r0}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) readv(r7, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 21.053684534s ago: executing program 6 (id=1272): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0028010}) 20.346510982s ago: executing program 6 (id=1274): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x19, &(0x7f0000001f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x23}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 20.215100726s ago: executing program 6 (id=1275): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x40081}}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 8.180747912s ago: executing program 7 (id=1308): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x4d4, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x2004402, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB="2c02"]) 7.200962207s ago: executing program 7 (id=1309): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r2, &(0x7f0000000d00)='0\n', 0x2) close(r2) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) nanosleep(&(0x7f0000001700)={0x0, 0x5f5e100}, 0x0) 7.200604077s ago: executing program 35 (id=1270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) pipe2(&(0x7f00000000c0), 0x4000) r4 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0x26}, 0x18) open_tree(r4, &(0x7f00000002c0)='./mnt\x00', 0x1) semctl$SEM_STAT(0x0, 0x4, 0x12, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="823dba6ae312b0b1233069d97a048730330ee84c50f8631c9b7e9c2d6e6735b865", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYRES8, @ANYRES8], 0x1, 0x1ef, &(0x7f0000000300)="$eJzslU9rE0EYxn+zO+k2GmjOXi22F22zBfEb2A/gBzBs11pM/NMNaELA6KUXEfEzCBU/hQdB7z2ICF7qQcEcKp4qEpmdd6cbEkiV7SGwDyTv8z4z7zvzvsPO3E4eJAHw56gfUSeFosZnpdDAirLa8YK1P8WOBN+09RuivxH7VWzS7R08s7R3p9lqxbtJdwZRCmbNGSOTkj71YlPIh6fjiuL/8kyQJYrJ40jHt52dHHoxpgTT5kgsBe5nkngFl1w95Vn8qkFe+V50gRXOqGOOcNK637XZx/TppT3OqXN8Ca8y3pb5I94/RSXI9ZVcf+IxTJ2PR/3IkJtyixlty/6yTyKdY5x3uTkXNAxA+YxcHp3elrACrHXa99eSbu/yTru5HW/Hd8Nw4+r6+/PyiY4ew04rXlcMn8sqkWf+NQ4Br5dgqF4dLAL9qAJ8ORkfkIPKbc3gHKiqlJiFZJfz6sVcYBW8XGw+h8371pUXiObT5gaXMLt6ODDDIbZby5hsmlumtE0Ufp3UaejcPuEYj8V04Ep0r7W1h0JlYftol6NxSMU5oThmoXjjmit/T+yy2E2x+2IPxWZvV/Ym6TTDD/FWB7DAo2ans5s+XpY5LXRaWHcre7Jq9hqqbCcBJUqUKFGiRIkSc4K/AQAA///DJEtk") lstat(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x8, 0x2}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r5, 0x5, &(0x7f0000000280)={0x1, 0x4, 0x2f, 0x200400b, r0}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) readv(r7, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 5.49026076s ago: executing program 4 (id=1313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x2004e, 0x567}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) 5.270386656s ago: executing program 7 (id=1314): socket(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.011150472s ago: executing program 36 (id=1275): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x40081}}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4.966422354s ago: executing program 4 (id=1316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000001c0)='./file0\x00', 0x4480, &(0x7f0000000100)=ANY=[], 0x86, 0x23f, &(0x7f00000004c0)="$eJzs2r9rJGUYB/BnYo6cOXK74i/uQHzRQm2GJLXFBc2BuKDorXAKcnNmokvG3ZBZAivipdLWP8FaLO0EudImIP4FFnZpUl4hjiSby22OtRDxNujnU8w88M4X3pd3eOcp5uDVrz/d2qzzzWIYc1kWc9diL+5l0Y65uG8vXnnp5k/PvXvz/TfXOp31d1K6vnZjZTWldPn5Hz/4/LsX7g4vvff95R8WYr/94cHh6m/7z+xfOfjjxie9OvXq1B8MU5FuDwbD4nZVpo1evZWn9HZVFnWZev263DkzvlkNtrdHqehvLC1u75R1nYr+KG2VozQcpOHOKBUfF71+yvM8LS0G/0T323tNE4fNhVvRNM3j38SlZiEiWpE9kbInr2VP38qe3cuuHDZNa9ZT5V/x8P7fjaVf7f//x8ShfjGi+mq3u9sd38fjr/8cvaiijOVoxe9x9JqcOP4wRERnfTkda8eX1Z2T/J0L3ceO82ubJ/mVaEX7bP7oev2NzvrKOJ8m87vdhViczK9GK56anl+dmr8YL784kc+jFb98FIOoYiOOsg/yX6yk9NpbnYfyV4+fAwD4r8nTqfbZ/mfcv+X5X42P86f91ZT+8H5/tTy1P5uPq/OzXTsR9eizraKqyh3FaTEf52IaCsUMi1mfTDwKDzZ91jMBAAAAAAAAAADg73gUvxPOeo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD59mcAAAD//9qY0D8=") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x1000}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 4.150670934s ago: executing program 4 (id=1318): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000180), 0x8) 3.819524223s ago: executing program 0 (id=1321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_getattr(r0, &(0x7f0000000400)={0x38}, 0x38, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x11, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40042}, 0x40094) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x100, 0x10001, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4044041) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, 0x0) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0xb0090198) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0xfc, @loopback, 0x3}, 0x31) sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x888) open(&(0x7f0000000280)='./file0\x00', 0x880, 0x24) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x321, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x4000000) 2.458660408s ago: executing program 0 (id=1322): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x5, 0x0, 0x7}, {0x6, 0x3, 0x10}]}) 2.452128717s ago: executing program 7 (id=1323): r0 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r0, &(0x7f0000000080)=""/17, 0x11) 2.311772981s ago: executing program 4 (id=1324): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f00000001c0)=""/64) socket$netlink(0x10, 0x3, 0x0) 2.198329904s ago: executing program 0 (id=1325): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_mount_image$exfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$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") io_submit(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b800000019da8661470000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e200005000000000a00f7ff00000000c818d5212b502035622cbafc1882e31579fe9f868e81b0be1372853d44cbe508abdd463ca5d03dedfa109ce3626995c5b299865ae4a03b1ff19b3c383ee5665dabf605342237cfd96897d2d40b8eafbb8a13d9a8635d17fdbb1e75538b9824d3a1f248d469d9e02e807820ba46ba6080d11fe31fb6207f5ae7ce880fa42cf8269c4e72e188bf24b75132f30c60e1c418bf88401cdba7c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000900000000000000000a0000000000000000000000804000000000000000000800000000000000000001000000000000"], 0xb8}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r3 = syz_mount_image$fuse(&(0x7f0000000440), &(0x7f00000004c0)='./file0\x00', 0x20000, &(0x7f00000007c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize}, {@default_permissions}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'exfat\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@dont_measure}, {@subj_user}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_gt}, {@dont_appraise}, {@appraise}]}}, 0x0, 0x0, &(0x7f0000000680)="9dddf4d645bacbfcbb354d55c719f8b68901563cbe3a2fddb144318fc1a6c798e10ae69b7d62ad6488f9f79743bb94801b985c24343e156d260164384c9d3291d89547ab7840336c7144bc97af43ab8913a1cdb5361396ccd3d7e21dbe7d60b2a8e3df8f273f295b032ded2aefd78b1ad15d32dbf5cf8cc04a874c5af3299f0f9fad9086deb9a969f8d2625d406339fe24bdb91ce4a3f5f46ab4f265316f30113eea65785805ff02b35702c8cc33146d27978aab6cfa79d98ae0478ae03d11b062f8e7d72efde9113d68bf017db8a0c63a2b5a3d4e") renameat2(r1, &(0x7f0000000180)='./file0\x00', r3, &(0x7f0000000780)='./file0\x00', 0x7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x5}, 0x0, {}, 0x67, 0x2}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYBLOB="080002007f0000011400030065727370616e30000000000000000000"], 0x34}}, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) r8 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 2.197899904s ago: executing program 7 (id=1326): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'vcan0\x00', 0x1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x4048001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x2, 0x2000}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x1, 0x0, 0x5) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000240)=0xfff) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000007c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f075ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa3e, &(0x7f0000000940)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a3042, 0x20) shmctl$SHM_LOCK(0x0, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) 928.817116ms ago: executing program 4 (id=1327): openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 433.578159ms ago: executing program 4 (id=1328): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") socket$inet(0x2, 0x3, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c0000000100000002"], 0x3414c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x60, 0x0, 0x8}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {0x0, 0x0, 0x0, 0x3}, {0x2, 0x0, 0xfd}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb, 0x0, 0xffffffff}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 421.615249ms ago: executing program 0 (id=1329): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 404.30053ms ago: executing program 7 (id=1330): open(0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0x1, 0x4b1, &(0x7f0000001d00)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = getpid() syz_pidfd_open(r1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) fanotify_mark(0xffffffffffffffff, 0x441, 0x800003a, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, 0x659505fe, 0x7) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)={@random="ff96430b7a73", @empty, @val, {@ipv4={0x8864}}}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) close_range(r0, 0xffffffffffffffff, 0x0) 93.854178ms ago: executing program 0 (id=1331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES8=r0]) timer_create(0x1, 0x0, &(0x7f0000000300)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) sync_file_range(r2, 0x8, 0x5, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x84, 0x30, 0xffff, 0x3, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x84}}, 0x40844) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r2) syz_mount_image$hfsplus(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x201001c, &(0x7f00000008c0)=ANY=[], 0x1, 0x6e0, &(0x7f0000001580)="$eJzs3U9sHFcdB/DvrNeON1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitELgAoITEodekQqSbxwQEvegcOFSbr36WAmJS8Qh6mXRzM6ud+31v/xZO+XziSbzZt68N7/57ZuZ3bFWG+D/1pWzad5PkStnX79XLq+vzbfX1+aP1NXtJGW5kTS7sxS3kuJBslDWFwNTBuZbfLR8+c1PH65/1l1q1lO1/cRO7UYYse1qPWW27m92ZMvJve5itQ4vLyS5Ws+HTe21r6ENy6Sdqedw4DpbrO6n+X7OW+CQ6d2diu59c4uZ5GiS6fp9QOqrQ2N8ET4b+7rKAQAAwHNg1GPvT24fQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwnKt//7+op0Y9z2yK3u//T/XW1eVDaGHPW95/pnEAAAAAAAAAwHh8/VEe5V6O9ZY7RfU3/9PVwol83km+lPdyN0u5k3O5l8WsZCV3ciHJzEBHU/cWV1buXOi3LI1ueXFky4vjOmIAAAAAAAAA+EL6ZVobf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDDoEgmurNqOlHPM5NGMxt1WU3+lWTqoOPdh2LUyvvjjwMAAACeyPRjtPnyozzKvRxLcrRc7hTVZ/6vVJ+Xp/NebmUly1lJO0u5Vn+GLj/1N9bX5tvra/M3y6lcHu73+//Z2/7/cGyjx/r5wug9n6q2aOV6lqs153K1CuZaGt19n0lO9eIZiGvAh2VMxfdqe0xQs05rubPfb/cU4akYfhTR2GHL1kZwST8jc3VsZcvj3QwU1YOaZHMmdn11mkNLM1Wvk/09XUij/+TnxJPkfHX03o/W8/J4fvNMc75f/Uw0UmXiYm/0lefMNpnon5bf+Nuf37rRvvXOjet3zx6eQ9rFxDbrN4+J+YFMvLzzmDjkmWjuc/u5KhMn+8tX8qP8JGczmzdyJ8v5aRazkqV06vrFejyX/8/snKmFoaU3dotkqn5duq/ZXmKazQ+r0mJOV22PZTlFbudalvJa9e9iLuTbuZRLuTzwCp/cNu7q2KqzvrH5rO+90n8fGfyZb9aF8ur2242r3MJOR7zd6HxauudumdfjA3ntjvqH/a2OD5wHcwNZerGXncmRnT/O/aj51bpQ7uNXu9wnxmumzkR5AvXuEr3oXupmolndi7aO8z92ynZp3+p0biy+u03/m28Wr9bzclitfW23rXtGvxRPVzleXsx0fSUZHh1l3Uv9q8xAXWdjLHfrhu+4ZbuTVV1R9M7UH+d2NQC2nqlT9Xu4rT1drOpeHlk3X9WdGqgber+V22nn2hjyB8Dj+Odb/eJMjk61/t36pPVx69etG63Xp39w5DtHXpnK5D8mv9ucm3i18Urx13ycn+fYgUYMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfEHff/+CdxXZ76c7oQmP7qqFCK5vX7NbzpkJR/6DP/lod3sJ0kqE11e8cjT2M1uYwthQ6v0jGnp/ejwiO3uZ3ZaE5OKIa26VuYWjNX7Z2+OE+Iyz2dl48w0Ij493pREYPgAO8KAFjcX7l5rvn777/wbeWby6+vfT20q3JS5cuz12+9Nr8+evL7aW57v8HHSXwLAy9DQAAAAAAAAAAAACeC6O+GHD6hd2+NLKn73iUhclyzUEfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB8u3I2zfspcmHu3Fy5vL423y6nXnljy2aSRiMpfpYUD5KFdKfMDHRX5E8P0hmxn4+WL7/56cP1zzb6ana3Txr1fHs71yZZrafMJpmo509gqL+rT9xf8d/eMZQJ+7zT6Sw8WXzwdPwvAAD//x/R9LI=") bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002140)={r2, &(0x7f0000002000)="4f16e387ec58a359c3d293bbd73f6a60dc561f6e65bab7c36199f3c17330157b07e27f595454c05e9237548c42d31221a9074f8d737e993bba25a48b5d6db575e1911c9c860bc082b14cf79e5d9dae18c8b44d37f4c434e1217fd436c58d94c869b76967b44ed1b09cf00b5ac4895de78dd2c5732bb872c53771eb9f02ddd8aa75cb8768ba993c5eebe81c16c06c66e9cd3fa359a0cbc6cc5632939d0a0d5728ec56ec35e10b62d0c8bcbbc6d1807f8210c1692962c772ad487584a7c0fa805d6930ea86aeaac02e", &(0x7f0000002180)=@tcp}, 0x20) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000ac0)={0x0, &(0x7f0000000a80)}, 0x10) 0s ago: executing program 0 (id=1332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_getattr(r0, &(0x7f0000000400)={0x38}, 0x38, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x82) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, 0x0) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0xb0090198) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0xfc, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x888) kernel console output (not intermixed with test programs): 377223][ T25] audit: type=1804 audit(1787935515.865:1062): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.842" name="/newroot/182/file0" dev="tmpfs" ino=979 res=1 errno=0 [ 371.541527][ T6855] loop6: detected capacity change from 0 to 1764 [ 371.819088][ T6855] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 374.883949][ T25] kauditd_printk_skb: 20 callbacks suppressed [ 374.883959][ T25] audit: type=1800 audit(1787935519.365:1083): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 375.459913][ T25] audit: type=1800 audit(1787935519.945:1084): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 375.471037][ T6899] loop3: detected capacity change from 0 to 1764 [ 375.518796][ T25] audit: type=1800 audit(1787935520.005:1085): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 375.565531][ T25] audit: type=1800 audit(1787935520.045:1086): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 375.582754][ T6894] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 375.593554][ T25] audit: type=1800 audit(1787935520.075:1087): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 375.654272][ T25] audit: type=1800 audit(1787935520.135:1088): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 375.744581][ T25] audit: type=1800 audit(1787935520.225:1089): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 375.823006][ T25] audit: type=1800 audit(1787935520.305:1090): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 376.006145][ T25] audit: type=1800 audit(1787935520.495:1091): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 