last executing test programs: 17.806963894s ago: executing program 2 (id=170): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x8, 0x5, {0x5, 0x24, "133257"}}, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) (fail_nth: 1) 13.219962673s ago: executing program 2 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, 0x0) 12.157784843s ago: executing program 2 (id=186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x23, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000000)=0xfffffffc, 0x4) 11.78846261s ago: executing program 3 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x11e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0x0, 0x14, 0x5}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x2, 0x30, 0x64, 0x0, 0xc1, 0x1, 0x0, @rand_addr=0x64010100, @broadcast}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x2, 0x21, 0x7, 0x64, 0x3, 0x8, 0x8, 0x9, @private=0xa010100, @broadcast}}}}, 0x3e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x3, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 10.991105776s ago: executing program 0 (id=189): socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x4, &(0x7f0000000040)) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r1, 0xffff) close(0x3) r2 = syz_io_uring_setup(0x952, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x20}, &(0x7f0000000140)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r4, 0x1) readv(r4, &(0x7f0000000580)=[{&(0x7f0000000340)=""/151, 0x97}], 0x1) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x1, 0x1000000, 0xfffffffff0000000}) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_settime(r5, 0x0, &(0x7f0000000380), 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r6, &(0x7f0000000700)={0x0, 0xfffffffffffffe60, &(0x7f0000000580), 0xb1}, 0x2020) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 10.296474959s ago: executing program 1 (id=190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007"], 0x38}}, 0x0) (fail_nth: 1) 10.227709781s ago: executing program 2 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x4, &(0x7f0000000040)=0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r3, 0xffff) close(0x3) r4 = syz_io_uring_setup(0x952, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x20}, &(0x7f0000000140)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r6, 0x1) readv(r6, &(0x7f0000000580)=[{&(0x7f0000000340)=""/151, 0x97}], 0x1) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x1, 0x1000000, 0xfffffffff0000000}) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_settime(r7, 0x0, &(0x7f0000000380), 0x0) r8 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r8, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r8, &(0x7f0000000700)={0x0, 0xfffffffffffffe60, &(0x7f0000000580), 0xb1}, 0x2020) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0xffff, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 9.838323888s ago: executing program 3 (id=192): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000700), 0x2000000000000, 0x141002) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x100000, "aa2fe1a243fcd9abf29cc3391c06b86f68e7f73d4f0bff9669a8e82040ccb44d75131fb06cade553a6bdc314438ce0af11c38cd724980b087a7a16f9295be0a69db51576e7a06ef6bcabc67b52ba82e73504fa842ec2f0c06bf006f3e5bcdd5057997bf171c60d96a538b02ee9f4b573457498ca09cb417b1fbe6dc3b0c27ab0693ac57aff136748f7740dfc33f3a902b670f8933aec28869e637c18379d6d0b4d844b732cb1932733dfcec2f69f8b6df76ba84e1f001ad29105230471f466b6f9d7d2b05a57fe16e7363e5ecebc2c74539ca55c7ce3a175061adedd20532a9de97379f4dd5baeeae835946311e6e4e2361355c54b3bd500"}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) io_destroy(0x0) unshare(0x2040400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r2, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x0, 0x0, 0x21) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, 0x0, 0x0}, 0x20) r3 = socket$pppoe(0x18, 0x1, 0x0) accept4(r3, 0x0, 0x0, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000a1402002abd7000fedbdf250800070001000000"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x48000) 9.697035101s ago: executing program 0 (id=193): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex(&(0x7f0000000040), 0x7, 0x1, 0x0, 0xfffffffffffffffd, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) 9.624392453s ago: executing program 4 (id=194): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() poll(0x0, 0x0, 0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r7}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000800000000500000a40000000060a8bae00000000000000000a0000010900010073797a31000000001400048010000180090001006d617371000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 9.589368314s ago: executing program 1 (id=195): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() poll(0x0, 0x0, 0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r7}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000800000000500000a40000000060a8bae00000000000000000a0000010900010073797a31000000001400048010000180090001006d617371000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (fail_nth: 1) 9.527197925s ago: executing program 3 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, 0x0) 8.583964053s ago: executing program 2 (id=197): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, &(0x7f0000000280)={0x3, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x0}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x4008094) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000003c0)={[{@bsdgroups}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@dax_never}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@gquota}], [{@flag='nomand'}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0x5}, @main=@item_4={0x3, 0x0, 0xb, "20b34d3d"}, @local=@item_012={0x0, 0x2, 0xa}]}}, 0x0}, 0x0) 7.916403296s ago: executing program 0 (id=198): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bind$can_j1939(r0, 0x0, 0x0) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x80) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000180)='./file1\x00', r1, &(0x7f00000001c0)='./file3\x00', 0x0) openat(r1, &(0x7f0000000080)='./file3\x00', 0xff0f, 0x0) 7.879342607s ago: executing program 3 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) close(r0) 7.756733779s ago: executing program 4 (id=200): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=@updpolicy={0xb8, 0x12, 0x1, 0x70bd2a, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x8, 0xa, 0x40, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000000005, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0xa, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000280)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100}}}}) 7.644456601s ago: executing program 1 (id=201): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x2018488, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x1, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(0x0, 0x1431c2, 0x0) pwrite64(r0, &(0x7f0000000040)="a9", 0x1, 0x2600000fff) 7.500838374s ago: executing program 3 (id=202): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000f1ffffffffffffff0000000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd602e0000000000000000000000ff0200000000000000000000000000010003000000000000c910fc02000000000000000000000000000107080000000300020500000000002c00000b000000000000000000189078040000000600"/115], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x20020851) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r2) timer_settime(0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 7.500297884s ago: executing program 0 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) close(r0) 7.410656666s ago: executing program 1 (id=203): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x4, &(0x7f0000000040)=0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r3, 0xffff) close(0x3) r4 = syz_io_uring_setup(0x952, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x20}, &(0x7f0000000140)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r6, 0x1) readv(r6, &(0x7f0000000580)=[{&(0x7f0000000340)=""/151, 0x97}], 0x1) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x1, 0x1000000, 0xfffffffff0000000}) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_settime(r7, 0x0, &(0x7f0000000380), 0x0) r8 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r8, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0xffff, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 7.264340739s ago: executing program 4 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x11e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0x0, 0x14, 0x5}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x2, 0x30, 0x64, 0x0, 0xc1, 0x1, 0x0, @rand_addr=0x64010100, @broadcast}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x2, 0x21, 0x7, 0x64, 0x3, 0x8, 0x8, 0x9, @private=0xa010100, @broadcast}}}}, 0x3e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x3, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 7.011997353s ago: executing program 0 (id=205): syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r0, 0x2000000007d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) sendfile(r1, r0, 0x0, 0x558410e9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x8200) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x14) syz_io_uring_setup(0x70ca, 0x0, 0x0, &(0x7f00000007c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_VMA(0x53564d41, 0xf4, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000040), 0x4) syz_open_dev$evdev(&(0x7f0000000080), 0x52b, 0x3) 3.026005831s ago: executing program 2 (id=206): syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r0, 0x2000000007d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) sendfile(r1, r0, 0x0, 0x558410e9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x8200) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x14) syz_io_uring_setup(0x70ca, 0x0, 0x0, &(0x7f00000007c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_VMA(0x53564d41, 0xf4, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000040), 0x4) syz_open_dev$evdev(&(0x7f0000000080), 0x52b, 0x3) (fail_nth: 1) 2.963879342s ago: executing program 3 (id=207): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x2000082, &(0x7f0000000240)={[{@uni_xlateno}, {@uni_xlateno}, {@rodir}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@shortname_winnt}, {@shortname_win95}, {@utf8no}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@uni_xlate}]}, 0x27, 0x358, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x2) syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0xfe, 0x10f4, &(0x7f00000022c0)="$eJzs2LGK1FAUBuD/JqNgNXK3DwtaKMjiMr7AFgrTWFjbDVZ2TqXM4/g4spX9sg+wxYK9ksToCoIsGxwYvg9Ccn9ycnLLcwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9RXI/yVGT1ClrkpSk687Xl0m6KX/4pW1S8ubdevvyw+rVdnwtfdak9FXDup4+qnVVV/W0vjg6e1y3Hz+9b2+0LOlycb3bPHh9NetW+t7trF8EAACAw/D9zpZ77g8AAAD8y2wHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzqNNDk6QkXXe+vkzS7fe3AAAAgDsqafJ2+bd8PAb47Vm+LsuQT74Ni+f5PNY/vX33e7cvAQAAgANVbszjT7L4NZf32XEWOTkZ1z9vuTpL2mEy/9PF9W4zXMe7TfmfGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6wA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAgKkCAAD//4CP0SQ=") r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) ftruncate(0xffffffffffffffff, 0x3af001) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x40000, 0x0) mknodat(r1, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x1, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0xc2, 0x1, 0x0, 0xb3, {[@fastopen={0x22, 0x7, "d7346cb65b"}, @window={0x3, 0x3, 0x9}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}, @sack={0x5, 0x22, [0x91, 0x4, 0x2, 0x0, 0x31f3, 0x2a66645e, 0x9, 0x4]}, @timestamp={0x8, 0xa, 0x8, 0xffffffff}]}}}}}}}, 0x0) fchdir(r3) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x1) pipe2$9p(&(0x7f0000000200), 0x2800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000300)=""/4105, 0x1009) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.748778756s ago: executing program 1 (id=208): futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x121001) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000003c0)={0x3, 0x1, 0xfffff5ec, 0x0, 0xffdfffbe}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYBLOB="1060080b0b270c44ffdc31860cdfc95019e15565cef8a65ea31a943095748aafeffc81911e0de83a251d5050e593b8f79b1552db3a829cef476ca859e985c7368264847241f8edbe6fabcb16e9050eac37b5449b53ac17955a571ad8ea4e3d903fc65833da37d501282a1ad991c479e61764d536e180f42389c9c887801a0af046d9a9a583880f043bbd2625721fd69550d7d38723d52a0836fa9e763c87a74d8109", @ANYRES16=r0]) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.514408421s ago: executing program 4 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, 0x0) 2.290675725s ago: executing program 0 (id=210): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x5806f8409baef7eb, &(0x7f0000000440)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000340)=0xa4) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095000000"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa04001000aaaa86dd6092c01f00082f00fe8000000000000000000001000000010000000000242065580000000000000021000086dd080288be4305000f100002001d76000004000000080022eb000000002000000002003a0000000000000800655800"/117], 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r11, r12) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000003c0)=ANY=[@ANYBLOB="f4004000080211000000ffffffffffff80e3b826ec8ecaca376a71c90c3ff9180012bc7d1891bbdf0333ef08d5d77553462fe992dd2c4350d84f0568dc85f6cac664e7860e32bbbbf1b386ab01b17c18a5595da91ec9737c724b71dc60ef41b8e59a004230"], 0x10) 547.477479ms ago: executing program 4 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b"], 0x38}}, 0x0) 180.435386ms ago: executing program 1 (id=213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b"], 0x38}}, 0x0) (fail_nth: 1) 0s ago: executing program 4 (id=214): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x2018488, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x1, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) pwrite64(r0, 0x0, 0x0, 0x2600000fff) kernel console output (not intermixed with test programs): 0915][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.164936][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.208868][ T4278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.229892][ T4278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.239640][ T4278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.250534][ T4278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.299142][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.322310][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.332982][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.358226][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.420421][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.442379][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.459487][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.475522][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.487517][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.532826][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.541897][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.563047][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.589905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.600082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.609231][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.616563][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.627155][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.643305][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.653529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.662341][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.673266][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.686742][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.714106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.721881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.740630][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.752547][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.762084][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.769439][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.782227][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.791829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.841056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.850865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.860717][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.867901][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.876983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.886050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.894668][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.901819][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.909995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.920068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.948577][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.955984