program: syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x694, &(0x7f0000001100)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x70000}]) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x84400) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000140)={r5, 0x1, 0x6, @multicast}, 0x6e) ioctl$CEC_ADAP_G_PHYS_ADDR(r3, 0x80026101, &(0x7f00000000c0)) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0xfffe, 0x7f6b803, 0x10e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x80000001, 0x0, 0xfffe}, 0x0, 0xf, r6, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r7, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="c9dd4980054b174129b0ca1290f31338c8abf955b1ecfc6043e3620daf29613ffc5e3153a4bb9993d9888f8f209412c5b1718fee7b4593d6de4bff17cfdeb95f2d5b5adc9937a27e5f6ea74fcc48d63afa4629c0f143302c7b10e88c1b322f801f62f9e8950c2dcac756b9fdbc261fb360"], 0x4) write$UHID_CREATE(r2, &(0x7f00000006c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000000)=""/40, 0x28, 0x4, 0xffffffff, 0x0, 0x0, 0x3}}, 0x11c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) ioctl$HIDIOCGFEATURE(r8, 0xc0404807, &(0x7f0000001a40)={0x8c, "895cd46771f00301c1ca639506f20b672ecfd2bd1050f9c5774eb3e02c39b961bb32758aa48d8b91deae8e86030000000092c2821ee0eb1900"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r8, 0xc0404807, &(0x7f0000000240)={0x9, "052ad9023162deee20aea9fc3da2e2a2bc5ddbda83ec4d2cb3898ad565031df8028760910f5f451ea8f5aa84999a3bb3a10c5a0cd6963dc5e5fbcc07ff32159d"}) [ 75.012310][ T5316] Bluetooth: hci0: command tx timeout [ 75.103523][ T5338] loop0: detected capacity change from 0 to 1024 [ 75.440485][ T5330] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.590372][ T5330] usb 5-1: Using ep0 maxpacket: 8 [ 75.606156][ T5330] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 75.608964][ T5330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 75.626449][ T5330] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.634278][ T5330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.638341][ T5330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.647603][ T5330] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 75.652320][ T5330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 75.657141][ T5330] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.663011][ T5330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.667250][ T5330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.673819][ T5330] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 75.676906][ T5330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 75.682533][ T5330] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.688606][ T5330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.694530][ T5330] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.703055][ T5330] usb 5-1: string descriptor 0 read error: -22 [ 75.705939][ T5330] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 75.709803][ T5330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.734704][ T5330] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 75.926082][ T5338] veth1_to_team: entered promiscuous mode [ 75.928806][ T5338] veth1_to_team: left promiscuous mode [ 75.944066][ T5338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.952823][ T5338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.966882][ T5338] [ 75.967995][ T5338] ====================================================== [ 75.971199][ T5338] WARNING: possible circular locking dependency detected [ 