376.153881][ T25] audit: type=1800 audit(1787935520.635:1092): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 377.315769][ T1334] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 377.675923][ T1334] usb 5-1: config index 0 descriptor too short (expected 71, got 53) [ 377.676017][ T1334] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43690, setting to 1024 [ 377.676033][ T1334] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 377.835964][ T1334] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 377.835986][ T1334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.835997][ T1334] usb 5-1: Product: syz [ 377.836005][ T1334] usb 5-1: Manufacturer: syz [ 377.836013][ T1334] usb 5-1: SerialNumber: syz [ 377.856777][ T6947] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 377.877030][ T1334] mos7720 5-1:1.0: Moschip 2 port adapter converter detected [ 378.145880][ T1334] usb 5-1: mos7720: usb_control_msg() failed: -71 [ 378.150667][ T1334] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 378.173026][ T1334] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 378.214320][ T1334] usb 5-1: USB disconnect, device number 2 [ 378.246364][ T1334] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 378.266497][ T1334] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 378.267475][ T1334] mos7720 5-1:1.0: device disconnected [ 378.418151][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.418228][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.050161][ T25] kauditd_printk_skb: 61 callbacks suppressed [ 381.050171][ T25] audit: type=1800 audit(1787935525.535:1154): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 381.151030][ T25] audit: type=1800 audit(1787935525.635:1155): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 381.197431][ T25] audit: type=1800 audit(1787935525.685:1156): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 381.244671][ T25] audit: type=1800 audit(1787935525.725:1157): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 381.284989][ T25] audit: type=1800 audit(1787935525.765:1158): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 381.329546][ T25] audit: type=1800 audit(1787935525.815:1159): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 381.506214][ T25] audit: type=1800 audit(1787935525.995:1160): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=50904 res=0 errno=0 [ 381.705776][ T25] audit: type=1800 audit(1787935526.195:1161): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 381.761660][ T25] audit: type=1800 audit(1787935526.245:1162): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 381.845714][ T1334] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 382.213039][ T25] audit: type=1800 audit(1787935526.695:1163): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 383.253937][ T7057] loop0: detected capacity change from 0 to 1764 [ 383.325791][ T1334] usb 7-1: config index 0 descriptor too short (expected 71, got 53) [ 383.325821][ T1334] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43690, setting to 1024 [ 383.325835][ T1334] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 383.351896][ T7057] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 383.615749][ T1334] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 383.615774][ T1334] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.615786][ T1334] usb 7-1: Product: syz [ 383.615794][ T1334] usb 7-1: Manufacturer: syz [ 383.615802][ T1334] usb 7-1: SerialNumber: syz [ 383.720150][ T7046] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 383.736523][ T1334] mos7720 7-1:1.0: Moschip 2 port adapter converter detected [ 385.218337][ T1334] usb 7-1: mos7720: usb_control_msg() failed: -71 [ 385.222312][ T1334] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 385.223218][ T1334] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 385.246174][ T1334] usb 7-1: USB disconnect, device number 2 [ 385.258121][ T1334] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 385.270567][ T1334] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 385.270863][ T1334] mos7720 7-1:1.0: device disconnected [ 386.162553][ T25] kauditd_printk_skb: 22 callbacks suppressed [ 386.162563][ T25] audit: type=1800 audit(1787935530.645:1186): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 386.227763][ T25] audit: type=1800 audit(1787935530.715:1187): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 386.652289][ T25] audit: type=1800 audit(1787935531.135:1188): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 387.611398][ T25] audit: type=1800 audit(1787935532.095:1189): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 387.643955][ T25] audit: type=1800 audit(1787935532.125:1190): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 388.932308][ T25] audit: type=1800 audit(1787935533.415:1191): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 388.951607][ T25] audit: type=1800 audit(1787935533.435:1192): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 390.007470][ T25] audit: type=1800 audit(1787935534.495:1193): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 390.070777][ T25] audit: type=1800 audit(1787935534.555:1194): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 390.092191][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.7.946'. [ 390.108567][ T25] audit: type=1800 audit(1787935534.595:1195): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 390.277711][ T7126] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 391.300000][ T25] kauditd_printk_skb: 6 callbacks suppressed [ 391.300009][ T25] audit: type=1800 audit(1787935535.785:1202): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=147326 res=0 errno=0 [ 391.361254][ T25] audit: type=1800 audit(1787935535.845:1203): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 391.413251][ T25] audit: type=1800 audit(1787935535.895:1204): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 391.454943][ T25] audit: type=1800 audit(1787935535.935:1205): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 391.563133][ T5326] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 391.603820][ T25] audit: type=1800 audit(1787935536.085:1206): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 391.811356][ T25] audit: type=1800 audit(1787935536.295:1207): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 391.895208][ T25] audit: type=1800 audit(1787935536.375:1208): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 392.015957][ T5326] usb 7-1: config index 0 descriptor too short (expected 71, got 53) [ 392.015991][ T5326] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43690, setting to 1024 [ 392.016023][ T5326] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 392.039308][ T25] audit: type=1800 audit(1787935536.525:1209): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 392.176133][ T5326] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 392.176152][ T5326] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.176164][ T5326] usb 7-1: Product: syz [ 392.176172][ T5326] usb 7-1: Manufacturer: syz [ 392.176180][ T5326] usb 7-1: SerialNumber: syz [ 392.196036][ T7124] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 392.216491][ T5326] mos7720 7-1:1.0: Moschip 2 port adapter converter detected [ 392.217549][ T25] audit: type=1800 audit(1787935536.705:1210): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 392.322331][ T25] audit: type=1800 audit(1787935536.805:1211): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 393.615869][ T5326] usb 7-1: mos7720: usb_control_msg() failed: -71 [ 393.617774][ T5326] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 393.618667][ T5326] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 393.625498][ T5326] usb 7-1: USB disconnect, device number 3 [ 393.720276][ T5326] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 393.722776][ T5326] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 393.723082][ T5326] mos7720 7-1:1.0: device disconnected [ 396.329645][ T25] kauditd_printk_skb: 22 callbacks suppressed [ 396.329654][ T25] audit: type=1800 audit(1787935540.815:1234): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 396.393553][ T25] audit: type=1800 audit(1787935540.875:1235): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 396.415380][ T25] audit: type=1800 audit(1787935540.895:1236): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 396.469514][ T25] audit: type=1800 audit(1787935540.955:1237): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 396.513360][ T25] audit: type=1800 audit(1787935540.995:1238): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 396.765665][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 397.125697][ T7] usb 4-1: config index 0 descriptor too short (expected 71, got 53) [ 397.125729][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43690, setting to 1024 [ 397.125743][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 397.305719][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 397.305739][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.305750][ T7] usb 4-1: Product: syz [ 397.305758][ T7] usb 4-1: Manufacturer: syz [ 397.305765][ T7] usb 4-1: SerialNumber: syz [ 397.331692][ T7185] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 397.346325][ T7] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 397.653605][ T25] audit: type=1800 audit(1787935542.135:1239): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 397.736228][ T25] audit: type=1800 audit(1787935542.225:1240): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 397.771073][ T25] audit: type=1800 audit(1787935542.255:1241): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 397.784035][ T25] audit: type=1800 audit(1787935542.265:1242): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.973" name="new_id" dev="sysfs" ino=45197 res=0 errno=0 [ 397.875741][ T7] usb 4-1: mos7720: usb_control_msg() failed: -71 [ 397.877135][ T7] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 397.877975][ T7] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 397.885123][ T25] audit: type=1800 audit(1787935542.365:1243): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=147583 res=0 errno=0 [ 397.895438][ T7] usb 4-1: USB disconnect, device number 3 [ 397.895721][ C0] usb 4-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 398.893545][ T7] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 398.900345][ T7] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 398.900904][ T7] mos7720 4-1:1.0: device disconnected [ 399.249900][ T7210] loop0: detected capacity change from 0 to 1024 [ 400.517225][ T7210] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.982: lblock 2 mapped to illegal pblock 2 (length 1) [ 400.517403][ T7210] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.982: lblock 0 mapped to illegal pblock 48 (length 1) [ 400.517510][ T7210] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.982: Failed to acquire dquot type 0 [ 400.517623][ T7210] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 400.519196][ T7210] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.982: mark_inode_dirty error [ 400.521258][ T7210] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 400.521307][ T7210] EXT4-fs (loop0): 1 orphan inode deleted [ 400.521318][ T7210] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 400.546751][ T144] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 400.547660][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 400.872263][ T4219] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 400.872419][ T4219] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 400.872512][ T4219] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 402.192477][ T25] kauditd_printk_skb: 26 callbacks suppressed [ 402.192487][ T25] audit: type=1800 audit(1787935546.675:1267): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 402.239601][ T25] audit: type=1800 audit(1787935546.725:1268): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 402.271604][ T25] audit: type=1800 audit(1787935546.755:1269): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 402.342614][ T25] audit: type=1800 audit(1787935546.825:1270): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 402.533111][ T25] audit: type=1800 audit(1787935547.015:1271): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 402.571070][ T25] audit: type=1800 audit(1787935547.055:1272): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 403.762148][ T25] audit: type=1800 audit(1787935548.245:1273): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 403.845770][ T4259] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 403.847566][ T25] audit: type=1800 audit(1787935548.335:1274): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 403.868256][ T25] audit: type=1800 audit(1787935548.355:1275): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 404.052121][ T25] audit: type=1800 audit(1787935548.535:1276): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 404.225761][ T4259] usb 1-1: config index 0 descriptor too short (expected 71, got 53) [ 404.225794][ T4259] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43690, setting to 1024 [ 404.225809][ T4259] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 404.495869][ T4259] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 404.495888][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.495899][ T4259] usb 1-1: Product: syz [ 404.495906][ T4259] usb 1-1: Manufacturer: syz [ 404.495914][ T4259] usb 1-1: SerialNumber: syz [ 405.827205][ T7272] loop6: detected capacity change from 0 to 1024 [ 405.915802][ T4259] usb 1-1: can't set config #1, error -71 [ 405.923810][ T4259] usb 1-1: USB disconnect, device number 3 [ 407.676378][ T25] kauditd_printk_skb: 27 callbacks suppressed [ 407.676387][ T25] audit: type=1800 audit(1787935552.165:1304): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 407.684343][ T25] audit: type=1800 audit(1787935552.165:1305): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 407.782490][ T25] audit: type=1800 audit(1787935552.265:1306): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 408.627163][ T25] audit: type=1800 audit(1787935553.115:1307): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 408.769259][ T25] audit: type=1800 audit(1787935553.255:1308): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 408.859591][ T25] audit: type=1800 audit(1787935553.345:1309): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 408.995727][ T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 409.038630][ T25] audit: type=1800 audit(1787935553.525:1310): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 409.064750][ T25] audit: type=1800 audit(1787935553.545:1311): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 409.138870][ T25] audit: type=1800 