last executing test programs: 13.87027323s ago: executing program 1 (id=773): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @remote, 0x6}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000340)=""/142, 0x0, 0x8e, 0x1}, 0x28) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) 12.242113003s ago: executing program 1 (id=776): r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009840)='./file1\x00', 0x804002, &(0x7f0000000000)={[{@gqnoenforce}]}, 0x1, 0x999b, &(0x7f000001cb40)="$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") 10.979468571s ago: executing program 0 (id=779): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040000010300000009210500000581030002000007"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="10") r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000580)) 8.974495859s ago: executing program 1 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20102, 0x0) close(r1) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x4, 0xeda, 0xf, 0x10, r0, 0x200, '\x00', r3, r5, 0x4, 0x5, 0x1, 0xf}, 0x50) 6.207557099s ago: executing program 1 (id=792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924", @ANYRES8=r1], 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x204182) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000040)={{0x9, 0x8}, 0x1, 0xffffffff, 0x5, {0x9, 0x22}, 0x9, 0x7}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x85880) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) socket$igmp6(0xa, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000001a40)={0x1f, 0x2, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000300010000", 0x7) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1200000, &(0x7f00000006c0)=ANY=[], 0x2, 0x33a, &(0x7f0000001f80)="$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") chdir(&(0x7f00000003c0)='./bus\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') 6.206923689s ago: executing program 3 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r1 = getpid() (rerun: 64) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) (async) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002d80)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000002f80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002f40)={&(0x7f00000031c0)=ANY=[@ANYBLOB="64010000", @ANYRES64=r1, @ANYBLOB="04002abd7000ffdbdf25070000003400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d3672656700000000000000000014000200766972745f77696669300000000000006c0001801400020074756e6c30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e300000000000000000140002006261746164765f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3100000000000000005c00018008000100", @ANYRESOCT=r1, @ANYBLOB="1400020076657468305f746f5f626174616476000800030002000000140028e6925c4798020076657468305f746f5f687372000000000800030001000000080003000000000008000100d11218fade3468e3d953f4ae97138235c403d5526e3aec000000000000b4a6d6828a2714798ad2b5f601d9b15af172d715e621c2d6e2a5bee84f41f2671d170cc684f63f4954eae6647ecfdd59a868b87ab5a4c284fd77c45a8a2709617387b5aef12976f2", @ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="3c000180140002007665746831000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="0800030002000000140002006261746164763000000000000000000018000180140002006970766c616e30000000000000000000"], 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000002b40)={0x0, 0x4c, "18ee50407b6c377d683c2e1fbbd63806c65bf20d04667a44ec277228722d6b8a23fa9acdb808b518e74f89faa257dc80ba6e7fa1cb11e66d3fba22b74627edf8eb41356c9b996310e15eed51"}, &(0x7f0000002bc0)=0x54) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000002c00)={r7, @in={{0x2, 0x4e22, @empty}}}, 0x84) (async) recvmmsg(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000007c0)=""/212}, {&(0x7f00000008c0)=""/4096}, {&(0x7f00000018c0)=""/110}, {&(0x7f0000001940)=""/138}, {&(0x7f0000001a00)=""/82}, {&(0x7f0000001a80)=""/4096}], 0x0, &(0x7f0000000040)=""/25, 0x19}, 0x3}, {{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/167, 0xa7}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000580)=""/189, 0xbd}, {&(0x7f0000000640)=""/109, 0xbd}], 0x4, &(0x7f0000000700)=""/28, 0x1c}, 0x5}], 0x2, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8, 0x0, 0xdd}, 0x18) (async) mkdir(0x0, 0x12c) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xcb3e) (async, rerun: 64) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) (rerun: 64) sendfile(r9, r9, 0x0, 0x4) (async) ioctl$SG_GET_NUM_WAITING(r9, 0x227d, &(0x7f0000002b00)) (async) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000000)=0x10, 0x4) (async) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGPGRP(r10, 0x5437, 0x0) 6.132769356s ago: executing program 0 (id=795): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 5.98297214s ago: executing program 3 (id=798): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x64d, &(0x7f0000000d40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x6, 0x7e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_INGRESS_BLOCK={0x8}]}, 0x3c}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x9b, &(0x7f0000000300)=""/155, 0x40f00, 0x1, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x2, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000400)=[r0, r0, r0], &(0x7f0000000440)=[{0x1, 0x5, 0xb}, {0x2, 0x1, 0x0, 0xf}, {0x5, 0x2, 0x7, 0x5}, {0x4, 0x3, 0x9, 0x7}, {0x1, 0x1, 0xf, 0x6}, {0x1, 0x3, 0x2, 0x1}], 0x10, 0x3}, 0x94) 5.757217991s ago: executing program 3 (id=799): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) stat(&(0x7f0000000080)='./file7\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (fail_nth: 3) 5.591628176s ago: executing program 3 (id=800): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5.484650466s ago: executing program 2 (id=801): setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x10000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000021c0)={0x0, @in6={{0xa, 0x4e21, 0x9, @empty, 0x4}}, 0xd70c03, 0x9, 0xf06, 0x1, 0x2d, 0x2, 0x1}, 0x9c) 4.439609934s ago: executing program 2 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfe}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000500)={0x20e, 0x1, 0x1, "8c9c0a090441444fe8c4f552aa8d2246792c90fe7b6c527aa5df4438101a4559", 0x35303553}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f000065a000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) 4.326845595s ago: executing program 0 (id=804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfd17, 0x8200) epoll_create1(0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES64=r3], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000500)=""/107, 0x6b}], 0x1, 0x5, 0x10) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000fac40906010800000000000000aee05b030000000700000009f3ddbbba030200bc327a3100000000050001fa07000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f000001000700880016000700"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x26) fcntl$notify(r7, 0x402, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xfffffffffffffd87}, 0x1, 0x0, 0x0, 0x2000c080}, 0x48810) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r8 = syz_io_uring_setup(0x42e9, &(0x7f0000000140)={0x0, 0x8c34, 0x80, 0x2, 0xbfdffdfc, 0x0, r7}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x81}}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x101, 0x4) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000001c0)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 4.024707333s ago: executing program 2 (id=805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0x8, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0x10c00, 0x23e, 0x10000, 0x2}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0xfffffff7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xd}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 3.532341419s ago: executing program 2 (id=806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) futex_waitv(&(0x7f00000005c0)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, &(0x7f0000000740)={0x0, 0x989680}, 0x0) r1 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x0, 0xc, 0x2, &(0x7f0000000080)={0x11, "497d59b206a5b8c57da372261092c071d7c1486b634a572c55cf75ef98e6068fd3"}}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32, @ANYBLOB="a29e73ad41643e104c916f"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 2.982695221s ago: executing program 4 (id=808): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r1, 0x20000005) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="17f2b2de5c6b0db5d25446463f74d3740a70f6e0249ca79ea3579bc57df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070040000003d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b0080fe56fc785245e3dd4eb6fd1d435e39d84c964a20acf7d7ef519aea75b91a", 0x74}], 0x1, 0x0, 0x0, 0x11}], 0x1, 0xc48d4) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/114, 0x72}], 0x1}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000140)=""/3, 0x3}], 0x1, 0x1ff, 0x280) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.88238364s ago: executing program 1 (id=809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x26) fcntl$notify(r4, 0x402, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) socket$kcm(0x10, 0x2, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) 2.580244228s ago: executing program 4 (id=810): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x84a, &(0x7f0000000100)={[{@shortname_win95}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@rodir}]}, 0xdb, 0x336, &(0x7f0000000380)="$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") (async) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) (async) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r5, &(0x7f0000000080)=[{0x32, 0x8, 0x0, 0xfd, @tick, {0x8}, {0xe}, @connect}], 0x1c) (async) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c9180200090504"], 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) bind$alg(r6, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) (async) readv(r8, &(0x7f0000000340)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000040)={0x20d, 0x0, 0x805, 0x1}, 0x8) (async) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r10, 0x40085112, &(0x7f0000000100)=@v={0x93, 0xfe, 0x0, 0xe, @MIDI_NOTEON=@special, 0x9}) (async) syz_open_dev$MSR(0x0, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2.048633748s ago: executing program 4 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1.647093176s ago: executing program 4 (id=812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="94030000170a0104000000000000000007000002f4000380080001400000000008000240000001ff0800014000000000b800038014000100766972745f77696669300000000000001400010076657468305f746f5f687372000000001400010076657468315f746f5f626174616476001400010074756e6c3000000000000000000000001400010070696d7265670000000000000000000014000100766972745f77696669300000000000001400010070696d367265670000000000000000001400010076657468305f746f5f62726964676500140001006d6163766c616e30000000000000000008000240000000811800038014000100626f6e64300000000000000000000000b40103807c0003701400010069705f76746930000000000000000000140001006272696467655f736c6176655f300000140001006261746164905f736c6176655f310000140001006970766c616e30000000000000000000140001006d6163766c616e31000000000000000014000100776c616e310000000000000000000000000001400000000008000240fffffff7080002400000001008000100080002400000000404000380b80003800afe01007767320000000000000000000000000014000100766c616e3000000000000000000000001400010076657468315f746f5f626f6e640000001400010070696d72656700000000000000000000140001006d6163736563300000000000000000001400010070696d726567300000000000000000001400010076657468315f746f5f7465616d0000001400010076657468315f6d616376746170000000140001006d6163766c616e300000000000000000180003801400010076657468315f766972745f7769666900cc0003800800014000000000b8000380140001007465616d300000000000000000000000140001007663616e30000000000000000000000014000100766972745f776966693000000000000014000100776732000000000000000000000000001400010076657468315f746f5f6272696467650014000100697036677265300000000000000000001400010067656e657665310000000000000000001400010070696d36726567300000000000000000140001006e69637666300000000000000000000008000240000000070900020073797a320000000000000000"], 0x394}, 0x1, 0x0, 0x0, 0xc051}, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) clock_gettime(0x0, &(0x7f00000025c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002500)=[{{&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000100)}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f00000004c0)=""/157, 0x9d}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000600)=""/219, 0xdb}, {&(0x7f00000017c0)=""/196, 0xc4}, {&(0x7f00000018c0)=""/230, 0xe6}, {&(0x7f00000019c0)=""/225, 0xe1}], 0x9, &(0x7f0000001b80)=""/244, 0xf4}, 0x800}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001c80)=""/203, 0xcb}, {&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000001d80)=""/133, 0x85}, {&(0x7f0000000700)=""/2, 0x2}], 0x4, &(0x7f0000001e40)=""/175, 0xaf}, 0x8}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001f00)=""/81, 0x51}, {&(0x7f0000001f80)=""/162, 0xa2}, {&(0x7f0000002040)=""/190, 0xbe}, {&(0x7f0000002100)=""/239, 0xef}, {&(0x7f0000002200)=""/222, 0xde}, {&(0x7f0000002300)=""/143, 0x8f}, {&(0x7f00000023c0)=""/16, 0x10}], 0x7, &(0x7f0000002480)=""/77, 0x4d}, 0x1}], 0x3, 0x40002143, &(0x7f0000002600)={r2, r3+10000000}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f0000000780)=""/4110, 0x100e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000002c0)='nv', 0x2) sendto$inet6(r6, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x6}, 0x1c) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6eeb978d00000100e58b04a386e83cd6de9dcaef76e27f9d125a70defa1e8a45540d20723e08466d6d462a13a0c6919f1de4fb280aa50a77673b70ff66596e90e432bc15aac47a97862a48264986db626f1595da7ec719b0084e4f2d86e113a3722ed2b6cd83c2e348f0750f3264a75b70b9bddef72f4f7bf6048f354b4e2bd0eac2046015067c8506656a93857586e007681925c484df499c31f5606f399cb51dbdfcdcb5efd6c1b1ff6da7351dfec5109f9cd5e057791bb80327053b745d39f4fe3527b74841e7d9b733304685c80666e2aefe0b4a9c38"], 0x68}}, 0xc041) 1.605878719s ago: executing program 0 (id=813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0x8, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0x10c00, 0x23e, 0x10000, 0x2}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0xfffffff7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xd}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) (fail_nth: 3) 1.265465171s ago: executing program 3 (id=814): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2ed, &(0x7f0000000a80)="$eJzs3L9PE2EYwPGnPyhtCZTBaDQxvNFFlwtUZ6UxkBibSJAafyQmB1y16dmSuwZTY0QnV+Mf4UAY2UiUf4DFTRcXNxYTTWQwnun1jkI5QKC0CN9PQu7hnve5vm9byPM2HKv33j4t5m0tr1ckHFcSEhFZE+mXsPhC3jHsxjHZ6JVc7vnx+fyd+w9uZbLZkXGlRjMTV9JKqb6BD89eJLxhS92y0v9o9Xv628rplbOrfyaeFGxVsFWpXFG6mix/reiTpqGmC3ZRU2rMNHTbUIWSbVj1fLmez5vlmZmq0kvTvckZy7BtpZeqqmhUVaWsKlZVRR7rhZLSNE31JgW7yc2Pj+uZfRZPtXgyOCSWldEjIpLYksnNd2RCAACgo5r7/7CoVvb/CxeWKz13F/u8/n8pFtT/X/1Sv9am/j8uIoH9v//4gf2/vrf+f2tHdLIcqP/H0TAQ23Iq1AhrSSujJ72fX9frhwuDbkD/DwAAAAAAAAAAAAAAAAAAAADA/2DNcVKO46T8o//VLSJxEfG/DyiNiMj1DkwZLXSA1x/HQOPGvWifiPlmNjebqx+9AcsiYoohg5KS3+77wVOL/TuPVE2/fDTnvPq52VzEzWTyUnDrhyTVJc31jjN6MzsypOo213dJcmN9WlJyKrg+HVgfk0sXN9RrkpJPU1IWU6bdeTTqXw4pdeN2tqk+4Y4DAAAAAOA40NS6wP27pm2Xr9ev76+bPx+INPbXg4H786ici3Z27QAAAAAAnBR29XlRN03D2iFIyO5j9h9ED+nK/gr/tcr/W4bDW+kOgf/gm1Jx72TLn5bQHp6WbYKw7KdqoLYaddBV+B8bNaV+Oo7jBjI23P5X0A3OvHv/q3UXvLYYD15pC4LIzm+Arrb9AgIAAADQNo2m3z8z3NkJAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABwArXjv6N1eo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUfE3AAD//7ndB6A=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) futex(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x4, 0x4, 0x8, 0x0, 0x3, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x1f, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x1, 0x7fffffffffffffff, 0x4}, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_UNALIGN(0x6, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') setresuid(0x0, 0xee01, 0xee00) setns(r8, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c6e66732c616c6c6f775f7574696d653d30303030303030303000303004000000000000003030302c6e6f646f74732c646f74732c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,\x00'], 0x1, 0x22d, &(0x7f0000000300)="$eJzs3b2KE1EYBuDP3exu2MatxWLAxiqodzDICuKAEJlCKwdWm10RZpvRKpfhNXhJXsZW6UbMhPwZbTQes/M8EOaFl8B3mpwU5yRv73+4vPh4/b799iWGwywGEZOYRpzFQRxG5878eTDLx7FqEgDAvhmPqzz1DOxWXefVUUSc/NSUX5MMBAAAAAAAAAAAwB9z/h8A+sf5/9uvrvPqdP79bZ3z/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA607a92/7mlXo+AODvs/8DQP/Y/wGgf+z/ANA/r16/eZEXxfk4y4YRN5OmbMru2fXPnhfnj7KZs+W7bpqmPFz0j7s+W++P4nTeP9naH8fDB13/o3v6stjoT+Ji98sHAAAAAAAAAAAAAAAAAACA/8IoW9h6v380+lXfpZXfB9i4vz+Ie4N/tgwAAAAAAAAAAAAAAAAAAADYa9efPl9WV1fvakEQhEVI/ckEAAAAAAAAAAAAAAAAAAD9s7z0m3oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhn+f//uwup1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w/cAAAD//wu+k9A=") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 788.730476ms ago: executing program 4 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfe}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000500)={0x20e, 0x1, 0x1, "8c9c0a090441444fe8c4f552aa8d2246792c90fe7b6c527aa5df4438101a4559", 0x35303553}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f000065a000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) 758.355439ms ago: executing program 0 (id=816): mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f00000001c0)=ANY=[@ANYBLOB='dyn,\x00']) r0 = socket$inet6_udp(0xa, 0x2, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x3}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000240)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000100)=0x40009, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r5 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x50) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) 482.969485ms ago: executing program 4 (id=817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x88) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000480)={0x9, 0x7, 0x0, 'queue1\x00', 0xff4}) recvmsg(r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000014c0)={0x0, 0x3, 0x1, [0x9, 0xb, 0x0, 0x1a, 0x2], [0x10001, 0x8001, 0x4, 0x583, 0x254, 0x200, 0x9, 0x200, 0xbd1f, 0x5, 0x5, 0x3, 0xd, 0x94, 0x8000000000000000, 0x3, 0x1000, 0x8, 0x2, 0x800, 0x5, 0xffffffff, 0x100, 0x8000000000000001, 0x8, 0x9, 0x7, 0x1, 0x0, 0xfffffffffffffffa, 0x6, 0x3, 0x80, 0x9, 0x2, 0xed, 0x100000000, 0x1, 0x2, 0x0, 0x99e, 0x1, 0x1000, 0x6, 0x3, 0x5, 0x2000000000000008, 0x8, 0xdae, 0x7, 0x9, 0x4, 0xffffffffffffffff, 0x6cf, 0x4, 0xa1f8, 0x0, 0x100000000, 0x1, 0x100, 0x100, 0x81, 0x3, 0x3, 0x8000, 0x1, 0x8a, 0x3ff, 0x80000, 0x800, 0x6, 0x5, 0x1ef, 0x4, 0x3, 0x80000001, 0x6, 0xffffffffffffffff, 0x54612ec, 0x800, 0x383, 0x6, 0x93, 0x5bc5, 0x5, 0x6, 0x2, 0xfffffffffffffff8, 0x80000001, 0x80, 0x9, 0x9, 0x2, 0x10001, 0x7fff, 0x9, 0x0, 0x0, 0x1ff, 0x3, 0x4, 0x3, 0x8, 0x9, 0x0, 0xfffffffffffffff8, 0x8000, 0x4, 0x1ff, 0x9, 0x6618, 0x0, 0xc144, 0x5, 0x1, 0x8, 0x2, 0x8000000000000001, 0x4, 0xd, 0xffffffffffff8001]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) r9 = fcntl$dupfd(r8, 0x23f16f4f5aadef30, r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xf961}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8841}, 0x4801) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r8, @ANYRESHEX], 0xfe37, 0x0) 360.692226ms ago: executing program 2 (id=818): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}], 0x1, 0x40800) 177.166874ms ago: executing program 1 (id=819): unshare(0x24020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) accept4(r0, 0x0, 0x0, 0x80800) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 118.946449ms ago: executing program 2 (id=820): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$inet(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000140)="b301916c88b830ac1d513d80506c351315b67509c34a558231904eb8a11147fe7558f28ca0899c1a5890b62ee3aa9a0422ba2a2f4ec31322fc8591ad4e877a21182a3c4bab1850e1dcbaacae38d6d322a52d56af07a854ff9f844a", 0x5b}, {0x0}], 0x2, &(0x7f00000018c0)=ANY=[], 0xf0}, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r2 = epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000ff0000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000210a080001400000000108000340000000000900010073797a30"], 0xc8}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0xab) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x80000009}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x0, 0x317, 0x0, 0xeb, 0x10001, 0x6a0}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x50, r6, 0x1, 0x70bd2c, 0xffffffff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_DATA_WEP40={0x9, 0xa}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8e00000000000000005dfed183"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x50}}, 0x40) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_emit_ethernet(0x1fb, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "c66f88", 0x1c5, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[@fragment={0x3c, 0x0, 0x1, 0x1, 0x0, 0x5, 0x68}, @dstopts={0x2b, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @loopback}]}, @dstopts={0x6c, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x10000}, @generic={0x2, 0x60, "a088791a9f7df3a4744a6305f8d14623e949752e5687faac7524930e820bc226f03c94f18f1fa6b1b4f4f7ac91fd654ba596f784fb284fb4e0979bcab01a6d9e30d8fe65ae515526c585a37ddb680fc7cebe77f701d38e77b056822ef1827edc"}, @pad1, @ra={0x5, 0x2, 0x7}, @jumbo, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @fragment={0x32, 0x0, 0xcb, 0x1, 0x0, 0x5, 0x64}, @routing={0x0, 0x8, 0x1, 0x1, 0x0, [@remote, @loopback, @mcast2, @remote]}, @hopopts={0x2f, 0x8, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x0, 0x7, [0x1000, 0x2, 0x7ff, 0x6, 0x2d, 0xffffffff00000001, 0x0]}}]}], {0x4e23, 0x4e21, 0x6d, 0x0, @gue={{0x2, 0x1, 0x3, 0x3, 0x100, @val=0x80}, "5063b66f329075bd601b2f7c1db66dc81ccc1352d6f4289d0883fdc9c9d4efa172480dd454faccb416f48c5974fcf68f4de9710f2c631dac879d384992efc6e8a1c2fc976965ad7bae8e6ae39aab8e83ce34db222dba4e30d724e61eff"}}}}}}}, 0x0) 335.21µs ago: executing program 0 (id=821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000180)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x12, &(0x7f0000000200)={[{@order_relaxed}, {@errors_continue}, {@nodiscard}, {@nodiscard}, {@errors_remount_ro}, {@errors_remount_ro}]}, 0xf, 