75.974301][ T5338] 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 Not tainted [ 75.977182][ T5338] ------------------------------------------------------ [ 75.980211][ T5338] syz.0.0/5338 is trying to acquire lock: [ 75.982599][ T5338] ffff888032eca0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x15a/0x1d0 [ 75.986715][ T5338] [ 75.986715][ T5338] but task is already holding lock: [ 75.990193][ T5338] ffff88805346f048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x39e/0x1530 [ 75.995059][ T5338] [ 75.995059][ T5338] which lock already depends on the new lock. [ 75.995059][ T5338] [ 75.999520][ T5338] [ 75.999520][ T5338] the existing dependency chain (in reverse order) is: [ 76.003283][ T5338] [ 76.003283][ T5338] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 76.007707][ T5338] lock_acquire+0x120/0x360 [ 76.010253][ T5338] __mutex_lock+0x182/0xe80 [ 76.012395][ T5338] hfsplus_file_extend+0x1fc/0x1990 [ 76.015016][ T5338] hfsplus_bmap_reserve+0x122/0x500 [ 76.017460][ T5338] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 76.020099][ T5338] __hfsplus_ext_cache_extent+0x89/0xe30 [ 76.022706][ T5338] hfsplus_file_extend+0x444/0x1990 [ 76.024997][ T5338] hfsplus_get_block+0x411/0x1530 [ 76.027283][ T5338] __block_write_begin_int+0x6b5/0x1900 [ 76.029931][ T5338] cont_write_begin+0x789/0xb50 [ 76.032297][ T5338] hfsplus_write_begin+0x66/0xb0 [ 76.034755][ T5338] generic_perform_write+0x2c7/0x910 [ 76.037606][ T5338] generic_file_write_iter+0x10f/0x540 [ 76.040466][ T5338] aio_write+0x535/0x7a0 [ 76.042652][ T5338] io_submit_one+0x78b/0x1310 [ 76.045040][ T5338] __se_sys_io_submit+0x185/0x2f0 [ 76.047240][ T5338] do_syscall_64+0xfa/0x3b0 [ 76.049561][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.052374][ T5338] [ 76.052374][ T5338] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 76.055766][ T5338] validate_chain+0xb9b/0x2140 [ 76.058028][ T5338] __lock_acquire+0xab9/0xd20 [ 76.060237][ T5338] lock_acquire+0x120/0x360 [ 76.063662][ T5338] __mutex_lock+0x182/0xe80 [ 76.066202][ T5338] hfsplus_find_init+0x15a/0x1d0 [ 76.068634][ T5338] hfsplus_get_block+0x8dd/0x1530 [ 76.071322][ T5338] block_read_full_folio+0x29c/0x830 [ 76.073776][ T5338] read_pages+0x35d/0x580 [ 76.075941][ T5338] page_cache_ra_unbounded+0x6b0/0x7b0 [ 76.078833][ T5338] filemap_get_pages+0x43c/0x1ea0 [ 76.081408][ T5338] filemap_read+0x3f6/0x11a0 [ 76.083607][ T5338] __kernel_read+0x469/0x8c0 [ 76.085820][ T5338] integrity_kernel_read+0x89/0xd0 [ 76.088063][ T5338] ima_calc_file_hash+0x85e/0x16f0 [ 76.090530][ T5338] ima_collect_measurement+0x428/0x8d0 [ 76.093286][ T5338] process_measurement+0x1121/0x1a40 [ 76.095928][ T5338] ima_file_check+0xd7/0x120 [ 76.098145][ T5338] security_file_post_open+0xbb/0x290 [ 76.100749][ T5338] path_openat+0x2f26/0x3830 [ 76.103058][ T5338] do_filp_open+0x1fa/0x410 [ 76.105273][ T5338] do_sys_openat2+0x121/0x1c0 [ 76.107598][ T5338] __x64_sys_openat+0x138/0x170 [ 76.110051][ T5338] do_syscall_64+0xfa/0x3b0 [ 76.112449][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.115393][ T5338] [ 76.115393][ T5338] other info that might help us debug this: [ 76.115393][ T5338] [ 76.119844][ T5338] Possible unsafe locking scenario: [ 76.119844][ T5338] [ 76.123178][ T5338] CPU0 CPU1 [ 76.125693][ T5338] ---- ---- [ 76.127991][ T5338] lock(&HFSPLUS_I(inode)->extents_lock); [ 76.130915][ T5338] lock(&tree->tree_lock/1); [ 76.133934][ T5338] lock(&HFSPLUS_I(inode)->extents_lock); [ 76.137354][ T5338] lock(&tree->tree_lock/1); [ 76.139330][ T5338] [ 76.139330][ T5338] *** DEADLOCK *** [ 76.139330][ T5338] [ 76.142731][ T5338] 4 locks held by syz.0.0/5338: [ 76.145027][ T5338] #0: ffff888011f2c428 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 76.149052][ T5338] #1: ffff8880427665b8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x74b/0x1a40 [ 76.153467][ T5338] #2: ffff88805346f3d8 (mapping.invalidate_lock#3){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x129/0x7b0 [ 76.157895][ T5338] #3: ffff88805346f048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x39e/0x1530 [ 76.163242][ T5338] [ 76.163242][ T5338] stack backtrace: [ 76.165871][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 76.165895][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.165959][ T5338] Call Trace: [ 76.165987][ T5338] [ 76.165994][ T5338] dump_stack_lvl+0x189/0x250 [ 76.166011][ T5338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.166024][ T5338] ? __pfx__printk+0x10/0x10 [ 76.166037][ T5338] ? print_lock_name+0xde/0x100 [ 76.166051][ T5338] print_circular_bug+0x2ee/0x310 [ 76.166071][ T5338] check_noncircular+0x134/0x160 [ 76.166086][ T5338] validate_chain+0xb9b/0x2140 [ 76.166098][ T5338] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 76.166114][ T5338] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.166127][ T5338] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 76.166144][ T5338] __lock_acquire+0xab9/0xd20 [ 76.166155][ T5338] ? hfsplus_find_init+0x15a/0x1d0 [ 76.166167][ T5338] lock_acquire+0x120/0x360 [ 76.166178][ T5338] ? hfsplus_find_init+0x15a/0x1d0 [ 76.166190][ T5338] ? path_openat+0x2f26/0x3830 [ 76.166201][ T5338] ? do_sys_openat2+0x121/0x1c0 [ 76.166217][ T5338] ? do_syscall_64+0xfa/0x3b0 [ 76.166229][ T5338] __mutex_lock+0x182/0xe80 [ 76.166267][ T5338] ? hfsplus_find_init+0x15a/0x1d0 [ 76.166284][ T5338] ? hfsplus_find_init+0x15a/0x1d0 [ 76.166297][ T5338] ? __pfx___mutex_lock+0x10/0x10 [ 76.166309][ T5338] ? rcu_is_watching+0x15/0xb0 [ 76.166322][ T5338] ? __kmalloc_noprof+0x29b/0x4f0 [ 76.166334][ T5338] ? hfsplus_find_init+0x8c/0x1d0 [ 76.166346][ T5338] hfsplus_find_init+0x15a/0x1d0 [ 76.166369][ T5338] hfsplus_get_block+0x8dd/0x1530 [ 76.166388][ T5338] ? __pfx_hfsplus_get_block+0x10/0x10 [ 76.166407][ T5338] ? _raw_spin_unlock+0x28/0x50 [ 76.166424][ T5338] block_read_full_folio+0x29c/0x830 [ 76.166439][ T5338] ? __pfx_hfsplus_get_block+0x10/0x10 [ 76.166449][ T5338] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 76.166461][ T5338] read_pages+0x35d/0x580 [ 76.166475][ T5338] ? __pfx_read_pages+0x10/0x10 [ 76.166487][ T5338] ? filemap_add_folio+0x1af/0x270 [ 76.166500][ T5338] page_cache_ra_unbounded+0x6b0/0x7b0 [ 76.166518][ T5338] filemap_get_pages+0x43c/0x1ea0 [ 76.166532][ T5338] ? ktime_get+0x3e/0x1f0 [ 76.166547][ T5338] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 76.166562][ T5338] ? __pfx_filemap_get_pages+0x10/0x10 [ 76.166575][ T5338] ? __lock_acquire+0xab9/0xd20 [ 76.166584][ T5338] ? __pfx___might_resched+0x10/0x10 [ 76.166599][ T5338] filemap_read+0x3f6/0x11a0 [ 76.166615][ T5338] ? kernel_text_address+0xa5/0xe0 [ 76.166624][ T5338] ? __kernel_text_address+0xd/0x40 [ 76.166633][ T5338] ? __pfx_filemap_read+0x10/0x10 [ 76.166649][ T5338] ? kasan_save_track+0x3e/0x80 [ 76.166661][ T5338] ? generic_file_read_iter+0x8f/0x510 [ 76.166674][ T5338] ? __asan_memset+0x22/0x50 [ 76.166683][ T5338] ? iov_iter_kvec+0xb8/0x180 [ 76.166695][ T5338] __kernel_read+0x469/0x8c0 [ 76.166708][ T5338] ? __pfx___kernel_read+0x10/0x10 [ 76.166725][ T5338] integrity_kernel_read+0x89/0xd0 [ 76.166746][ T5338] ? __pfx_integrity_kernel_read+0x10/0x10 [ 76.166755][ T5338] ? __kasan_kmalloc+0x93/0xb0 [ 76.166763][ T5338] ? ima_calc_file_hash+0x820/0x16f0 [ 76.166772][ T5338] ima_calc_file_hash+0x85e/0x16f0 [ 76.166788][ T5338] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 76.166806][ T5338] ? irqentry_exit+0x74/0x90 [ 76.166815][ T5338] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.166825][ T5338] ? make_vfsgid+0x49/0xa0 [ 76.166833][ T5338] ? generic_fillattr+0x63d/0x9a0 [ 76.166855][ T5338] ? hfsplus_getattr+0x235/0x2f0 [ 76.166872][ T5338] ima_collect_measurement+0x428/0x8d0 [ 76.166887][ T5338] ? __pfx_ima_collect_measurement+0x10/0x10 [ 76.166899][ T5338] ? kasan_quarantine_put+0xdd/0x220 [ 76.166912][ T5338] ? hfsplus_getxattr+0x118/0x180 [ 76.166928][ T5338] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 76.166944][ T5338] process_measurement+0x1121/0x1a40 [ 76.166957][ T5338] ? __pfx_process_measurement+0x10/0x10 [ 76.166966][ T5338] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 76.166981][ T5338] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 76.167002][ T5338] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.167015][ T5338] ? end_current_label_crit_section+0x152/0x180 [ 76.167025][ T5338] ima_file_check+0xd7/0x120 [ 76.167035][ T5338] ? __pfx_ima_file_check+0x10/0x10 [ 76.167045][ T5338] security_file_post_open+0xbb/0x290 [ 76.167059][ T5338] path_openat+0x2f26/0x3830 [ 76.167070][ T5338] ? arch_stack_walk+0xfc/0x150 [ 76.167089][ T5338] ? __pfx_path_openat+0x10/0x10 [ 76.167100][ T5338] ? do_filp_open+0x13d/0x410 [ 76.167113][ T5338] do_filp_open+0x1fa/0x410 [ 76.167123][ T5338] ? __lock_acquire+0xab9/0xd20 [ 76.167135][ T5338] ? __pfx_do_filp_open+0x10/0x10 [ 76.167150][ T5338] ? _raw_spin_unlock+0x28/0x50 [ 76.167166][ T5338] ? alloc_fd+0x64c/0x6c0 [ 76.167182][ T5338] do_sys_openat2+0x121/0x1c0 [ 76.167198][ T5338] ? __pfx_do_sys_openat2+0x10/0x10 [ 76.167215][ T5338] ? rcu_is_watching+0x15/0xb0 [ 76.167228][ T5338] __x64_sys_openat+0x138/0x170 [ 76.167242][ T5338] do_syscall_64+0xfa/0x3b0 [ 76.167253][ T5338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.167263][ T5338] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 76.167273][ T5338] ? clear_bhb_loop+0x60/0xb0 [ 76.167285][ T5338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.167296][ T5338] RIP: 0033:0x7f151a98d310 [ 76.167321][ T5338] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 76.167330][ T5338] RSP: 002b:00007f151b71ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 76.167348][ T5338] RAX: ffffffffffffffda RBX: 0000000000000200 RCX: 00007f151a98d310 [ 76.167356][ T5338] RDX: 0000000000000200 RSI: 00007f151b71ac10 RDI: 00000000ffffff9c [ 76.167364][ T5338] RBP: 00007f151b71ac10 R08: 0000000000000000 R09: 0000000000000000 [ 76.167371][ T5338] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 76.167378][ T5338] R13: 0000000000000000 R14: 00007f151abb5fa0 R15: 00007ffe56b01be8 [ 76.167388][ T5338] [ 76.451844][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.454667][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.468066][ T25] audit: type=1800 audit(1753555140.939:2): pid=5338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 76.494844][ T5330] usb 5-1: USB disconnect, device number 2 [ 77.006382][ T5338] syz.0.0 (5338) used greatest stack depth: 19976 bytes left