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.969198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.978712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.987387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.997032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.006058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.045446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.054504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.063333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.073171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.082088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.090979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.100526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.110378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.119526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.128479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.137293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.146223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.159794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.167824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.178615][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.190034][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.199575][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.208223][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.223355][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.256088][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.296436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.313120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.323528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.333060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.342162][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.349392][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.359043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.368441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.377416][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.384578][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.392981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.407073][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.456785][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.491445][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.505252][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.524802][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.544833][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.565524][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.598861][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.609723][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.619116][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.631408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.649941][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.657179][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.666658][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.675592][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.684773][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.691891][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.700340][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.709231][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 75.714275][ T4272] Bluetooth: hci4: command 0x041b tx timeout [ 75.715309][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 75.721298][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 75.728277][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 75.736536][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.753117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.768237][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.777061][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.799295][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.811808][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.837798][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.849946][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.860610][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.877394][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.889160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.899737][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.908652][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.916283][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.934014][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.946711][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.954587][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.003885][ T4265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.035183][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.060593][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.071546][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.086170][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.100592][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.111035][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.121240][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.130166][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.139579][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.148532][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.155719][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.170306][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.179391][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.194950][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.202082][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.254201][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.263322][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.279536][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.292313][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.311747][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.330057][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.338447][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.382973][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.400106][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.409954][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.445759][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.463277][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.488107][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.555445][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.581137][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.590387][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.599403][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.620653][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.637830][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.647734][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.672701][ T4278] device veth0_vlan entered promiscuous mode [ 76.693330][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.725193][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.735889][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.765051][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.807713][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.835149][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.848335][ T4278] device veth1_vlan entered promiscuous mode [ 76.879859][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.951309][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.975492][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.993649][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.002657][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.014783][ T4278] device veth0_macvtap entered promiscuous mode [ 77.025311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.033414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.048966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.071573][ T4278] device veth1_macvtap entered promiscuous mode [ 77.094337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.103539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.114496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.147288][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.165206][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.177443][ T4266] device veth0_vlan entered promiscuous mode [ 77.193820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.209289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.220377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.244663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.278913][ T4266] device veth1_vlan entered promiscuous mode [ 77.289043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.297690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.307079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.317581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.327191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.350420][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.362081][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.371552][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.380592][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.398165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.407336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.418026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.426316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.437504][ T4278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.447940][ T4278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.457031][ T4278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.466207][ T4278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.481787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.491786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.503524][ T4274] device veth0_vlan entered promiscuous mode [ 77.519117][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.527379][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.570795][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.588217][ T4266] device veth0_macvtap entered promiscuous mode [ 77.607305][ T4274] device veth1_vlan entered promiscuous mode [ 77.617709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.627227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.638625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.647355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.656697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.679636][ T4266] device veth1_macvtap entered promiscuous mode [ 77.692753][ T4265] device veth0_vlan entered promiscuous mode [ 77.699818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.709036][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.718332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.727829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.736341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.771942][ T4265] device veth1_vlan entered promiscuous mode [ 77.784272][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 77.790336][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 77.794345][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 77.796971][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 77.802338][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 77.829896][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.841937][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.854642][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.890759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.899143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.911122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.921070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.932412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.941332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.950627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.962758][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.973505][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.986635][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.999821][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.008883][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.019131][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.029436][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.052246][ T4274] device veth0_macvtap entered promiscuous mode [ 78.060276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.069331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.078019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.087204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.096230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.108711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.117477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.125785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.137179][ T4276] device veth0_vlan entered promiscuous mode [ 78.149538][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.162296][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.170476][ T4274] device veth1_macvtap entered promiscuous mode [ 78.202998][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.225872][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.237284][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.247816][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.259201][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.272452][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.283451][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.294335][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.304601][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.315290][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.327578][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.349265][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.360071][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.366923][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.369846][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.380085][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.392886][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.403184][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.412650][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.421533][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.432251][ T4276] device veth1_vlan entered promiscuous mode [ 78.442165][ T4265] device veth0_macvtap entered promiscuous mode [ 78.452451][ T4265] device veth1_macvtap entered promiscuous mode [ 78.480289][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.490820][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.500078][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.511020][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.537637][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.553376][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.563270][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.574520][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.585003][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.595582][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.608185][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.636992][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.646411][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.656241][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.666446][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.682079][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.697284][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.722172][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.732849][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.747875][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.762456][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.773128][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.783861][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.795617][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.805874][ T4276] device veth0_macvtap entered promiscuous mode [ 78.826630][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.839860][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.849485][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.862823][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.905109][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.917639][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.926680][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.991609][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.032722][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.590720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.864312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.873962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 79.883939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 79.892257][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 