audit(1787935553.625:1312): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 409.213941][ T25] audit: type=1800 audit(1787935553.695:1313): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 409.355859][ T7] usb 7-1: config index 0 descriptor too short (expected 71, got 53) [ 409.355890][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43690, setting to 1024 [ 409.355905][ T7] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 409.515853][ T7] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 409.515873][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.515884][ T7] usb 7-1: Product: syz [ 409.515892][ T7] usb 7-1: Manufacturer: syz [ 409.515899][ T7] usb 7-1: SerialNumber: syz [ 409.536785][ T7319] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 409.556417][ T7] mos7720 7-1:1.0: Moschip 2 port adapter converter detected [ 409.815899][ T7] usb 7-1: mos7720: usb_control_msg() failed: -71 [ 409.816787][ T7] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 409.817775][ T7] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 409.828632][ T7] usb 7-1: USB disconnect, device number 4 [ 409.843745][ T7] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 409.848893][ T7] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 409.849187][ T7] mos7720 7-1:1.0: device disconnected [ 412.232751][ T7393] loop6: detected capacity change from 0 to 1024 [ 412.370631][ T7393] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 2: comm syz.6.1053: lblock 2 mapped to illegal pblock 2 (length 1) [ 412.370739][ T7393] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 48: comm syz.6.1053: lblock 0 mapped to illegal pblock 48 (length 1) [ 412.370822][ T7393] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.1053: Failed to acquire dquot type 0 [ 412.370926][ T7393] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 412.371004][ T7393] EXT4-fs error (device loop6): ext4_evict_inode:284: inode #11: comm syz.6.1053: mark_inode_dirty error [ 412.371088][ T7393] EXT4-fs warning (device loop6): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 412.371124][ T7393] EXT4-fs (loop6): 1 orphan inode deleted [ 412.371135][ T7393] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 412.468482][ T4338] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 412.473335][ T4338] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 412.560247][ T6509] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 412.560474][ T6509] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 412.560564][ T6509] EXT4-fs error (device loop6): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 412.819088][ T25] kauditd_printk_skb: 44 callbacks suppressed [ 412.819097][ T25] audit: type=1800 audit(1787935557.305:1355): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 413.168941][ T25] audit: type=1800 audit(1787935557.655:1356): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 413.226363][ T25] audit: type=1800 audit(1787935557.715:1357): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 413.276555][ T25] audit: type=1800 audit(1787935557.765:1358): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 413.394200][ T25] audit: type=1800 audit(1787935557.875:1359): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 413.576963][ T25] audit: type=1800 audit(1787935558.065:1360): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 413.664470][ T25] audit: type=1804 audit(1787935558.145:1361): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1061" name="/newroot/236/file1" dev="tmpfs" ino=1276 res=1 errno=0 [ 413.800419][ T25] audit: type=1800 audit(1787935558.285:1362): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 414.638474][ T25] audit: type=1800 audit(1787935559.125:1363): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 414.689907][ T25] audit: type=1800 audit(1787935559.175:1364): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 418.049358][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 418.049367][ T25] audit: type=1800 audit(1787935562.535:1373): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 418.090059][ T25] audit: type=1800 audit(1787935562.575:1374): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 418.301031][ T25] audit: type=1800 audit(1787935562.785:1375): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 418.375423][ T25] audit: type=1800 audit(1787935562.855:1376): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 418.457575][ T25] audit: type=1800 audit(1787935562.945:1377): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 418.521043][ T25] audit: type=1800 audit(1787935563.005:1378): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 418.741774][ T25] audit: type=1800 audit(1787935563.225:1379): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 418.754304][ T25] audit: type=1800 audit(1787935563.235:1380): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 420.152168][ T25] audit: type=1800 audit(1787935564.635:1381): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 420.293113][ T25] audit: type=1800 audit(1787935564.775:1382): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 421.534983][ T7465] loop7: detected capacity change from 0 to 1764 [ 421.637561][ T7469] futex_wake_op: syz.6.1082 tries to shift op by 32; fix this program [ 421.695920][ T7465] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 421.765974][ T7465] ISOFS: changing to secondary root [ 421.974243][ T7475] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 423.224957][ T25] kauditd_printk_skb: 14 callbacks suppressed [ 423.224966][ T25] audit: type=1800 audit(1787935567.705:1397): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 423.355516][ T25] audit: type=1800 audit(1787935567.835:1398): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 424.681171][ T25] audit: type=1800 audit(1787935569.165:1399): pid=7496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1092" name="mem_sleep" dev="sysfs" ino=1154 res=0 errno=0 [ 424.683742][ T25] audit: type=1800 audit(1787935569.165:1400): pid=7496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1092" name="remove" dev="sysfs" ino=147327 res=0 errno=0 [ 424.694757][ T25] audit: type=1800 audit(1787935569.175:1401): pid=7496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1092" name="rescan" dev="sysfs" ino=1395 res=0 errno=0 [ 424.708064][ T7496] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 424.716791][ T25] audit: type=1800 audit(1787935569.195:1402): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148211 res=0 errno=0 [ 424.716815][ T25] audit: type=1800 audit(1787935569.195:1403): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148225 res=0 errno=0 [ 424.739646][ T25] audit: type=1800 audit(1787935569.225:1404): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 426.091650][ T7505] loop0: detected capacity change from 0 to 1764 [ 426.118008][ T25] audit: type=1800 audit(1787935570.605:1405): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 426.304213][ T25] audit: type=1800 audit(1787935570.785:1406): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=45143 res=0 errno=0 [ 426.344157][ T7505] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 426.345285][ T7505] ISOFS: changing to secondary root [ 426.406086][ T7504] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 429.090713][ T25] kauditd_printk_skb: 13 callbacks suppressed [ 429.090723][ T25] audit: type=1800 audit(1787935573.575:1420): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 429.167139][ T25] audit: type=1800 audit(1787935573.655:1421): pid=7538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1107" name="mem_sleep" dev="sysfs" ino=1154 res=0 errno=0 [ 429.169429][ T25] audit: type=1800 audit(1787935573.655:1422): pid=7538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1107" name="remove" dev="sysfs" ino=148226 res=0 errno=0 [ 429.216649][ T25] audit: type=1800 audit(1787935573.705:1423): pid=7538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1107" name="rescan" dev="sysfs" ino=1395 res=0 errno=0 [ 429.219581][ T7538] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 429.244287][ T25] audit: type=1800 audit(1787935573.725:1424): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148273 res=0 errno=0 [ 429.244311][ T25] audit: type=1800 audit(1787935573.725:1425): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148287 res=0 errno=0 [ 429.323190][ T25] audit: type=1800 audit(1787935573.805:1426): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 429.366855][ T25] audit: type=1800 audit(1787935573.855:1427): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 430.661864][ T7547] loop0: detected capacity change from 0 to 1764 [ 430.681424][ T25] audit: type=1800 audit(1787935575.165:1428): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 430.870979][ T7547] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 430.880938][ T7547] ISOFS: changing to secondary root [ 430.885582][ T25] audit: type=1800 audit(1787935575.365:1429): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 430.939792][ T7544] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 435.033264][ T25] kauditd_printk_skb: 18 callbacks suppressed [ 435.033274][ T25] audit: type=1800 audit(1787935579.515:1448): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 435.156674][ T25] audit: type=1800 audit(1787935579.645:1449): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 436.277329][ T4460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.284259][ T25] audit: type=1800 audit(1787935580.765:1450): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 436.369617][ T25] audit: type=1800 audit(1787935580.855:1451): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 436.438668][ T4460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.545412][ T25] audit: type=1800 audit(1787935581.025:1452): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 436.661855][ T25] audit: type=1800 audit(1787935581.145:1453): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 436.714511][ T25] audit: type=1800 audit(1787935581.195:1454): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 436.726935][ T4460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.901873][ T4263] Bluetooth: hci0: command 0x0406 tx timeout [ 436.911110][ T25] audit: type=1800 audit(1787935581.395:1455): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 436.973330][ T25] audit: type=1800 audit(1787935581.455:1456): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 437.025505][ T25] audit: type=1800 audit(1787935581.505:1457): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 437.487553][ T4460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.861353][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.861383][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.158399][ T25] kauditd_printk_skb: 41 callbacks suppressed [ 440.158409][ T25] audit: type=1800 audit(1787935584.645:1499): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 440.175374][ T25] audit: type=1800 audit(1787935584.655:1500): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 440.220692][ T25] audit: type=1800 audit(1787935584.705:1501): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 440.299594][ T25] audit: type=1800 audit(1787935584.785:1502): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 441.165052][ T25] audit: type=1800 audit(1787935585.645:1503): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 441.722249][ T7688] loop3: detected capacity change from 0 to 1764 [ 441.743986][ T25] audit: type=1800 audit(1787935586.225:1504): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 441.747021][ T7688] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 441.748846][ T7688] ISOFS: changing to secondary root [ 441.772832][ T25] audit: type=1800 audit(1787935586.255:1505): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148761 res=0 errno=0 [ 441.774880][ T25] audit: type=1800 audit(1787935586.255:1506): pid=4355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=148765 res=0 errno=0 [ 441.777930][ T7688] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 441.789724][ T25] audit: type=1800 audit(1787935586.275:1507): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148844 res=0 errno=0 [ 441.816992][ T25] audit: type=1800 audit(1787935586.305:1508): pid=4355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=148848 res=0 errno=0 [ 442.176317][ T4259] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 442.535764][ T4259] usb 7-1: config index 0 descriptor too short (expected 71, got 53) [ 442.535794][ T4259] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43690, setting to 1024 [ 442.535808][ T4259] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 442.695784][ T4259] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 442.695803][ T4259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.695814][ T4259] usb 7-1: Product: syz [ 442.695821][ T4259] usb 7-1: Manufacturer: syz [ 442.695829][ T4259] usb 7-1: SerialNumber: syz [ 442.716131][ T7698] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 442.739439][ T4259] mos7720 7-1:1.0: Moschip 2 port adapter converter detected [ 442.995763][ T4259] usb 7-1: mos7720: usb_control_msg() failed: -71 [ 442.996885][ T4259] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 442.997768][ T4259] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 443.010093][ T4259] usb 7-1: USB disconnect, device number 5 [ 443.033717][ T4259] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 443.041333][ T4259] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 443.041626][ T4259] mos7720 7-1:1.0: device disconnected [ 444.155336][ T4460] device hsr_slave_0 left promiscuous mode [ 444.157230][ T4460] device hsr_slave_1 left promiscuous mode [ 444.158969][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.159031][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.191487][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.191517][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.191854][ T4460] device bridge_slave_1 left promiscuous mode [ 444.193018][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.461504][ T4460] device bridge_slave_0 left promiscuous mode [ 444.461623][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.625370][ T4460] device veth1_macvtap left promiscuous mode [ 444.625486][ T4460] device veth0_macvtap left promiscuous mode [ 444.625527][ T4460] device veth1_vlan left promiscuous mode [ 444.629943][ T4460] device veth0_vlan left promiscuous mode [ 445.437791][ T25] kauditd_printk_skb: 44 callbacks suppressed [ 445.437800][ T25] audit: type=1800 audit(1787935589.925:1553): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 445.455464][ T25] audit: type=1800 audit(1787935589.935:1554): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 