0xa02, &(0x7f0000000a80)="$eJzs3U9sXEcdAOB5a68d16mzhgKmoYmBAqmgTrCtKrmkMZRrpN7KsQppiHBTlHBpVakpUsUNRap67IGqh1wQFeLSA1JEVUQvQZQ7CoVKVVGgFQipoNYo9sx6d+zH/rG99vp9n/Tz+L2ZfTPPu943fp6dCUBl1Va/Li7OFCG89PqLj/zkD698twghHG2WaLSUW9uqhxCKtsevuxUzPv7w2XObpUWYX/2atsPZ283HToYQrobZcCM0wsL7j829ubT08vWbj16efuH02zt0+gAAUCln3/jH7x94761vTP/nF0fOhPHm/tQ/b8TtydjvPxH793n/v2hJi5btZCwrNxIj//thJCs3mtUzWlJfPTtOvaTcWIf6Rlr2bXaeALAfrN/XK2pzbdu12tzc2nX/jlvjY8XcpYvLT1zZpYYCANvmXw+HEM4IIYQQokqxcmi3eyAAQNXl44U3uJqPLNia5tEOdFf/7aXa5o+HbTDo17/6h6v+V5/3jsP22a+vpnRe6fcojWPIxxGOZI/r9fe/lh1ntMd2lo0rHJbxhmXtzH+ue1VZ+3t9HndLWfvz8bB7VVn783G6e1VZ+8cH3I5+lbX/wIDb0a+y9k80v9uvV7jtcd/q1/V3iyNZfuv1M39PH5b3eACg3UfG/wkhhBCVi+d2uwMCAOw5+fw4K1HKz+fjyfPzeXjy/HxeoDx/vEP+gQ75AMBGC7+68PNrxfr/+bc6Hi6Nu7grppM9ticfrdFr/Vsd97TV+odl3BIA1fbUTxe/89aZpZG1+X/Xr2WfZPP/prl6r8XtNO7yYLbdnPt3tr2eWkm5gztxUgDA/5Wuv2Xz/94dt2dCvXji4vL5E3F7Kqa/G6+P39n/zQG3GwDoX7fz/8+E9vn/Dzb312ut/YJD6/uL1n5BI9s/X7J/IW5Px/T74xOr++fOPbX8ve0+eQCoqDe+dfC1D357Kazd/1///3e6/59u4zfiWLsPYoHUT0j3Bzbc/z/WXs9UWbkT7eUOlZU72V6ukZWrx8jn3cjHB05kj0vjFNK4h9TfSeMap8vak02QMZaVG41xd9aeqaw9G873RHt78nloUv2NbH8+7iGVmw4AsNGVp5/5wePLy+cv+8Y3vqngN8+FEDbL2u13JmCnHf/Rkz88fuXpZx68+OTjF85fOH9pYXH+1KmHFucXHzq+el//eOvdfQBgP1jv9O92SwAAAAAAAAAAAAAAgDKD+KTxbp8jANDu7w+HEM6ILEb2QBuEECk+2gNtEGKfxcpKvuIvAMBg9bre/lY1jxbn80/rHqT04IN/nL4Tqdjtpfb+kvWL2U6Dfv2rf7jqf/X57a2/ub5I1+9/tfYDzPZX761fnjzZWv+9o13Wn5//sf7q/3NW/9dCd/Wv/Cyrv8+pcd/J6r+ry/o3nP/J/ur/S6z/nrh97Mvd1t/+/Kf1dtJyOBPZ+UyW1P/Xevv5p7X9ej7/Az2cdIt34/kDQBXVdrsBOyT1ElI/OvVDWtfnCy3r7IWsfLf9/1p2nHy9vn6l46Z+0BfjdurupHUD8/UOe21/Wp9wKjtu0WW/tuz1Myz/VSpr/3Y9jzutrP35epB7VVn7xwbcjn6VtT//vdyrytrf559VA1fW/okBt2NYHY5p2fUwXX+mYl7abmTbk5s8F/u1bwEAw+7bp2/ef+3rozfy9fnTdT39GTgZ/6a+npXL+wsTWd+xyMp/KaY/jukrMf1NTN/Jjrez/20DgGp6z+f/hBBCiMpF1T//5/4CVVb113/Vz7/a7/6e/07S6yO/j5+Mdsivt+SPbJI/1uHx41l+/nwd6JB/T3bclSjlf6ZD/mc75H+uQ/5Mh/xDHfLv7ZB/uEP+FzrkH+mQf7RDPgDD6fMx9f4OANWRj/tz/QeA/S9NrOP6DwDV8amYll3/7+uQDwAMn0/H1PUdACqk2Hymx63O2wMMjzS/dPo9j8uBhPtj+pWYfjWmab2UPpdfAfaA//7713+7VqzP93c4y+92Pvmi1v7Ju3z9nwe6bE/++b1e57NvdFnPTtU/vcX6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABis2urXxcWZIoSXXn/xkX+e+tO7RQjhaLNEo6Xc2la9ZXu27TghvFaspR9/+Oy51vSTmBZhPhShaO4PZ283a5oMIVwNs+FGaISF9x+be3Np6eXrNx+9PP3C6bd38EcAAAAA+97/AgAA//87+jkE") r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)="f50840cbb878f18ed950e5d5", 0xc}, {&(0x7f0000000300)="081d2428d628b5ef576c76da4a22422240b053a645c243015fc28c4f146643f967a4c8cd8b1c33a9d1df1904cbaa43526f20cd1f3d9fc3be1f01c99a5bbf8b4d31fc5876cc", 0x45}, {&(0x7f0000000680)="1d7efd35038b1873feff6f831e8d21e4058e25ec3ace9b1fcdc677d45dfc274f6ff108ebe77b15ca39bc3e9ffa99798fd0dafe6684144f1d8e8e49b702a0b365a0d3b9146a98eaf55b4fdae618a0dc1bbdf2ddf0096065691b6bf3132d350f7cf846cea4d905227ceffc7ed8a4c52c61a1078e8dbbc50c88d8e1abbff8d055a962868064d8a174d476bf13edeab2d8d0243e7c9371ca2dc564e743db1efbbf1d7ac5ab730c4821c1214fb8379db59bde5618b965b6988dc6081e097b5e7a9a17996e9e44cc4ec1b811", 0xc9}, {&(0x7f0000000780)="4d35810269169d8b8bdf0838a8819b0e37005d0b5276101ecd24acf69e267afee916d68dbd18218864142f2ffeabfacb7356f2486079794704129ef361a54c19ac093d51125358101aafc4fa7558318465b81b20bfcce7934edebe21550f47c7517fdf89e5e9931a782c17f7faf054ad24601fc4112d9705126348ee0ca6ac4f1f7321d2b85808c0144fca11de9021b282e587e881144882d0c2720768bfccf4fd06070edb7dfddfcbbc1c1665d608c05b85add285ebe7ab4973f381f699784ceddbded99f4698eca573808942fa8919dbea5b07f134739d047d9b5eb9bd1bc5e0cc5f1cbfe293e5", 0xe8}, {&(0x7f0000000880)="1d9cd00c8eafefeef060ce5c9c5e5d5cc72a6becabdc330914a264ab7cf31692277039ba46682b4e891323dbeff464cddd508d0f0b62366d5735381a1d345dae27cdb9cab416edbe24e6e9bbfd7ed6103b2507ebc684ec488022b15e4ed12c57a61186ce234161f895be892da3335dd204aac9fe7647a9ba7ae24c1bfbf991d726c61eddd3e48429b069feed5ec5bc7f8618c710924ce81f3fc5dbc7f2c49db179ea641d78297f3c3e50b58e0b4b2dc2c9104d134040a3c98d76a70183516ce240cee0", 0xc3}, {&(0x7f00000014c0)="25557600e468e45be18755d3a475035ad5147ead84526bbf9991810f3f517beca1407fad585b02848f69dcd81ce1a2b9b70619facf257dfd69e6b6c9add049fbf04857638e876cea77f5b31a1aa8b154dc518ff8ef5c18626ae534a9d62be47b31dc6b9b23c9831e68ea09e78326a4f941fb73c890b64db9212a32c493692e072254e71ce0ab2666561ecf7785f06869b2cb143ca04f72950b9d195a2f824a401e04e1efc1f52b9c93e5687a0b6f1b59c36362ab5b14b9833c967a8645d73676a4b50cf1f36ae91fa588764c401dc7e9ba11e7c98b875172f4eb7e31139383e83f317fb83e22cc046291131f377dc981", 0xf0}, {&(0x7f00000003c0)="92a9c6a9bb1027382142d279f85bc3885a5e3b4f61108e385016a7e4a9cfaf3a6093fee01172d98146275199647a9926ab448964cf07879d28bc8f71ef0e73f9d7b5186f514fa1476cfacf638741a0", 0x4f}, {&(0x7f00000015c0)="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", 0x1000}], 0x8, 0x0, 0x0, 0x4000000}}, {{&(0x7f00000025c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440), 0x0, &(0x7f0000002640)=[@rights={{0x24, 0x1, 0x1, [r2, r3, r1, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r5, r6]}}, @cred={{0x1c}}], 0x68, 0x24008805}}], 0x12, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r2) fcntl$setstatus(r2, 0x4, 0x2c00) gettid() r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0xb0) r10 = dup2(r9, r9) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x14, 0x4, 0x9, 0x20000003}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 0s ago: executing program 3 (id=822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): 166.332:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 187.502021][ T5750] loop0: detected capacity change from 0 to 32768 [ 187.533707][ T4277] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.539940][ T5750] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.368 (5750) [ 187.565041][ T26] audit: type=1326 audit(1762844166.332:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 187.692276][ T26] audit: type=1326 audit(1762844166.342:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 187.742014][ T26] audit: type=1326 audit(1762844166.342:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 187.945620][ T5787] loop2: detected capacity change from 0 to 256 [ 187.952125][ T4428] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4428) [ 188.098263][ T5773] loop4: detected capacity change from 0 to 32768 [ 188.223873][ T5773] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 188.426930][ T4269] ocfs2: Unmounting device (7,4) on (node local) [ 188.960402][ T5812] dccp_close: ABORT with 114 bytes unread [ 189.154482][ T4851] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 189.160906][ T5797] loop3: detected capacity change from 0 to 32768 [ 189.190778][ T5797] [ 189.190778][ T5797] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.190778][ T5797] [ 189.207888][ T5797] [ 189.207888][ T5797] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.207888][ T5797] [ 189.218598][ T5797] [ 189.218598][ T5797] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.218598][ T5797] [ 189.230375][ T5797] [ 189.230375][ T5797] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.230375][ T5797] [ 189.243121][ T5797] [ 189.243121][ T5797] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.243121][ T5797] [ 189.275624][ T106] [ 189.275624][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.275624][ T106] [ 189.290799][ T5819] [ 189.290799][ T5819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.290799][ T5819] [ 189.303174][ T5819] [ 189.303174][ T5819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.303174][ T5819] [ 189.324014][ T5819] [ 189.324014][ T5819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.324014][ T5819] [ 189.350386][ T4851] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 189.365330][ T5819] [ 189.365330][ T5819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.365330][ T5819] [ 189.365837][ T4851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.451335][ T107] [ 189.451335][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.451335][ T107] [ 189.515335][ T4851] usb 2-1: Product: syz [ 189.515354][ T4851] usb 2-1: Manufacturer: syz [ 189.515368][ T4851] usb 2-1: SerialNumber: syz [ 189.517294][ T4267] [ 189.517294][ T4267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.517294][ T4267] [ 189.517381][ T4267] [ 189.517381][ T4267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.517381][ T4267] [ 189.730251][ T5827] loop4: detected capacity change from 0 to 256 [ 189.807679][ T4851] rtl8150 2-1:1.0: couldn't reset the device [ 189.825827][ T4851] rtl8150: probe of 2-1:1.0 failed with error -5 [ 189.860320][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 189.872955][ T4851] usb 2-1: USB disconnect, device number 9 [ 190.020942][ T5835] netlink: 'syz.3.389': attribute type 10 has an invalid length. [ 190.067210][ T5835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.389'. [ 190.121254][ T5835] device dummy0 entered promiscuous mode [ 190.162953][ T5835] bridge0: port 3(dummy0) entered blocking state [ 190.172812][ T5841] FAULT_INJECTION: forcing a failure. [ 190.172812][ T5841] name failslab, interval 1, probability 0, space 0, times 0 [ 190.210473][ T5842] loop1: detected capacity change from 0 to 2048 [ 190.221754][ T5835] bridge0: port 3(dummy0) entered disabled state [ 190.228587][ T5841] CPU: 1 PID: 5841 Comm: syz.4.390 Not tainted syzkaller #0 [ 190.235882][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.245947][ T5841] Call Trace: [ 190.249251][ T5841] [ 190.252200][ T5841] dump_stack_lvl+0x168/0x22e [ 190.256889][ T5841] ? show_regs_print_info+0x12/0x12 [ 190.262087][ T5841] ? load_image+0x3b0/0x3b0 [ 190.266591][ T5841] ? __might_sleep+0xd0/0xd0 [ 190.271179][ T5841] ? __lock_acquire+0x7c50/0x7c50 [ 190.276200][ T5841] should_fail_ex+0x399/0x4d0 [ 190.280873][ T5841] should_failslab+0x5/0x20 [ 190.285368][ T5841] slab_pre_alloc_hook+0x59/0x310 [ 190.290382][ T5841] kmem_cache_alloc_node+0x5a/0x320 [ 190.295563][ T5841] ? __alloc_skb+0xfc/0x7e0 [ 190.300058][ T5841] __alloc_skb+0xfc/0x7e0 [ 190.304380][ T5841] ? netlink_autobind+0xda/0x300 [ 190.309307][ T5841] netlink_sendmsg+0x645/0xbc0 [ 190.314066][ T5841] ? netlink_getsockopt+0x540/0x540 [ 190.319264][ T5841] ? aa_sock_msg_perm+0x94/0x150 [ 190.324196][ T5841] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 190.329465][ T5841] ? security_socket_sendmsg+0x7c/0xa0 [ 190.334913][ T5841] ? netlink_getsockopt+0x540/0x540 [ 190.340099][ T5841] ____sys_sendmsg+0x59b/0x970 [ 190.344893][ T5841] ? __sys_sendmsg_sock+0x30/0x30 [ 190.349902][ T5841] ? __import_iovec+0x315/0x500 [ 190.354749][ T5841] ? import_iovec+0x6f/0xa0 [ 190.359246][ T5841] ___sys_sendmsg+0x21c/0x290 [ 190.363920][ T5841] ? __sys_sendmsg+0x270/0x270 [ 190.368683][ T5841] ? __lock_acquire+0x7c50/0x7c50 [ 190.373712][ T5841] ? __fdget+0x17c/0x200 [ 190.377947][ T5841] __se_sys_sendmsg+0x19e/0x270 [ 190.382790][ T5841] ? __x64_sys_sendmsg+0x80/0x80 [ 190.387722][ T5841] ? lockdep_hardirqs_on+0x94/0x140 [ 190.392911][ T5841] do_syscall_64+0x4c/0xa0 [ 190.397311][ T5841] ? clear_bhb_loop+0x60/0xb0 [ 190.401979][ T5841] ? clear_bhb_loop+0x60/0xb0 [ 190.406649][ T5841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.412529][ T5841] RIP: 0033:0x7f1db1f8f6c9 [ 190.416931][ T5841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.436521][ T5841] RSP: 002b:00007f1db2d8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.444930][ T5841] RAX: ffffffffffffffda