79.898321][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 79.907524][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 79.907540][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 79.913798][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 79.922478][ T4276] device veth1_macvtap entered promiscuous mode [ 79.962706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.971833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.034237][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.064262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.072603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.080951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 80.089303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 80.097601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 80.106386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.128072][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.261405][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.302088][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.340016][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.388658][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.423096][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.451595][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.476522][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.500868][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.546276][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.585252][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.627758][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.647669][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.664897][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.687173][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.727774][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.800880][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.885341][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.940488][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.978157][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.006357][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.016950][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.027365][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.038020][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.049695][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.090144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.135058][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.146583][ T4392] loop0: detected capacity change from 0 to 512 [ 81.167008][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.176868][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.176967][ T4392] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.195025][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.203742][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.212907][ T4392] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 81.278978][ T4392] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 81.319240][ T4392] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 81.330536][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.341282][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.351475][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.360670][ T4392] System zones: 0-2, 18-18, 34-34 [ 81.388727][ T4396] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3'. [ 81.436674][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.449142][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.463446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.478594][ T4392] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.7: iget: bad i_size value: 360287970189639680 [ 81.493757][ T4392] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.7: couldn't read orphan inode 15 (err -117) [ 81.506372][ T4392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 81.582384][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.614317][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.624655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.895613][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.922096][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.963969][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.139402][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.148864][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.468238][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.582587][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 82.939723][ T4415] device vlan2 entered promiscuous mode [ 83.032924][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 83.128164][ T4419] loop0: detected capacity change from 0 to 4096 [ 83.884485][ T4278] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 83.905538][ T4278] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 84.113632][ T4424] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.136382][ T4417] loop3: detected capacity change from 0 to 40427 [ 84.195097][ T4417] F2FS-fs (loop3): Invalid segment/section count (24 != 2 * 1) [ 84.203530][ T4417] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 84.269719][ T4417] F2FS-fs (loop3): invalid crc value [ 84.307667][ T4417] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 84.586625][ T4417] F2FS-fs (loop3): recover fsync data on readonly fs [ 84.627298][ T4417] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 84.641105][ T4417] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.653264][ T4435] loop4: detected capacity change from 0 to 256 [ 84.726913][ T4435] ======================================================= [ 84.726913][ T4435] WARNING: The mand mount option has been deprecated and [ 84.726913][ T4435] and is ignored by this kernel. Remove the mand [ 84.726913][ T4435] option from the mount to silence this warning. [ 84.726913][ T4435] ======================================================= [ 85.379334][ T4435] exfat: Bad value for 'dmask' [ 85.775664][ T4444] Zero length message leads to an empty skb [ 86.154014][ T4349] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.223258][ T4428] loop0: detected capacity change from 0 to 32768 [ 86.297503][ T4428] XFS (loop0): Mounting V5 Filesystem [ 86.377640][ T4349] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 86.449889][ T4349] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 86.471121][ T4435] loop4: detected capacity change from 0 to 40427 [ 86.483416][ T4435] F2FS-fs (loop4): invalid crc value [ 86.543539][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.590930][ T4435] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.650726][ T4349] usb 2-1: Product: syz [ 86.667028][ T7] cfg80211: failed to load regulatory.db [ 86.713381][ T4349] usb 2-1: Manufacturer: syz [ 86.782190][ T4349] usb 2-1: SerialNumber: syz [ 87.126669][ T4349] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 87.318489][ T4428] XFS (loop0): Ending clean mount [ 87.560636][ T4428] XFS (loop0): Quotacheck needed: Please wait. [ 87.643207][ T4349] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 87.825091][ T4428] XFS (loop0): Quotacheck: Done. [ 87.941138][ T4278] XFS (loop0): Unmounting Filesystem [ 87.995128][ T4467] loop3: detected capacity change from 0 to 1024 [ 88.301344][ T4448] loop2: detected capacity change from 0 to 32768 [ 88.357406][ T4448] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 scanned by syz.2.17 (4448) [ 88.654335][ T4448] BTRFS info (device loop2): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 88.715557][ T4480] tmpfs: Bad value for 'nr_inodes' [ 88.759663][ T4480] loop0: detected capacity change from 0 to 256 [ 88.785959][ T4480] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.796906][ T4480] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 88.827085][ T4480] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 89.342225][ T4448] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 89.390980][ T4448] BTRFS error (device loop2): superblock checksum mismatch [ 89.408756][ T4448] BTRFS error (device loop2): open_ctree failed: -22 [ 89.459921][ T4325] usb 2-1: USB disconnect, device number 2 [ 89.503088][ T4376] udevd[4376]: incorrect btrfs checksum on /dev/loop2 [ 90.091009][ T4489] bridge_slave_0: default FDB implementation only supports local addresses [ 90.488204][ T4474] loop4: detected capacity change from 0 to 32768 [ 90.594687][ T4474] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.19 (4474) [ 90.701646][ T4474] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.833431][ T4474] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 90.873303][ T4474] BTRFS info (device loop4): turning on sync discard [ 90.880498][ T4474] BTRFS info (device loop4): enabling disk space caching [ 90.888870][ T4474] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 90.899950][ T4474] BTRFS info (device loop4): trying to use backup root at mount time [ 90.908862][ T4474] BTRFS info (device loop4): force clearing of disk cache [ 90.916511][ T4474] BTRFS info (device loop4): disk space caching is enabled [ 91.335237][ T4496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 91.492188][ T4474] BTRFS error (device loop4): open_ctree failed: -12 [ 91.500488][ T4495] nvme_fabrics: missing parameter 'transport=%s' [ 91.548889][ T4506] loop3: detected capacity change from 0 to 8 [ 91.598732][ T4495] nvme_fabrics: missing parameter 'nqn=%s' [ 91.630596][ T4442] udevd[4442]: incorrect btrfs checksum on /dev/loop2 [ 91.776802][ T4496] dns_resolver: Unsupported content type (216) [ 92.031802][ T4464] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4464) [ 93.340406][ T4494] capability: warning: `syz.0.25' uses 32-bit capabilities (legacy support in use) [ 93.360192][ T4533] loop3: detected capacity change from 0 to 256 [ 93.407303][ T4533] exfat: Bad value for 'dmask' [ 93.815401][ T4537] device bridge0 entered promiscuous mode [ 93.887753][ T4521] loop1: detected capacity change from 0 to 40427 [ 93.914284][ T4521] F2FS-fs (loop1): Invalid segment/section count (24 != 2 * 1) [ 93.937788][ T4539] syz.0.32 uses obsolete (PF_INET,SOCK_PACKET) [ 93.952228][ T4521] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 94.008183][ T4540] tmpfs: Bad value for 'nr_inodes' [ 94.047435][ T4540] loop4: detected capacity change from 0 to 256 [ 94.198421][ T4540] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.209225][ T4540] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 94.257829][ T4540] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 94.313222][ T4521] F2FS-fs (loop1): invalid crc value [ 94.374171][ T4349] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 94.604311][ T4521] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 94.674287][ T4349] usb 1-1: Invalid ep0 maxpacket: 32 [ 94.834067][ T4349] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 94.895342][ T4521] F2FS-fs (loop1): recover fsync data on readonly fs [ 94.933531][ T4521] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 94.953185][ T4521] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.024158][ T4349] usb 1-1: Invalid ep0 maxpacket: 32 [ 95.031017][ T4349] usb usb1-port1: attempt power cycle [ 95.129867][ T4531] loop2: detected capacity change from 0 to 32768 [ 95.218945][ T4531] XFS (loop2): Mounting V5 Filesystem [ 95.317181][ T4531] XFS (loop2): Ending clean mount [ 95.362774][ T4531] XFS (loop2): Quotacheck needed: Please wait. [ 95.439321][ T4531] XFS (loop2): Quotacheck: Done. [ 95.458856][ T4533] loop3: detected capacity change from 0 to 40427 [ 95.466377][ T4349] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 95.524885][ T4349] usb 1-1: Invalid ep0 maxpacket: 32 [ 95.536025][ T4533] F2FS-fs (loop3): invalid crc value [ 95.619340][ T4533] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.640184][ T4553] loop1: detected capacity change from 0 to 1024 [ 95.694077][ T4349] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 95.764718][ T4349] usb 1-1: Invalid ep0 maxpacket: 32 [ 95.774330][ T4349] usb usb1-port1: unable to enumerate USB device [ 95.817608][ T4543] loop4: detected capacity change from 0 to 32768 [ 95.855383][ T4533] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.864365][ T4543] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop4 scanned by syz.4.33 (4543) [ 95.888225][ T4266] XFS (loop2): Unmounting Filesystem [ 95.953640][ T4543] BTRFS info (device loop4): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 95.995398][ T4543] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 96.041029][ T4543] BTRFS error (device loop4): superblock checksum mismatch [ 96.073747][ T4543] BTRFS error (device loop4): open_ctree failed: -22 [ 96.167207][ T4464] udevd[4464]: incorrect btrfs checksum on /dev/loop4 [ 96.354460][ T4543] netlink: 44 bytes leftover after parsing attributes in process `syz.4.33'. [ 96.363824][ T4543] netlink: 51 bytes leftover after parsing attributes in process `syz.4.33'. [ 96.402719][ T4543] netlink: 51 bytes leftover after parsing attributes in process `syz.4.33'. [ 96.442009][ T4562] vivid-002: ================= START STATUS ================= [ 96.494257][ T4562] vivid-002: Radio HW Seek Mode: Bounded [ 96.500352][ T4562] vivid-002: Radio Programmable HW Seek: false [ 96.556670][ T4562] vivid-002: RDS Rx I/O Mode: Block I/O [ 96.562312][ T4562] vivid-002: Generate RBDS Instead of RDS: false [ 96.591024][ T4559] 9pnet: Could not find request transport: xen [ 96.651811][ T4562] vivid-002: RDS Reception: true [ 96.674211][ T4562] vivid-002: RDS Program Type: 0 inactive [ 96.680040][ T4562] vivid-002: RDS PS Name: inactive [ 96.764304][ T4562] vivid-002: RDS Radio Text: inactive [ 96.769887][ T4562] vivid-002: RDS Traffic Announcement: false inactive [ 96.801820][ T4565] loop3: detected capacity change from 0 to 2048 [ 96.822727][ T4562] vivid-002: RDS Traffic Program: false inactive [ 96.843839][ T4569] loop1: detected capacity change from 0 to 128 [ 96.857402][ T4562] vivid-002: RDS Music: false inactive [ 96.891995][ T4562] vivid-002: ================== END STATUS ================== [ 96.905867][ T4569] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 96.927335][ T4539] device bridge0 left promiscuous mode [ 97.076214][ T4571] loop2: detected capacity change from 0 to 128 [ 97.084392][ T4571] qnx6: invalid mount options. [ 97.127719][ T4376] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.274988][ T4574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 97.317838][ T4574] loop4: detected capacity change from 0 to 8 [ 97.398720][ T4574] dns_resolver: Unsupported content type (216) [ 97.479128][ T4577] loop0: detected capacity change from 0 to 8192 [ 98.278317][ T4577] syz.0.40: attempt to access beyond end of device [ 98.278317][ T4577] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 98.484055][ T4577] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 98.491958][ T4577] FAT-fs (loop0): Filesystem has been set read-only [ 98.632247][ T4588] loop4: detected capacity change from 0 to 256 [ 98.673151][ T4577] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 98.702759][ T4577] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 98.723455][ T4588] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 98.829996][ T4588] exFAT-fs (loop4): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 98.862992][ T4588] exFAT-fs (loop4): Filesystem has been set read-only [ 99.021837][ T4570] loop2: detected capacity change from 0 to 32768 [ 99.049820][ T4579] loop3: detected capacity change from 0 to 32768 [ 99.051022][ T4570] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.35 (4570) [ 99.111054][ T4579] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.38 (4579) [ 99.126688][ T4570] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 99.140361][ T4590] loop1: detected capacity change from 0 to 8192 [ 99.145286][ T4570] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 99.168077][ T4570] BTRFS info (device loop2): enabling ssd optimizations [ 99.175985][ T4570] BTRFS info (device loop2): using spread ssd allocation scheme [ 99.181390][ T4579] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.183735][ T4570] BTRFS info (device loop2): force clearing of disk cache [ 99.201236][ T4570] BTRFS info (device loop2): setting nodatasum [ 99.207743][ T4570] BTRFS info (device loop2): not using ssd optimizations [ 99.214875][ T4570] BTRFS info (device loop2): not using spread ssd allocation scheme [ 99.222903][ T4570] BTRFS info (device loop2): allowing degraded mounts [ 99.229866][ T4570] BTRFS info (device loop2): enabling disk space caching [ 99.230293][ T4590] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 99.237008][ T4570] BTRFS info (device loop2): disk space caching is enabled [ 99.237536][ T4579] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 99.267550][ T4579] BTRFS info (device loop3): turning on sync discard [ 99.274449][ T4579] BTRFS info (device loop3): enabling disk space caching [ 99.285791][ T4590] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 99.295166][ T4579] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 