446.474677][ T25] audit: type=1800 audit(1787935590.955:1555): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 446.497298][ T4460] bond1 (unregistering): Released all slaves [ 446.691177][ T25] audit: type=1800 audit(1787935591.175:1556): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 446.722213][ T25] audit: type=1800 audit(1787935591.205:1557): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 446.774198][ T25] audit: type=1800 audit(1787935591.255:1558): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 446.843217][ T25] audit: type=1800 audit(1787935591.325:1559): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 446.900841][ T25] audit: type=1800 audit(1787935591.385:1560): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 448.078240][ T25] audit: type=1800 audit(1787935592.565:1561): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 448.165315][ T25] audit: type=1800 audit(1787935592.645:1562): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 448.732210][ T4460] team0 (unregistering): Port device team_slave_1 removed [ 448.794676][ T4460] team0 (unregistering): Port device team_slave_0 removed [ 448.833487][ T4460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.879912][ T4460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.472744][ T7832] loop7: detected capacity change from 0 to 1764 [ 450.547611][ T4460] bond0 (unregistering): Released all slaves [ 450.596961][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 450.596970][ T25] audit: type=1800 audit(1787935595.085:1567): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 450.722660][ T25] audit: type=1800 audit(1787935595.205:1568): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149320 res=0 errno=0 [ 450.723687][ T25] audit: type=1800 audit(1787935595.205:1569): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=149324 res=0 errno=0 [ 450.729050][ T25] audit: type=1800 audit(1787935595.215:1570): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149403 res=0 errno=0 [ 450.730279][ T25] audit: type=1800 audit(1787935595.215:1571): pid=4355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=149407 res=0 errno=0 [ 450.776374][ T7832] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 450.776630][ T7832] ISOFS: changing to secondary root [ 450.793644][ T7832] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 450.802384][ T25] audit: type=1800 audit(1787935595.285:1572): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 450.850247][ T25] audit: type=1800 audit(1787935595.335:1573): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 451.988105][ T25] audit: type=1800 audit(1787935596.475:1574): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 452.069448][ T25] audit: type=1800 audit(1787935596.555:1575): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 452.266898][ T25] audit: type=1800 audit(1787935596.755:1576): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 452.352886][ T7825] device syzkaller0 entered promiscuous mode [ 455.681865][ T25] kauditd_printk_skb: 11 callbacks suppressed [ 455.681875][ T25] audit: type=1800 audit(1787935600.165:1588): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 455.732444][ T25] audit: type=1800 audit(1787935600.215:1589): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 455.874986][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807900cc00: rx timeout, send abort [ 455.972004][ T25] audit: type=1800 audit(1787935600.455:1590): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 456.077941][ T25] audit: type=1800 audit(1787935600.565:1591): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 456.152742][ T25] audit: type=1800 audit(1787935600.635:1592): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 456.188708][ T25] audit: type=1800 audit(1787935600.675:1593): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149658 res=0 errno=0 [ 456.189947][ T25] audit: type=1800 audit(1787935600.675:1594): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=149662 res=0 errno=0 [ 456.224274][ T25] audit: type=1800 audit(1787935600.705:1595): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 456.256728][ T7873] loop4: detected capacity change from 0 to 16 [ 456.262735][ T25] audit: type=1800 audit(1787935600.745:1596): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 456.367295][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807900e800: rx timeout, send abort [ 456.867328][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807900e800: abort rx timeout. Force session deactivation [ 457.559500][ T25] audit: type=1800 audit(1787935602.045:1597): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 459.369432][ T7929] loop6: detected capacity change from 0 to 8 [ 460.484307][ T7941] syz.7.1231 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 460.484380][ T7941] CPU: 0 PID: 7941 Comm: syz.7.1231 Not tainted syzkaller #0 [ 460.484391][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.484403][ T7941] Call Trace: [ 460.484407][ T7941] [ 460.484411][ T7941] dump_stack_lvl+0x188/0x250 [ 460.484438][ T7941] ? show_regs_print_info+0x20/0x20 [ 460.484450][ T7941] ? load_image+0x410/0x410 [ 460.484464][ T7941] ? local_lock_release+0x170/0x170 [ 460.484476][ T7941] ? __rwlock_init+0x140/0x140 [ 460.484489][ T7941] dump_header+0xd9/0x780 [ 460.484501][ T7941] oom_kill_process+0x20e/0x3d0 [ 460.484513][ T7941] out_of_memory+0xdb2/0x1190 [ 460.484522][ T7941] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 460.484536][ T7941] ? mutex_lock_io_nested+0x60/0x60 [ 460.484551][ T7941] ? unregister_oom_notifier+0x20/0x20 [ 460.484567][ T7941] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 460.484578][ T7941] ? mem_cgroup_oom_trylock+0x210/0x210 [ 460.484593][ T7941] ? do_raw_spin_unlock+0x11d/0x230 [ 460.484605][ T7941] try_charge_memcg+0x1075/0x15b0 [ 460.484623][ T7941] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 460.484643][ T7941] ? rcu_lock_acquire+0x30/0x30 [ 460.484656][ T7941] charge_memcg+0x100/0x300 [ 460.484667][ T7941] ? __mem_cgroup_charge+0x80/0x80 [ 460.484682][ T7941] __mem_cgroup_charge+0x21/0x80 [ 460.484692][ T7941] shmem_add_to_page_cache+0xa8a/0x14d0 [ 460.484713][ T7941] ? put_page+0x200/0x200 [ 460.484725][ T7941] ? mark_lock+0x94/0x320 [ 460.484736][ T7941] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 460.484757][ T7941] shmem_getpage_gfp+0x1735/0x2c10 [ 460.484783][ T7941] shmem_write_begin+0xcd/0x1a0 [ 460.484796][ T7941] generic_perform_write+0x2b6/0x550 [ 460.484806][ T7941] ? atime_needs_update+0x770/0x770 [ 460.484824][ T7941] ? grab_cache_page_write_begin+0xa0/0xa0 [ 460.484835][ T7941] ? file_remove_privs+0x5d0/0x5d0 [ 460.484848][ T7941] ? rwsem_write_trylock+0x135/0x1c0 [ 460.484858][ T7941] ? clear_nonspinnable+0x60/0x60 [ 460.484870][ T7941] __generic_file_write_iter+0x261/0x4e0 [ 460.484879][ T7941] ? generic_write_checks+0x3be/0x460 [ 460.484894][ T7941] generic_file_write_iter+0xa6/0x1b0 [ 460.484905][ T7941] __kernel_write+0x522/0x980 [ 460.484919][ T7941] ? vfs_read+0xd50/0xd50 [ 460.484935][ T7941] ? get_dump_page+0xee/0x670 [ 460.484946][ T7941] ? down_read_killable+0x1ce/0x340 [ 460.484960][ T7941] __dump_emit+0x258/0x380 [ 460.484974][ T7941] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 460.484983][ T7941] ? generic_file_llseek_size+0x34a/0x3a0 [ 460.484998][ T7941] ? dump_emit+0x145/0x3d0 [ 460.485010][ T7941] dump_user_range+0x84/0x340 [ 460.485025][ T7941] elf_core_dump+0x2fe0/0x3530 [ 460.485046][ T7941] ? load_elf_library+0x980/0x980 [ 460.485060][ T7941] ? verify_lock_unused+0x140/0x140 [ 460.485072][ T7941] ? dump_vma_snapshot+0xaf1/0xe40 [ 460.485101][ T7941] ? rcu_read_lock_any_held+0xb0/0x130 [ 460.485114][ T7941] ? getname_kernel+0x142/0x2e0 [ 460.485128][ T7941] do_coredump+0x14e8/0x2a40 [ 460.485148][ T7941] ? nfs_stat_to_errno+0x170/0x170 [ 460.485173][ T7941] ? lock_chain_count+0x20/0x20 [ 460.485187][ T7941] ? _raw_spin_unlock_irq+0x1f/0x40 [ 460.485197][ T7941] ? lockdep_hardirqs_on+0x94/0x140 [ 460.485209][ T7941] get_signal+0x531/0x12e0 [ 460.485229][ T7941] arch_do_signal_or_restart+0xe6/0x12a0 [ 460.485242][ T7941] ? _raw_spin_unlock+0x40/0x40 [ 460.485258][ T7941] ? force_sig_info_to_task+0x318/0x3c0 [ 460.485271][ T7941] ? get_sigframe_size+0x10/0x10 [ 460.485284][ T7941] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 460.485302][ T7941] ? exit_to_user_mode_loop+0x3b/0x130 [ 460.485313][ T7941] exit_to_user_mode_loop+0x9e/0x130 [ 460.485323][ T7941] exit_to_user_mode_prepare+0xee/0x180 [ 460.485333][ T7941] irqentry_exit_to_user_mode+0x5/0x30 [ 460.485343][ T7941] exc_page_fault+0x88/0x100 [ 460.485355][ T7941] asm_exc_page_fault+0x22/0x30 [ 460.485368][ T7941] RIP: 0033:0x7f7a80508161 [ 460.485380][ T7941] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 460.485389][ T7941] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 460.485400][ T7941] RAX: 0000000000000000 RBX: 00007f7a8078ffa0 RCX: 00007f7a80508159 [ 460.485407][ T7941] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 460.485414][ T7941] RBP: 00007f7a8059f024 R08: 0000000000000000 R09: 0000000000000000 [ 460.485420][ T7941] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 460.485426][ T7941] R13: 00007f7a80790038 R14: 00007f7a8078ffa0 R15: 00007ffda1416b98 [ 460.485441][ T7941] [ 460.485467][ T7941] memory: usage 307200kB, limit 307200kB, failcnt 7005 [ 460.485477][ T7941] memory+swap: usage 384696kB, limit 9007199254740988kB, failcnt 0 [ 460.485486][ T7941] kmem: usage 3324kB, limit 9007199254740988kB, failcnt 0 [ 460.485495][ T7941] Memory cgroup stats for /syz7: [ 460.486109][ T7941] anon 741376 [ 460.486109][ T7941] file 310427648 [ 460.486109][ T7941] kernel_stack 196608 [ 460.486109][ T7941] pagetables 946176 [ 460.486109][ T7941] percpu 0 [ 460.486109][ T7941] sock 0 [ 460.486109][ T7941] shmem 310427648 [ 460.486109][ T7941] file_mapped 167481344 [ 460.486109][ T7941] file_dirty 0 [ 460.486109][ T7941] file_writeback 0 [ 460.486109][ T7941] swapcached 79355904 [ 460.486109][ T7941] anon_thp 0 [ 460.486109][ T7941] file_thp 0 [ 460.486109][ T7941] shmem_thp 0 [ 460.486109][ T7941] inactive_anon 311111680 [ 460.486109][ T7941] active_anon 45056 [ 460.486109][ T7941] inactive_file 0 [ 460.486109][ T7941] active_file 0 [ 460.486109][ T7941] unevictable 0 [ 460.486109][ T7941] slab_reclaimable 1293744 [ 460.486109][ T7941] slab_unreclaimable 846280 [ 460.486109][ T7941] slab 2140024 [ 460.486109][ T7941] workingset_refault_anon 0 [ 460.486109][ T7941] workingset_refault_file 0 [ 460.486109][ T7941] workingset_activate_anon 0 [ 460.486138][ T7941] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.993,pid=7238,uid=0 [ 460.486470][ T7941] Memory cgroup out of memory: Killed process 7238 (syz.7.993) total-vm:202600kB, anon-rss:1384kB, file-rss:20648kB, shmem-rss:83284kB, UID:0 pgtables:272kB oom_score_adj:1000 [ 462.499763][ T28] oom_reaper: reaped process 7238 (syz.7.993), now anon-rss:0kB, file-rss:20480kB, shmem-rss:83284kB [ 462.525924][ T7941] syz.7.1231 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 462.525946][ T7941] CPU: 0 PID: 7941 Comm: syz.7.1231 Not tainted syzkaller #0 [ 462.525957][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 462.525964][ T7941] Call Trace: [ 462.525968][ T7941] [ 462.525973][ T7941] dump_stack_lvl+0x188/0x250 [ 462.525991][ T7941] ? show_regs_print_info+0x20/0x20 [ 462.526003][ T7941] ? load_image+0x410/0x410 [ 462.526016][ T7941] ? local_lock_release+0x170/0x170 [ 462.526027][ T7941] ? __rwlock_init+0x140/0x140 [ 462.526041][ T7941] dump_header+0xd9/0x780 [ 462.526053][ T7941] oom_kill_process+0x20e/0x3d0 [ 462.526065][ T7941] out_of_memory+0xdb2/0x1190 [ 462.526075][ T7941] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 462.526088][ T7941] ? mutex_lock_io_nested+0x60/0x60 [ 462.526104][ T7941] ? unregister_oom_notifier+0x20/0x20 [ 462.526119][ T7941] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 462.526131][ T7941] ? mem_cgroup_oom_trylock+0x210/0x210 [ 462.526146][ T7941] ? do_raw_spin_unlock+0x11d/0x230 [ 462.526158][ T7941] try_charge_memcg+0x1075/0x15b0 [ 462.526176][ T7941] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 462.526196][ T7941] ? rcu_lock_acquire+0x30/0x30 [ 462.526209][ T7941] charge_memcg+0x100/0x300 [ 462.526220][ T7941] ? __mem_cgroup_charge+0x80/0x80 [ 462.526235][ T7941] __mem_cgroup_charge+0x21/0x80 [ 462.526245][ T7941] shmem_add_to_page_cache+0xa8a/0x14d0 [ 462.526263][ T7941] ? put_page+0x200/0x200 [ 462.526275][ T7941] ? mark_lock+0x94/0x320 [ 462.526286][ T7941] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 462.526301][ T7941] shmem_getpage_gfp+0x1735/0x2c10 [ 462.526327][ T7941] shmem_write_begin+0xcd/0x1a0 [ 462.526340][ T7941] generic_perform_write+0x2b6/0x550 [ 462.526350][ T7941] ? atime_needs_update+0x770/0x770 [ 462.526369][ T7941] ? grab_cache_page_write_begin+0xa0/0xa0 [ 462.526379][ T7941] ? file_remove_privs+0x5d0/0x5d0 [ 462.526392][ T7941] ? rwsem_write_trylock+0x135/0x1c0 [ 462.526407][ T7941] ? clear_nonspinnable+0x60/0x60 [ 462.526419][ T7941] __generic_file_write_iter+0x261/0x4e0 [ 462.526428][ T7941] ? generic_write_checks+0x3be/0x460 [ 462.526442][ T7941] generic_file_write_iter+0xa6/0x1b0 [ 462.526453][ T7941] __kernel_write+0x522/0x980 [ 462.526467][ T7941] ? vfs_read+0xd50/0xd50 [ 462.526483][ T7941] ? get_dump_page+0xee/0x670 [ 462.526494][ T7941] ? down_read_killable+0x1ce/0x340 [ 462.526508][ T7941] __dump_emit+0x258/0x380 [ 462.526522][ T7941] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 462.526531][ T7941] ? generic_file_llseek_size+0x34a/0x3a0 [ 462.526542][ T7941] ? dump_emit+0x145/0x3d0 [ 462.526555][ T7941] dump_user_range+0x84/0x340 [ 462.526567][ T7941] elf_core_dump+0x2fe0/0x3530 [ 462.526587][ T7941] ? load_elf_library+0x980/0x980 [ 462.526601][ T7941] ? verify_lock_unused+0x140/0x140 [ 462.526614][ T7941] ? dump_vma_snapshot+0xaf1/0xe40 [ 462.526643][ T7941] ? rcu_read_lock_any_held+0xb0/0x130 [ 462.526656][ T7941] ? getname_kernel+0x142/0x2e0 [ 462.526672][ T7941] do_coredump+0x14e8/0x2a40 [ 462.526692][ T7941] ? nfs_stat_to_errno+0x170/0x170 [ 462.526714][ T7941] ? lock_chain_count+0x20/0x20 [ 462.526728][ T7941] ? _raw_spin_unlock_irq+0x1f/0x40 [ 462.526738][ T7941] ? lockdep_hardirqs_on+0x94/0x140 [ 462.526751][ T7941] get_signal+0x531/0x12e0 [ 462.526771][ T7941] arch_do_signal_or_restart+0xe6/0x12a0 [ 462.526785][ T7941] ? _raw_spin_unlock+0x40/0x40 [ 462.526798][ T7941] ? force_sig_info_to_task+0x318/0x3c0 [ 462.526811][ T7941] ? get_sigframe_size+0x10/0x10 [ 462.526824][ T7941] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 462.526841][ T7941] ? exit_to_user_mode_loop+0x3b/0x130 [ 462.526852][ T7941] exit_to_user_mode_loop+0x9e/0x130 [ 462.526862][ T7941] exit_to_user_mode_prepare+0xee/0x180 [ 462.526872][ T7941] irqentry_exit_to_user_mode+0x5/0x30 [ 462.526882][ T7941] exc_page_fault+0x88/0x100 [ 462.526893][ T7941] asm_exc_page_fault+0x22/0x30 [ 462.526903][ T7941] RIP: 0033:0x7f7a80508161 [ 462.526913][ T7941] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 462.526922][ T7941] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 462.526933][ T7941] RAX: 0000000000000000 RBX: 00007f7a8078ffa0 RCX: 00007f7a80508159 [ 462.526940][ T7941] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 462.526947][ T7941] RBP: 00007f7a8059f024 R08: 0000000000000000 R09: 0000000000000000 [ 462.526954][ T7941] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 462.526960][ T7941] R13: 00007f7a80790038 R14: 00007f7a8078ffa0 R15: 00007ffda1416b98 [ 462.526975][ T7941] [ 462.526979][ T7941] memory: usage 307200kB, limit 307200kB, failcnt 22906 [ 462.526987][ T7941] memory+swap: usage 384696kB, limit 9007199254740988kB, failcnt 0 [ 462.526994][ T7941] kmem: usage 3324kB, limit 9007199254740988kB, failcnt 0 [ 462.527001][ T7941] Memory cgroup stats for /syz7: [ 462.527064][ T7941] anon 610304 [ 462.527064][ T7941] file 310558720 [ 462.527064][ T7941] kernel_stack 196608 [ 462.527064][ T7941] pagetables 946176 [ 462.527064][ T7941] percpu 0 [ 462.527064][ T7941] sock 0 [ 462.527064][ T7941] shmem 310558720 [ 462.527064][ T7941] file_mapped 167481344 [ 462.527064][ T7941] file_dirty 0 [ 462.527064][ T7941] file_writeback 0 [ 462.527064][ T7941] swapcached 79507456 [ 462.527064][ T7941] anon_thp 0 [ 462.527064][ T7941] file_thp 0 [ 462.527064][ T7941] shmem_thp 0 [ 462.527064][ T7941] inactive_anon 311050240 [ 462.527064][ T7941] active_anon 90112 [ 462.527064][ T7941] inactive_file 0 [ 462.527064][ T7941] active_file 0 [ 462.527064][ T7941] unevictable 0 [ 462.527064][ T7941] slab_reclaimable 1294456 [ 462.527064][ T7941] slab_unreclaimable 846280 [ 462.527064][ T7941] slab 2140736 [ 462.527064][ T7941] workingset_refault_anon 0 [ 462.527064][ T7941] workingset_refault_file 0 [ 462.527064][ T7941] workingset_activate_anon 0 [ 462.527088][ T7941] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1022,pid=7324,uid=0 [ 462.527147][ T7941] Memory cgroup out of memory: Killed process 7324 (syz.7.1022) total-vm:200552kB, anon-rss:1376kB, file-rss:20648kB, shmem-rss:66916kB, UID:0 pgtables:240kB oom_score_adj:1000 [ 463.550111][ T4259] Bluetooth: hci5: command 0x0406 tx timeout [ 463.562169][ T25] kauditd_printk_skb: 11 callbacks suppressed [ 463.562178][ T25] audit: type=1800 audit(1787935608.045:1609): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 463.698085][ T25] audit: type=1800 audit(1787935608.185:1610): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 463.799300][ T7954] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 463.883849][ T25] audit: type=1800 audit(1787935608.365:1611): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 463.973915][ T7957] loop3: detected capacity change from 0 to 512 [ 464.026088][ T25] audit: type=1800 audit(1787935608.515:1612): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 464.081588][ T7957] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 464.081696][ T7957] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.179585][ T25] audit: type=1800 audit(1787935608.665:1613): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 464.375436][ T7965] loop5: detected capacity change from 0 to 7 [ 464.390431][ T4355] Dev loop5: unable to read RDB block 7 [ 464.390483][ T4355] loop5: unable to read partition table [ 464.390554][ T4355] loop5: partition table beyond EOD, truncated [ 464.457700][ T7965] Dev loop5: unable to read RDB block 7 [ 464.457738][ T7965] loop5: unable to read partition table [ 464.457805][ T7965] loop5: partition table beyond EOD, truncated [ 464.462526][ T7965] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 464.467090][ T3559] Dev loop5: unable to read RDB block 7 [ 464.467118][ T3559] loop5: unable to read partition table [ 464.467174][ T3559] loop5: partition table beyond EOD, truncated [ 464.486810][ T25] audit: type=1800 audit(1787935608.975:1614): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35726 res=0 errno=0 [ 464.577173][ T28] oom_reaper: reaped process 7324 (syz.7.1022), now anon-rss:0kB, file-rss:20480kB, shmem-rss:66916kB [ 464.610592][ T25] audit: type=1800 audit(1787935609.095:1615): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 464.661240][ T25] audit: type=1800 audit(1787935609.145:1616): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 465.926149][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1246'. [ 466.101768][ T25] audit: type=1800 audit(1787935610.585:1617): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 466.360955][ T25] audit: type=1800 audit(1787935610.845:1618): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 466.444285][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 466.444399][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1248'. [ 466.475741][ T1334] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 466.586850][ T7740] syz.4.1170 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 466.586930][ T7740] CPU: 0 PID: 7740 Comm: syz.4.1170 Not tainted syzkaller #0 [ 466.586941][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.586947][ T7740] Call Trace: [ 466.586951][ T7740] [ 466.586956][ T7740] dump_stack_lvl+0x188/0x250 [ 466.586974][ T7740] ? show_regs_print_info+0x20/0x20 [ 466.586986][ T7740] ? load_image+0x410/0x410 [ 466.587000][ T7740] ? local_lock_release+0x170/0x170 [ 466.587011][ T7740] ? __rwlock_init+0x140/0x140 [ 466.587024][ T7740] dump_header+0xd9/0x780 [ 466.587036][ T7740] oom_kill_process+0x20e/0x3d0 [ 466.587049][ T7740] out_of_memory+0xdb2/0x1190 [ 466.587059][ T7740] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 466.587072][ T7740] ? mutex_lock_io_nested+0x60/0x60 [ 466.587096][ T7740] ? unregister_oom_notifier+0x20/0x20 [ 466.587112][ T7740] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 466.587123][ T7740] ? mem_cgroup_oom_trylock+0x210/0x210 [ 466.587138][ T7740] ? do_raw_spin_unlock+0x11d/0x230 [ 466.587150][ T7740] try_charge_memcg+0x1075/0x15b0 [ 466.587168][ T7740] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 466.587188][ T7740] ? rcu_lock_acquire+0x30/0x30 [ 466.587201][ T7740] charge_memcg+0x100/0x300 [ 466.587212][ T7740] ? __mem_cgroup_charge+0x80/0x80 [ 466.587227][ T7740] __mem_cgroup_charge+0x21/0x80 [ 466.587237][ T7740] shmem_add_to_page_cache+0xa8a/0x14d0 [ 466.587256][ T7740] ? put_page+0x200/0x200 [ 466.587269][ T7740] ? verify_lock_unused+0x140/0x140 [ 466.587280][ T7740] ? mark_lock+0x94/0x320 [ 466.587293][ T7740] shmem_getpage_gfp+0x1735/0x2c10 [ 466.587319][ T7740] shmem_fault+0x1ac/0x550 [ 466.587333][ T7740] ? shmem_fallocate+0xec0/0xec0 [ 466.587345][ T7740] ? filemap_read_page+0x4b0/0x4b0 [ 466.587354][ T7740] ? count_memcg_event_mm+0x324/0x370 [ 466.587369][ T7740] __do_fault+0x141/0x330 [ 466.587382][ T7740] handle_mm_fault+0x2982/0x4440 [ 466.587399][ T7740] ? get_page+0xe0/0xe0 [ 466.587413][ T7740] ? follow_page_mask+0xa51/0x12b0 [ 466.587430][ T7740] __get_user_pages+0x952/0x11e0 [ 466.587445][ T7740] ? read_lock_is_recursive+0x10/0x10 [ 466.587458][ T7740] ? populate_vma_page_range+0x290/0x290 [ 466.587470][ T7740] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 466.587484][ T7740] ? get_dump_page+0xee/0x670 [ 466.587494][ T7740] ? down_read_killable+0x1ce/0x340 [ 466.587507][ T7740] get_dump_page+0x18c/0x670 [ 466.587520][ T7740] ? fault_in_readable+0x150/0x150 [ 466.587531][ T7740] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 466.587541][ T7740] ? generic_file_llseek_size+0x34a/0x3a0 [ 466.587553][ T7740] ? dump_emit+0x145/0x3d0 [ 466.587565][ T7740] dump_user_range+0x54/0x340 [ 466.587578][ T7740] elf_core_dump+0x2fe0/0x3530 [ 466.587598][ T7740] ? load_elf_library+0x980/0x980 [ 466.587612][ T7740] ? verify_lock_unused+0x140/0x140 [ 466.587625][ T7740] ? dump_vma_snapshot+0xaf1/0xe40 [ 466.587654][ T7740] ? rcu_read_lock_any_held+0xb0/0x130 [ 466.587667][ T7740] ? getname_kernel+0x142/0x2e0 [ 466.587682][ T7740] do_coredump+0x14e8/0x2a40 [ 466.587702][ T7740] ? nfs_stat_to_errno+0x170/0x170 [ 466.587724][ T7740] ? lock_chain_count+0x20/0x20 [ 466.587739][ T7740] ? _raw_spin_unlock_irq+0x1f/0x40 [ 466.587748][ T7740] ? lockdep_hardirqs_on+0x94/0x140 [ 466.587761][ T7740] get_signal+0x531/0x12e0 [ 466.587781][ T7740] arch_do_signal_or_restart+0xe6/0x12a0 [ 466.587794][ T7740] ? _raw_spin_unlock+0x40/0x40 [ 466.587808][ T7740] ? force_sig_info_to_task+0x318/0x3c0 [ 466.587820][ T7740] ? get_sigframe_size+0x10/0x10 [ 466.587833][ T7740] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 466.587850][ T7740] ? exit_to_user_mode_loop+0x3b/0x130 [ 466.587862][ T7740] exit_to_user_mode_loop+0x9e/0x130 [ 466.587872][ T7740] exit_to_user_mode_prepare+0xee/0x180 [ 466.587882][ T7740] irqentry_exit_to_user_mode+0x5/0x30 [ 466.587892][ T7740] exc_page_fault+0x88/0x100 [ 466.587903][ T7740] asm_exc_page_fault+0x22/0x30 [ 466.587913][ T7740] RIP: 0033:0x7ff02b6f9bd7 [ 466.587924][ T7740] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 466.587933][ T7740] RSP: 002b:00007ff029a7d120 EFLAGS: 00010202 [ 466.587943][ T7740] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007ff02b844159 [ 466.587950][ T7740] RDX: 00007ff029a7d140 RSI: 00007ff029a7d270 RDI: 000000000000000b [ 466.587957][ T7740] RBP: 00007ff02b8db024 R08: 0000000000000000 R09: 0000000000000000 [ 466.587963][ T7740] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 466.587969][ T7740] R13: 00007ff02bacc038 R14: 00007ff02bacbfa0 R15: 00007fff8db97788 [ 466.587985][ T7740] [ 466.587989][ T7740] memory: usage 307200kB, limit 307200kB, failcnt 5651 [ 466.587996][ T7740] memory+swap: usage 354708kB, limit 9007199254740988kB, failcnt 0 [ 466.588004][ T7740] kmem: usage 5572kB, limit 9007199254740988kB, failcnt 0 [ 466.588011][ T7740] Memory cgroup stats for /syz4: [ 466.588627][ T7740] anon 1327104 [ 466.588627][ T7740] file 307531776 [ 466.588627][ T7740] kernel_stack 360448 [ 466.588627][ T7740] pagetables 1249280 [ 466.588627][ T7740] percpu 7184 [ 466.588627][ T7740] sock 0 [ 466.588627][ T7740] shmem 307527680 [ 466.588627][ T7740] file_mapped 144760832 [ 466.588627][ T7740] file_dirty 0 [ 466.588627][ T7740] file_writeback 0 [ 466.588627][ T7740] swapcached 48648192 [ 466.588627][ T7740] anon_thp 0 [ 466.588627][ T7740] file_thp 0 [ 466.588627][ T7740] shmem_thp 0 [ 466.588627][ T7740] inactive_anon 308768768 [ 466.588627][ T7740] active_anon 86016 [ 466.588627][ T7740] inactive_file 12288 [ 466.588627][ T7740] active_file 0 [ 466.588627][ T7740] unevictable 0 [ 466.588627][ T7740] slab_reclaimable 1116896 [ 466.588627][ T7740] slab_unreclaimable 714872 [ 466.588627][ T7740] slab 1831768 [ 466.588627][ T7740] workingset_refault_anon 0 [ 466.588627][ T7740] workingset_refault_file 407 [ 466.588627][ T7740] workingset_activate_anon 0 [ 466.588654][ T7740] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.955,pid=7139,uid=0 [ 466.591156][ T7740] Memory cgroup out of memory: Killed process 7139 (syz.4.955) total-vm:202600kB, anon-rss:1388kB, file-rss:20608kB, shmem-rss:80384kB, UID:0 pgtables:260kB oom_score_adj:1000 [ 466.835693][ T1334] usb 7-1: config index 0 descriptor too short (expected 71, got 53) [ 466.835730][ T1334] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43690, setting to 1024 [ 466.835744][ T1334] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 466.841928][ T7998] loop0: detected capacity change from 0 to 1024 [ 466.995769][ T1334] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 466.995789][ T1334] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.995799][ T1334] usb 7-1: Product: syz [ 466.995808][ T1334] usb 7-1: Manufacturer: syz [ 466.995816][ T1334] usb 7-1: SerialNumber: syz [ 467.016030][ T7984] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 467.036380][ T1334] mos7720 7-1:1.0: Moschip 2 port adapter converter detected [ 468.232402][ T8003] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 468.335734][ T1334] usb 7-1: mos7720: usb_control_msg() failed: -71 [ 468.336911][ T1334] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 468.338580][ T1334] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 468.346236][ T1334] usb 7-1: USB disconnect, device number 6 [ 468.367185][ T1334] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 468.384130][ T1334] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 468.384699][ T1334] mos7720 7-1:1.0: device disconnected [ 468.583898][ T25] kauditd_printk_skb: 22 callbacks suppressed [ 468.583908][ T25] audit: type=1800 audit(1787935613.065:1641): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 468.898188][ T28] oom_reaper: reaped process 7139 (syz.4.955), now anon-rss:0kB, file-rss:20480kB, shmem-rss:80384kB [ 469.288498][ T7416] syz.4.1062 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 469.288523][ T7416] CPU: 0 PID: 7416 Comm: syz.4.1062 Not tainted syzkaller #0 [ 469.288534][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.288540][ T7416] Call Trace: [ 469.288545][ T7416] [ 469.288549][ T7416] dump_stack_lvl+0x188/0x250 [ 469.288567][ T7416] ? show_regs_print_info+0x20/0x20 [ 469.288579][ T7416] ? load_image+0x410/0x410 [ 469.288592][ T7416] ? local_lock_release+0x170/0x170 [ 469.288604][ T7416] ? __rwlock_init+0x140/0x140 [ 469.288617][ T7416] dump_header+0xd9/0x780 [ 469.288629][ T7416] oom_kill_process+0x20e/0x3d0 [ 469.288642][ T7416] out_of_memory+0xdb2/0x1190 [ 469.288651][ T7416] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 469.288665][ T7416] ? mutex_lock_io_nested+0x60/0x60 [ 469.288681][ T7416] ? unregister_oom_notifier+0x20/0x20 [ 469.288696][ T7416] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 469.288708][ T7416] ? mem_cgroup_oom_trylock+0x210/0x210 [ 469.288722][ T7416] ? do_raw_spin_unlock+0x11d/0x230 [ 469.288742][ T7416] try_charge_memcg+0x1075/0x15b0 [ 469.288759][ T7416] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 469.288779][ T7416] ? rcu_lock_acquire+0x30/0x30 [ 469.288792][ T7416] charge_memcg+0x100/0x300 [ 469.288803][ T7416] ? __mem_cgroup_charge+0x80/0x80 [ 469.288818][ T7416] __mem_cgroup_charge+0x21/0x80 [ 469.288828][ T7416] shmem_add_to_page_cache+0xa8a/0x14d0 [ 469.288847][ T7416] ? put_page+0x200/0x200 [ 469.288859][ T7416] ? mark_lock+0x94/0x320 [ 469.288870][ T7416] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 469.288884][ T7416] shmem_getpage_gfp+0x1735/0x2c10 [ 469.288910][ T7416] shmem_write_begin+0xcd/0x1a0 [ 469.288923][ T7416] generic_perform_write+0x2b6/0x550 [ 469.288933][ T7416] ? atime_needs_update+0x770/0x770 [ 469.288951][ T7416] ? grab_cache_page_write_begin+0xa0/0xa0 [ 469.288961][ T7416] ? file_remove_privs+0x5d0/0x5d0 [ 469.288974][ T7416] ? rwsem_write_trylock+0x135/0x1c0 [ 469.288985][ T7416] ? clear_nonspinnable+0x60/0x60 [ 469.288997][ T7416] __generic_file_write_iter+0x261/0x4e0 [ 469.289006][ T7416] ? generic_write_checks+0x3be/0x460 [ 469.289020][ T7416] generic_file_write_iter+0xa6/0x1b0 [ 469.289031][ T7416] __kernel_write+0x522/0x980 [ 469.289045][ T7416] ? vfs_read+0xd50/0xd50 [ 469.289060][ T7416] ? get_dump_page+0xee/0x670 [ 469.289071][ T7416] ? down_read_killable+0x1ce/0x340 [ 469.289086][ T7416] __dump_emit+0x258/0x380 [ 469.289100][ T7416] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 469.289109][ T7416] ? generic_file_llseek_size+0x34a/0x3a0 [ 469.289120][ T7416] ? dump_emit+0x145/0x3d0 [ 469.289132][ T7416] dump_user_range+0x84/0x340 [ 469.289145][ T7416] elf_core_dump+0x2fe0/0x3530 [ 469.289166][ T7416] ? load_elf_library+0x980/0x980 [ 469.289180][ T7416] ? verify_lock_unused+0x140/0x140 [ 469.289192][ T7416] ? dump_vma_snapshot+0xaf1/0xe40 [ 469.289221][ T7416] ? rcu_read_lock_any_held+0xb0/0x130 [ 469.289235][ T7416] ? getname_kernel+0x142/0x2e0 [ 469.289250][ T7416] do_coredump+0x14e8/0x2a40 [ 469.289270][ T7416] ? nfs_stat_to_errno+0x170/0x170 [ 469.289292][ T7416] ? lock_chain_count+0x20/0x20 [ 469.289306][ T7416] ? _raw_spin_unlock_irq+0x1f/0x40 [ 469.289316][ T7416] ? lockdep_hardirqs_on+0x94/0x140 [ 469.289328][ T7416] get_signal+0x531/0x12e0 [ 469.289348][ T7416] arch_do_signal_or_restart+0xe6/0x12a0 [ 469.289362][ T7416] ? _raw_spin_unlock+0x40/0x40 [ 469.289375][ T7416] ? force_sig_info_to_task+0x318/0x3c0 [ 469.289388][ T7416] ? get_sigframe_size+0x10/0x10 [ 469.289400][ T7416] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 469.289418][ T7416] ? exit_to_user_mode_loop+0x3b/0x130 [ 469.289429][ T7416] exit_to_user_mode_loop+0x9e/0x130 [ 469.289439][ T7416] exit_to_user_mode_prepare+0xee/0x180 [ 469.289448][ T7416] irqentry_exit_to_user_mode+0x5/0x30 [ 469.289458][ T7416] exc_page_fault+0x88/0x100 [ 469.289470][ T7416] asm_exc_page_fault+0x22/0x30 [ 469.289479][ T7416] RIP: 0033:0x7ff02b6f9bd7 [ 469.289490][ T7416] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 469.289499][ T7416] RSP: 002b:00007ff029a7d120 EFLAGS: 00010202 [ 469.289509][ T7416] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007ff02b844159 [ 469.289515][ T7416] RDX: 00007ff029a7d140 RSI: 00007ff029a7d270 RDI: 000000000000000b [ 469.289522][ T7416] RBP: 00007ff02b8db024 R08: 0000000000000000 R09: 0000000000000000 [ 469.289528][ T7416] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 469.289534][ T7416] R13: 00007ff02bacc038 R14: 00007ff02bacbfa0 R15: 00007fff8db97788 [ 469.289549][ T7416] [ 469.289553][ T7416] memory: usage 307200kB, limit 307200kB, failcnt 6242 [ 469.289561][ T7416] memory+swap: usage 354708kB, limit 9007199254740988kB, failcnt 0 [ 469.289569][ T7416] kmem: usage 5332kB, limit 9007199254740988kB, failcnt 0 [ 469.289575][ T7416] Memory cgroup stats for /syz4: [ 469.289642][ T7416] anon 1044480 [ 469.289642][ T7416] file 308060160 [ 469.289642][ T7416] kernel_stack 262144 [ 469.289642][ T7416] pagetables 1126400 [ 469.289642][ T7416] percpu 7184 [ 469.289642][ T7416] sock 0 [ 469.289642][ T7416] shmem 308051968 [ 469.289642][ T7416] file_mapped 145104896 [ 469.289642][ T7416] file_dirty 8192 [ 469.289642][ T7416] file_writeback 0 [ 469.289642][ T7416] swapcached 48816128 [ 469.289642][ T7416] anon_thp 0 [ 469.289642][ T7416] file_thp 0 [ 469.289642][ T7416] shmem_thp 0 [ 469.289642][ T7416] inactive_anon 309002240 [ 469.289642][ T7416] active_anon 94208 [ 469.289642][ T7416] inactive_file 12288 [ 469.289642][ T7416] active_file 4096 [ 469.289642][ T7416] unevictable 0 [ 469.289642][ T7416] slab_reclaimable 1117376 [ 469.289642][ T7416] slab_unreclaimable 702824 [ 469.289642][ T7416] slab 1820200 [ 469.289642][ T7416] workingset_refault_anon 0 [ 469.289642][ T7416] workingset_refault_file 458 [ 469.289667][ T7416] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1019,pid=7309,uid=0 [ 469.289725][ T7416] Memory cgroup out of memory: Killed process 7309 (syz.4.1019) total-vm:202600kB, anon-rss:1388kB, file-rss:20608kB, shmem-rss:50552kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 469.395105][ T25] audit: type=1800 audit(1787935613.875:1642): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 469.836002][ T8033] loop3: detected capacity change from 0 to 164 [ 469.916495][ T25] audit: type=1800 audit(1787935614.405:1643): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 470.093464][ T8033] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 470.093694][ T8033] isofs_fill_super: root inode is not a directory. Corrupted media? [ 470.104993][ T4338] hfsplus: b-tree write err: -5, ino 25 [ 470.105323][ T4338] hfsplus: b-tree write err: -5, ino 4 [ 470.114356][ T4338] hfsplus: b-tree write err: -5, ino 2 [ 470.428214][ T8040] loop3: detected capacity change from 0 to 512 [ 470.488772][ T25] audit: type=1800 audit(1787935614.975:1644): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 470.743345][ T25] audit: type=1800 audit(1787935615.225:1645): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 470.804150][ T8040] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 470.971597][ T25] audit: type=1800 audit(1787935615.455:1646): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 471.296997][ T28] oom_reaper: reaped process 7309 (syz.4.1019), now anon-rss:0kB, file-rss:20480kB, shmem-rss:50552kB [ 471.388156][ T8054] loop0: detected capacity change from 0 to 2048 [ 471.615820][ T8040] EXT4-fs (loop3): orphan cleanup on readonly fs [ 471.615894][ T8040] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 471.615910][ T8040] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 471.615919][ T8040] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.1257: bad orphan inode 768 [ 471.617760][ T8040] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,delalloc,,errors=continue. Quota mode: writeback. [ 471.632639][ T25] audit: type=1800 audit(1787935616.115:1647): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 471.644878][ T8040] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 471.712694][ T25] audit: type=1800 audit(1787935616.195:1648): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 471.746182][ T8040] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 471.784430][ T25] audit: type=1800 audit(1787935616.265:1649): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 471.832153][ T8054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 471.849619][ T8059] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 471.886338][ T8063] device syzkaller0 entered promiscuous mode [ 471.888761][ T25] audit: type=1800 audit(1787935616.375:1650): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 471.891594][ T8059] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 471.964879][ T4222] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 471.964960][ T4222] CPU: 0 PID: 4222 Comm: syz-executor Not tainted syzkaller #0 [ 471.964972][ T4222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.964978][ T4222] Call Trace: [ 471.964983][ T4222] [ 471.964988][ T4222] dump_stack_lvl+0x188/0x250 [ 471.965006][ T4222] ? show_regs_print_info+0x20/0x20 [ 471.965018][ T4222] ? load_image+0x410/0x410 [ 471.965031][ T4222] ? local_lock_release+0x170/0x170 [ 471.965042][ T4222] ? __rwlock_init+0x140/0x140 [ 471.965055][ T4222] dump_header+0xd9/0x780 [ 471.965067][ T4222] oom_kill_process+0x20e/0x3d0 [ 471.965080][ T4222] out_of_memory+0xdb2/0x1190 [ 471.965089][ T4222] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 471.965102][ T4222] ? mutex_lock_io_nested+0x60/0x60 [ 471.965118][ T4222] ? unregister_oom_notifier+0x20/0x20 [ 471.965133][ T4222] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 471.965144][ T4222] ? mem_cgroup_oom_trylock+0x210/0x210 [ 471.965158][ T4222] ? do_raw_spin_unlock+0x11d/0x230 [ 471.965170][ T4222] try_charge_memcg+0x1075/0x15b0 [ 471.965188][ T4222] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 471.965198][ T4222] ? rcu_lock_acquire+0x30/0x30 [ 471.965220][ T4222] obj_cgroup_charge_pages+0x87/0x190 [ 471.965230][ T4222] ? __memcg_kmem_charge_page+0x380/0x380 [ 471.965241][ T4222] ? rcu_lock_acquire+0x30/0x30 [ 471.965252][ T4222] obj_cgroup_charge+0x19f/0x320 [ 471.965263][ T4222] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 471.965279][ T4222] slab_pre_alloc_hook+0x9d/0xc0 [ 471.965290][ T4222] ? sk_prot_alloc+0x57/0x210 [ 471.965301][ T4222] kmem_cache_alloc+0x3d/0x280 [ 471.965313][ T4222] sk_prot_alloc+0x57/0x210 [ 471.965323][ T4222] ? sk_alloc+0x1d/0x310 [ 471.965334][ T4222] sk_alloc+0x2f/0x310 [ 471.965343][ T4222] ? inet_create+0x702/0xee0 [ 471.965356][ T4222] inet_create+0x71e/0xee0 [ 471.965368][ T4222] __sock_create+0x473/0x910 [ 471.965382][ T4222] __sys_socket+0xe2/0x170 [ 471.965394][ T4222] __x64_sys_socket+0x76/0x80 [ 471.965404][ T4222] do_syscall_64+0x4c/0xa0 [ 471.965413][ T4222] ? clear_bhb_loop+0x30/0x80 [ 471.965423][ T4222] ? clear_bhb_loop+0x30/0x80 [ 471.965433][ T4222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 471.965443][ T4222] RIP: 0033:0x7ff02b8459c7 [ 471.965453][ T4222] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.965462][ T4222] RSP: 002b:00007fff8db97428 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 471.965474][ T4222] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff02b8459c7 [ 471.965481][ T4222] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 471.965488][ T4222] RBP: 00007fff8db97b2c R08: 0000000000000000 R09: 0000000000000000 [ 471.965494][ T4222] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000108 [ 471.965501][ T4222] R13: 00000000000927c0 R14: 0000000000072597 R15: 00007fff8db97b80 [ 471.965515][ T4222] [ 471.965519][ T4222] memory: usage 307200kB, limit 307200kB, failcnt 6655 [ 471.965527][ T4222] memory+swap: usage 354708kB, limit 9007199254740988kB, failcnt 0 [ 471.965534][ T4222] kmem: usage 3200kB, limit 9007199254740988kB, failcnt 0 [ 471.965541][ T4222] Memory cgroup stats for /syz4: [ 472.174806][ T4222] anon 913408 [ 472.174806][ T4222] file 310374400 [ 472.174806][ T4222] kernel_stack 262144 [ 472.174806][ T4222] pagetables 929792 [ 472.174806][ T4222] percpu 7184 [ 472.174806][ T4222] sock 0 [ 472.174806][ T4222] shmem 310374400 [ 472.174806][ T4222] file_mapped 43184128 [ 472.174806][ T4222] file_dirty 0 [ 472.174806][ T4222] file_writeback 0 [ 472.174806][ T4222] swapcached 48992256 [ 472.174806][ T4222] anon_thp 0 [ 472.174806][ T4222] file_thp 0 [ 472.174806][ T4222] shmem_thp 0 [ 472.174806][ T4222] inactive_anon 300695552 [ 472.174806][ T4222] active_anon 10592256 [ 472.174806][ T4222] inactive_file 8192 [ 472.174806][ T4222] active_file 0 [ 472.174806][ T4222] unevictable 0 [ 472.174806][ T4222] slab_reclaimable 1109000 [ 472.174806][ T4222] slab_unreclaimable 625744 [ 472.174806][ T4222] slab 1734744 [ 472.174806][ T4222] workingset_refault_anon 0 [ 472.174806][ T4222] workingset_refault_file 489 [ 472.174806][ T4222] workingset_activate_anon 0 [ 472.174834][ T4222] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1062,pid=7416,uid=0 [ 472.176488][ T4222] Memory cgroup out of memory: Killed process 7416 (syz.4.1062) total-vm:102244kB, anon-rss:1520kB, file-rss:51080kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 472.495253][ T8080] loop6: detected capacity change from 0 to 1024 [ 473.865036][ T4340] hfsplus: bad catalog file entry [ 473.865122][ T4340] hfsplus: b-tree write err: -5, ino 3 [ 474.022764][ T25] kauditd_printk_skb: 7 callbacks suppressed [ 474.022773][ T25] audit: type=1800 audit(1787935618.515:1658): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 474.111697][ T25] audit: type=1800 audit(1787935618.595:1659): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 474.125430][ T8091] loop7: detected capacity change from 0 to 4096 [ 474.131008][ T8099] loop6: detected capacity change from 0 to 512 [ 475.147984][ T8102] syz.4.1256 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 475.148063][ T8102] CPU: 0 PID: 8102 Comm: syz.4.1256 Not tainted syzkaller #0 [ 475.148075][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.148081][ T8102] Call Trace: [ 475.148086][ T8102] [ 475.148091][ T8102] dump_stack_lvl+0x188/0x250 [ 475.148109][ T8102] ? show_regs_print_info+0x20/0x20 [ 475.148121][ T8102] ? load_image+0x410/0x410 [ 475.148134][ T8102] ? local_lock_release+0x170/0x170 [ 475.148146][ T8102] ? __rwlock_init+0x140/0x140 [ 475.148160][ T8102] dump_header+0xd9/0x780 [ 475.148172][ T8102] oom_kill_process+0x20e/0x3d0 [ 475.148185][ T8102] out_of_memory+0xdb2/0x1190 [ 475.148195][ T8102] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 475.148208][ T8102] ? mutex_lock_io_nested+0x60/0x60 [ 475.148224][ T8102] ? unregister_oom_notifier+0x20/0x20 [ 475.148240][ T8102] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 475.148251][ T8102] ? mem_cgroup_oom_trylock+0x210/0x210 [ 475.148265][ T8102] ? do_raw_spin_unlock+0x11d/0x230 [ 475.148278][ T8102] try_charge_memcg+0x1075/0x15b0 [ 475.148302][ T8102] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 475.148313][ T8102] ? __alloc_pages+0x480/0x480 [ 475.148333][ T8102] ? rcu_lock_acquire+0x30/0x30 [ 475.148346][ T8102] charge_memcg+0x100/0x300 [ 475.148358][ T8102] ? __mem_cgroup_charge+0x80/0x80 [ 475.148373][ T8102] __mem_cgroup_charge+0x21/0x80 [ 475.148383][ T8102] wp_page_copy+0x4cc/0x2090 [ 475.148396][ T8102] ? __lock_acquire+0x7b50/0x7b50 [ 475.148411][ T8102] ? insert_page_into_pte_locked+0x470/0x470 [ 475.148424][ T8102] ? _raw_spin_unlock+0x24/0x40 [ 475.148434][ T8102] ? do_wp_page+0x965/0xb30 [ 475.148447][ T8102] handle_mm_fault+0x1fbd/0x4440 [ 475.148465][ T8102] ? get_page+0xe0/0xe0 [ 475.148480][ T8102] ? vmacache_find+0x52a/0x590 [ 475.148493][ T8102] ? find_vma+0xd2/0x230 [ 475.148504][ T8102] do_user_addr_fault+0x494/0xc90 [ 475.148522][ T8102] exc_page_fault+0x60/0x100 [ 475.148535][ T8102] asm_exc_page_fault+0x22/0x30 [ 475.148545][ T8102] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 475.148558][ T8102] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 475.148567][ T8102] RSP: 0018:ffffc9000332f8f8 EFLAGS: 00050246 [ 475.148577][ T8102] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 00002000003cc030 [ 475.148585][ T8102] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 00000000ffffffff [ 475.148591][ T8102] RBP: ffffc9000332fa90 R08: ffffc9000332f707 R09: 1ffff92000665ee0 [ 475.148599][ T8102] R10: dffffc0000000000 R11: fffff52000665ee1 R12: dffffc0000000000 [ 475.148606][ T8102] R13: 00002000003cc000 R14: 0000000000000000 R15: ffffc9000332fd90 [ 475.148622][ T8102] ____sys_recvmsg+0x38d/0x5b0 [ 475.148640][ T8102] ? __sys_recvmsg_sock+0x40/0x40 [ 475.148658][ T8102] ? import_iovec+0x6f/0xa0 [ 475.148671][ T8102] ___sys_recvmsg+0x213/0x5c0 [ 475.148684][ T8102] ? __sys_recvmsg+0x280/0x280 [ 475.148704][ T8102] ? __lock_acquire+0x7b50/0x7b50 [ 475.148719][ T8102] ? __might_fault+0xb3/0x110 [ 475.148731][ T8102] do_recvmmsg+0x360/0x7f0 [ 475.148745][ T8102] ? __sys_recvmmsg+0x290/0x290 [ 475.148762][ T8102] ? __context_tracking_exit+0x4c/0x80 [ 475.148774][ T8102] ? __lock_acquire+0x7b50/0x7b50 [ 475.148789][ T8102] __x64_sys_recvmmsg+0x195/0x250 [ 475.148801][ T8102] ? do_recvmmsg+0x7f0/0x7f0 [ 475.148813][ T8102] ? lockdep_hardirqs_on+0x94/0x140 [ 475.148826][ T8102] do_syscall_64+0x4c/0xa0 [ 475.148835][ T8102] ? clear_bhb_loop+0x30/0x80 [ 475.148844][ T8102] ? clear_bhb_loop+0x30/0x80 [ 475.148855][ T8102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 475.148864][ T8102] RIP: 0033:0x7ff02b844159 [ 475.148875][ T8102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.148883][ T8102] RSP: 002b:00007ff029a7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 475.148893][ T8102] RAX: ffffffffffffffda RBX: 00007ff02bacc090 RCX: 00007ff02b844159 [ 475.148901][ T8102] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 475.148907][ T8102] RBP: 00007ff02b8db024 R08: 0000000000000000 R09: 0000000000000000 [ 475.148913][ T8102] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 475.148919][ T8102] R13: 00007ff02bacc128 R14: 00007ff02bacc090 R15: 00007fff8db97788 [ 475.148934][ T8102] [ 475.148938][ T8102] memory: usage 307200kB, limit 307200kB, failcnt 6835 [ 475.148946][ T8102] memory+swap: usage 354708kB, limit 9007199254740988kB, failcnt 0 [ 475.148953][ T8102] kmem: usage 3204kB, limit 9007199254740988kB, failcnt 0 [ 475.148961][ T8102] Memory cgroup stats for /syz4: [ 475.149567][ T8102] anon 4775936 [ 475.149567][ T8102] file 306446336 [ 475.149567][ T8102] kernel_stack 360448 [ 475.149567][ T8102] pagetables 942080 [ 475.149567][ T8102] percpu 7184 [ 475.149567][ T8102] sock 0 [ 475.149567][ T8102] shmem 306438144 [ 475.149567][ T8102] file_mapped 13922304 [ 475.149567][ T8102] file_dirty 8192 [ 475.149567][ T8102] file_writeback 0 [ 475.149567][ T8102] swapcached 49029120 [ 475.149567][ T8102] anon_thp 0 [ 475.149567][ T8102] file_thp 0 [ 475.149567][ T8102] shmem_thp 0 [ 475.149567][ T8102] inactive_anon 300511232 [ 475.149567][ T8102] active_anon 10698752 [ 475.149567][ T8102] inactive_file 12288 [ 475.149567][ T8102] active_file 4096 [ 475.149567][ T8102] unevictable 0 [ 475.149567][ T8102] slab_reclaimable 1118176 [ 475.149567][ T8102] slab_unreclaimable 643024 [ 475.149567][ T8102] slab 1761200 [ 475.149567][ T8102] workingset_refault_anon 0 [ 475.149567][ T8102] workingset_refault_file 507 [ 475.149598][ T8102] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1141,pid=7625,uid=0 [ 475.149956][ T8102] Memory cgroup out of memory: Killed process 7625 (syz.4.1141) total-vm:200552kB, anon-rss:1552kB, file-rss:20608kB, shmem-rss:8840kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 477.488003][ T8099] EXT4-fs: error -4 creating inode table initialization thread [ 477.488239][ T8099] EXT4-fs (loop6): mount failed [ 477.489552][ T28] oom_reaper: reaped process 7625 (syz.4.1141), now anon-rss:0kB, file-rss:20480kB, shmem-rss:8840kB [ 477.584413][ T8102] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 477.593584][ T8102] syz.4.1256 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 477.593664][ T8102] CPU: 0 PID: 8102 Comm: syz.4.1256 Not tainted syzkaller #0 [ 477.593675][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.593681][ T8102] Call Trace: [ 477.593686][ T8102] [ 477.593691][ T8102] dump_stack_lvl+0x188/0x250 [ 477.593709][ T8102] ? show_regs_print_info+0x20/0x20 [ 477.593721][ T8102] ? load_image+0x410/0x410 [ 477.593734][ T8102] ? local_lock_release+0x170/0x170 [ 477.593746][ T8102] ? __rwlock_init+0x140/0x140 [ 477.593759][ T8102] dump_header+0xd9/0x780 [ 477.593772][ T8102] oom_kill_process+0x20e/0x3d0 [ 477.593785][ T8102] out_of_memory+0xdb2/0x1190 [ 477.593794][ T8102] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 477.593807][ T8102] ? mutex_lock_io_nested+0x60/0x60 [ 477.593823][ T8102] ? unregister_oom_notifier+0x20/0x20 [ 477.593839][ T8102] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 477.593850][ T8102] ? mem_cgroup_oom_trylock+0x210/0x210 [ 477.593864][ T8102] ? do_raw_spin_unlock+0x11d/0x230 [ 477.593876][ T8102] try_charge_memcg+0x1075/0x15b0 [ 477.593894][ T8102] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 477.593904][ T8102] ? rcu_lock_acquire+0x30/0x30 [ 477.593919][ T8102] ? mark_lock+0x94/0x320 [ 477.593934][ T8102] obj_cgroup_charge_pages+0x87/0x190 [ 477.593944][ T8102] ? __memcg_kmem_charge_page+0x380/0x380 [ 477.593955][ T8102] ? rcu_lock_acquire+0x30/0x30 [ 477.593967][ T8102] obj_cgroup_charge+0x19f/0x320 [ 477.593977][ T8102] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 477.593993][ T8102] slab_pre_alloc_hook+0x9d/0xc0 [ 477.594003][ T8102] ? __d_alloc+0x27/0x6d0 [ 477.594013][ T8102] kmem_cache_alloc+0x3d/0x280 [ 477.594025][ T8102] __d_alloc+0x27/0x6d0 [ 477.594036][ T8102] d_alloc_parallel+0x7b/0x1320 [ 477.594053][ T8102] ? __init_waitqueue_head+0xa4/0x140 [ 477.594066][ T8102] __lookup_slow+0x134/0x410 [ 477.594078][ T8102] ? lookup_one_len+0x2d0/0x2d0 [ 477.594098][ T8102] ? ovl_permission+0xc2/0x1e0 [ 477.594115][ T8102] lookup_one_len+0x19d/0x2d0 [ 477.594126][ T8102] ? lookup_one_common+0x460/0x460 [ 477.594138][ T8102] ? do_raw_spin_unlock+0x11d/0x230 [ 477.594150][ T8102] ovl_cache_update_ino+0x2ec/0x9d0 [ 477.594161][ T8102] ? fput_many+0x15c/0x1a0 [ 477.594176][ T8102] ? ovl_cache_put+0x1c0/0x1c0 [ 477.594188][ T8102] ? ovl_dir_read_merged+0x263/0x340 [ 477.594201][ T8102] ? ovl_check_empty_dir+0x440/0x440 [ 477.594212][ T8102] ? ovl_indexdir_cleanup+0x790/0x790 [ 477.594225][ T8102] ? filldir64+0x49d/0x6e0 [ 477.594241][ T8102] ovl_iterate+0x6bd/0x1f50 [ 477.594255][ T8102] ? verify_lock_unused+0x140/0x140 [ 477.594267][ T8102] ? __lock_acquire+0x7b50/0x7b50 [ 477.594278][ T8102] ? ovl_dir_llseek+0x530/0x530 [ 477.594293][ T8102] ? aa_file_perm+0x38b/0xe80 [ 477.594313][ T8102] ? __lock_acquire+0x7b50/0x7b50 [ 477.594325][ T8102] ? rwsem_write_trylock+0x135/0x1c0 [ 477.594336][ T8102] ? clear_nonspinnable+0x60/0x60 [ 477.594346][ T8102] ? end_current_label_crit_section+0x14b/0x170 [ 477.594357][ T8102] ? common_file_perm+0x171/0x1c0 [ 477.594366][ T8102] ? iterate_dir+0x133/0x550 [ 477.594378][ T8102] iterate_dir+0x213/0x550 [ 477.594390][ T8102] __se_sys_getdents64+0xf2/0x270 [ 477.594401][ T8102] ? __x64_sys_getdents64+0x80/0x80 [ 477.594410][ T8102] ? filldir+0x700/0x700 [ 477.594423][ T8102] ? lockdep_hardirqs_on+0x94/0x140 [ 477.594435][ T8102] do_syscall_64+0x4c/0xa0 [ 477.594444][ T8102] ? clear_bhb_loop+0x30/0x80 [ 477.594453][ T8102] ? clear_bhb_loop+0x30/0x80 [ 477.594464][ T8102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.594473][ T8102] RIP: 0033:0x7ff02b844159 [ 477.594485][ T8102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.594493][ T8102] RSP: 002b:00007ff029a7b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 477.594506][ T8102] RAX: ffffffffffffffda RBX: 00007ff02bacc090 RCX: 00007ff02b844159 [ 477.594513][ T8102] RDX: 0000000000001011 RSI: 0000200000002600 RDI: 0000000000000006 [ 477.594520][ T8102] RBP: 00007ff02b8db024 R08: 0000000000000000 R09: 0000000000000000 [ 477.594527][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.594533][ T8102] R13: 00007ff02bacc128 R14: 00007ff02bacc090 R15: 00007fff8db97788 [ 477.594548][ T8102] [ 477.594553][ T8102] memory: usage 307200kB, limit 307200kB, failcnt 11763 [ 477.594561][ T8102] memory+swap: usage 354708kB, limit 9007199254740988kB, failcnt 0 [ 477.594568][ T8102] kmem: usage 3260kB, limit 9007199254740988kB, failcnt 0 [ 477.594575][ T8102] Memory cgroup stats for /syz4: [ 477.594972][ T8102] anon 4718592 [ 477.594972][ T8102] file 306446336 [ 477.594972][ T8102] kernel_stack 360448 [ 477.594972][ T8102] pagetables 946176 [ 477.594972][ T8102] percpu 7184 [ 477.594972][ T8102] sock 0 [ 477.594972][ T8102] shmem 306438144 [ 477.594972][ T8102] file_mapped 13926400 [ 477.594972][ T8102] file_dirty 8192 [ 477.594972][ T8102] file_writeback 0 [ 477.594972][ T8102] swapcached 49029120 [ 477.594972][ T8102] anon_thp 0 [ 477.594972][ T8102] file_thp 0 [ 477.594972][ T8102] shmem_thp 0 [ 477.594972][ T8102] inactive_anon 300457984 [ 477.594972][ T8102] active_anon 10698752 [ 477.594972][ T8102] inactive_file 12288 [ 477.594972][ T8102] active_file 4096 [ 477.594972][ T8102] unevictable 0 [ 477.594972][ T8102] slab_reclaimable 1162536 [ 477.594972][ T8102] slab_unreclaimable 652760 [ 477.594972][ T8102] slab 1815296 [ 477.594972][ T8102] workingset_refault_anon 0 [ 477.594972][ T8102] workingset_refault_file 536 [ 477.595000][ T8102] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1256,pid=8084,uid=0 [ 477.596691][ T8102] Memory cgroup out of memory: Killed process 8084 (syz.4.1256) total-vm:102376kB, anon-rss:5504kB, file-rss:21872kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 477.840226][ T25] audit: type=1800 audit(1787935622.325:1660): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 478.191722][ T25] audit: type=1800 audit(1787935622.675:1661): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 478.222623][ T25] audit: type=1800 audit(1787935622.705:1662): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 478.269136][ T25] audit: type=1800 audit(1787935622.755:1663): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 478.275545][ T8123] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4219] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8123] [ 478.356194][ T25] audit: type=1800 audit(1787935622.845:1664): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 478.402401][ T25] audit: type=1800 audit(1787935622.885:1665): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35832 res=0 errno=0 [ 479.359247][ T25] audit: type=1800 audit(1787935623.845:1666): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 479.459180][ T25] audit: type=1800 audit(1787935623.945:1667): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 480.631566][ T25] audit: type=1800 audit(1787935625.115:1668): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 482.161298][ T25] audit: type=1800 audit(1787935626.645:1669): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 482.407961][ T25] audit: type=1800 audit(1787935626.895:1670): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 483.408576][ T1334] Bluetooth: hci6: command 0x0406 tx timeout [ 483.501301][ T8178] loop0: detected capacity change from 0 to 128 [ 483.600495][ T25] audit: type=1800 audit(1787935628.085:1671): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 483.640189][ T8178] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 483.730176][ T25] audit: type=1800 audit(1787935628.215:1672): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 483.858624][ T25] audit: type=1800 audit(1787935628.345:1673): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 483.934110][ T8184] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 484.260200][ T25] audit: type=1800 audit(1787935628.745:1674): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 484.527081][ T25] audit: type=1800 audit(1787935629.015:1675): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 485.085619][ T8203] futex_wake_op: syz.4.1283 tries to shift op by -1; fix this program [ 486.859826][ T8206] device syzkaller0 entered promiscuous mode [ 486.960894][ T25] audit: type=1800 audit(1787935631.445:1676): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 487.576620][ T8221] loop4: detected capacity change from 0 to 8 [ 487.642031][ T25] audit: type=1800 audit(1787935632.125:1677): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 487.645262][ T8221] squashfs image failed sanity check [ 487.885349][ T25] audit: type=1800 audit(1787935632.365:1678): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 488.070530][ T25] audit: type=1800 audit(1787935632.555:1679): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 488.126318][ T25] audit: type=1800 audit(1787935632.615:1680): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=50951 res=0 errno=0 [ 488.325761][ T6159] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 488.393675][ T25] audit: type=1800 audit(1787935632.875:1681): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 488.565762][ T6159] usb 8-1: Using ep0 maxpacket: 16 [ 488.705749][ T6159] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.705772][ T6159] usb 8-1: config 0 interface 0 has no altsetting 0 [ 488.705788][ T6159] usb 8-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 488.705807][ T6159] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.707077][ T6159] usb 8-1: config 0 descriptor?? [ 488.730330][ T25] audit: type=1800 audit(1787935633.215:1682): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 489.131028][ T25] audit: type=1800 audit(1787935633.615:1683): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 489.251991][ T6159] wacom 0003:056A:5000.0002: unknown main item tag 0x1 [ 489.252015][ T6159] wacom 0003:056A:5000.0002: unknown main item tag 0x7 [ 489.252048][ T6159] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 489.252063][ T6159] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 489.252077][ T6159] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 489.252091][ T6159] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 489.252106][ T6159] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 489.296066][ T6159] wacom 0003:056A:5000.0002: hidraw0: USB HID v0.05 Device [HID 056a:5000] on usb-dummy_hcd.7-1/input0 [ 489.301867][ T25] audit: type=1800 audit(1787935633.785:1684): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150608 res=0 errno=0 [ 489.583046][ T4263] usb 8-1: USB disconnect, device number 2 [ 489.611846][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 489.611856][ T25] audit: type=1800 audit(1787935634.095:1693): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 490.112511][ T25] audit: type=1800 audit(1787935634.595:1694): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 490.236302][ T25] audit: type=1800 audit(1787935634.725:1695): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 490.391610][ T25] audit: type=1800 audit(1787935634.875:1696): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 490.448848][ T25] audit: type=1800 audit(1787935634.935:1697): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 490.560706][ T25] audit: type=1800 audit(1787935635.045:1698): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 490.644223][ T8310] loop7: detected capacity change from 0 to 512 [ 490.723648][ T25] audit: type=1800 audit(1787935635.205:1699): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 491.207194][ T8310] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 491.207275][ T8310] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.212293][ T25] audit: type=1800 