RBX: 00007f1db21e5fa0 RCX: 00007f1db1f8f6c9 [ 190.452892][ T5841] RDX: 0000000000000800 RSI: 0000200000000340 RDI: 0000000000000003 [ 190.460850][ T5841] RBP: 00007f1db2d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 190.468806][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.476760][ T5841] R13: 00007f1db21e6038 R14: 00007f1db21e5fa0 R15: 00007fff3f2065d8 [ 190.484726][ T5841] [ 190.497698][ T5842] NILFS (loop1): invalid segment: Inconsistency found [ 190.524297][ T5842] NILFS (loop1): trying rollback from an earlier position [ 190.525300][ T5835] bridge0: port 3(dummy0) entered blocking state [ 190.539808][ T5835] bridge0: port 3(dummy0) entered forwarding state [ 190.623327][ T5842] NILFS (loop1): recovery complete [ 190.707479][ T5845] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.753444][ T5846] FAULT_INJECTION: forcing a failure. [ 190.753444][ T5846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.767328][ T5846] CPU: 0 PID: 5846 Comm: syz.4.392 Not tainted syzkaller #0 [ 190.774633][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.784688][ T5846] Call Trace: [ 190.787952][ T5846] [ 190.790867][ T5846] dump_stack_lvl+0x168/0x22e [ 190.795538][ T5846] ? show_regs_print_info+0x12/0x12 [ 190.800723][ T5846] ? load_image+0x3b0/0x3b0 [ 190.805221][ T5846] ? mark_lock+0x94/0x320 [ 190.809540][ T5846] ? __lock_acquire+0x12e5/0x7c50 [ 190.814564][ T5846] should_fail_ex+0x399/0x4d0 [ 190.819261][ T5846] strncpy_from_user+0x32/0x350 [ 190.824129][ T5846] strncpy_from_user_nofault+0x6d/0x140 [ 190.829676][ T5846] bpf_bprintf_prepare+0xba0/0x13d0 [ 190.834884][ T5846] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 190.840026][ T5846] bpf_trace_printk+0xd8/0x190 [ 190.844786][ T5846] ? bpf_probe_write_user+0xe0/0xe0 [ 190.849988][ T5846] bpf_prog_7c77c7e0f6645ad8+0x35/0x37 [ 190.855434][ T5846] bpf_trace_run2+0x1cd/0x3b0 [ 190.860101][ T5846] ? bpf_trace_run2+0xda/0x3b0 [ 190.864856][ T5846] ? bpf_trace_run1+0x3b0/0x3b0 [ 190.869707][ T5846] ? read_lock_is_recursive+0x10/0x10 [ 190.875078][ T5846] trace_contention_begin+0x123/0x170 [ 190.880439][ T5846] __mutex_lock+0x131/0xaf0 [ 190.884934][ T5846] ? __lock_acquire+0x7c50/0x7c50 [ 190.889947][ T5846] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 190.895919][ T5846] ? __fdget_pos+0x2ae/0x360 [ 190.900499][ T5846] ? lock_chain_count+0x20/0x20 [ 190.905339][ T5846] ? mutex_lock_nested+0x10/0x10 [ 190.910264][ T5846] ? __fget_files+0x28/0x4d0 [ 190.914843][ T5846] ? __fget_files+0x44a/0x4d0 [ 190.919518][ T5846] __fdget_pos+0x2ae/0x360 [ 190.923921][ T5846] ? ksys_read+0x71/0x240 [ 190.928244][ T5846] ksys_read+0x78/0x240 [ 190.932390][ T5846] ? lock_chain_count+0x20/0x20 [ 190.937231][ T5846] ? vfs_write+0x960/0x960 [ 190.941638][ T5846] ? lockdep_hardirqs_on+0x94/0x140 [ 190.946827][ T5846] do_syscall_64+0x4c/0xa0 [ 190.951229][ T5846] ? clear_bhb_loop+0x60/0xb0 [ 190.955895][ T5846] ? clear_bhb_loop+0x60/0xb0 [ 190.960558][ T5846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.966452][ T5846] RIP: 0033:0x7f1db1f8e0dc [ 190.970854][ T5846] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.990442][ T5846] RSP: 002b:00007f1db2d8a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.998842][ T5846] RAX: ffffffffffffffda RBX: 00007f1db21e5fa0 RCX: 00007f1db1f8e0dc [ 191.006802][ T5846] RDX: 000000000000000f RSI: 00007f1db2d8a0a0 RDI: 0000000000000004 [ 191.014759][ T5846] RBP: 00007f1db2d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 191.022714][ T5846] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 191.030673][ T5846] R13: 00007f1db21e6038 R14: 00007f1db21e5fa0 R15: 00007fff3f2065d8 [ 191.038728][ T5846] [ 191.041780][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.288945][ T5851] loop4: detected capacity change from 0 to 512 [ 192.336341][ T5851] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 192.402913][ T5851] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 192.478417][ T5835] tipc: Failed to remove unknown binding: 66,1,1/0:3565375284/3565375286 [ 192.490000][ T5851] EXT4-fs (loop4): 1 truncate cleaned up [ 192.539230][ T5851] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 192.587735][ T5835] tipc: Failed to remove unknown binding: 66,1,1/0:3565375284/3565375286 [ 192.652826][ T5851] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.393: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 192.791938][ T5856] loop2: detected capacity change from 0 to 8192 [ 192.967066][ T5856] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 192.980885][ T5856] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 192.994675][ T5856] REISERFS (device loop2): using ordered data mode [ 193.001624][ T5856] reiserfs: using flush barriers [ 193.015145][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 193.124281][ T5856] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.202966][ T5856] REISERFS (device loop2): checking transaction log (loop2) [ 193.317790][ T5856] REISERFS (device loop2): Using r5 hash to sort names [ 193.405417][ T5856] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 193.965256][ T5876] FAULT_INJECTION: forcing a failure. [ 193.965256][ T5876] name failslab, interval 1, probability 0, space 0, times 0 [ 194.060493][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.065630][ T5876] CPU: 1 PID: 5876 Comm: syz.2.399 Not tainted syzkaller #0 [ 194.066845][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.074023][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.090324][ T5876] Call Trace: [ 194.093609][ T5876] [ 194.096543][ T5876] dump_stack_lvl+0x168/0x22e [ 194.101233][ T5876] ? show_regs_print_info+0x12/0x12 [ 194.106438][ T5876] ? load_image+0x3b0/0x3b0 [ 194.110950][ T5876] ? __might_sleep+0xd0/0xd0 [ 194.115554][ T5876] ? __lock_acquire+0x7c50/0x7c50 [ 194.120589][ T5876] should_fail_ex+0x399/0x4d0 [ 194.125280][ T5876] should_failslab+0x5/0x20 [ 194.129792][ T5876] slab_pre_alloc_hook+0x59/0x310 [ 194.134830][ T5876] kmem_cache_alloc_node+0x5a/0x320 [ 194.140029][ T5876] ? __alloc_skb+0xfc/0x7e0 [ 194.144546][ T5876] __alloc_skb+0xfc/0x7e0 [ 194.148895][ T5876] ? netlink_autobind+0xda/0x300 [ 194.153845][ T5876] netlink_sendmsg+0x645/0xbc0 [ 194.158626][ T5876] ? netlink_getsockopt+0x540/0x540 [ 194.163829][ T5876] ? aa_sock_msg_perm+0x94/0x150 [ 194.168777][ T5876] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 194.174070][ T5876] ? security_socket_sendmsg+0x7c/0xa0 [ 194.179537][ T5876] ? netlink_getsockopt+0x540/0x540 [ 194.184742][ T5876] ____sys_sendmsg+0x59b/0x970 [ 194.189519][ T5876] ? __sys_sendmsg_sock+0x30/0x30 [ 194.194547][ T5876] ? __import_iovec+0x315/0x500 [ 194.199414][ T5876] ? import_iovec+0x6f/0xa0 [ 194.203926][ T5876] ___sys_sendmsg+0x21c/0x290 [ 194.208613][ T5876] ? __sys_sendmsg+0x270/0x270 [ 194.213400][ T5876] ? __lock_acquire+0x7c50/0x7c50 [ 194.218445][ T5876] ? __fdget+0x17c/0x200 [ 194.222700][ T5876] __se_sys_sendmsg+0x19e/0x270 [ 194.227567][ T5876] ? __x64_sys_sendmsg+0x80/0x80 [ 194.232527][ T5876] ? lockdep_hardirqs_on+0x94/0x140 [ 194.237740][ T5876] do_syscall_64+0x4c/0xa0 [ 194.242163][ T5876] ? clear_bhb_loop+0x60/0xb0 [ 194.246845][ T5876] ? clear_bhb_loop+0x60/0xb0 [ 194.251538][ T5876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.257613][ T5876] RIP: 0033:0x7fcbc7b8f6c9 [ 194.262037][ T5876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.281665][ T5876] RSP: 002b:00007fcbc5df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.290105][ T5876] RAX: ffffffffffffffda RBX: 00007fcbc7de5fa0 RCX: 00007fcbc7b8f6c9 [ 194.298099][ T5876] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 194.306098][ T5876] RBP: 00007fcbc5df6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.314082][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.322066][ T5876] R13: 00007fcbc7de6038 R14: 00007fcbc7de5fa0 R15: 00007ffd1c731928 [ 194.330069][ T5876] [ 194.896763][ T5884] netlink: 'syz.0.403': attribute type 1 has an invalid length. [ 195.255977][ T5866] loop4: detected capacity change from 0 to 32768 [ 195.293016][ T5866] ERROR: (device loop4): diAllocBit: iag inconsistent [ 195.293016][ T5866] [ 195.317004][ T5866] ialloc: diAlloc returned -5! [ 195.427492][ T5893] loop1: detected capacity change from 0 to 4096 [ 195.441948][ T5893] __ntfs_warning: 33 callbacks suppressed [ 195.441965][ T5893] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 195.505860][ T5893] ntfs: volume version 3.1. [ 195.612661][ T4633] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 195.709273][ T5895] sch_fq: defrate 9 ignored. [ 195.850138][ T5897] device batadv_slave_1 entered promiscuous mode [ 195.856869][ T5904] loop0: detected capacity change from 0 to 512 [ 195.867332][ T5904] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 195.887396][ T5895] device veth1_virt_wifi entered promiscuous mode [ 195.902298][ T5894] device veth1_virt_wifi left promiscuous mode [ 195.937232][ T5904] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 195.964486][ T5894] device batadv_slave_1 left promiscuous mode [ 195.973366][ T5904] System zones: 1-12 [ 196.016528][ T5904] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.410: corrupted in-inode xattr [ 196.052722][ T5904] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.410: couldn't read orphan inode 15 (err -117) [ 196.069069][ T5904] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 196.090660][ T5904] FAULT_INJECTION: forcing a failure. [ 196.090660][ T5904] name failslab, interval 1, probability 0, space 0, times 0 [ 196.133734][ T5910] loop2: detected capacity change from 0 to 128 [ 196.144316][ T5910] hpfs: bad mount options. [ 196.150390][ T5904] CPU: 0 PID: 5904 Comm: syz.0.410 Not tainted syzkaller #0 [ 196.157700][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.167762][ T5904] Call Trace: [ 196.171047][ T5904] [ 196.173981][ T5904] dump_stack_lvl+0x168/0x22e [ 196.178676][ T5904] ? show_regs_print_info+0x12/0x12 [ 196.183894][ T5904] ? load_image+0x3b0/0x3b0 [ 196.188421][ T5904] ? __might_sleep+0xd0/0xd0 [ 196.193028][ T5904] ? __lock_acquire+0x7c50/0x7c50 [ 196.198074][ T5904] should_fail_ex+0x399/0x4d0 [ 196.202772][ T5904] should_failslab+0x5/0x20 [ 196.207288][ T5904] slab_pre_alloc_hook+0x59/0x310 [ 196.212319][ T5904] ? prepend_path+0xa6b/0xc20 [ 196.217008][ T5904] ? tomoyo_encode+0x27e/0x540 [ 196.221789][ T5904] __kmem_cache_alloc_node+0x4f/0x260 [ 196.227176][ T5904] ? tomoyo_encode+0x27e/0x540 [ 196.231948][ T5904] __kmalloc+0xa0/0x240 [ 196.236121][ T5904] tomoyo_encode+0x27e/0x540 [ 196.240726][ T5904] tomoyo_realpath_from_path+0x58e/0x5d0 [ 196.246382][ T5904] tomoyo_path_number_perm+0x1e3/0x600 [ 196.251849][ T5904] ? tomoyo_path_number_perm+0x1b6/0x600 [ 196.257485][ T5904] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 196.262936][ T5904] ? ksys_write+0x1bd/0x240 [ 196.267433][ T5904] ? common_file_perm+0x171/0x1c0 [ 196.272472][ T5904] ? __fget_files+0x28/0x4d0 [ 196.277062][ T5904] security_file_ioctl+0x6c/0xa0 [ 196.282019][ T5904] __se_sys_ioctl+0x48/0x170 [ 196.286600][ T5904] do_syscall_64+0x4c/0xa0 [ 196.291017][ T5904] ? clear_bhb_loop+0x60/0xb0 [ 196.295699][ T5904] ? clear_bhb_loop+0x60/0xb0 [ 196.300378][ T5904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.306281][ T5904] RIP: 0033:0x7f8e7078f6c9 [ 196.310695][ T5904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.330295][ T5904] RSP: 002b:00007f8e716c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.338716][ T5904] RAX: ffffffffffffffda RBX: 00007f8e709e5fa0 RCX: 00007f8e7078f6c9 [ 196.346694][ T5904] RDX: 0000200000000140 RSI: 00000000c020662a RDI: 0000000000000004 [ 196.354658][ T5904] RBP: 00007f8e716c7090 R08: 0000000000000000 R09: 0000000000000000 [ 196.362620][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.370585][ T5904] R13: 00007f8e709e6038 R14: 00007f8e709e5fa0 R15: 00007ffd3be92538 [ 196.378560][ T5904] [ 196.390863][ T5904] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.415817][ T4410] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.447319][ T5912] loop4: detected capacity change from 0 to 512 [ 196.509042][ T5912] EXT4-fs (loop4): Test dummy encryption mode enabled [ 196.535686][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 196.546468][ T5912] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.413: inline data xattr refers to an external xattr inode [ 196.574489][ T5912] EXT4-fs (loop4): Remounting filesystem read-only [ 196.581111][ T5912] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.413: couldn't read orphan inode 12 (err -117) [ 196.698641][ T5912] EXT4-fs (loop4): Remounting filesystem read-only [ 196.724166][ T5912] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.846663][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 196.957901][ T5915] loop2: detected capacity change from 0 to 8192 [ 197.149685][ T5915] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 197.175093][ T5915] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 197.184917][ T5915] REISERFS (device loop2): using ordered data mode [ 197.239702][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.416'. [ 197.775745][ T5915] reiserfs: using flush barriers [ 197.892412][ T5917] loop0: detected capacity change from 0 to 32768 [ 197.905709][ T5915] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 197.910002][ T5925] loop3: detected capacity change from 0 to 2048 [ 197.958042][ T5915] REISERFS (device loop2): checking transaction log (loop2) [ 197.987005][ T5915] REISERFS (device loop2): Using r5 hash to sort names [ 198.000051][ T5908] loop1: detected capacity change from 0 to 32768 [ 198.002760][ T5925] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 198.048162][ T5915] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 198.068422][ T5908] [ 198.068422][ T5908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.068422][ T5908] [ 198.108748][ T5925] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.132201][ T5917] XFS (loop0): Mounting V5 Filesystem [ 198.146803][ T5930] loop4: detected capacity change from 0 to 512 [ 198.165645][ T5908] [ 198.165645][ T5908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.165645][ T5908] [ 198.218016][ T5915] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 198.235295][ T5917] XFS (loop0): Ending clean mount [ 198.247527][ T5908] [ 198.247527][ T5908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.247527][ T5908] [ 198.258773][ T5930] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 198.269892][ T5908] [ 198.269892][ T5908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.269892][ T5908] [ 198.281175][ T5908] [ 198.281175][ T5908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.281175][ T5908] [ 198.310363][ T5930] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 198.314704][ T106] [ 198.314704][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.314704][ T106] [ 198.352453][ T5930] EXT4-fs (loop4): 1 truncate cleaned up [ 198.360528][ T5930] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.404506][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.418'. [ 198.434775][ T5908] [ 198.434775][ T5908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.434775][ T5908] [ 198.530150][ T5908] [ 198.530150][ T5908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.530150][ T5908] [ 198.612915][ T5908] [ 198.612915][ T5908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.612915][ T5908] [ 198.727552][ T5908] [ 198.727552][ T5908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.727552][ T5908] [ 198.806665][ T4268] XFS (loop0): Unmounting Filesystem [ 198.874677][ T106] [ 198.874677][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.874677][ T106] [ 198.992235][ T4265] [ 198.992235][ T4265] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.992235][ T4265] [ 199.010880][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 199.074670][ T4265] [ 199.074670][ T4265] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.074670][ T4265] [ 199.200938][ T5945] loop4: detected capacity change from 0 to 764 [ 199.221882][ T5948] smc: net device bond0 applied user defined pnetid SYZ0 [ 199.296506][ T5945] rock: directory entry would overflow storage [ 199.344327][ T5945] rock: sig=0x4654, size=5, remaining=4 [ 199.397484][ T5945] isofs: Unable to find the ".." directory for NFS. [ 199.475522][ T5949] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 199.771834][ T5953] loop4: detected capacity change from 0 to 2048 [ 199.847333][ T5953] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 199.907863][ T5953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.513091][ T5969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.428'. [ 201.160778][ T5948] loop3: detected capacity change from 0 to 40427 [ 201.228845][ T5974] loop4: detected capacity change from 0 to 512 [ 201.257997][ T5948] F2FS-fs (loop3): inline encryption not supported [ 201.273683][ T5974] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 201.279694][ T5948] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 201.307094][ T5948] F2FS-fs (loop3): Unrecognized mount option "disc" or missing value [ 201.351039][ T5974] EXT4-fs (loop4): 1 truncate cleaned up [ 201.409995][ T5974] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 201.670430][ T5981] loop3: detected capacity change from 0 to 256 [ 201.718289][ T5981] exfat: Deprecated parameter 'utf8' [ 201.761549][ T5983] FAULT_INJECTION: forcing a failure. [ 201.761549][ T5983] name failslab, interval 1, probability 0, space 0, times 0 [ 201.775582][ T5983] CPU: 1 PID: 5983 Comm: syz.4.431 Not tainted syzkaller #0 [ 201.782877][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.792936][ T5983] Call Trace: [ 201.796217][ T5983] [ 201.799147][ T5983] dump_stack_lvl+0x168/0x22e [ 201.803834][ T5983] ? show_regs_print_info+0x12/0x12 [ 201.809036][ T5983] ? load_image+0x3b0/0x3b0 [ 201.813550][ T5983] ? __might_sleep+0xd0/0xd0 [ 201.818151][ T5983] ? __lock_acquire+0x7c50/0x7c50 [ 201.823179][ T5983] ? preempt_schedule+0xa7/0xb0 [ 201.828042][ T5983] should_fail_ex+0x399/0x4d0 [ 201.832734][ T5983] should_failslab+0x5/0x20 [ 201.837241][ T5983] slab_pre_alloc_hook+0x59/0x310 [ 201.842277][ T5983] kmem_cache_alloc+0x56/0x2f0 [ 201.847046][ T5983] ? ext4_mb_new_blocks+0x56a/0x4720 [ 201.852339][ T5983] ext4_mb_new_blocks+0x56a/0x4720 [ 201.857482][ T5983] ? ext4_get_branch+0x5c0/0x730 [ 201.862425][ T5983] ? ext4_mb_pa_callback+0xd0/0xd0 [ 201.867545][ T5983] ? ext4_inode_to_goal_block+0x2be/0x450 [ 201.873272][ T5983] ext4_ind_map_blocks+0xe2a/0x21d0 [ 201.878495][ T5983] ? get_orlov_stats+0x4c0/0x4c0 [ 201.883462][ T5983] ? up_read+0x20/0x20 [ 201.887545][ T5983] ext4_map_blocks+0x970/0x1b60 [ 201.892400][ T5983] ? __might_sleep+0xd0/0xd0 [ 201.897009][ T5983] ? ext4_issue_zeroout+0x250/0x250 [ 201.902217][ T5983] ? ext4_journal_check_start+0x17e/0x240 [ 201.907949][ T5983] ? mark_lock+0x94/0x320 [ 201.912287][ T5983] ext4_iomap_begin+0x7d2/0xae0 [ 201.917163][ T5983] ? ext4_alloc_da_blocks+0x2c0/0x2c0 [ 201.922547][ T5983] ? iomap_iter+0x2c8/0x1040 [ 201.927152][ T5983] ? ext4_alloc_da_blocks+0x2c0/0x2c0 [ 201.932530][ T5983] iomap_iter+0x6c6/0x1040 [ 201.936957][ T5983] ? blk_start_plug+0x94/0x110 [ 201.941729][ T5983] __iomap_dio_rw+0xcba/0x1dd0 [ 201.946518][ T5983] ? iomap_dio_complete_work+0x70/0x70 [ 201.952000][ T5983] ? __mark_inode_dirty+0x7f4/0xe90 [ 201.957202][ T5983] ? __mnt_drop_write_file+0xbc/0xf0 [ 201.962502][ T5983] ? ext4_fc_replay_link_internal+0x280/0x280 [ 201.968573][ T5983] ? ext4_journal_check_start+0x17e/0x240 [ 201.974304][ T5983] iomap_dio_rw+0x41/0xa0 [ 201.978634][ T5983] ? ext4_file_write_iter+0x941/0x16e0 [ 201.984100][ T5983] ext4_file_write_iter+0x1262/0x16e0 [ 201.989478][ T5983] ? ext4_file_write_iter+0x941/0x16e0 [ 201.994955][ T5983] ? ext4_file_read_iter+0x650/0x650 [ 202.000241][ T5983] ? end_current_label_crit_section+0x14b/0x170 [ 202.006490][ T5983] ? common_file_perm+0x171/0x1c0 [ 202.011534][ T5983] vfs_write+0x44c/0x960 [ 202.015792][ T5983] ? file_end_write+0x250/0x250 [ 202.020664][ T5983] ? __fdget_pos+0x2ae/0x360 [ 202.025258][ T5983] ? ksys_write+0x71/0x240 [ 202.029685][ T5983] ksys_write+0x143/0x240 [ 202.034028][ T5983] ? __ia32_sys_read+0x80/0x80 [ 202.038801][ T5983] ? lockdep_hardirqs_on+0x94/0x140 [ 202.044008][ T5983] do_syscall_64+0x4c/0xa0 [ 202.048425][ T5983] ? clear_bhb_loop+0x60/0xb0 [ 202.053102][ T5983] ? clear_bhb_loop+0x60/0xb0 [ 202.057782][ T5983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.063676][ T5983] RIP: 0033:0x7f1db1f8f6c9 [ 202.068096][ T5983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.087707][ T5983] RSP: 002b:00007f1db2d48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.092141][ T5981] exfat: Deprecated parameter 'utf8' [ 202.096121][ T5983] RAX: ffffffffffffffda RBX: 00007f1db21e6180 RCX: 00007f1db1f8f6c9 [ 202.109473][ T5983] RDX: 00000000175d9003 RSI: 0000200000000200 RDI: 0000000000000005 [ 202.117459][ T5983] RBP: 00007f1db2d48090 R08: 0000000000000000 R09: 0000000000000000 [ 202.123327][ T5981] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 202.125418][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.125432][ T5983] R13: 00007f1db21e6218 R14: 00007f1db21e6180 R15: 00007fff3f2065d8 [ 202.125459][ T5983] [ 202.357319][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 202.446578][ T5987] loop4: detected capacity change from 0 to 512 [ 202.463269][ T5987] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.476604][ T5987] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 202.536685][ T5987] EXT4-fs (loop4): 1 truncate cleaned up [ 202.549755][ T5976] loop0: detected capacity change from 0 to 32768 [ 202.562237][ T5987] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 202.618227][ T5976] [ 202.618227][ T5976] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.618227][ T5976] [ 202.702548][ T5976] [ 202.702548][ T5976] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.702548][ T5976] [ 202.756800][ T5976] [ 202.756800][ T5976] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.756800][ T5976] [ 202.774029][ T5976] [ 202.774029][ T5976] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.774029][ T5976] [ 202.787855][ T5976] [ 202.787855][ T5976] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.787855][ T5976] [ 202.806079][ T106] [ 202.806079][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.806079][ T106] [ 202.818513][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 202.821600][ T5995] [ 202.821600][ T5995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.821600][ T5995] [ 202.835799][ T5995] [ 202.835799][ T5995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.835799][ T5995] [ 202.846711][ T5995] [ 202.846711][ T5995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.846711][ T5995] [ 202.860296][ T5995] [ 202.860296][ T5995] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.860296][ T5995] [ 202.914555][ T106] [ 202.914555][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.914555][ T106] [ 202.990965][ T4268] [ 202.990965][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 202.990965][ T4268] [ 203.004679][ T4268] [ 203.004679][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 203.004679][ T4268] [ 203.326114][ T6012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.441'. [ 204.031906][ T6016] loop4: detected capacity change from 0 to 2048 [ 204.145131][ T6016] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 204.172458][ T6016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.274165][ T5033] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 204.274182][ T6024] loop2: detected capacity change from 0 to 256 [ 204.293385][ T6024] FAT-fs (loop2): Directory bread(block 64) failed [ 204.304264][ T6024] FAT-fs (loop2): Directory bread(block 65) failed [ 204.310863][ T6024] FAT-fs (loop2): Directory bread(block 66) failed [ 204.317453][ T6024] FAT-fs (loop2): Directory bread(block 67) failed [ 204.324033][ T6024] FAT-fs (loop2): Directory bread(block 68) failed [ 204.329610][ T6016] FAULT_INJECTION: forcing a failure. [ 204.329610][ T6016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.330577][ T6024] FAT-fs (loop2): Directory bread(block 69) failed [ 204.345088][ T6016] CPU: 0 PID: 6016 Comm: syz.4.443 Not tainted syzkaller #0 [ 204.351589][ T6024] FAT-fs (loop2): Directory bread(block 70) failed [ 204.358761][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 204.358772][ T6016] Call Trace: [ 204.358778][ T6016] [ 204.358785][ T6016] dump_stack_lvl+0x168/0x22e [ 204.358812][ T6016] ? show_regs_print_info+0x12/0x12 [ 204.365326][ T6024] FAT-fs (loop2): Directory bread(block 71) failed [ 204.375313][ T6016] ? load_image+0x3b0/0x3b0 [ 204.375336][ T6016] ? mark_lock+0x94/0x320 [ 204.378682][ T6024] FAT-fs (loop2): Directory bread(block 72) failed [ 204.381519][ T6016] ? __lock_acquire+0x12e5/0x7c50 [ 204.386468][ T6024] FAT-fs (loop2): Directory bread(block 73) failed [ 204.391599][ T6016] should_fail_ex+0x399/0x4d0 [ 204.429609][ T6016] strncpy_from_user+0x32/0x350 [ 204.434595][ T6016] strncpy_from_user_nofault+0x6d/0x140 [ 204.440163][ T6016] bpf_bprintf_prepare+0xba0/0x13d0 [ 204.445391][ T6016] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 204.450522][ T6016] ? tomoyo_path_number_perm+0x4ae/0x600 [ 204.456165][ T6016] ? __se_sys_ioctl+0x48/0x170 [ 204.460943][ T6016] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.467034][ T6016] bpf_trace_printk+0xd8/0x190 [ 204.471807][ T6016] ? bpf_probe_write_user+0xe0/0xe0 [ 204.477089][ T6016] bpf_prog_7c77c7e0f6645ad8+0x35/0x37 [ 204.482548][ T6016] bpf_trace_run2+0x1cd/0x3b0 [ 204.487227][ T6016] ? bpf_trace_run2+0xda/0x3b0 [ 204.492096][ T6016] ? bpf_trace_run1+0x3b0/0x3b0 [ 204.497003][ T6016] ? read_lock_is_recursive+0x10/0x10 [ 204.502378][ T6016] ? verify_lock_unused+0x140/0x140 [ 204.507573][ T6016] trace_contention_begin+0x123/0x170 [ 204.513070][ T6016] __mutex_lock+0x131/0xaf0 [ 204.517596][ T6016] ? tomoyo_path_number_perm+0x503/0x600 [ 204.523230][ T6016] ? end_current_label_crit_section+0x170/0x170 [ 204.529480][ T6016] ? udf_relocate_blocks+0x5a/0xba0 [ 204.534678][ T6016] ? mutex_lock_nested+0x10/0x10 [ 204.539664][ T6016] udf_relocate_blocks+0x5a/0xba0 [ 204.544686][ T6016] ? __lock_acquire+0x7c50/0x7c50 [ 204.549710][ T6016] ? __might_fault+0xc2/0x120 [ 204.554373][ T6016] ? __might_fault+0xa6/0x120 [ 204.559041][ T6016] udf_ioctl+0x489/0x5c0 [ 204.563280][ T6016] ? udf_adinicb_direct_IO+0x10/0x10 [ 204.568562][ T6016] ? bpf_lsm_file_ioctl+0x5/0x10 [ 204.573495][ T6016] ? security_file_ioctl+0x7c/0xa0 [ 204.578599][ T6016] ? udf_adinicb_direct_IO+0x10/0x10 [ 204.583875][ T6016] __se_sys_ioctl+0xfa/0x170 [ 204.588457][ T6016] do_syscall_64+0x4c/0xa0 [ 204.592861][ T6016] ? clear_bhb_loop+0x60/0xb0 [ 204.597527][ T6016] ? clear_bhb_loop+0x60/0xb0 [ 204.602190][ T6016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.608068][ T6016] RIP: 0033:0x7f1db1f8f6c9 [ 204.612477][ T6016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.632161][ T6016] RSP: 002b:00007f1db2d8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.640563][ T6016] RAX: ffffffffffffffda RBX: 00007f1db21e5fa0 RCX: 00007f1db1f8f6c9 [ 204.648544][ T6016] RDX: 0000200000000080 RSI: 00000000c0086c43 RDI: 0000000000000005 [ 204.656502][ T6016] RBP: 00007f1db2d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 204.664456][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.672415][ T6016] R13: 00007f1db21e6038 R14: 00007f1db21e5fa0 R15: 00007fff3f2065d8 [ 204.680381][ T6016] [ 204.804222][ T5033] usb 4-1: Using ep0 maxpacket: 16 [ 204.813498][ T5033] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 204.837745][ T5033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.871701][ T5033] usb 4-1: Product: syz [ 204.914511][ T5033] usb 4-1: Manufacturer: syz [ 204.919157][ T5033] usb 4-1: SerialNumber: syz [ 205.529052][ T4312] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 205.727304][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.768265][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.813690][ T4312] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 205.889220][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.970220][ T4312] usb 1-1: config 0 descriptor?? [ 206.147221][ T5033] usb 4-1: config 0 descriptor?? [ 206.387837][ T4312] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 206.449228][ T4312] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input6 [ 206.609871][ T6031] loop0: detected capacity change from 0 to 764 [ 206.655595][ T4312] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 206.710074][ T5033] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 206.727006][ T5033] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 206.749984][ T6031] rock: directory entry would overflow storage [ 206.758459][ T5033] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 206.766938][ T6031] rock: sig=0x4654, size=5, remaining=4 [ 206.809541][ T5033] usb 4-1: media controller created [ 206.994563][ T5033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.694208][ T4312] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 207.894434][ T5033] zl10353_read_register: readreg error (reg=127, ret==0) [ 207.901540][ T5033] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 207.944236][ T5033] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 208.006960][ T5033] usb 4-1: USB disconnect, device number 20 [ 208.060969][ T6039] loop4: detected capacity change from 0 to 32768 [ 208.078550][ T5033] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 208.100072][ T6039] [ 208.100072][ T6039] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.100072][ T6039] [ 208.150644][ T6039] [ 208.150644][ T6039] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.150644][ T6039] [ 208.189492][ T6039] [ 208.189492][ T6039] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.189492][ T6039] [ 208.215171][ T6039] [ 208.215171][ T6039] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.215171][ T6039] [ 208.308060][ T6039] [ 208.308060][ T6039] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.308060][ T6039] [ 208.380007][ T106] [ 208.380007][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.380007][ T106] [ 208.416583][ T6054] [ 208.416583][ T6054] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.416583][ T6054] [ 208.492197][ T6054] [ 208.492197][ T6054] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 208.492197][ T6054] [ 208.547161][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.454'. [ 209.058741][ T4848] usb 1-1: USB disconnect, device number 5 [ 209.064923][ T6054] [ 209.064923][ T6054] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.064923][ T6054] [ 209.174208][ T6054] [ 209.174208][ T6054] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.174208][ T6054] [ 209.221917][ T106] [ 209.221917][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.221917][ T106] [ 209.349602][ T4269] [ 209.349602][ T4269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.349602][ T4269] [ 209.389319][ T4269] [ 209.389319][ T4269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.389319][ T4269] [ 209.596607][ T6073] FAULT_INJECTION: forcing a failure. [ 209.596607][ T6073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.639040][ T6073] CPU: 1 PID: 6073 Comm: syz.3.459 Not tainted syzkaller #0 [ 209.646376][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.656442][ T6073] Call Trace: [ 209.659727][ T6073] [ 209.662660][ T6073] dump_stack_lvl+0x168/0x22e [ 209.667353][ T6073] ? show_regs_print_info+0x12/0x12 [ 209.672561][ T6073] ? load_image+0x3b0/0x3b0 [ 209.677090][ T6073] ? __lock_acquire+0x7c50/0x7c50 [ 209.682139][ T6073] should_fail_ex+0x399/0x4d0 [ 209.686856][ T6073] _copy_from_user+0x2c/0x170 [ 209.691553][ T6073] ucma_resolve_ip+0x97/0x280 [ 209.696244][ T6073] ? __lock_acquire+0x7c50/0x7c50 [ 209.701282][ T6073] ? ucma_bind_ip+0x230/0x230 [ 209.705974][ T6073] ? __might_fault+0xc2/0x120 [ 209.710656][ T6073] ? __might_fault+0xa6/0x120 [ 209.715361][ T6073] ucma_write+0x248/0x2e0 [ 209.719712][ T6073] ? ucma_get_global_nl_info+0x70/0x70 [ 209.725184][ T6073] ? common_file_perm+0x171/0x1c0 [ 209.730222][ T6073] ? fsnotify_perm+0x5a/0x550 [ 209.734925][ T6073] ? security_file_permission+0x75/0xa0 [ 209.740484][ T6073] do_iter_write+0x497/0xaf0 [ 209.745091][ T6073] ? vfs_iter_write+0xa0/0xa0 [ 209.749776][ T6073] ? __import_iovec+0x315/0x500 [ 209.754646][ T6073] ? import_iovec+0x6f/0xa0 [ 209.759163][ T6073] do_writev+0x24e/0x410 [ 209.763425][ T6073] ? do_readv+0x3e0/0x3e0 [ 209.767776][ T6073] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 209.773768][ T6073] ? lock_chain_count+0x20/0x20 [ 209.778636][ T6073] ? lockdep_hardirqs_on+0x94/0x140 [ 209.783845][ T6073] do_syscall_64+0x4c/0xa0 [ 209.788269][ T6073] ? clear_bhb_loop+0x60/0xb0 [ 209.792951][ T6073] ? clear_bhb_loop+0x60/0xb0 [ 209.797630][ T6073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.803523][ T6073] RIP: 0033:0x7f18db98f6c9 [ 209.807940][ T6073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.827553][ T6073] RSP: 002b:00007f18dc8b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 209.835978][ T6073] RAX: ffffffffffffffda RBX: 00007f18dbbe5fa0 RCX: 00007f18db98f6c9 [ 209.843957][ T6073] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000a [ 209.851930][ T6073] RBP: 00007f18dc8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 209.859911][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.867885][ T6073] R13: 00007f18dbbe6038 R14: 00007f18dbbe5fa0 R15: 00007ffc3675fc58 [ 209.875878][ T6073] [ 209.905797][ T6071] netlink: 'syz.1.458': attribute type 1 has an invalid length. [ 