99.295405][ T4590] REISERFS (device loop1): using ordered data mode [ 99.313717][ T4590] reiserfs: using flush barriers [ 99.322273][ T4590] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.339820][ T4590] REISERFS (device loop1): checking transaction log (loop1) [ 99.341933][ T4579] BTRFS info (device loop3): trying to use backup root at mount time [ 99.361042][ T4590] REISERFS warning: reiserfs-5083 is_leaf: wrong item type for item *3.5*[1 2 0x0 UNKNOWN], item_len 0, item_location 0, free_space(entry_count) 0 [ 99.375054][ T4579] BTRFS info (device loop3): force clearing of disk cache [ 99.395344][ T4590] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 99.411836][ T4579] BTRFS info (device loop3): disk space caching is enabled [ 99.418871][ T4590] REISERFS (device loop1): Remounting filesystem read-only [ 99.444203][ T4590] REISERFS error (device loop1): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 99.539826][ T4570] BTRFS info (device loop2): rebuilding free space tree [ 99.695157][ T4570] BTRFS info (device loop2): disabling free space tree [ 99.740457][ T4579] BTRFS info (device loop3): rebuilding free space tree [ 99.754272][ T4570] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.766669][ T4570] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.832477][ T4579] BTRFS info (device loop3): disabling free space tree [ 99.850577][ T4579] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.884079][ T4579] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.201358][ T4634] loop0: detected capacity change from 0 to 128 [ 100.210448][ T4635] capability: warning: `syz.4.45' uses deprecated v2 capabilities in a way that may be insecure [ 100.248703][ T4634] overlayfs: failed to resolve './file0': -2 [ 100.277560][ T4266] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 100.293739][ T4635] overlayfs: upper fs does not support tmpfile. [ 100.447333][ T4641] lo speed is unknown, defaulting to 1000 [ 100.523987][ T4325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.625779][ T4645] tmpfs: Bad value for 'nr_inodes' [ 100.664679][ T4645] loop1: detected capacity change from 0 to 256 [ 100.686636][ T4645] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.697511][ T4645] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 100.744249][ T4645] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 100.814252][ T4325] usb 4-1: Using ep0 maxpacket: 32 [ 100.849576][ T4325] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 100.918172][ T4641] lo speed is unknown, defaulting to 1000 [ 100.944072][ T4325] usb 4-1: can't read configurations, error -61 [ 101.190426][ T4641] lo speed is unknown, defaulting to 1000 [ 101.234059][ T4325] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.256842][ T4641] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.273763][ T4641] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 101.305355][ T4641] lo speed is unknown, defaulting to 1000 [ 101.326544][ T4641] lo speed is unknown, defaulting to 1000 [ 101.349528][ T4641] lo speed is unknown, defaulting to 1000 [ 101.358053][ T4635] loop4: detected capacity change from 0 to 512 [ 101.370964][ T4641] lo speed is unknown, defaulting to 1000 [ 101.395563][ T4641] lo speed is unknown, defaulting to 1000 [ 101.444198][ T4325] usb 4-1: Using ep0 maxpacket: 32 [ 101.511600][ T4325] usb 4-1: device descriptor read/all, error -71 [ 101.518569][ T4325] usb usb4-port1: attempt power cycle [ 101.849355][ T4276] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.934019][ T4377] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.781333][ T4664] FAULT_INJECTION: forcing a failure. [ 102.781333][ T4664] name failslab, interval 1, probability 0, space 0, times 1 [ 102.794500][ T4664] CPU: 1 PID: 4664 Comm: syz.2.50 Not tainted syzkaller #0 [ 102.801755][ T4664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.811875][ T4664] Call Trace: [ 102.815187][ T4664] [ 102.818153][ T4664] dump_stack_lvl+0x168/0x22e [ 102.822890][ T4664] ? show_regs_print_info+0x12/0x12 [ 102.828129][ T4664] ? load_image+0x3b0/0x3b0 [ 102.832677][ T4664] ? __might_sleep+0xd0/0xd0 [ 102.837325][ T4664] ? __lock_acquire+0x7c50/0x7c50 [ 102.842394][ T4664] should_fail_ex+0x399/0x4d0 [ 102.847126][ T4664] should_failslab+0x5/0x20 [ 102.851680][ T4664] slab_pre_alloc_hook+0x59/0x310 [ 102.856754][ T4664] ? __keyctl_dh_compute+0x331/0xd30 [ 102.862082][ T4664] __kmem_cache_alloc_node+0x4f/0x260 [ 102.867510][ T4664] ? __keyctl_dh_compute+0x331/0xd30 [ 102.872852][ T4664] __kmalloc+0xa0/0x240 [ 102.877061][ T4664] __keyctl_dh_compute+0x331/0xd30 [ 102.882243][ T4664] ? keyctl_get_persistent+0x750/0x750 [ 102.887758][ T4664] ? __lock_acquire+0x7c50/0x7c50 [ 102.892857][ T4664] keyctl_dh_compute+0x106/0x160 [ 102.897852][ T4664] ? keyctl_dh_compute_kdf+0x210/0x210 [ 102.903360][ T4664] ? ksys_write+0x1bd/0x240 [ 102.907908][ T4664] ? common_file_perm+0x171/0x1c0 [ 102.912975][ T4664] ? __lock_acquire+0x7c50/0x7c50 [ 102.918049][ T4664] __se_sys_keyctl+0x4ef/0x7a0 [ 102.922855][ T4664] ? __x64_sys_keyctl+0xc0/0xc0 [ 102.927753][ T4664] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 102.933443][ T4664] ? mutex_unlock+0x10/0x10 [ 102.937994][ T4664] ? __fget_files+0x44a/0x4d0 [ 102.942734][ T4664] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 102.948744][ T4664] ? lock_chain_count+0x20/0x20 [ 102.953614][ T4664] ? lockdep_hardirqs_on+0x94/0x140 [ 102.958821][ T4664] ? __x64_sys_keyctl+0x1c/0xc0 [ 102.963684][ T4664] do_syscall_64+0x4c/0xa0 [ 102.968152][ T4664] ? clear_bhb_loop+0x60/0xb0 [ 102.972833][ T4664] ? clear_bhb_loop+0x60/0xb0 [ 102.977516][ T4664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.983433][ T4664] RIP: 0033:0x7f26d978eba9 [ 102.987862][ T4664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.007742][ T4664] RSP: 002b:00007f26da6dc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 103.016448][ T4664] RAX: ffffffffffffffda RBX: 00007f26d99d5fa0 RCX: 00007f26d978eba9 [ 103.024429][ T4664] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000017 [ 103.032407][ T4664] RBP: 00007f26da6dc090 R08: 0000000000000000 R09: 0000000000000000 [ 103.040409][ T4664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.048408][ T4664] R13: 00007f26d99d6038 R14: 00007f26d99d5fa0 R15: 00007ffd40533e08 [ 103.056397][ T4664] [ 103.176577][ T4377] usb 2-1: Using ep0 maxpacket: 32 [ 103.185238][ T4377] usb 2-1: no configurations [ 103.189897][ T4377] usb 2-1: can't read configurations, error -22 [ 103.206899][ T4666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.49'. [ 103.343976][ T4377] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.533997][ T4377] usb 2-1: Using ep0 maxpacket: 32 [ 103.539998][ T4377] usb 2-1: no configurations [ 103.559422][ T4377] usb 2-1: can't read configurations, error -22 [ 103.592060][ T4377] usb usb2-port1: attempt power cycle [ 104.013984][ T4377] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.065936][ T4377] usb 2-1: Using ep0 maxpacket: 32 [ 104.088940][ T4377] usb 2-1: no configurations [ 104.093690][ T4377] usb 2-1: can't read configurations, error -22 [ 104.274011][ T4377] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.347178][ T4377] usb 2-1: Using ep0 maxpacket: 32 [ 104.353136][ T4377] usb 2-1: no configurations [ 104.373996][ T4377] usb 2-1: can't read configurations, error -22 [ 104.394333][ T4377] usb usb2-port1: unable to enumerate USB device [ 104.464052][ T4349] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.555824][ T4682] loop2: detected capacity change from 0 to 32768 [ 104.653994][ T4349] usb 5-1: Using ep0 maxpacket: 8 [ 104.665958][ T4349] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 104.703174][ T4682] XFS (loop2): Mounting V5 Filesystem [ 104.740430][ T4349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.768296][ T4349] usb 5-1: Product: syz [ 104.772713][ T4349] usb 5-1: Manufacturer: syz [ 104.800737][ T4349] usb 5-1: SerialNumber: syz [ 104.822137][ T4349] usb 5-1: config 0 descriptor?? [ 104.887676][ T4682] XFS (loop2): Ending clean mount [ 104.888811][ T4697] netlink: 128 bytes leftover after parsing attributes in process `syz.3.61'. [ 104.899203][ T4349] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 105.958513][ T4684] loop4: detected capacity change from 0 to 2048 [ 106.039845][ T4349] radio-usb-si4713: probe of 5-1:0.0 failed with error -32 [ 106.047496][ T4349] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 106.090676][ T4684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.496576][ T4659] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.548302][ T4710] loop3: detected capacity change from 0 to 32768 [ 106.618246][ T4710] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 106.665597][ T4710] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 106.703971][ T4659] usb 2-1: Using ep0 maxpacket: 8 [ 106.711935][ T4659] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 106.779480][ T4659] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.779491][ T4717] loop0: detected capacity change from 0 to 256 [ 106.833333][ T4659] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.854532][ T4659] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.896668][ T4659] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.928581][ T4659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.056817][ T4276] ocfs2: Unmounting device (7,3) on (node local) [ 107.178277][ T4659] usb 2-1: GET_CAPABILITIES returned 0 [ 107.184804][ T4659] usbtmc 2-1:16.0: can't read capabilities [ 107.230568][ T4266] XFS (loop2): Unmounting Filesystem [ 107.649446][ T4712] loop1: detected capacity change from 0 to 1024 [ 108.128435][ T4659] usb 5-1: USB disconnect, device number 2 [ 108.161272][ T4712] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 108.241174][ T4712] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 108.280891][ T4712] EXT4-fs (loop1): invalid journal inode [ 108.314217][ T4712] EXT4-fs (loop1): can't get journal size [ 108.352503][ T4712] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.389230][ T4730] loop3: detected capacity change from 0 to 4096 [ 108.410295][ T4398] usb 2-1: USB disconnect, device number 7 [ 108.424312][ T4730] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 108.444823][ T4730] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 108.459042][ T4730] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 108.471873][ T4730] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 108.485342][ T4730] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 108.510143][ T4730] ntfs: volume version 3.1. [ 108.537635][ T4730] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 108.538280][ T4735] FAULT_INJECTION: forcing a failure. [ 108.538280][ T4735] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 108.557072][ T4730] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 108.594524][ T4735] CPU: 1 PID: 4735 Comm: syz.4.71 Not tainted syzkaller #0 [ 108.601802][ T4735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.611886][ T4735] Call Trace: [ 108.615179][ T4735] [ 108.618126][ T4735] dump_stack_lvl+0x168/0x22e [ 108.622850][ T4735] ? show_regs_print_info+0x12/0x12 [ 108.628067][ T4735] ? load_image+0x3b0/0x3b0 [ 108.632598][ T4735] ? __lock_acquire+0x7c50/0x7c50 [ 108.637647][ T4735] should_fail_ex+0x399/0x4d0 [ 108.642356][ T4735] prepare_alloc_pages+0x1e2/0x5f0 [ 108.647493][ T4735] __alloc_pages+0x123/0x4e0 [ 108.652110][ T4735] ? zone_statistics+0x170/0x170 [ 108.657079][ T4735] __pmd_alloc+0xaf/0x730 [ 108.661431][ T4735] ? __pud_alloc+0x150/0x150 [ 108.666062][ T4735] ? count_memcg_event_mm+0x358/0x3b0 [ 108.671481][ T4735] ? __lock_acquire+0x7c50/0x7c50 [ 108.676534][ T4735] ? count_memcg_event_mm+0x8f/0x3b0 [ 108.681852][ T4735] ? put_page+0x270/0x270 [ 108.686222][ T4735] ? hugepage_vma_check+0x466/0x540 [ 108.691455][ T4735] handle_mm_fault+0x9b7/0x3e70 [ 108.696340][ T4735] ? mt_find+0x145/0x810 [ 108.700616][ T4735] ? numa_migrate_prep+0x250/0x250 [ 108.705756][ T4735] ? lock_chain_count+0x20/0x20 [ 108.710714][ T4735] ? lock_mm_and_find_vma+0xae/0x2f0 [ 108.716030][ T4735] do_user_addr_fault+0x51f/0xb10 [ 108.721094][ T4735] exc_page_fault+0x60/0x100 [ 108.725707][ T4735] asm_exc_page_fault+0x22/0x30 [ 108.730587][ T4735] RIP: 0010:copy_user_short_string+0xa/0x40 [ 108.736509][ T4735] Code: 83 f8 12 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 108.756159][ T4735] RSP: 0018:ffffc90005dbfd28 EFLAGS: 00050202 [ 108.762265][ T4735] RAX: ffffffff84070701 RBX: 0000000000000020 RCX: 0000000000000004 [ 108.770333][ T4735] RDX: 0000000000000000 RSI: 000000110c230000 RDI: ffff888054e9a000 [ 108.778338][ T4735] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100a9d3404 [ 108.786323][ T4735] R10: ffffed100a9d3404 R11: 1ffff1100a9d3400 R12: 00007fffffffefe0 [ 108.794307][ T4735] R13: dffffc0000000000 R14: ffff888054e9a000 R15: 000000110c230000 [ 108.802303][ T4735] ? refcount_dec_and_lock_irqsave+0xd1/0xf0 [ 108.808315][ T4735] _copy_from_user+0xf4/0x170 [ 108.813010][ T4735] do_mq_notify+0x1b3/0xc10 [ 108.817530][ T4735] ? mutex_unlock+0x10/0x10 [ 108.822050][ T4735] ? msg_tree_erase+0xe0/0xe0 [ 108.826737][ T4735] ? __might_fault+0xc2/0x120 [ 108.831433][ T4735] ? __might_fault+0xa6/0x120 [ 108.836136][ T4735] __x64_sys_mq_notify+0x112/0x160 [ 108.841284][ T4735] ? __ia32_sys_mq_timedreceive+0x200/0x200 [ 108.847293][ T4735] ? lockdep_hardirqs_on+0x94/0x140 [ 108.852699][ T4735] do_syscall_64+0x4c/0xa0 [ 108.857145][ T4735] ? clear_bhb_loop+0x60/0xb0 [ 108.861834][ T4735] ? clear_bhb_loop+0x60/0xb0 [ 108.866526][ T4735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.872447][ T4735] RIP: 0033:0x7f414118eba9 [ 108.876877][ T4735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.896517][ T4735] RSP: 002b:00007f4141f36038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 108.904962][ T4735] RAX: ffffffffffffffda RBX: 00007f41413d5fa0 RCX: 00007f414118eba9 [ 108.912952][ T4735] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 108.920953][ T4735] RBP: 00007f4141f36090 R08: 0000000000000000 R09: 0000000000000000 [ 108.929127][ T4735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.937117][ T4735] R13: 00007f41413d6038 R14: 00007f41413d5fa0 R15: 00007ffcf713f7c8 [ 108.945117][ T4735] [ 108.948169][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.051945][ T4730] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 109.103940][ T4730] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 109.144073][ T4730] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 110.086054][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 110.207251][ T4752] loop2: detected capacity change from 0 to 24 [ 110.263057][ T4752] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 110.314203][ T4752] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 110.658007][ T4755] loop4: detected capacity change from 0 to 256 [ 111.175988][ T4752] FAULT_INJECTION: forcing a failure. [ 111.175988][ T4752] name failslab, interval 1, probability 0, space 0, times 0 [ 111.189155][ T4752] CPU: 1 PID: 4752 Comm: syz.2.75 Not tainted syzkaller #0 [ 111.196450][ T4752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.206508][ T4752] Call Trace: [ 111.209794][ T4752] [ 111.212733][ T4752] dump_stack_lvl+0x168/0x22e [ 111.217461][ T4752] ? show_regs_print_info+0x12/0x12 [ 111.222681][ T4752] ? load_image+0x3b0/0x3b0 [ 111.227227][ T4752] should_fail_ex+0x399/0x4d0 [ 111.231934][ T4752] should_failslab+0x5/0x20 [ 111.236473][ T4752] slab_pre_alloc_hook+0x59/0x310 [ 111.241504][ T4752] ? __kmalloc_node_track_caller+0xdf/0x230 [ 111.247417][ T4752] kmem_cache_alloc+0x56/0x2f0 [ 111.252187][ T4752] ? _sctp_make_chunk+0x14e/0x420 [ 111.257230][ T4752] _sctp_make_chunk+0x14e/0x420 [ 111.262110][ T4752] sctp_make_heartbeat+0x43/0x810 [ 111.267167][ T4752] ? unwind_next_frame+0x1880/0x20b0 [ 111.272460][ T4752] ? deref_stack_reg+0x19f/0x230 [ 111.277420][ T4752] ? preempt_count_add+0x8d/0x190 [ 111.282546][ T4752] sctp_sf_do_prm_requestheartbeat+0x2e/0x280 [ 111.288621][ T4752] sctp_do_sm+0x1de/0x5500 [ 111.293148][ T4752] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 111.299166][ T4752] ? mark_lock+0x94/0x320 [ 111.303509][ T4752] sctp_primitive_REQUESTHEARTBEAT+0x94/0xc0 [ 111.309496][ T4752] sctp_apply_peer_addr_params+0xdf/0x1880 [ 111.315352][ T4752] sctp_setsockopt_peer_addr_params+0x673/0x940 [ 111.321624][ T4752] sctp_setsockopt+0x4d6/0xf90 [ 111.326402][ T4752] ? sock_common_recvmsg+0x1a0/0x1a0 [ 111.331711][ T4752] __sys_setsockopt+0x2bf/0x3d0 [ 111.336581][ T4752] __x64_sys_setsockopt+0xb1/0xc0 [ 111.341874][ T4752] do_syscall_64+0x4c/0xa0 [ 111.346296][ T4752] ? clear_bhb_loop+0x60/0xb0 [ 111.350977][ T4752] ? clear_bhb_loop+0x60/0xb0 [ 111.355680][ T4752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.361670][ T4752] RIP: 0033:0x7f26d978eba9 [ 111.366086][ T4752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.385694][ T4752] RSP: 002b:00007f26da6dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.394111][ T4752] RAX: ffffffffffffffda RBX: 00007f26d99d5fa0 RCX: 