audit(1787935635.695:1700): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 493.038676][ T25] audit: type=1800 audit(1787935637.525:1701): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 493.080065][ T25] audit: type=1800 audit(1787935637.565:1702): pid=4355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150821 res=0 errno=0 [ 493.221554][ T8345] lo speed is unknown, defaulting to 1000 [ 493.633708][ T8345] chnl_net:caif_netlink_parms(): no params data found [ 493.919656][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.919719][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.920303][ T8345] device bridge_slave_0 entered promiscuous mode [ 493.933534][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.933590][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.941623][ T8345] device bridge_slave_1 entered promiscuous mode [ 494.029977][ T8345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.031535][ T8345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.082271][ T8377] loop4: detected capacity change from 0 to 128 [ 494.157283][ T8345] team0: Port device team_slave_0 added [ 494.158558][ T8345] team0: Port device team_slave_1 added [ 494.265104][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.265116][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.265129][ T8345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.291989][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.292000][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.292013][ T8345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.444905][ T8345] device hsr_slave_0 entered promiscuous mode [ 494.505285][ T8345] device hsr_slave_1 entered promiscuous mode [ 494.522256][ T8345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.522273][ T8345] Cannot create hsr debugfs directory [ 494.541677][ T8384] lo speed is unknown, defaulting to 1000 [ 494.971606][ T25] kauditd_printk_skb: 15 callbacks suppressed [ 494.971616][ T25] audit: type=1800 audit(1787935639.455:1718): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 496.119901][ T1334] Bluetooth: hci7: command 0x0409 tx timeout [ 496.288962][ T25] audit: type=1800 audit(1787935640.775:1719): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 496.360324][ T25] audit: type=1800 audit(1787935640.845:1720): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=44178 res=0 errno=0 [ 496.398458][ T25] audit: type=1800 audit(1787935640.885:1721): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=44177 res=0 errno=0 [ 496.400220][ T25] audit: type=1800 audit(1787935640.885:1722): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159135 res=0 errno=0 [ 496.422493][ T25] audit: type=1800 audit(1787935640.905:1723): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 496.446884][ T8384] chnl_net:caif_netlink_parms(): no params data found [ 496.492816][ T25] audit: type=1800 audit(1787935640.975:1724): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 496.495941][ T4263] Bluetooth: hci8: command 0x0409 tx timeout [ 496.609860][ T8345] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 497.669793][ T8417] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 497.699388][ T8345] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 497.717283][ T8345] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 497.723387][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.723409][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.723955][ T8384] device bridge_slave_0 entered promiscuous mode [ 497.726549][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.726600][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.727215][ T8384] device bridge_slave_1 entered promiscuous mode [ 497.729512][ T8345] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 497.825353][ T8384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.832354][ T8384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.901673][ T8418] loop7: detected capacity change from 0 to 1764 [ 497.919793][ T8384] team0: Port device team_slave_0 added [ 497.921014][ T8384] team0: Port device team_slave_1 added [ 497.973908][ T25] audit: type=1800 audit(1787935642.455:1725): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 498.029116][ T8345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.030414][ T8418] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 498.030762][ T8418] ISOFS: changing to secondary root [ 498.030985][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.030994][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.031007][ T8384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.057292][ T25] audit: type=1800 audit(1787935642.545:1726): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 498.059504][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.059515][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.059528][ T8384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.080899][ T25] audit: type=1800 audit(1787935642.565:1727): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 498.083276][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 498.083646][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.154173][ T8418] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 498.157882][ T8384] device hsr_slave_0 entered promiscuous mode [ 498.166880][ T8384] device hsr_slave_1 entered promiscuous mode [ 498.179651][ T1334] Bluetooth: hci7: command 0x041b tx timeout [ 498.194775][ T8384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.194793][ T8384] Cannot create hsr debugfs directory [ 498.196884][ T8345] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.381993][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 498.382446][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 498.382666][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.382686][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.382899][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 498.383191][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 498.383410][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.383426][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.383623][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 498.384042][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 498.384472][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 498.384960][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 498.391106][ T8345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 498.391120][ T8345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.448605][ T8425] loop4: detected capacity change from 0 to 8 [ 498.467146][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 498.467504][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 498.468415][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 498.468823][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 498.469152][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 498.469407][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.469770][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 498.470028][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.477733][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 498.594281][ T4259] Bluetooth: hci8: command 0x041b tx timeout [ 498.735992][ T27] INFO: task syz.5.734:6508 blocked for more than 143 seconds. [ 498.736009][ T27] Not tainted syzkaller #0 [ 498.736015][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.736020][ T27] task:syz.5.734 state:D stack:25456 pid: 6508 ppid: 6287 flags:0x00004004 [ 498.736043][ T27] Call Trace: [ 498.736047][ T27] [ 498.736054][ T27] __schedule+0x11c3/0x4350 [ 498.736081][ T27] ? __lock_acquire+0x1305/0x7b50 [ 498.736095][ T27] ? verify_lock_unused+0x140/0x140 [ 498.736107][ T27] ? release_firmware_map_entry+0x190/0x190 [ 498.736125][ T27] schedule+0x11b/0x1e0 [ 498.736139][ T27] schedule_timeout+0xbd/0x2d0 [ 498.736150][ T27] ? console_conditional_schedule+0x40/0x40 [ 498.736159][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 498.736171][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 498.736182][ T27] ? lock_chain_count+0x20/0x20 [ 498.736204][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 498.736214][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 498.736228][ T27] __down_common+0x289/0x3b0 [ 498.736240][ T27] ? __up+0x150/0x150 [ 498.736252][ T27] ? _raw_spin_lock+0x40/0x40 [ 498.736262][ T27] ? read_lock_is_recursive+0x10/0x10 [ 498.736276][ T27] down+0x7e/0xd0 [ 498.736288][ T27] ? sysfs_kf_read+0x350/0x350 [ 498.736297][ T27] console_lock+0x29/0x70 [ 498.736306][ T27] store_rotate_all+0x28/0x510 [ 498.736319][ T27] ? sysfs_kf_read+0x350/0x350 [ 498.736328][ T27] kernfs_fop_write_iter+0x3a8/0x500 [ 498.736343][ T27] vfs_write+0x748/0xd70 [ 498.736358][ T27] ? file_end_write+0x250/0x250 [ 498.736376][ T27] ? mutex_lock_nested+0x17/0x20 [ 498.736386][ T27] ? __fdget_pos+0x2bf/0x370 [ 498.736396][ T27] ? ksys_write+0x70/0x260 [ 498.736407][ T27] ksys_write+0x153/0x260 [ 498.736418][ T27] ? __ia32_sys_read+0x80/0x80 [ 498.736430][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 498.736442][ T27] do_syscall_64+0x4c/0xa0 [ 498.736451][ T27] ? clear_bhb_loop+0x30/0x80 [ 498.736460][ T27] ? clear_bhb_loop+0x30/0x80 [ 498.736471][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 498.736482][ T27] RIP: 0033:0x7f24106bf159 [ 498.736492][ T27] RSP: 002b:00007f240e917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 498.736504][ T27] RAX: ffffffffffffffda RBX: 00007f2410946fa0 RCX: 00007f24106bf159 [ 498.736511][ T27] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000008 [ 498.736519][ T27] RBP: 00007f2410756024 R08: 0000000000000000 R09: 0000000000000000 [ 498.736525][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.736532][ T27] R13: 00007f2410947038 R14: 00007f2410946fa0 R15: 00007fffb2e14818 [ 498.736547][ T27] [ 498.736618][ T27] [ 498.736618][ T27] Showing all locks held in the system: [ 498.736627][ T27] 1 lock held by khungtaskd/27: [ 498.736634][ T27] #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 498.736686][ T27] 2 locks held by getty/3949: [ 498.736692][ T27] #0: ffff88814cbfa098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 498.736719][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 498.736751][ T27] 2 locks held by kworker/0:4/4259: [ 498.736758][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 498.736786][ T27] #1: ffffc9000318fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 498.736813][ T27] 3 locks held by kworker/0:5/4263: [ 498.736819][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 498.736845][ T27] #1: ffffc900031bfd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 498.736872][ T27] #2: ffff8880283c0240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x283/0x3380 [ 498.736900][ T27] 2 locks held by kworker/u4:8/4338: [ 498.736906][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 498.736932][ T27] #1: ffffc9000323fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 498.736959][ T27] 3 locks held by kworker/0:6/5326: [ 498.736965][ T27] 3 locks held by kworker/0:7/6159: [ 498.736971][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 498.736997][ T27] #1: ffffc900033ffd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 498.737024][ T27] #2: ffffffff8c3239e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 498.737052][ T27] 1 lock held by syz.1.689/6367: [ 498.737058][ T27] 4 locks held by syz.5.734/6508: [ 498.737064][ T27] #0: ffff88807dbd5770 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 498.737089][ T27] #1: ffff88805e268460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 498.737117][ T27] #2: ffff8880604c4088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x500 [ 498.737143][ T27] #3: ffff888017bfcda0 (kn->active#508){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500 [ 498.737174][ T27] 2 locks held by syz.7.1149/7651: [ 498.737181][ T27] 3 locks held by syz.4.1170/7740: [ 498.737193][ T27] 1 lock held by syz.0.1177/7744: [ 498.737199][ T27] 2 locks held by syz.3.1270/8110: [ 498.737205][ T27] #0: ffffffff8c9f6428 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x20a/0xcd0 [ 498.737231][ T27] #1: ffff88807a9c81c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_init_dev+0x6f/0x470 [ 498.737258][ T27] 1 lock held by syz.6.1275/8133: [ 498.737263][ T27] #0: ffffffff8c9f6428 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x20a/0xcd0 [ 498.737289][ T27] 2 locks held by syz.4.1301/8276: [ 498.737296][ T27] 6 locks held by syz-executor/8384: [ 498.737302][ T27] 1 lock held by syz.4.1328/8425: [ 498.737307][ T27] #0: ffff8880754f20e0 (&type->s_umount_key#91/1){+.+.}-{3:3}, at: alloc_super+0x200/0x970 [ 498.737341][ T27] 2 locks held by modprobe/8430: [ 498.737347][ T27] [ 498.737350][ T27] ============================================= [ 498.737350][ T27] [ 498.737354][ T27] NMI backtrace for cpu 0 [ 498.737359][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 498.737368][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.737373][ T27] Call Trace: [ 498.737377][ T27] [ 498.737381][ T27] dump_stack_lvl+0x188/0x250 [ 498.737395][ T27] ? show_regs_print_info+0x20/0x20 [ 498.737406][ T27] ? load_image+0x410/0x410 [ 498.737418][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 498.737431][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 498.737441][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 498.737450][ T27] ? _printk+0xda/0x130 [ 498.737460][ T27] ? load_image+0x410/0x410 [ 498.737471][ T27] ? load_image+0x410/0x410 [ 498.737482][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 498.737495][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 498.737506][ T27] watchdog+0xe1b/0xe60 [ 498.737521][ T27] kthread+0x42e/0x520 [ 498.737529][ T27] ? hungtask_pm_notify+0x40/0x40 [ 498.737539][ T27] ? kthread_blkcg+0xd0/0xd0 [ 498.737548][ T27] ret_from_fork+0x1f/0x30 [ 498.737565][ T27] [ 498.737579][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 498.737584][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 498.737592][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.737597][ T27] Call Trace: [ 498.737600][ T27] [ 498.737604][ T27] dump_stack_lvl+0x188/0x250 [ 498.737615][ T27] ? show_regs_print_info+0x20/0x20 [ 498.737626][ T27] ? load_image+0x410/0x410 [ 498.737641][ T27] panic+0x2f8/0x850 [ 498.737651][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 498.737662][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 498.737673][ T27] ? irq_work_queue+0xbf/0x140 [ 498.737689][ T27] watchdog+0xe5a/0xe60 [ 498.737702][ T27] kthread+0x42e/0x520 [ 498.737711][ T27] ? hungtask_pm_notify+0x40/0x40 [ 498.737719][ T27] ? kthread_blkcg+0xd0/0xd0 [ 498.737729][ T27] ret_from_fork+0x1f/0x30 [ 498.737744][ T27] [ 498.737798][ T27] Kernel Offset: disabled