00007f26d978eba9 [ 111.402094][ T4752] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000008 [ 111.410069][ T4752] RBP: 00007f26da6dc090 R08: 000000000000009c R09: 0000000000000000 [ 111.418043][ T4752] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 111.426018][ T4752] R13: 00007f26d99d6038 R14: 00007f26d99d5fa0 R15: 00007ffd40533e08 [ 111.434009][ T4752] [ 111.437078][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.497125][ T4766] loop1: detected capacity change from 0 to 128 [ 111.522073][ T4759] loop0: detected capacity change from 0 to 64 [ 111.594909][ T4766] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 111.650679][ T4770] loop2: detected capacity change from 0 to 512 [ 111.751852][ T4770] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.845182][ T4772] FAULT_INJECTION: forcing a failure. [ 111.845182][ T4772] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.945840][ T4772] CPU: 1 PID: 4772 Comm: syz.3.80 Not tainted syzkaller #0 [ 111.953121][ T4772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.963215][ T4772] Call Trace: [ 111.966526][ T4772] [ 111.969483][ T4772] dump_stack_lvl+0x168/0x22e [ 111.974209][ T4772] ? show_regs_print_info+0x12/0x12 [ 111.979445][ T4772] ? load_image+0x3b0/0x3b0 [ 111.983996][ T4772] ? __might_fault+0xa6/0x120 [ 111.988741][ T4772] should_fail_ex+0x399/0x4d0 [ 111.993474][ T4772] copyin+0x1b/0x120 [ 111.997416][ T4772] _copy_from_iter+0x45a/0x10c0 [ 112.002321][ T4772] ? copyout_mc+0x110/0x110 [ 112.006866][ T4772] ? __virt_addr_valid+0x188/0x540 [ 112.012034][ T4772] ? __virt_addr_valid+0x188/0x540 [ 112.012078][ T4777] netlink: 766 bytes leftover after parsing attributes in process `syz.1.82'. [ 112.017179][ T4772] ? __virt_addr_valid+0x465/0x540 [ 112.017213][ T4772] ? __check_object_size+0x500/0xa40 [ 112.017238][ T4772] netlink_sendmsg+0x746/0xbc0 [ 112.017272][ T4772] ? netlink_getsockopt+0x540/0x540 [ 112.017302][ T4772] ? aa_sock_msg_perm+0x94/0x150 [ 112.017336][ T4772] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 112.017355][ T4772] ? security_socket_sendmsg+0x7c/0xa0 [ 112.017386][ T4772] ? netlink_getsockopt+0x540/0x540 [ 112.067645][ T4772] ____sys_sendmsg+0x59b/0x970 [ 112.072462][ T4772] ? __sys_sendmsg_sock+0x30/0x30 [ 112.077533][ T4772] ? __import_iovec+0x315/0x500 [ 112.082439][ T4772] ? import_iovec+0x6f/0xa0 [ 112.087000][ T4772] ___sys_sendmsg+0x21c/0x290 [ 112.091724][ T4772] ? __sys_sendmsg+0x270/0x270 [ 112.096555][ T4772] ? __lock_acquire+0x7c50/0x7c50 [ 112.101640][ T4772] ? __fdget+0x17c/0x200 [ 112.105932][ T4772] __se_sys_sendmsg+0x19e/0x270 [ 112.110828][ T4772] ? __x64_sys_sendmsg+0x80/0x80 [ 112.115841][ T4772] ? lockdep_hardirqs_on+0x94/0x140 [ 112.121094][ T4772] do_syscall_64+0x4c/0xa0 [ 112.125559][ T4772] ? clear_bhb_loop+0x60/0xb0 [ 112.130277][ T4772] ? clear_bhb_loop+0x60/0xb0 [ 112.134999][ T4772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.140950][ T4772] RIP: 0033:0x7fb9ead8eba9 [ 112.145407][ T4772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.165056][ T4772] RSP: 002b:00007fb9ebb63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.173517][ T4772] RAX: ffffffffffffffda RBX: 00007fb9eafd5fa0 RCX: 00007fb9ead8eba9 [ 112.181534][ T4772] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 112.189541][ T4772] RBP: 00007fb9ebb63090 R08: 0000000000000000 R09: 0000000000000000 [ 112.197540][ T4772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.205541][ T4772] R13: 00007fb9eafd6038 R14: 00007fb9eafd5fa0 R15: 00007ffd5cd63a48 [ 112.213562][ T4772] [ 112.216684][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.228527][ T4775] loop4: detected capacity change from 0 to 128 [ 112.245930][ T4775] EXT4-fs (loop4): Test dummy encryption mode enabled [ 112.389477][ T4377] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.615594][ T4775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.625668][ T4377] usb 3-1: Using ep0 maxpacket: 32 [ 112.631344][ T4775] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.652216][ T4377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.686085][ T4377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.717934][ T4377] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 112.736364][ T4377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.770069][ T4377] usb 3-1: config 0 descriptor?? [ 113.676939][ T4775] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 114.935260][ T4775] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 115.152737][ T4811] loop3: detected capacity change from 0 to 32768 [ 115.159779][ T4811] XFS: ikeep mount option is deprecated. [ 115.341395][ T4811] XFS (loop3): Mounting V5 Filesystem [ 115.478486][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 115.641804][ T4811] XFS (loop3): Ending clean mount [ 115.710427][ T4811] XFS (loop3): Quotacheck needed: Please wait. [ 115.809647][ T4377] usbhid 3-1:0.0: can't add hid device: -71 [ 115.818740][ T4377] usbhid: probe of 3-1:0.0 failed with error -71 [ 115.827135][ T4377] usb 3-1: USB disconnect, device number 2 [ 115.850019][ T4811] XFS (loop3): Quotacheck: Done. [ 118.950928][ T4276] XFS (loop3): Unmounting Filesystem [ 119.265001][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 119.327991][ T4843] loop0: detected capacity change from 0 to 256 [ 119.380408][ T4843] FAT-fs (loop0): Unrecognized mount option "fs" or missing value [ 119.476038][ T4845] loop1: detected capacity change from 0 to 8192 [ 119.717407][ T4845] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.363886][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 120.379955][ T26] audit: type=1326 audit(1757917761.005:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28cb8eba9 code=0x7ffc0000 [ 120.751630][ T26] audit: type=1326 audit(1757917761.015:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28cb8eba9 code=0x7ffc0000 [ 120.774403][ T26] audit: type=1326 audit(1757917761.015:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc28cb8eba9 code=0x7ffc0000 [ 120.796473][ T26] audit: type=1326 audit(1757917761.015:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28cb8eba9 code=0x7ffc0000 [ 120.818564][ T26] audit: type=1326 audit(1757917761.015:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28cb8eba9 code=0x7ffc0000 [ 120.844583][ T26] audit: type=1326 audit(1757917761.015:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc28cb8eba9 code=0x7ffc0000 [ 120.867177][ T26] audit: type=1326 audit(1757917761.025:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28cb8eba9 code=0x7ffc0000 [ 120.891418][ T26] audit: type=1326 audit(1757917761.025:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28cb8eba9 code=0x7ffc0000 [ 120.964042][ T26] audit: type=1326 audit(1757917761.025:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc28cb8eba9 code=0x7ffc0000 [ 121.069327][ T4858] netlink: 'syz.4.99': attribute type 10 has an invalid length. [ 121.094845][ T4858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.99'. [ 121.105328][ T4858] device team0 entered promiscuous mode [ 121.110930][ T4858] device team_slave_0 entered promiscuous mode [ 121.125814][ T4858] device team_slave_1 entered promiscuous mode [ 121.132844][ T4858] bridge0: port 3(team0) entered blocking state [ 121.172890][ T4858] bridge0: port 3(team0) entered disabled state [ 122.238798][ T4858] bridge0: port 3(team0) entered blocking state [ 122.246016][ T4858] bridge0: port 3(team0) entered forwarding state [ 122.594286][ T26] audit: type=1326 audit(1757917761.025:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4844 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28cb8eba9 code=0x7ffc0000 [ 123.093665][ T4881] loop2: detected capacity change from 0 to 8192 [ 123.554295][ T4888] FAULT_INJECTION: forcing a failure. [ 123.554295][ T4888] name failslab, interval 1, probability 0, space 0, times 0 [ 123.577178][ T4888] CPU: 0 PID: 4888 Comm: syz.2.104 Not tainted syzkaller #0 [ 123.584525][ T4888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.594615][ T4888] Call Trace: [ 123.597921][ T4888] [ 123.600878][ T4888] dump_stack_lvl+0x168/0x22e [ 123.605614][ T4888] ? show_regs_print_info+0x12/0x12 [ 123.610855][ T4888] ? load_image+0x3b0/0x3b0 [ 123.615410][ T4888] ? __might_sleep+0xd0/0xd0 [ 123.620017][ T4888] ? __lock_acquire+0x7c50/0x7c50 [ 123.625160][ T4888] should_fail_ex+0x399/0x4d0 [ 123.629856][ T4888] should_failslab+0x5/0x20 [ 123.634370][ T4888] slab_pre_alloc_hook+0x59/0x310 [ 123.639404][ T4888] kmem_cache_alloc_lru+0x49/0x2e0 [ 123.644557][ T4888] ? fat_alloc_inode+0x28/0xc0 [ 123.649357][ T4888] fat_alloc_inode+0x28/0xc0 [ 123.653976][ T4888] ? fat_get_block_bmap+0x430/0x430 [ 123.659216][ T4888] new_inode_pseudo+0x5f/0x1c0 [ 123.663996][ T4888] new_inode+0x25/0x1c0 [ 123.668163][ T4888] ? do_raw_spin_unlock+0x11d/0x230 [ 123.673379][ T4888] fat_build_inode+0x1fb/0x3d0 [ 123.678159][ T4888] vfat_lookup+0x317/0x560 [ 123.682590][ T4888] ? setup+0xe0/0xe0 [ 123.686490][ T4888] ? d_hash_and_lookup+0x1b0/0x1b0 [ 123.691619][ T4888] ? __init_waitqueue_head+0xa5/0x150 [ 123.697035][ T4888] __lookup_slow+0x27d/0x3a0 [ 123.701638][ T4888] ? lookup_one_len+0x2c0/0x2c0 [ 123.706518][ T4888] ? try_to_unlazy+0x34c/0x5a0 [ 123.711291][ T4888] ? preempt_count_add+0x8d/0x190 [ 123.716323][ T4888] ? down_read+0x1a8/0x2d0 [ 123.720752][ T4888] lookup_slow+0x53/0x70 [ 123.725012][ T4888] walk_component+0x2be/0x3f0 [ 123.729692][ T4888] ? path_lookupat+0x15c/0x440 [ 123.734473][ T4888] path_lookupat+0x169/0x440 [ 123.739113][ T4888] filename_lookup+0x1f0/0x500 [ 123.743900][ T4888] ? hashlen_string+0x110/0x110 [ 123.748811][ T4888] ? strncpy_from_user+0x1e3/0x350 [ 123.753946][ T4888] ? getname_flags+0x206/0x500 [ 123.758746][ T4888] user_path_at_empty+0x3e/0x60 [ 123.763639][ T4888] do_sys_truncate+0xa3/0x190 [ 123.768406][ T4888] ? break_lease+0xd0/0xd0 [ 123.772832][ T4888] ? lockdep_hardirqs_on+0x94/0x140 [ 123.778073][ T4888] do_syscall_64+0x4c/0xa0 [ 123.782507][ T4888] ? clear_bhb_loop+0x60/0xb0 [ 123.787192][ T4888] ? clear_bhb_loop+0x60/0xb0 [ 123.791873][ T4888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.797781][ T4888] RIP: 0033:0x7f26d978eba9 [ 123.802208][ T4888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.821816][ T4888] RSP: 002b:00007f26da6bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 123.830233][ T4888] RAX: ffffffffffffffda RBX: 00007f26d99d6090 RCX: 00007f26d978eba9 [ 123.838209][ T4888] RDX: 0000000000000000 RSI: 00000000000024b9 RDI: 0000200000000900 [ 123.846197][ T4888] RBP: 00007f26da6bb090 R08: 0000000000000000 R09: 0000000000000000 [ 123.854176][ T4888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.862160][ T4888] R13: 00007f26d99d6128 R14: 00007f26d99d6090 R15: 00007ffd40533e08 [ 123.870144][ T4888] [ 123.962812][ T4887] loop4: detected capacity change from 0 to 8192 [ 124.562081][ T4895] netlink: 'syz.2.109': attribute type 13 has an invalid length. [ 125.045644][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.115909][ T4895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.142441][ T4883] loop3: detected capacity change from 0 to 40427 [ 125.207343][ T4883] F2FS-fs (loop3): invalid crc value [ 125.242490][ T4883] F2FS-fs (loop3): Found nat_bits in checkpoint [ 125.531321][ T4349] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.563758][ T4883] F2FS-fs (loop3): Cannot turn on quotas: -7 on 0 [ 125.584745][ T4883] F2FS-fs (loop3): Start checkpoint disabled! [ 125.598805][ T4903] xt_l2tp: unknown flags: 17 [ 125.603978][ T4903] netlink: 'syz.2.111': attribute type 13 has an invalid length. [ 125.614456][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.634564][ T4903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.668814][ T4883] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 125.743992][ T4349] usb 1-1: Using ep0 maxpacket: 32 [ 125.755117][ T4349] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.814198][ T4349] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.847126][ T4349] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 125.874177][ T4349] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 125.893283][ T4349] usb 1-1: Product: syz [ 125.913506][ T4349] usb 1-1: Manufacturer: syz [ 125.936205][ T4349] hub 1-1:4.0: USB hub found [ 125.991259][ T4905] loop4: detected capacity change from 0 to 8192 [ 126.037466][ T4905] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 126.064058][ T4905] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 126.078137][ T4905] REISERFS (device loop4): using ordered data mode [ 126.087918][ T4905] reiserfs: using flush barriers [ 126.121294][ T4905] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.139688][ T4349] hub 1-1:4.0: 2 ports detected [ 126.145345][ T4905] REISERFS (device loop4): checking transaction log (loop4) [ 126.156710][ T4905] REISERFS (device loop4): Using r5 hash to sort names [ 126.264826][ T4905] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 126.300625][ T4905] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 127.334089][ T4910] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 127.485032][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 127.544905][ T4349] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 127.551910][ T4349] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 128.540590][ T4659] usb 1-1: USB disconnect, device number 6 [ 128.690174][ T4923] loop4: detected capacity change from 0 to 4096 [ 128.734907][ T4933] netlink: 76 bytes leftover after parsing attributes in process `syz.1.119'. [ 128.828400][ T4923] ntfs3: loop4: no free space to extend mft [ 128.904232][ T4349] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.071846][ T4274] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 129.088706][ T4274] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 129.124809][ T4349] usb 4-1: Using ep0 maxpacket: 32 [ 129.143587][ T4349] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 129.202480][ T4349] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 129.239084][ T4349] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.254135][ T4349] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 129.264689][ T4349] usb 4-1: config 1 has no interface number 0 [ 129.271112][ T4349] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 129.281051][ T4349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.339311][ T4349] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 129.666007][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 129.731640][ T4349] snd_usb_pod 4-1:1.1: set_interface failed [ 129.742928][ T4349] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 129.771922][ T4349] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 129.811594][ T4349] usb 4-1: USB disconnect, device number 5 [ 130.206047][ T4929] loop0: detected capacity change from 0 to 32768 [ 130.394834][ T4929] ptrace attach of ""[4953] was attempted by "./syz-executor exec"[4929] [ 130.421340][ T4953] ERROR: (device loop0): dbAllocAG: unable to allocate blocks [ 130.421340][ T4953] [ 130.432885][ T4953] jfs_create: dtInsert returned -EIO [ 130.438950][ T4953] ERROR: (device loop0): jfs_create: [ 130.438950][ T4953] [ 132.402166][ T4970] netlink: 364 bytes leftover after parsing attributes in process `syz.0.130'. [ 132.512312][ T4970] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 132.749006][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.756998][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.230740][ T4965] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.305690][ T4965] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 133.346033][ T4965] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 133.387407][ T4965] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.417937][ T4965] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 133.426799][ T4965] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 133.481255][ T4965] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.534388][ T4965] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 133.546504][ T4965] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 133.602069][ T4965] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.634227][ T4965] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 133.661977][ T4965] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 133.706784][ T4965] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.747602][ T4965] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 133.768439][ T4977] loop3: detected capacity change from 0 to 4096 [ 133.779764][ T4965] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 134.150194][ T4983] FAULT_INJECTION: forcing a failure. [ 134.150194][ T4983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.177608][ T4276] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 134.201643][ T4276] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 134.284837][ T4983] CPU: 0 PID: 4983 Comm: syz.4.134 Not tainted syzkaller #0 [ 134.292205][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.302304][ T4983] Call Trace: [ 134.305612][ T4983] [ 134.308568][ T4983] dump_stack_lvl+0x168/0x22e [ 134.313292][ T4983] ? show_regs_print_info+0x12/0x12 [ 134.318540][ T4983] ? load_image+0x3b0/0x3b0 [ 134.323103][ T4983] ? __might_fault+0xa6/0x120 [ 134.327832][ T4983] should_fail_ex+0x399/0x4d0 [ 134.332557][ T4983] copyin+0x1b/0x120 [ 134.336499][ T4983] _copy_from_iter+0x45a/0x10c0 [ 134.341410][ T4983] ? copyout_mc+0x110/0x110 [ 134.345958][ T4983] ? __virt_addr_valid+0x188/0x540 [ 134.351112][ T4983] ? __virt_addr_valid+0x188/0x540 [ 134.356263][ T4983] ? __virt_addr_valid+0x465/0x540 [ 134.361421][ T4983] ? __check_object_size+0x500/0xa40 [ 134.366744][ T4983] netlink_sendmsg+0x746/0xbc0 [ 134.371557][ T4983] ? netlink_getsockopt+0x540/0x540 [ 134.376807][ T4983] ? aa_sock_msg_perm+0x94/0x150 [ 134.381789][ T4983] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 134.387099][ T4983] ? security_socket_sendmsg+0x7c/0xa0 [ 134.392666][ T4983] ? netlink_getsockopt+0x540/0x540 [ 134.397878][ T4983] ____sys_sendmsg+0x59b/0x970 [ 134.402657][ T4983] ? __sys_sendmsg_sock+0x30/0x30 [ 134.407712][ T4983] ? __import_iovec+0x315/0x500 [ 134.412675][ T4983] ? import_iovec+0x6f/0xa0 [ 134.417200][ T4983] ___sys_sendmsg+0x21c/0x290 [ 134.421893][ T4983] ? __sys_sendmsg+0x270/0x270 [ 134.426682][ T4983] ? __lock_acquire+0x7c50/0x7c50 [ 134.431732][ T4983] ? __fdget+0x17c/0x200 [ 134.435990][ T4983] __se_sys_sendmsg+0x19e/0x270 [ 134.440854][ T4983] ? __x64_sys_sendmsg+0x80/0x80 [ 134.445817][ T4983] ? lockdep_hardirqs_on+0x94/0x140 [ 134.451029][ T4983] do_syscall_64+0x4c/0xa0 [ 134.455456][ T4983] ? clear_bhb_loop+0x60/0xb0 [ 134.460147][ T4983] ? clear_bhb_loop+0x60/0xb0 [ 134.464834][ T4983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.470743][ T4983] RIP: 0033:0x7f414118eba9 [ 134.475169][ T4983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.494785][ T4983] RSP: 002b:00007f4141f36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.503296][ T4983] RAX: ffffffffffffffda RBX: 00007f41413d5fa0 RCX: 00007f414118eba9 [ 134.511282][ T4983] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 134.519262][ T4983] RBP: 00007f4141f36090 R08: 0000000000000000 R09: 0000000000000000 [ 134.527239][ T4983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.535221][ T4983] R13: 00007f41413d6038 R14: 00007f41413d5fa0 R15: 00007ffcf713f7c8 [ 134.543303][ T4983] [ 134.547250][ T4272] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.618884][ T4987] loop2: detected capacity change from 0 to 64 [ 134.672101][ T4989] loop4: detected capacity change from 0 to 512 [ 134.788904][ T4989] journal_path: Lookup failure for './file0' [ 134.805591][ T4989] EXT4-fs: error: could not find journal device path [ 134.962995][ T4979] loop1: detected capacity change from 0 to 32768 [ 135.014936][ T4979] jfs: Unrecognized mount option ")cxUdɵrV@uKH+{s&V/SY5‹O%" or missing value [ 135.025193][ T4975] loop0: detected capacity change from 0 to 32768 [ 135.266057][ T4993] ialloc: diAlloc returned -28! [ 135.346182][ T4992] FAULT_INJECTION: forcing a failure. [ 135.346182][ T4992] name failslab, interval 1, probability 0, space 0, times 0 [ 135.359264][ T4992] CPU: 1 PID: 4992 Comm: syz.3.138 Not tainted syzkaller #0 [ 135.366590][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.376683][ T4992] Call Trace: [ 135.379993][ T4992] [ 135.382952][ T4992] dump_stack_lvl+0x168/0x22e [ 135.387673][ T4992] ? show_regs_print_info+0x12/0x12 [ 135.392919][ T4992] ? load_image+0x3b0/0x3b0 [ 135.397481][ T4992] ? __might_sleep+0xd0/0xd0 [ 135.402122][ T4992] ? __lock_acquire+0x7c50/0x7c50 [ 135.407199][ T4992] should_fail_ex+0x399/0x4d0 [ 135.411934][ T4992] should_failslab+0x5/0x20 [ 135.416487][ T4992] slab_pre_alloc_hook+0x59/0x310 [ 135.421545][ T4992] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 135.427487][ T4992] kmem_cache_alloc+0x56/0x2f0 [ 135.432283][ T4992] ? fuse_get_req+0x3e7/0xab0 [ 135.437018][ T4992] fuse_get_req+0x3e7/0xab0 [ 135.441576][ T4992] ? fuse_simple_request+0x1b60/0x1b60 [ 135.447085][ T4992] ? wake_bit_function+0x200/0x200 [ 135.452257][ T4992] ? kasan_set_track+0x60/0x70 [ 135.457064][ T4992] ? __kasan_kmalloc+0x8e/0xa0 [ 135.461868][ T4992] ? fuse_lookup_name+0x14b/0x700 [ 135.466925][ T4992] ? fuse_lookup+0x13b/0x5a0 [ 135.471548][ T4992] ? lookup_one_qstr_excl+0x10e/0x240 [ 135.476974][ T4992] fuse_simple_request+0x25d/0x1b60 [ 135.482323][ T4992] ? fuse_put_request+0x2d0/0x2d0 [ 135.487423][ T4992] fuse_lookup_name+0x275/0x700 [ 135.492323][ T4992] ? fuse_invalid_attr+0x110/0x110 [ 135.497474][ T4992] ? mutex_lock_nested+0x10/0x10 [ 135.502483][ T4992] fuse_lookup+0x13b/0x5a0 [ 135.506940][ T4992] ? d_alloc+0x16f/0x1a0 [ 135.511225][ T4992] ? fuse_perm_getattr+0x50/0x50 [ 135.516219][ T4992] ? _raw_spin_unlock+0x24/0x40 [ 135.521108][ T4992] ? d_alloc+0x16f/0x1a0 [ 135.525400][ T4992] lookup_one_qstr_excl+0x10e/0x240 [ 135.530653][ T4992] filename_create+0x21e/0x450 [ 135.535464][ T4992] ? kern_path_create+0x50/0x50 [ 135.540346][ T4992] ? __virt_addr_valid+0x188/0x540 [ 135.545498][ T4992] ? __virt_addr_valid+0x188/0x540 [ 135.550663][ T4992] ? __virt_addr_valid+0x465/0x540 [ 135.555836][ T4992] do_mknodat+0x16e/0x4c0 [ 135.560210][ T4992] ? do_o_path+0x1f0/0x1f0 [ 135.564672][ T4992] __x64_sys_mknod+0x8a/0xa0 [ 135.569292][ T4992] do_syscall_64+0x4c/0xa0 [ 135.573726][ T4992] ? clear_bhb_loop+0x60/0xb0 [ 135.578409][ T4992] ? clear_bhb_loop+0x60/0xb0 [ 135.583101][ T4992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.589012][ T4992] RIP: 0033:0x7fb9ead8eba9 [ 135.593441][ T4992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.613060][ T4992] RSP: 002b:00007fb9ebb42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 135.621494][ T4992] RAX: ffffffffffffffda RBX: 00007fb9eafd6090 RCX: 00007fb9ead8eba9 [ 135.629477][ T4992] RDX: 0000000000000706 RSI: 00000000ffff2000 RDI: 00002000000002c0 [ 135.637454][ T4992] RBP: 00007fb9ebb42090 R08: 0000000000000000 R09: 0000000000000000 [ 135.645438][ T4992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.653421][ T4992] R13: 00007fb9eafd6128 R14: 00007fb9eafd6090 R15: 00007ffd5cd63a48 [ 135.661522][ T4992] [ 135.667965][ T4272] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.678566][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.686941][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.735849][ T4987] hfs: hfs: Invalid key length: 94 [ 135.784325][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 136.148739][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 136.148755][ T26] audit: type=1400 audit(1757917776.815:13): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=4988 comm="syz.4.137" [ 136.346493][ T5001] loop3: detected capacity change from 0 to 4096 [ 136.363084][ T5001] ntfs: (device loop3): parse_options(): The mft_zone_multiplier option requires an argument. [ 136.472200][ T5008] FAULT_INJECTION: forcing a failure. [ 136.472200][ T5008] name failslab, interval 1, probability 0, space 0, times 0 [ 136.485372][ T5008] CPU: 1 PID: 5008 Comm: syz.2.139 Not tainted syzkaller #0 [ 136.492699][ T5008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.502775][ T5008] Call Trace: [ 136.506087][ T5008] [ 136.509047][ T5008] dump_stack_lvl+0x168/0x22e [ 136.513767][ T5008] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 136.519436][ T5008] ? show_regs_print_info+0x12/0x12 [ 136.524677][ T5008] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 136.530347][ T5008] ? dump_stack+0x5/0x12 [ 136.534664][ T5008] should_fail_ex+0x399/0x4d0 [ 136.539389][ T5008] should_failslab+0x5/0x20 [ 136.543930][ T5008] slab_pre_alloc_hook+0x59/0x310 [ 136.548982][ T5008] ? qp_broker_alloc+0x820/0x2160 [ 136.554048][ T5008] __kmem_cache_alloc_node+0x4f/0x260 [ 136.559540][ T5008] ? qp_broker_alloc+0x820/0x2160 [ 136.564596][ T5008] __kmalloc+0xa0/0x240 [ 136.568791][ T5008] qp_broker_alloc+0x820/0x2160 [ 136.573682][ T5008] ? lockdep_hardirqs_on+0x94/0x140 [ 136.578935][ T5008] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 136.584604][ T5008] vmci_qp_broker_alloc+0x8e/0xb0 [ 136.589679][ T5008] vmci_host_unlocked_ioctl+0x1246/0x2560 [ 136.595445][ T5008] ? vmci_host_poll+0x1f0/0x1f0 [ 136.600338][ T5008] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 136.606372][ T5008] ? lock_chain_count+0x20/0x20 [ 136.611434][ T5008] ? do_vfs_ioctl+0xcb5/0x1d10 [ 136.616237][ T5008] ? __ia32_compat_sys_ioctl+0x780/0x780 [ 136.621912][ T5008] ? lockdep_hardirqs_on+0x94/0x140 [ 136.627146][ T5008] ? finish_task_switch+0x265/0x8f0 [ 136.632396][ T5008] ? __schedule+0x10f4/0x40b0 [ 136.637117][ T5008] ? tomoyo_path_number_perm+0x1b6/0x600 [ 136.642791][ T5008] ? release_firmware_map_entry+0x18a/0x18a [ 136.648712][ T5008] ? lock_chain_count+0x20/0x20 [ 136.653598][ T5008] ? preempt_schedule_irq+0xd0/0x150 [ 136.658917][ T5008] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 136.664933][ T5008] ? lock_chain_count+0x20/0x20 [ 136.669824][ T5008] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 136.675487][ T5008] ? lockdep_hardirqs_on+0x94/0x140 [ 136.680718][ T5008] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 136.686394][ T5008] ? security_file_ioctl+0x41/0xa0 [ 136.691538][ T5008] ? bpf_lsm_file_ioctl+0x5/0x10 [ 136.696518][ T5008] ? security_file_ioctl+0x7c/0xa0 [ 136.701669][ T5008] ? vmci_host_poll+0x1f0/0x1f0 [ 136.706650][ T5008] __se_sys_ioctl+0xfa/0x170 [ 136.711281][ T5008] do_syscall_64+0x4c/0xa0 [ 136.715728][ T5008] ? clear_bhb_loop+0x60/0xb0 [ 136.720439][ T5008] ? clear_bhb_loop+0x60/0xb0 [ 136.725153][ T5008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.731088][ T5008] RIP: 0033:0x7f26d978eba9 [ 136.735535][ T5008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.755171][ T5008] RSP: 002b:00007f26da69a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.763613][ T5008] RAX: ffffffffffffffda RBX: 00007f26d99d6180 RCX: 00007f26d978eba9 [ 136.771615][ T5008] RDX: 0000200000000000 RSI: 00000000000007a8 RDI: 0000000000000005 [ 136.779609][ T5008] RBP: 00007f26da69a090 R08: 0000000000000000 R09: 0000000000000000 [ 136.787603][ T5008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.795612][ T5008] R13: 00007f26d99d6218 R14: 00007f26d99d6180 R15: 00007ffd40533e08 [ 136.803621][ T5008] [ 136.811238][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 136.830776][ T5000] netlink: 160 bytes leftover after parsing attributes in process `syz.3.140'. [ 137.704010][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 138.010737][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 138.010744][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 138.022902][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 138.251949][ T5014] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 138.333865][ T5019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.147'. [ 138.642732][ T5028] FAULT_INJECTION: forcing a failure. [ 138.642732][ T5028] name failslab, interval 1, probability 0, space 0, times 0 [ 138.655737][ T5028] CPU: 0 PID: 5028 Comm: syz.0.145 Not tainted syzkaller #0 [ 138.663065][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.673142][ T5028] Call Trace: [ 138.676441][ T5028] [ 138.679389][ T5028] dump_stack_lvl+0x168/0x22e [ 138.684108][ T5028] ? show_regs_print_info+0x12/0x12 [ 138.689346][ T5028] ? load_image+0x3b0/0x3b0 [ 138.693891][ T5028] ? __might_sleep+0xd0/0xd0 [ 138.698527][ T5028] ? __lock_acquire+0x7c50/0x7c50 [ 138.703589][ T5028] should_fail_ex+0x399/0x4d0 [ 138.708322][ T5028] should_failslab+0x5/0x20 [ 138.712858][ T5028] slab_pre_alloc_hook+0x59/0x310 [ 138.717916][ T5028] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 138.723678][ T5028] __kmem_cache_alloc_node+0x4f/0x260 [ 138.729089][ T5028] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 138.734845][ T5028] __kmalloc+0xa0/0x240 [ 138.739040][ T5028] tomoyo_realpath_from_path+0xdf/0x5d0 [ 138.744654][ T5028] tomoyo_check_open_permission+0x1aa/0x380 [ 138.750581][ T5028] ? tomoyo_check_open_permission+0x156/0x380 [ 138.756678][ T5028] ? tomoyo_check_path_number_acl+0x280/0x280 [ 138.762803][ T5028] ? __lock_acquire+0x7c50/0x7c50 [ 138.767865][ T5028] ? __rwlock_init+0x140/0x140 [ 138.772664][ T5028] ? tomoyo_file_open+0xe9/0x170 [ 138.777634][ T5028] security_file_open+0x5e/0xa0 [ 138.782514][ T5028] do_dentry_open+0x305/0x10d0 [ 138.787325][ T5028] path_openat+0x25c6/0x2e70 [ 138.791942][ T5028] ? finish_task_switch+0x265/0x8f0 [ 138.797178][ T5028] ? finish_task_switch+0x265/0x8f0 [ 138.802421][ T5028] ? __schedule+0x10f4/0x40b0 [ 138.807126][ T5028] ? __x64_sys_openat+0x135/0x160 [ 138.812194][ T5028] ? do_filp_open+0x3c0/0x3c0 [ 138.816899][ T5028] ? lock_chain_count+0x20/0x20 [ 138.821798][ T5028] ? release_firmware_map_entry+0x18a/0x18a [ 138.827718][ T5028] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 138.833741][ T5028] do_filp_open+0x1c1/0x3c0 [ 138.838270][ T5028] ? vfs_tmpfile+0x480/0x480 [ 138.842877][ T5028] ? preempt_schedule_common+0xa5/0xd0 [ 138.848432][ T5028] ? _raw_spin_unlock+0x36/0x40 [ 138.853309][ T5028] ? alloc_fd+0x58f/0x630 [ 138.857660][ T5028] do_sys_openat2+0x142/0x490 [ 138.862352][ T5028] ? do_sys_open+0xe0/0xe0 [ 138.866779][ T5028] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 138.872775][ T5028] ? lock_chain_count+0x20/0x20 [ 138.877646][ T5028] __x64_sys_openat+0x135/0x160 [ 138.882526][ T5028] do_syscall_64+0x4c/0xa0 [ 138.886969][ T5028] ? clear_bhb_loop+0x60/0xb0 [ 138.891671][ T5028] ? clear_bhb_loop+0x60/0xb0 [ 138.896375][ T5028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.902293][ T5028] RIP: 0033:0x7fe67cd8eba9 [ 138.906724][ T5028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.926434][ T5028] RSP: 002b:00007fe67db51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.934859][ T5028] RAX: ffffffffffffffda RBX: 00007fe67cfd6090 RCX: 00007fe67cd8eba9 [ 138.942835][ T5028] RDX: 0000000000000002 RSI: 0000200000001300 RDI: ffffffffffffff9c [ 138.950817][ T5028] RBP: 00007fe67db51090 R08: 0000000000000000 R09: 0000000000000000 [ 138.958795][ T5028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.966775][ T5028] R13: 00007fe67cfd6128 R14: 00007fe67cfd6090 R15: 00007fffca65f558 [ 138.974771][ T5028] [ 138.979070][ T5028] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.199363][ T5029] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 139.205454][ T5024] loop1: detected capacity change from 0 to 4096 [ 139.225407][ T5029] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 139.403995][ T5029] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 139.489795][ T5024] ntfs3: loop1: no free space to extend mft [ 139.604271][ T4265] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 139.610759][ T4265] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 141.016193][ T5056] FAULT_INJECTION: forcing a failure. [ 141.016193][ T5056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.078854][ T5056] CPU: 1 PID: 5056 Comm: syz.2.154 Not tainted syzkaller #0 [ 141.086202][ T5056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.096309][ T5056] Call Trace: [ 141.099619][ T5056] [ 141.102577][ T5056] dump_stack_lvl+0x168/0x22e [ 141.107386][ T5056] ? show_regs_print_info+0x12/0x12 [ 141.112615][ T5056] ? load_image+0x3b0/0x3b0 [ 141.117157][ T5056] ? __lock_acquire+0x7c50/0x7c50 [ 141.122219][ T5056] ? snprintf+0xd7/0x120 [ 141.126602][ T5056] should_fail_ex+0x399/0x4d0 [ 141.131379][ T5056] _copy_to_user+0x2c/0x130 [ 141.136018][ T5056] simple_read_from_buffer+0xe3/0x150 [ 141.141445][ T5056] proc_fail_nth_read+0x19a/0x210 [ 141.146512][ T5056] ? proc_fault_inject_write+0x2f0/0x2f0 [ 141.152188][ T5056] ? fsnotify_perm+0x248/0x550 [ 141.156993][ T5056] ? proc_fault_inject_write+0x2f0/0x2f0 [ 141.162663][ T5056] vfs_read+0x2c0/0x920 [ 141.166857][ T5056] ? kernel_read+0x1e0/0x1e0 [ 141.171469][ T5056] ? __fget_files+0x28/0x4d0 [ 141.176081][ T5056] ? __fget_files+0x44a/0x4d0 [ 141.180782][ T5056] ? __fdget_pos+0x2ae/0x360 [ 141.185391][ T5056] ? ksys_read+0x71/0x240 [ 141.189752][ T5056] ksys_read+0x143/0x240 [ 141.194012][ T5056] ? vfs_write+0x960/0x960 [ 141.198449][ T5056] ? lockdep_hardirqs_on+0x94/0x140 [ 141.203843][ T5056] do_syscall_64+0x4c/0xa0 [ 141.208279][ T5056] ? clear_bhb_loop+0x60/0xb0 [ 141.212965][ T5056] ? clear_bhb_loop+0x60/0xb0 [ 141.217652][ T5056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.223570][ T5056] RIP: 0033:0x7f26d978d5bc [ 141.228001][ T5056] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.247620][ T5056] RSP: 002b:00007f26da6dc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.256136][ T5056] RAX: ffffffffffffffda RBX: 00007f26d99d5fa0 RCX: 00007f26d978d5bc [ 141.264117][ T5056] RDX: 000000000000000f RSI: 00007f26da6dc0a0 RDI: 0000000000000003 [ 141.272102][ T5056] RBP: 00007f26da6dc090 R08: 0000000000000000 R09: 0000000000000000 [ 141.280100][ T5056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.288103][ T5056] R13: 00007f26d99d6038 R14: 00007f26d99d5fa0 R15: 00007ffd40533e08 [ 141.296105][ T5056] [ 141.367723][ T5058] loop0: detected capacity change from 0 to 4096 [ 141.433660][ T5058] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 141.479070][ T5058] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 141.678165][ T5066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'. [ 141.706498][ T5058] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 141.784959][ T5058] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 141.879750][ T5058] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 141.922884][ T5058] ntfs: volume version 3.1. [ 141.939175][ T5058] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 141.978430][ T5058] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 141.990415][ T5069] loop3: detected capacity change from 0 to 4096 [ 142.013115][ T5058] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 142.035316][ T5069] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 142.045194][ T5058] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 142.083716][ T5058] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 143.117560][ T5075] loop3: detected capacity change from 0 to 4096 [ 143.363618][ T5087] overlayfs: failed to resolve './bus': -2 [ 143.407439][ T5090] overlayfs: unrecognized mount option "xino=off:/" or missing value [ 143.575477][ T4276] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 143.764217][ T4276] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 145.004180][ T4318] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.244041][ T4318] usb 3-1: Using ep0 maxpacket: 8 [ 145.262071][ T4318] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 145.361766][ T4318] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.426644][ T4318] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.463548][ T4318] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.504007][ T4318] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.533273][ T4318] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.563215][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.599063][ T5108] loop0: detected capacity change from 0 to 4096 [ 145.659603][ T5108] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 145.716103][ T5108] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 145.764023][ T4332] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.804764][ T4318] usb 3-1: usb_control_msg returned -32 [ 145.810457][ T4318] usbtmc 3-1:16.0: can't read capabilities [ 145.944147][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 145.974244][ T4332] usb 2-1: Using ep0 maxpacket: 8 [ 145.981102][ T4332] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 146.008152][ T4332] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.021519][ T4332] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.032099][ T4332] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.044263][ T4332] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.060712][ T4332] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 146.070163][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.144210][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 146.153131][ T7] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 146.175644][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.192750][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.218193][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.290231][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.313717][ T4332] usb 2-1: usb_control_msg returned -32 [ 146.322417][ T4332] usbtmc 2-1:16.0: can't read capabilities [ 146.438589][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 146.531852][ T5125] FAULT_INJECTION: forcing a failure. [ 146.531852][ T5125] name failslab, interval 1, probability 0, space 0, times 0 [ 146.549622][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.645656][ T5125] CPU: 0 PID: 5125 Comm: syz.2.170 Not tainted syzkaller #0 [ 146.653017][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.663107][ T5125] Call Trace: [ 146.666422][ T5125] [ 146.669390][ T5125] dump_stack_lvl+0x168/0x22e [ 146.674147][ T5125] ? show_regs_print_info+0x12/0x12 [ 146.679390][ T5125] ? load_image+0x3b0/0x3b0 [ 146.683960][ T5125] ? __might_sleep+0xd0/0xd0 [ 146.688617][ T5125] ? __lock_acquire+0x7c50/0x7c50 [ 146.693788][ T5125] should_fail_ex+0x399/0x4d0 [ 146.698518][ T5125] should_failslab+0x5/0x20 [ 146.703065][ T5125] slab_pre_alloc_hook+0x59/0x310 [ 146.708141][ T5125] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 146.713908][ T5125] __kmem_cache_alloc_node+0x4f/0x260 [ 146.719337][ T5125] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 146.725096][ T5125] __kmalloc+0xa0/0x240 [ 146.729299][ T5125] tomoyo_realpath_from_path+0xdf/0x5d0 [ 146.734903][ T5125] tomoyo_path_number_perm+0x1e3/0x600 [ 146.740397][ T5125] ? tomoyo_path_number_perm+0x1b6/0x600 [ 146.746070][ T5125] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 146.751568][ T5125] ? lockdep_hardirqs_on+0x94/0x140 [ 146.756819][ T5125] ? finish_task_switch+0x32a/0x8f0 [ 146.762096][ T5125] ? __fget_files+0x28/0x4d0 [ 146.766753][ T5125] security_file_ioctl+0x6c/0xa0 [ 146.771740][ T5125] __se_sys_ioctl+0x48/0x170 [ 146.776373][ T5125] do_syscall_64+0x4c/0xa0 [ 146.780823][ T5125] ? clear_bhb_loop+0x60/0xb0 [ 146.785530][ T5125] ? clear_bhb_loop+0x60/0xb0 [ 146.790248][ T5125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.796187][ T5125] RIP: 0033:0x7f26d978eba9 [ 146.800637][ T5125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.820288][ T5125] RSP: 002b:00007f26da69a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.828741][ T5125] RAX: ffffffffffffffda RBX: 00007f26d99d6180 RCX: 00007f26d978eba9 [ 146.836745][ T5125] RDX: 0000000000000000 RSI: 0000000000005b02 RDI: 0000000000000004 [ 146.844787][ T5125] RBP: 00007f26da69a090 R08: 0000000000000000 R09: 0000000000000000 [ 146.852794][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.860802][ T5125] R13: 00007f26d99d6218 R14: 00007f26d99d6180 R15: 00007ffd40533e08 [ 146.868828][ T5125] [ 147.225124][ T5125] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.325634][ T5130] FAULT_INJECTION: forcing a failure. [ 147.325634][ T5130] name failslab, interval 1, probability 0, space 0, times 0 [ 147.338722][ T5130] CPU: 1 PID: 5130 Comm: syz.3.176 Not tainted syzkaller #0 [ 147.346235][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.356338][ T5130] Call Trace: [ 147.359645][ T5130] [ 147.362606][ T5130] dump_stack_lvl+0x168/0x22e [ 147.367326][ T5130] ? show_regs_print_info+0x12/0x12 [ 147.372572][ T5130] ? load_image+0x3b0/0x3b0 [ 147.377138][ T5130] ? __might_sleep+0xd0/0xd0 [ 147.381785][ T5130] ? __lock_acquire+0x7c50/0x7c50 [ 147.386860][ T5130] should_fail_ex+0x399/0x4d0 [ 147.391568][ T5130] should_failslab+0x5/0x20 [ 147.396097][ T5130] slab_pre_alloc_hook+0x59/0x310 [ 147.401132][ T5130] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 147.406872][ T5130] __kmem_cache_alloc_node+0x4f/0x260 [ 147.412263][ T5130] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 147.418002][ T5130] __kmalloc+0xa0/0x240 [ 147.422270][ T5130] tomoyo_realpath_from_path+0xdf/0x5d0 [ 147.427842][ T5130] tomoyo_path_number_perm+0x1e3/0x600 [ 147.433313][ T5130] ? tomoyo_path_number_perm+0x1b6/0x600 [ 147.439048][ T5130] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 147.444550][ T5130] ? ksys_write+0x1bd/0x240 [ 147.449093][ T5130] ? common_file_perm+0x171/0x1c0 [ 147.454182][ T5130] ? __fget_files+0x28/0x4d0 [ 147.458813][ T5130] security_file_ioctl+0x6c/0xa0 [ 147.463776][ T5130] __se_sys_ioctl+0x48/0x170 [ 147.468385][ T5130] do_syscall_64+0x4c/0xa0 [ 147.472820][ T5130] ? clear_bhb_loop+0x60/0xb0 [ 147.477514][ T5130] ? clear_bhb_loop+0x60/0xb0 [ 147.482232][ T5130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.488149][ T5130] RIP: 0033:0x7fb9ead8eba9 [ 147.492577][ T5130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.512291][ T5130] RSP: 002b:00007fb9ebb63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.520723][ T5130] RAX: ffffffffffffffda RBX: 00007fb9eafd5fa0 RCX: 00007fb9ead8eba9 [ 147.528710][ T5130] RDX: 0000200000000100 RSI: 000000004014563c RDI: 0000000000000003 [ 147.536697][ T5130] RBP: 00007fb9ebb63090 R08: 0000000000000000 R09: 0000000000000000 [ 147.544683][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.552662][ T5130] R13: 00007fb9eafd6038 R14: 00007fb9eafd5fa0 R15: 00007ffd5cd63a48 [ 147.560673][ T5130] [ 147.563755][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.576354][ T5112] loop4: detected capacity change from 0 to 1024 [ 147.582954][ T5125] usbtmc 3-1:16.0: CHECK_CLEAR_STATUS returned 5 [ 147.587548][ T5130] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.619107][ T5112] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 147.636466][ T5112] EXT4-fs (loop4): barriers disabled [ 147.642010][ T5112] JBD2: no valid journal superblock found [ 147.647937][ T5112] EXT4-fs (loop4): error loading journal [ 147.665142][ T5112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.690875][ T5112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.792557][ T4318] usb 3-1: USB disconnect, device number 3 [ 147.838217][ T5134] netlink: 'syz.3.177': attribute type 29 has an invalid length. [ 147.892703][ T5134] netlink: 'syz.3.177': attribute type 29 has an invalid length. [ 147.901467][ T5136] netlink: 'syz.3.177': attribute type 29 has an invalid length. [ 148.021255][ T7] usb 5-1: string descriptor 0 read error: -71 [ 148.044088][ T7] usb 5-1: usb_control_msg returned -71 [ 148.056760][ T7] usbtmc 5-1:16.0: can't read capabilities [ 148.100741][ T7] usb 5-1: USB disconnect, device number 3 [ 149.009808][ T4659] usb 2-1: USB disconnect, device number 8 [ 149.256792][ T5153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.181'. [ 149.267031][ T5153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'. [ 149.277129][ T5153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'. [ 150.469579][ T5158] FAULT_INJECTION: forcing a failure. [ 150.469579][ T5158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.482847][ T5158] CPU: 1 PID: 5158 Comm: syz.1.184 Not tainted syzkaller #0 [ 150.490187][ T5158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.500269][ T5158] Call Trace: [ 150.503576][ T5158] [ 150.506534][ T5158] dump_stack_lvl+0x168/0x22e [ 150.511253][ T5158] ? show_regs_print_info+0x12/0x12 [ 150.516487][ T5158] ? load_image+0x3b0/0x3b0 [ 150.521029][ T5158] ? __lock_acquire+0x7c50/0x7c50 [ 150.526182][ T5158] ? __fget_files+0x28/0x4d0 [ 150.530810][ T5158] should_fail_ex+0x399/0x4d0 [ 150.535541][ T5158] _copy_from_user+0x2c/0x170 [ 150.540249][ T5158] j1939_sk_setsockopt+0x423/0xcd0 [ 150.545392][ T5158] ? aa_af_perm+0x2b0/0x2b0 [ 150.549933][ T5158] ? j1939_sk_no_ioctlcmd+0x10/0x10 [ 150.555173][ T5158] ? aa_sock_opt_perm+0x74/0x100 [ 150.560160][ T5158] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 150.565733][ T5158] ? security_socket_setsockopt+0x7a/0xa0 [ 150.571488][ T5158] ? j1939_sk_no_ioctlcmd+0x10/0x10 [ 150.576721][ T5158] __sys_setsockopt+0x2bf/0x3d0 [ 150.581615][ T5158] __x64_sys_setsockopt+0xb1/0xc0 [ 150.586677][ T5158] do_syscall_64+0x4c/0xa0 [ 150.591128][ T5158] ? clear_bhb_loop+0x60/0xb0 [ 150.595838][ T5158] ? clear_bhb_loop+0x60/0xb0 [ 150.600542][ T5158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.606480][ T5158] RIP: 0033:0x7fc28cb8eba9 [ 150.610929][ T5158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.630565][ T5158] RSP: 002b:00007fc28d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.639013][ T5158] RAX: ffffffffffffffda RBX: 00007fc28cdd6180 RCX: 00007fc28cb8eba9 [ 150.647017][ T5158] RDX: 0000000000000004 RSI: 000000000000006b RDI: 0000000000000006 [ 150.655014][ T5158] RBP: 00007fc28d9f6090 R08: 0000000000000004 R09: 0000000000000000 [ 150.663005][ T5158] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.671007][ T5158] R13: 00007fc28cdd6218 R14: 00007fc28cdd6180 R15: 00007ffdad73b948 [ 150.679024][ T5158] [ 150.974108][ T5161] device syzkaller1 entered promiscuous mode [ 151.703563][ T5171] loop1: detected capacity change from 0 to 128 [ 151.728401][ T5171] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 152.038088][ T5148] loop4: detected capacity change from 0 to 40427 [ 152.125880][ T5179] FAULT_INJECTION: forcing a failure. [ 152.125880][ T5179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.153845][ T5179] CPU: 0 PID: 5179 Comm: syz.1.190 Not tainted syzkaller #0 [ 152.161209][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.171300][ T5179] Call Trace: [ 152.174614][ T5179] [ 152.177569][ T5179] dump_stack_lvl+0x168/0x22e [ 152.182291][ T5179] ? show_regs_print_info+0x12/0x12 [ 152.187521][ T5179] ? load_image+0x3b0/0x3b0 [ 152.192045][ T5179] ? __lock_acquire+0x7c50/0x7c50 [ 152.197138][ T5179] ? verify_lock_unused+0x140/0x140 [ 152.202376][ T5179] should_fail_ex+0x399/0x4d0 [ 152.207163][ T5179] _copy_from_user+0x2c/0x170 [ 152.211869][ T5179] ___sys_sendmsg+0x155/0x290 [ 152.216565][ T5179] ? __sys_sendmsg+0x270/0x270 [ 152.221361][ T5179] ? __lock_acquire+0x7c50/0x7c50 [ 152.226509][ T5179] ? __fdget+0x17c/0x200 [ 152.230774][ T5179] __se_sys_sendmsg+0x19e/0x270 [ 152.235643][ T5179] ? __x64_sys_sendmsg+0x80/0x80 [ 152.240605][ T5179] ? lockdep_hardirqs_on+0x94/0x140 [ 152.245834][ T5179] do_syscall_64+0x4c/0xa0 [ 152.250439][ T5179] ? clear_bhb_loop+0x60/0xb0 [ 152.255129][ T5179] ? clear_bhb_loop+0x60/0xb0 [ 152.259820][ T5179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.265742][ T5179] RIP: 0033:0x7fc28cb8eba9 [ 152.270255][ T5179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.289875][ T5179] RSP: 002b:00007fc28da38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.298311][ T5179] RAX: ffffffffffffffda RBX: 00007fc28cdd5fa0 RCX: 00007fc28cb8eba9 [ 152.306295][ T5179] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 152.314292][ T5179] RBP: 00007fc28da38090 R08: 0000000000000000 R09: 0000000000000000 [ 152.322281][ T5179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.330270][ T5179] R13: 00007fc28cdd6038 R14: 00007fc28cdd5fa0 R15: 00007ffdad73b948 [ 152.338272][ T5179] [ 152.391528][ T5148] F2FS-fs (loop4): invalid crc value [ 152.404351][ T5148] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 152.692427][ T5186] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 153.324519][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 154.000243][ T5201] FAULT_INJECTION: forcing a failure. [ 154.000243][ T5201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.013516][ T5201] CPU: 0 PID: 5201 Comm: syz.1.195 Not tainted syzkaller #0 [ 154.020838][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.030923][ T5201] Call Trace: [ 154.034243][ T5201] [ 154.037200][ T5201] dump_stack_lvl+0x168/0x22e [ 154.041920][ T5201] ? show_regs_print_info+0x12/0x12 [ 154.047150][ T5201] ? load_image+0x3b0/0x3b0 [ 154.051700][ T5201] ? __lock_acquire+0x7c50/0x7c50 [ 154.053895][ C1] sched: RT throttling activated [ 154.061701][ T5201] ? verify_lock_unused+0x140/0x140 [ 154.066932][ T5201] should_fail_ex+0x399/0x4d0 [ 154.071637][ T5201] _copy_from_user+0x2c/0x170 [ 154.076331][ T5201] ___sys_sendmsg+0x155/0x290 [ 154.081028][ T5201] ? __sys_sendmsg+0x270/0x270 [ 154.085821][ T5201] ? lockdep_hardirqs_on+0x94/0x140 [ 154.091051][ T5201] ? __fdget+0x17c/0x200 [ 154.095318][ T5201] __se_sys_sendmsg+0x19e/0x270 [ 154.100184][ T5201] ? __x64_sys_sendmsg+0x80/0x80 [ 154.105245][ T5201] ? lockdep_hardirqs_on+0x94/0x140 [ 154.110565][ T5201] do_syscall_64+0x4c/0xa0 [ 154.115001][ T5201] ? clear_bhb_loop+0x60/0xb0 [ 154.119688][ T5201] ? clear_bhb_loop+0x60/0xb0 [ 154.124378][ T5201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.130306][ T5201] RIP: 0033:0x7fc28cb8eba9 [ 154.134737][ T5201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.154361][ T5201] RSP: 002b:00007fc28d9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.162785][ T5201] RAX: ffffffffffffffda RBX: 00007fc28cdd6180 RCX: 00007fc28cb8eba9 [ 154.170771][ T5201] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000006 [ 154.178753][ T5201] RBP: 00007fc28d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.186819][ T5201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.194799][ T5201] R13: 00007fc28cdd6218 R14: 00007fc28cdd6180 R15: 00007ffdad73b948 [ 154.202793][ T5201] [ 154.205881][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.555635][ T5203] overlayfs: missing 'lowerdir' [ 154.578886][ T5211] loop1: detected capacity change from 0 to 128 [ 154.581697][ T5210] netlink: 144 bytes leftover after parsing attributes in process `syz.4.200'. [ 154.624677][ T5211] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 154.804196][ T41] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 155.009233][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.110730][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.263569][ T41] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 155.410209][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.554821][ T41] usb 3-1: config 0 descriptor?? [ 155.767614][ T5222] device syzkaller1 entered promiscuous mode [ 157.045185][ T5232] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.197'. [ 157.140582][ T5232] netlink: del zone limit has 4 unknown bytes [ 158.015367][ T5232] loop2: detected capacity change from 0 to 32768 [ 159.118435][ T41] usbhid 3-1:0.0: can't add hid device: -71 [ 159.175595][ T41] usbhid: probe of 3-1:0.0 failed with error -71 [ 159.265256][ T5236] loop3: detected capacity change from 0 to 256 [ 159.327664][ T41] usb 3-1: USB disconnect, device number 4 [ 159.496600][ T5236] FAT-fs (loop3): Directory bread(block 64) failed [ 159.503204][ T5236] FAT-fs (loop3): Directory bread(block 65) failed [ 159.547756][ T5236] FAT-fs (loop3): Directory bread(block 66) failed [ 159.574124][ T5236] FAT-fs (loop3): Directory bread(block 67) failed [ 159.604277][ T5236] FAT-fs (loop3): Directory bread(block 68) failed [ 159.610893][ T5236] FAT-fs (loop3): Directory bread(block 69) failed [ 159.883186][ T5245] futex_wake_op: syz.1.208 tries to shift op by 36; fix this program [ 159.924003][ T5236] FAT-fs (loop3): Directory bread(block 70) failed [ 159.931436][ T5236] FAT-fs (loop3): Directory bread(block 71) failed [ 161.704809][ T5245] tmpfs: Unknown parameter '00000000000000000000003` ' D1 PUe^0t:%PP哸R:GlY6drAo7DSZWN' [ 161.720486][ T5236] FAT-fs (loop3): Directory bread(block 72) failed [ 161.784203][ T5236] FAT-fs (loop3): Directory bread(block 73) failed [ 161.887565][ T5251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.211'. [ 161.911045][ T5253] loop0: detected capacity change from 0 to 512 [ 162.332281][ T5256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.876278][ T5259] FAULT_INJECTION: forcing a failure. [ 162.876278][ T5259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.877373][ T5259] [ 162.877379][ T5259] ====================================================== [ 162.877385][ T5259] WARNING: possible circular locking dependency detected [ 162.877397][ T5259] syzkaller #0 Not tainted [ 162.877406][ T5259] ------------------------------------------------------ [ 162.877412][ T5259] syz.1.213/5259 is trying to acquire lock: [ 162.877421][ T5259] ffffffff8cb1eda0 (console_owner){-.-.}-{0:0}, at: console_emit_next_record+0x82d/0xc90 [ 162.877497][ T5259] [ 162.877497][ T5259] but task is already holding lock: [ 162.877502][ T5259] ffff8880b8e3aad8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa5/0x140 [ 162.877545][ T5259] [ 162.877545][ T5259] which lock already depends on the new lock. [ 162.877545][ T5259] [ 162.877550][ T5259] [ 162.877550][ T5259] the existing dependency chain (in reverse order) is: [ 162.877556][ T5259] [ 162.877556][ T5259] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 162.877587][ T5259] _raw_spin_lock_nested+0x2e/0x40 [ 162.877617][ T5259] raw_spin_rq_lock_nested+0x26/0x140 [ 162.877636][ T5259] task_fork_fair+0x5c/0x350 [ 162.877658][ T5259] sched_cgroup_fork+0x32c/0x3c0 [ 162.877680][ T5259] copy_process+0x24b8/0x4020 [ 162.877697][ T5259] kernel_clone+0x225/0x8b0 [ 162.877713][ T5259] user_mode_thread+0xda/0x130 [ 162.877730][ T5259] rest_init+0x23/0x300 [ 162.877755][ T5259] start_kernel+0x0/0x539 [ 162.877776][ T5259] start_kernel+0x490/0x539 [ 162.877798][ T5259] secondary_startup_64_no_verify+0xcf/0xdb [ 162.877822][ T5259] [ 162.877822][ T5259] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 162.877845][ T5259] _raw_spin_lock_irqsave+0xa4/0xf0 [ 162.877872][ T5259] try_to_wake_up+0x5c/0x1080 [ 162.877892][ T5259] __wake_up_common+0x2a4/0x4e0 [ 162.877916][ T5259] __wake_up+0x10e/0x190 [ 162.877939][ T5259] tty_port_default_wakeup+0x9e/0xf0 [ 162.877969][ T5259] serial8250_tx_chars+0x629/0x830 [ 162.877987][ T5259] serial8250_handle_irq+0x516/0x6d0 [ 162.878006][ T5259] serial8250_default_handle_irq+0xb4/0x1a0 [ 162.878027][ T5259] serial8250_interrupt+0x9b/0x1c0 [ 162.878044][ T5259] __handle_irq_event_percpu+0x298/0xa30 [ 162.878062][ T5259] handle_irq_event+0x87/0x1e0 [ 162.878079][ T5259] handle_edge_irq+0x243/0xb20 [ 162.878100][ T5259] __common_interrupt+0xd7/0x1e0 [ 162.878126][ T5259] common_interrupt+0xb0/0xd0 [ 162.878148][ T5259] asm_common_interrupt+0x22/0x40 [ 162.878164][ T5259] mt_validate+0x20f6/0x4c90 [ 162.878180][ T5259] validate_mm_mt+0xcd/0x420 [ 162.878203][ T5259] validate_mm+0xcc/0x2b0 [ 162.878222][ T5259] __vma_adjust+0x17e0/0x1c60 [ 162.878243][ T5259] __split_vma+0x3a7/0x500 [ 162.878263][ T5259] do_mas_align_munmap+0x351/0x1220 [ 162.878287][ T5259] do_mas_munmap+0x240/0x2b0 [ 162.878308][ T5259] mmap_region+0x6e5/0x1c70 [ 162.878329][ T5259] do_mmap+0x958/0xfd0 [ 162.878348][ T5259] vm_mmap_pgoff+0x1b2/0x2b0 [ 162.878374][ T5259] ksys_mmap_pgoff+0x516/0x6f0 [ 162.878395][ T5259] do_syscall_64+0x4c/0xa0 [ 162.878413][ T5259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.878444][ T5259] [ 162.878444][ T5259] -> #2 (&tty->write_wait){-...}-{2:2}: [ 162.878468][ T5259] _raw_spin_lock_irqsave+0xa4/0xf0 [ 162.878495][ T5259] __wake_up+0xf4/0x190 [ 162.878517][ T5259] tty_port_default_wakeup+0x9e/0xf0 [ 162.878545][ T5259] serial8250_tx_chars+0x629/0x830 [ 162.878570][ T5259] serial8250_handle_irq+0x516/0x6d0 [ 162.878589][ T5259] serial8250_default_handle_irq+0xb4/0x1a0 [ 162.878623][ T5259] serial8250_interrupt+0x9b/0x1c0 [ 162.878639][ T5259] __handle_irq_event_percpu+0x298/0xa30 [ 162.878656][ T5259] handle_irq_event+0x87/0x1e0 [ 162.878672][ T5259] handle_edge_irq+0x243/0xb20 [ 162.878693][ T5259] __common_interrupt+0xd7/0x1e0 [ 162.878717][ T5259] common_interrupt+0xb0/0xd0 [ 162.878737][ T5259] asm_common_interrupt+0x22/0x40 [ 162.878753][ T5259] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 162.878780][ T5259] uart_write+0x68a/0x910 [ 162.878803][ T5259] n_tty_write+0xd1a/0x11c0 [ 162.878824][ T5259] file_tty_write+0x4dd/0x860 [ 162.878841][ T5259] vfs_write+0x44c/0x960 [ 162.878864][ T5259] ksys_write+0x143/0x240 [ 162.878886][ T5259] do_syscall_64+0x4c/0xa0 [ 162.878904][ T5259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.878933][ T5259] [ 162.878933][ T5259] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 162.878955][ T5259] _raw_spin_lock_irqsave+0xa4/0xf0 [ 162.878981][ T5259] serial8250_console_write+0x169/0x17a0 [ 162.879000][ T5259] console_emit_next_record+0x947/0xc90 [ 162.879026][ T5259] console_unlock+0x223/0x630 [ 162.879049][ T5259] vprintk_emit+0x489/0x680 [ 162.879072][ T5259] _printk+0xcc/0x110 [ 162.879095][ T5259] register_console+0x6c6/0x9c0 [ 162.879120][ T5259] univ8250_console_init+0x41/0x43 [ 162.879136][ T5259] console_init+0x1bc/0x78e [ 162.879155][ T5259] start_kernel+0x303/0x539 [ 162.879176][ T5259] secondary_startup_64_no_verify+0xcf/0xdb [ 162.879200][ T5259] [ 162.879200][ T5259] -> #0 (console_owner){-.-.}-{0:0}: [ 162.879222][ T5259] __lock_acquire+0x2cf8/0x7c50 [ 162.879245][ T5259] lock_acquire+0x1b4/0x490 [ 162.879267][ T5259] console_emit_next_record+0x84c/0xc90 [ 162.879293][ T5259] console_unlock+0x223/0x630 [ 162.879316][ T5259] vprintk_emit+0x489/0x680 [ 162.879339][ T5259] _printk+0xcc/0x110 [ 162.879362][ T5259] should_fail_ex+0x37a/0x4d0 [ 162.879387][ T5259] strncpy_from_user+0x32/0x350 [ 162.879408][ T5259] strncpy_from_user_nofault+0x6d/0x140 [ 162.879425][ T5259] bpf_bprintf_prepare+0xba0/0x13d0 [ 162.879448][ T5259] bpf_trace_printk+0xd8/0x190 [ 162.879470][ T5259] bpf_prog_7c77c7e0f6645ad8+0x35/0x37 [ 162.879487][ T5259] bpf_trace_run2+0x1cd/0x3b0 [ 162.879512][ T5259] trace_contention_begin+0x142/0x190 [ 162.879538][ T5259] __pv_queued_spin_lock_slowpath+0xdc/0x9c0 [ 162.879570][ T5259] queued_spin_lock_slowpath+0x43/0x50 [ 162.879599][ T5259] do_raw_spin_lock+0x217/0x280 [ 162.879625][ T5259] raw_spin_rq_lock_nested+0xa5/0x140 [ 162.879644][ T5259] __schedule+0x2ed/0x40b0 [ 162.879662][ T5259] schedule+0xb9/0x180 [ 162.879679][ T5259] exit_to_user_mode_loop+0x47/0x110 [ 162.879703][ T5259] exit_to_user_mode_prepare+0xee/0x180 [ 162.879728][ T5259] irqentry_exit_to_user_mode+0x5/0x30 [ 162.879752][ T5259] asm_sysvec_reschedule_ipi+0x16/0x20 [ 162.879769][ T5259] [ 162.879769][ T5259] other info that might help us debug this: [ 162.879769][ T5259] [ 162.879774][ T5259] Chain exists of: [ 162.879774][ T5259] console_owner --> &p->pi_lock --> &rq->__lock [ 162.879774][ T5259] [ 162.879799][ T5259] Possible unsafe locking scenario: [ 162.879799][ T5259] [ 162.879804][ T5259] CPU0 CPU1 [ 162.879808][ T5259] ---- ---- [ 162.879812][ T5259] lock(&rq->__lock); [ 162.879822][ T5259] lock(&p->pi_lock); [ 162.879833][ T5259] lock(&rq->__lock); [ 162.879844][ T5259] lock(console_owner); [ 162.879854][ T5259] [ 162.879854][ T5259] *** DEADLOCK *** [ 162.879854][ T5259] [ 162.879858][ T5259] 3 locks held by syz.1.213/5259: [ 162.879868][ T5259] #0: ffff8880b8e3aad8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa5/0x140 [ 162.879912][ T5259] #1: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xda/0x3b0 [ 162.879962][ T5259] #2: ffffffff8cb1ee80 (console_lock){+.+.}-{0:0}, at: _printk+0xcc/0x110 [ 162.880010][ T5259] [ 162.880010][ T5259] stack backtrace: [ 162.880015][ T5259] CPU: 1 PID: 5259 Comm: syz.1.213 Not tainted syzkaller #0 [ 162.880032][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.880043][ T5259] Call Trace: [ 162.880048][ T5259] [ 162.880055][ T5259] dump_stack_lvl+0x168/0x22e [ 162.880094][ T5259] ? load_image+0x3b0/0x3b0 [ 162.880134][ T5259] ? show_regs_print_info+0x12/0x12 [ 162.880177][ T5259] ? print_circular_bug+0x12b/0x1a0 [ 162.880207][ T5259] check_noncircular+0x274/0x310 [ 162.880236][ T5259] ? add_chain_block+0x940/0x940 [ 162.880261][ T5259] ? lockdep_lock+0xdc/0x1e0 [ 162.880288][ T5259] ? add_lock_to_list+0x191/0x280 [ 162.880315][ T5259] ? _find_first_zero_bit+0xcf/0x100 [ 162.880349][ T5259] __lock_acquire+0x2cf8/0x7c50 [ 162.880387][ T5259] ? verify_lock_unused+0x140/0x140 [ 162.880425][ T5259] lock_acquire+0x1b4/0x490 [ 162.880449][ T5259] ? console_emit_next_record+0x82d/0xc90 [ 162.880481][ T5259] ? __lock_acquire+0x7c50/0x7c50 [ 162.880506][ T5259] ? do_raw_spin_lock+0x11d/0x280 [ 162.880535][ T5259] ? read_lock_is_recursive+0x10/0x10 [ 162.880560][ T5259] ? __rwlock_init+0x140/0x140 [ 162.880594][ T5259] ? memcpy+0x3c/0x60 [ 162.880623][ T5259] ? do_raw_spin_unlock+0x11d/0x230 [ 162.880653][ T5259] ? console_emit_next_record+0x82d/0xc90 [ 162.880683][ T5259] console_emit_next_record+0x84c/0xc90 [ 162.880710][ T5259] ? console_emit_next_record+0x82d/0xc90 [ 162.880742][ T5259] ? __lock_acquire+0x7c50/0x7c50 [ 162.880768][ T5259] ? info_print_prefix+0x300/0x300 [ 162.880798][ T5259] ? do_raw_spin_unlock+0x11d/0x230 [ 162.880829][ T5259] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 162.880858][ T5259] ? _raw_spin_unlock+0x40/0x40 [ 162.880892][ T5259] ? __down_trylock_console_sem+0x184/0x1e0 [ 162.880920][ T5259] ? _printk+0xcc/0x110 [ 162.880944][ T5259] ? strncpy_from_user+0x25b/0x350 [ 162.880967][ T5259] ? _printk+0xcc/0x110 [ 162.880993][ T5259] ? console_trylock+0x160/0x160 [ 162.881020][ T5259] console_unlock+0x223/0x630 [ 162.881047][ T5259] ? _printk+0xcc/0x110 [ 162.881074][ T5259] vprintk_emit+0x489/0x680 [ 162.881101][ T5259] ? printk_sprint+0x460/0x460 [ 162.881131][ T5259] ? mark_lock+0x94/0x320 [ 162.881157][ T5259] _printk+0xcc/0x110 [ 162.881186][ T5259] ? load_image+0x3b0/0x3b0 [ 162.881211][ T5259] ? mark_lock+0x94/0x320 [ 162.881237][ T5259] ? __lock_acquire+0x12e5/0x7c50 [ 162.881265][ T5259] should_fail_ex+0x37a/0x4d0 [ 162.881295][ T5259] strncpy_from_user+0x32/0x350 [ 162.881322][ T5259] strncpy_from_user_nofault+0x6d/0x140 [ 162.881342][ T5259] bpf_bprintf_prepare+0xba0/0x13d0 [ 162.881371][ T5259] ? mark_lock+0x94/0x320 [ 162.881396][ T5259] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 162.881423][ T5259] ? __lock_acquire+0x12e5/0x7c50 [ 162.881452][ T5259] bpf_trace_printk+0xd8/0x190 [ 162.881479][ T5259] ? bpf_probe_write_user+0xe0/0xe0 [ 162.881514][ T5259] bpf_prog_7c77c7e0f6645ad8+0x35/0x37 [ 162.881533][ T5259] bpf_trace_run2+0x1cd/0x3b0 [ 162.881560][ T5259] ? bpf_trace_run2+0xda/0x3b0 [ 162.881596][ T5259] ? bpf_trace_run1+0x3b0/0x3b0 [ 162.881628][ T5259] trace_contention_begin+0x142/0x190 [ 162.881658][ T5259] __pv_queued_spin_lock_slowpath+0xdc/0x9c0 [ 162.881690][ T5259] ? rcu_softirq_qs+0x2d0/0x2d0 [ 162.881716][ T5259] ? get_pid_task+0x1c/0x1e0 [ 162.881740][ T5259] ? __pv_queued_spin_unlock_slowpath+0x290/0x290 [ 162.881777][ T5259] queued_spin_lock_slowpath+0x43/0x50 [ 162.881808][ T5259] do_raw_spin_lock+0x217/0x280 [ 162.881838][ T5259] ? __rwlock_init+0x140/0x140 [ 162.881871][ T5259] raw_spin_rq_lock_nested+0xa5/0x140 [ 162.881906][ T5259] __schedule+0x2ed/0x40b0 [ 162.881926][ T5259] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 162.881949][ T5259] ? mutex_unlock+0x10/0x10 [ 162.881970][ T5259] ? __fget_files+0x44a/0x4d0 [ 162.881999][ T5259] ? release_firmware_map_entry+0x18a/0x18a [ 162.882019][ T5259] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 162.882046][ T5259] ? lock_chain_count+0x20/0x20 [ 162.882073][ T5259] schedule+0xb9/0x180 [ 162.882091][ T5259] exit_to_user_mode_loop+0x47/0x110 [ 162.882118][ T5259] exit_to_user_mode_prepare+0xee/0x180 [ 162.882145][ T5259] irqentry_exit_to_user_mode+0x5/0x30 [ 162.882169][ T5259] asm_sysvec_reschedule_ipi+0x16/0x20 [ 162.882187][ T5259] RIP: 0033:0x7fc28cb18580 [ 162.882202][ T5259] Code: c7 44 24 20 c0 ff ff ff 48 c7 44 24 18 3f 00 00 00 48 c7 44 24 10 40 00 00 00 48 c7 44 24 08 00 00 00 00 e9 ad fd ff ff 66 90 <48> c7 c0 a8 ff ff ff 64 48 03 04 25 00 00 00 00 c3 66 2e 0f 1f 84 [ 162.882217][ T5259] RSP: 002b:00007fc28da38058 EFLAGS: 00000246 [ 162.882232][ T5259] RAX: 00007fc28cdd5fa0 RBX: 0000000000000004 RCX: 0000000000000000 [ 162.882245][ T5259] RDX: 00007fc28da38090 RSI: 00007fc28da38090 RDI: 00007fc28cdd6038 [ 162.882258][ T5259] RBP: 00007fc28da38090 R08: 0000000000000000 R09: 00007fc28da37df7 [ 162.882270][ T5259] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 162.882281][ T5259] R13: 00007fc28cdd6038 R14: 00007fc28cdd5fa0 R15: 00007ffdad73b948 [ 162.882302][ T5259] [ 164.113253][ T5259] CPU: 1 PID: 5259 Comm: syz.1.213 Not tainted syzkaller #0 [ 164.120576][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.130657][ T5259] Call Trace: [ 164.133955][ T5259] [ 164.136909][ T5259] dump_stack_lvl+0x168/0x22e [ 164.141642][ T5259] ? show_regs_print_info+0x12/0x12 [ 164.146863][ T5259] ? load_image+0x3b0/0x3b0 [ 164.151424][ T5259] ? mark_lock+0x94/0x320 [ 164.155788][ T5259] ? __lock_acquire+0x12e5/0x7c50 [ 164.160854][ T5259] should_fail_ex+0x399/0x4d0 [ 164.165575][ T5259] strncpy_from_user+0x32/0x350 [ 164.170459][ T5259] strncpy_from_user_nofault+0x6d/0x140 [ 164.176032][ T5259] bpf_bprintf_prepare+0xba0/0x13d0 [ 164.181279][ T5259] ? mark_lock+0x94/0x320 [ 164.185647][ T5259] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 164.190792][ T5259] ? __lock_acquire+0x12e5/0x7c50 [ 164.195851][ T5259] bpf_trace_printk+0xd8/0x190 [ 164.200650][ T5259] ? bpf_probe_write_user+0xe0/0xe0 [ 164.205886][ T5259] bpf_prog_7c77c7e0f6645ad8+0x35/0x37 [ 164.211371][ T5259] bpf_trace_run2+0x1cd/0x3b0 [ 164.216092][ T5259] ? bpf_trace_run2+0xda/0x3b0 [ 164.220886][ T5259] ? bpf_trace_run1+0x3b0/0x3b0 [ 164.225778][ T5259] trace_contention_begin+0x142/0x190 [ 164.231363][ T5259] __pv_queued_spin_lock_slowpath+0xdc/0x9c0 [ 164.237380][ T5259] ? rcu_softirq_qs+0x2d0/0x2d0 [ 164.242269][ T5259] ? get_pid_task+0x1c/0x1e0 [ 164.246887][ T5259] ? __pv_queued_spin_unlock_slowpath+0x290/0x290 [ 164.253342][ T5259] queued_spin_lock_slowpath+0x43/0x50 [ 164.258842][ T5259] do_raw_spin_lock+0x217/0x280 [ 164.263730][ T5259] ? __rwlock_init+0x140/0x140 [ 164.268533][ T5259] raw_spin_rq_lock_nested+0xa5/0x140 [ 164.274021][ T5259] __schedule+0x2ed/0x40b0 [ 164.278464][ T5259] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 164.284126][ T5259] ? mutex_unlock+0x10/0x10 [ 164.288743][ T5259] ? __fget_files+0x44a/0x4d0 [ 164.293453][ T5259] ? release_firmware_map_entry+0x18a/0x18a [ 164.299370][ T5259] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 164.305382][ T5259] ? lock_chain_count+0x20/0x20 [ 164.310273][ T5259] schedule+0xb9/0x180 [ 164.314368][ T5259] exit_to_user_mode_loop+0x47/0x110 [ 164.319687][ T5259] exit_to_user_mode_prepare+0xee/0x180 [ 164.325269][ T5259] irqentry_exit_to_user_mode+0x5/0x30 [ 164.330763][ T5259] asm_sysvec_reschedule_ipi+0x16/0x20 [ 164.336244][ T5259] RIP: 0033:0x7fc28cb18580 [ 164.340774][ T5259] Code: c7 44 24 20 c0 ff ff ff 48 c7 44 24 18 3f 00 00 00 48 c7 44 24 10 40 00 00 00 48 c7 44 24 08 00 00 00 00 e9 ad fd ff ff 66 90 <48> c7 c0 a8 ff ff ff 64 48 03 04 25 00 00 00 00 c3 66 2e 0f 1f 84 [ 164.360413][ T5259] RSP: 002b:00007fc28da38058 EFLAGS: 00000246 [ 164.366483][ T5259] RAX: 00007fc28cdd5fa0 RBX: 0000000000000004 RCX: 0000000000000000 [ 164.374454][ T5259] RDX: 00007fc28da38090 RSI: 00007fc28da38090 RDI: 00007fc28cdd6038 [ 164.382429][ T5259] RBP: 00007fc28da38090 R08: 0000000000000000 R09: 00007fc28da37df7 [ 164.390407][ T5259] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 164.398396][ T5259] R13: 00007fc28cdd6038 R14: 00007fc28cdd5fa0 R15: 00007ffdad73b948 [ 164.406382][ T5259] [ 164.412328][ T5259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 164.496022][ T5260] loop4: detected capacity change from 0 to 128 [ 164.513007][ T5260] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256