210.312742][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 210.364164][ T5033] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 211.234164][ T5033] usb 1-1: device descriptor read/64, error -71 [ 211.451111][ T6092] wireguard: wg1: Could not create IPv4 socket [ 211.557234][ T5033] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 211.764420][ T5033] usb 1-1: device descriptor read/64, error -71 [ 211.906364][ T5033] usb usb1-port1: attempt power cycle [ 212.163550][ T6097] loop2: detected capacity change from 256 to 0 [ 212.774242][ T5033] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 212.846010][ T5033] usb 1-1: device descriptor read/8, error -71 [ 213.504243][ T5033] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 213.566048][ T5033] usb 1-1: device descriptor read/8, error -71 [ 213.596730][ T6100] loop4: detected capacity change from 0 to 32768 [ 213.611847][ T6100] [ 213.611847][ T6100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.611847][ T6100] [ 213.661251][ T6100] [ 213.661251][ T6100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.661251][ T6100] [ 213.684494][ T5033] usb usb1-port1: unable to enumerate USB device [ 213.820168][ T6100] [ 213.820168][ T6100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.820168][ T6100] [ 213.839071][ T6100] [ 213.839071][ T6100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.839071][ T6100] [ 213.864834][ T6100] [ 213.864834][ T6100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.864834][ T6100] [ 213.895494][ T6127] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 214.294320][ T107] [ 214.294320][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.294320][ T107] [ 214.433203][ T4269] [ 214.433203][ T4269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.433203][ T4269] [ 214.460728][ T4269] [ 214.460728][ T4269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 214.460728][ T4269] [ 214.707394][ T26] audit: type=1326 audit(1762844193.972:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.0.480" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e7078f6c9 code=0x0 [ 215.075960][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.485'. [ 216.083570][ T6163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.486'. [ 216.095338][ T6164] mmap: syz.4.488 (6164) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 216.299593][ T6176] FAULT_INJECTION: forcing a failure. [ 216.299593][ T6176] name failslab, interval 1, probability 0, space 0, times 0 [ 216.356725][ T6176] CPU: 0 PID: 6176 Comm: syz.3.489 Not tainted syzkaller #0 [ 216.364061][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.374129][ T6176] Call Trace: [ 216.377423][ T6176] [ 216.380362][ T6176] dump_stack_lvl+0x168/0x22e [ 216.385062][ T6176] ? show_regs_print_info+0x12/0x12 [ 216.390276][ T6176] ? load_image+0x3b0/0x3b0 [ 216.394806][ T6176] ? __might_sleep+0xd0/0xd0 [ 216.399420][ T6176] ? __lock_acquire+0x7c50/0x7c50 [ 216.404463][ T6176] should_fail_ex+0x399/0x4d0 [ 216.409159][ T6176] should_failslab+0x5/0x20 [ 216.413677][ T6176] slab_pre_alloc_hook+0x59/0x310 [ 216.418718][ T6176] kmem_cache_alloc_node+0x5a/0x320 [ 216.423924][ T6176] ? __alloc_skb+0xfc/0x7e0 [ 216.428446][ T6176] __alloc_skb+0xfc/0x7e0 [ 216.432786][ T6176] ? netlink_autobind+0xda/0x300 [ 216.437741][ T6176] netlink_sendmsg+0x645/0xbc0 [ 216.442526][ T6176] ? netlink_getsockopt+0x540/0x540 [ 216.447738][ T6176] ? aa_sock_msg_perm+0x94/0x150 [ 216.452686][ T6176] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 216.457972][ T6176] ? security_socket_sendmsg+0x7c/0xa0 [ 216.463447][ T6176] ? netlink_getsockopt+0x540/0x540 [ 216.468654][ T6176] ____sys_sendmsg+0x59b/0x970 [ 216.473444][ T6176] ? __sys_sendmsg_sock+0x30/0x30 [ 216.478478][ T6176] ? __import_iovec+0x315/0x500 [ 216.483348][ T6176] ? import_iovec+0x6f/0xa0 [ 216.487860][ T6176] ___sys_sendmsg+0x21c/0x290 [ 216.492549][ T6176] ? __sys_sendmsg+0x270/0x270 [ 216.497334][ T6176] ? __lock_acquire+0x7c50/0x7c50 [ 216.502381][ T6176] ? __fdget+0x17c/0x200 [ 216.506650][ T6176] __se_sys_sendmsg+0x19e/0x270 [ 216.511516][ T6176] ? __x64_sys_sendmsg+0x80/0x80 [ 216.516477][ T6176] ? lockdep_hardirqs_on+0x94/0x140 [ 216.521696][ T6176] do_syscall_64+0x4c/0xa0 [ 216.526133][ T6176] ? clear_bhb_loop+0x60/0xb0 [ 216.530818][ T6176] ? clear_bhb_loop+0x60/0xb0 [ 216.535504][ T6176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.541404][ T6176] RIP: 0033:0x7f18db98f6c9 [ 216.545825][ T6176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.565482][ T6176] RSP: 002b:00007f18dc8b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.573913][ T6176] RAX: ffffffffffffffda RBX: 00007f18dbbe5fa0 RCX: 00007f18db98f6c9 [ 216.581895][ T6176] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 216.589876][ T6176] RBP: 00007f18dc8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 216.597856][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.605832][ T6176] R13: 00007f18dbbe6038 R14: 00007f18dbbe5fa0 R15: 00007ffc3675fc58 [ 216.613830][ T6176] [ 216.724380][ T4723] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 216.798739][ T6183] FAULT_INJECTION: forcing a failure. [ 216.798739][ T6183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.813202][ T6183] CPU: 0 PID: 6183 Comm: syz.3.491 Not tainted syzkaller #0 [ 216.820512][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.830577][ T6183] Call Trace: [ 216.833865][ T6183] [ 216.836869][ T6183] dump_stack_lvl+0x168/0x22e [ 216.841569][ T6183] ? show_regs_print_info+0x12/0x12 [ 216.846785][ T6183] ? load_image+0x3b0/0x3b0 [ 216.851301][ T6183] ? __lock_acquire+0x7c50/0x7c50 [ 216.856340][ T6183] ? snprintf+0xd7/0x120 [ 216.860601][ T6183] should_fail_ex+0x399/0x4d0 [ 216.865304][ T6183] _copy_to_user+0x2c/0x130 [ 216.869822][ T6183] simple_read_from_buffer+0xe3/0x150 [ 216.875216][ T6183] proc_fail_nth_read+0x19a/0x210 [ 216.880259][ T6183] ? proc_fault_inject_write+0x2f0/0x2f0 [ 216.885906][ T6183] ? fsnotify_perm+0x248/0x550 [ 216.890764][ T6183] ? proc_fault_inject_write+0x2f0/0x2f0 [ 216.896421][ T6183] vfs_read+0x2c0/0x920 [ 216.900596][ T6183] ? kernel_read+0x1e0/0x1e0 [ 216.905202][ T6183] ? __fget_files+0x28/0x4d0 [ 216.909807][ T6183] ? __fget_files+0x44a/0x4d0 [ 216.914505][ T6183] ? __fdget_pos+0x2ae/0x360 [ 216.919114][ T6183] ? ksys_read+0x71/0x240 [ 216.923459][ T6183] ksys_read+0x143/0x240 [ 216.927715][ T6183] ? vfs_write+0x960/0x960 [ 216.932143][ T6183] ? lockdep_hardirqs_on+0x94/0x140 [ 216.937353][ T6183] do_syscall_64+0x4c/0xa0 [ 216.941773][ T6183] ? clear_bhb_loop+0x60/0xb0 [ 216.946453][ T6183] ? clear_bhb_loop+0x60/0xb0 [ 216.951138][ T6183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.957044][ T6183] RIP: 0033:0x7f18db98e0dc [ 216.961465][ T6183] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 216.971559][ T4723] usb 5-1: device descriptor read/64, error -71 [ 216.981063][ T6183] RSP: 002b:00007f18dc8b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.981087][ T6183] RAX: ffffffffffffffda RBX: 00007f18dbbe5fa0 RCX: 00007f18db98e0dc [ 216.981100][ T6183] RDX: 000000000000000f RSI: 00007f18dc8b60a0 RDI: 0000000000000005 [ 216.981111][ T6183] RBP: 00007f18dc8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 216.981122][ T6183] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 216.981131][ T6183] R13: 00007f18dbbe6038 R14: 00007f18dbbe5fa0 R15: 00007ffc3675fc58 [ 216.981155][ T6183] [ 217.088150][ T6179] loop0: detected capacity change from 0 to 32768 [ 217.115255][ T6179] [ 217.115255][ T6179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.115255][ T6179] [ 217.143160][ T6179] [ 217.143160][ T6179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.143160][ T6179] [ 217.154317][ T6179] [ 217.154317][ T6179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.154317][ T6179] [ 217.166874][ T6179] [ 217.166874][ T6179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.166874][ T6179] [ 217.177471][ T6179] [ 217.177471][ T6179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.177471][ T6179] [ 217.203145][ T107] [ 217.203145][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.203145][ T107] [ 217.218667][ T4849] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 217.271149][ T4268] [ 217.271149][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.271149][ T4268] [ 217.293989][ T4268] [ 217.293989][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 217.293989][ T4268] [ 217.314187][ T4723] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 217.414312][ T4849] usb 2-1: Using ep0 maxpacket: 8 [ 217.423162][ T4849] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 217.452797][ T4849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.475893][ T4723] usb 5-1: device descriptor read/64, error -71 [ 217.496144][ T4849] usb 2-1: Product: syz [ 217.500336][ T4849] usb 2-1: Manufacturer: syz [ 217.516367][ T4849] usb 2-1: SerialNumber: syz [ 217.535854][ T4849] usb 2-1: config 0 descriptor?? [ 217.563244][ T4849] gspca_main: se401-2.14.0 probing 047d:5003 [ 217.594332][ T4723] usb usb5-port1: attempt power cycle [ 217.965576][ T4849] gspca_se401: ExtraFeatures: 4 [ 218.024398][ T4723] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 218.113713][ T4723] usb 5-1: device descriptor read/8, error -71 [ 218.237891][ T4849] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 218.429256][ T4849] usb 2-1: USB disconnect, device number 10 [ 218.498842][ T4723] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 218.557986][ T4723] usb 5-1: device descriptor read/8, error -71 [ 218.724363][ T4723] usb usb5-port1: unable to enumerate USB device [ 218.874154][ T5028] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 219.064445][ T5028] usb 1-1: Using ep0 maxpacket: 16 [ 219.207451][ T5028] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 219.272144][ T5028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.383019][ T5028] usb 1-1: Product: syz [ 219.464058][ T5028] usb 1-1: Manufacturer: syz [ 219.512820][ T5028] usb 1-1: SerialNumber: syz [ 219.583195][ T5028] usb 1-1: config 0 descriptor?? [ 220.068297][ T5028] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 220.093062][ T5028] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.119522][ T5028] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 220.140174][ T5028] usb 1-1: media controller created [ 220.200748][ T5028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.269411][ T6227] loop4: detected capacity change from 0 to 32768 [ 220.321115][ T5028] zl10353_read_register: readreg error (reg=127, ret==0) [ 220.342932][ T6227] [ 220.342932][ T6227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.342932][ T6227] [ 220.356505][ T5028] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 220.401556][ T5028] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 220.426957][ T6227] [ 220.426957][ T6227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.426957][ T6227] [ 220.521393][ T6227] [ 220.521393][ T6227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.521393][ T6227] [ 220.533366][ T6227] [ 220.533366][ T6227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.533366][ T6227] [ 220.581221][ T6247] loop1: detected capacity change from 0 to 4096 [ 221.075247][ T6227] [ 221.075247][ T6227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.075247][ T6227] [ 221.315035][ T106] [ 221.315035][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.315035][ T106] [ 221.354590][ T4269] [ 221.354590][ T4269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.354590][ T4269] [ 221.413308][ T4269] [ 221.413308][ T4269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.413308][ T4269] [ 221.740565][ T6249] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.994780][ T6247] syz.1.510 (6247) used greatest stack depth: 19728 bytes left [ 222.325852][ T5033] usb 1-1: USB disconnect, device number 10 [ 222.380860][ T6258] loop4: detected capacity change from 0 to 512 [ 222.413061][ T6258] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.449592][ T5033] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 222.463061][ T6258] EXT4-fs (loop4): 1 truncate cleaned up [ 222.469005][ T6258] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 222.488565][ T26] audit: type=1800 audit(1762844201.752:92): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.514" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 222.986326][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 223.274426][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 225.447535][ T6293] loop4: detected capacity change from 0 to 32768 [ 225.548035][ T6293] [ 225.548035][ T6293] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.548035][ T6293] [ 225.597173][ T6293] [ 225.597173][ T6293] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.597173][ T6293] [ 225.618681][ T6293] [ 225.618681][ T6293] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.618681][ T6293] [ 225.653586][ T6293] [ 225.653586][ T6293] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.653586][ T6293] [ 225.678837][ T6293] [ 225.678837][ T6293] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.678837][ T6293] [ 225.712563][ T106] [ 225.712563][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.712563][ T106] [ 225.768186][ T6311] loop0: detected capacity change from 0 to 2048 [ 225.797080][ T4269] [ 225.797080][ T4269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.797080][ T4269] [ 225.829148][ T4269] [ 225.829148][ T4269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.829148][ T4269] [ 225.878920][ T6311] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=385, location=385 [ 225.939055][ T6311] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 227.921198][ T6335] loop0: detected capacity change from 0 to 32768 [ 228.124612][ T26] audit: type=1800 audit(1762844207.312:93): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.536" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 228.762625][ T6343] FAULT_INJECTION: forcing a failure. [ 228.762625][ T6343] name failslab, interval 1, probability 0, space 0, times 0 [ 228.784233][ T6343] CPU: 0 PID: 6343 Comm: syz.4.538 Not tainted syzkaller #0 [ 228.791554][ T6343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.801619][ T6343] Call Trace: [ 228.804908][ T6343] [ 228.807850][ T6343] dump_stack_lvl+0x168/0x22e [ 228.812544][ T6343] ? show_regs_print_info+0x12/0x12 [ 228.817753][ T6343] ? load_image+0x3b0/0x3b0 [ 228.822279][ T6343] ? __lock_acquire+0x7c50/0x7c50 [ 228.827321][ T6343] should_fail_ex+0x399/0x4d0 [ 228.832023][ T6343] should_failslab+0x5/0x20 [ 228.836540][ T6343] slab_pre_alloc_hook+0x59/0x310 [ 228.841563][ T6343] ? rcu_is_watching+0x11/0xa0 [ 228.846330][ T6343] kmem_cache_alloc+0x56/0x2f0 [ 228.851093][ T6343] ? __build_skb+0x2a/0x3c0 [ 228.855593][ T6343] __build_skb+0x2a/0x3c0 [ 228.859919][ T6343] build_skb+0x1e/0x230 [ 228.864069][ T6343] __tun_build_skb+0x36/0x320 [ 228.868745][ T6343] tun_get_user+0x1b24/0x3b90 [ 228.873425][ T6343] ? tun_get_user+0x636/0x3b90 [ 228.878192][ T6343] ? rcu_read_unlock+0xa0/0xa0 [ 228.882954][ T6343] ? tun_get+0x1c/0x2e0 [ 228.887108][ T6343] ? __lock_acquire+0x7c50/0x7c50 [ 228.892127][ T6343] ? tun_get+0x1c/0x2e0 [ 228.896278][ T6343] tun_chr_write_iter+0x112/0x1f0 [ 228.901302][ T6343] vfs_write+0x44c/0x960 [ 228.905542][ T6343] ? file_end_write+0x250/0x250 [ 228.910386][ T6343] ? __fget_files+0x44a/0x4d0 [ 228.915056][ T6343] ? __fdget_pos+0x1d4/0x360 [ 228.919635][ T6343] ? ksys_write+0x71/0x240 [ 228.924043][ T6343] ksys_write+0x143/0x240 [ 228.928366][ T6343] ? __ia32_sys_read+0x80/0x80 [ 228.933122][ T6343] ? lockdep_hardirqs_on+0x94/0x140 [ 228.938312][ T6343] do_syscall_64+0x4c/0xa0 [ 228.942713][ T6343] ? clear_bhb_loop+0x60/0xb0 [ 228.947382][ T6343] ? clear_bhb_loop+0x60/0xb0 [ 228.952045][ T6343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.957925][ T6343] RIP: 0033:0x7f1db1f8e17f [ 228.962327][ T6343] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 228.981919][ T6343] RSP: 002b:00007f1db2d8a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 228.990317][ T6343] RAX: ffffffffffffffda RBX: 00007f1db21e5fa0 RCX: 00007f1db1f8e17f [ 228.998280][ T6343] RDX: 000000000000006a RSI: 0000200000000000 RDI: 00000000000000c8 [ 229.006236][ T6343] RBP: 00007f1db2d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 229.014192][ T6343] R10: 000000000000006a R11: 0000000000000293 R12: 0000000000000001 [ 229.022159][ T6343] R13: 00007f1db21e6038 R14: 00007f1db21e5fa0 R15: 00007fff3f2065d8 [ 229.030189][ T6343] [ 231.306730][ T6366] netlink: 36 bytes leftover after parsing attributes in process `syz.4.543'. [ 231.325190][ T6368] loop0: detected capacity change from 0 to 1024 [ 231.346906][ T6368] EXT4-fs: Ignoring removed bh option [ 231.368632][ T6366] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 231.431000][ T6364] loop1: detected capacity change from 0 to 4096 [ 231.438456][ T6368] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 231.573447][ T6364] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 231.766655][ T6364] ntfs3: loop1: ino=21, "file1" mmap(write) compressed not supported [ 231.935576][ T4265] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 232.970682][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 234.678488][ T6396] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 235.366438][ C1] I/O error, dev loop2, sector 20 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.375960][ T11] FAT-fs (loop2): unable to read inode block for updating (i_pos 349) [ 235.545456][ T6404] input: syz1 as /devices/virtual/input/input8 [ 237.553357][ T6403] loop0: detected capacity change from 0 to 40427 [ 237.578942][ T6403] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 237.629742][ T6403] F2FS-fs (loop0): invalid crc value [ 237.662235][ T6403] F2FS-fs (loop0): Found nat_bits in checkpoint [ 237.759702][ T4723] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 237.776551][ T6403] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 237.902293][ C1] sd 0:0:1:0: [sda] tag#1264 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 237.912781][ C1] sd 0:0:1:0: [sda] tag#1264 CDB: Read(6) 08 00 00 00 03 44 [ 238.066758][ T4723] usb 5-1: Using ep0 maxpacket: 16 [ 238.175993][ T6434] FAULT_INJECTION: forcing a failure. [ 238.175993][ T6434] name failslab, interval 1, probability 0, space 0, times 0 [ 238.191086][ T6434] CPU: 1 PID: 6434 Comm: syz.0.556 Not tainted syzkaller #0 [ 238.198370][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 238.208432][ T6434] Call Trace: [ 238.211717][ T6434] [ 238.214648][ T6434] dump_stack_lvl+0x168/0x22e [ 238.219336][ T6434] ? show_regs_print_info+0x12/0x12 [ 238.224539][ T6434] ? load_image+0x3b0/0x3b0 [ 238.229048][ T6434] ? __might_sleep+0xd0/0xd0 [ 238.233646][ T6434] ? __lock_acquire+0x7c50/0x7c50 [ 238.238684][ T6434] should_fail_ex+0x399/0x4d0 [ 238.243373][ T6434] should_failslab+0x5/0x20 [ 238.247883][ T6434] slab_pre_alloc_hook+0x59/0x310 [ 238.252915][ T6434] kmem_cache_alloc_node+0x5a/0x320 [ 238.258114][ T6434] ? __alloc_skb+0xfc/0x7e0 [ 238.262624][ T6434] __alloc_skb+0xfc/0x7e0 [ 238.266951][ T6434] ? netlink_autobind+0xda/0x300 [ 238.271891][ T6434] netlink_sendmsg+0x645/0xbc0 [ 238.276663][ T6434] ? netlink_getsockopt+0x540/0x540 [ 238.281868][ T6434] ? aa_sock_msg_perm+0x94/0x150 [ 238.286813][ T6434] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 238.292099][ T6434] ? security_socket_sendmsg+0x7c/0xa0 [ 238.297562][ T6434] ? netlink_getsockopt+0x540/0x540 [ 238.302763][ T6434] ____sys_sendmsg+0x59b/0x970 [ 238.307538][ T6434] ? __sys_sendmsg_sock+0x30/0x30 [ 238.312559][ T6434] ? __import_iovec+0x315/0x500 [ 238.317422][ T6434] ? import_iovec+0x6f/0xa0 [ 238.321935][ T6434] ___sys_sendmsg+0x21c/0x290 [ 238.326613][ T6434] ? __sys_sendmsg+0x270/0x270 [ 238.331395][ T6434] ? __lock_acquire+0x7c50/0x7c50 [ 238.336435][ T6434] ? __fdget+0x17c/0x200 [ 238.340683][ T6434] __se_sys_sendmsg+0x19e/0x270 [ 238.345538][ T6434] ? __x64_sys_sendmsg+0x80/0x80 [ 238.350494][ T6434] ? lockdep_hardirqs_on+0x94/0x140 [ 238.355698][ T6434] do_syscall_64+0x4c/0xa0 [ 238.360112][ T6434] ? clear_bhb_loop+0x60/0xb0 [ 238.364788][ T6434] ? clear_bhb_loop+0x60/0xb0 [ 238.369461][ T6434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.375354][ T6434] RIP: 0033:0x7f8e7078f6c9 [ 238.379766][ T6434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.399375][ T6434] RSP: 002b:00007f8e71685038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.407793][ T6434] RAX: ffffffffffffffda RBX: 00007f8e709e6180 RCX: 00007f8e7078f6c9 [ 238.415768][ T6434] RDX: 0000000020004804 RSI: 0000200000000100 RDI: 0000000000000009 [ 238.423733][ T6434] RBP: 00007f8e71685090 R08: 0000000000000000 R09: 0000000000000000 [ 238.431702][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.439672][ T6434] R13: 00007f8e709e6218 R14: 00007f8e709e6180 R15: 00007ffd3be92538 [ 238.447658][ T6434] [ 239.450306][ T4723] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 239.637703][ T4723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.685620][ T4723] usb 5-1: Product: syz [ 239.709572][ T4723] usb 5-1: Manufacturer: syz [ 239.746620][ T4723] usb 5-1: SerialNumber: syz [ 239.865323][ T4723] usb 5-1: config 0 descriptor?? [ 240.066782][ T6436] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 240.271169][ T6440] dccp_invalid_packet: P.Data Offset(10) too large [ 240.278569][ T4723] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 240.299824][ T4723] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 240.330199][ T4723] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 240.349925][ T4723] usb 5-1: media controller created [ 240.402610][ T4723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.512402][ T6438] loop1: detected capacity change from 0 to 40427 [ 240.533288][ T4723] zl10353_read_register: readreg error (reg=127, ret==0) [ 240.545408][ T4723] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 240.557226][ T4723] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 240.617635][ T6438] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 240.673383][ T6438] F2FS-fs (loop1): invalid crc value [ 240.699171][ T6438] F2FS-fs (loop1): Found nat_bits in checkpoint [ 241.214722][ T4723] usb 5-1: USB disconnect, device number 18 [ 241.263500][ T6438] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 241.493279][ T4723] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 242.085228][ T4265] syz-executor: attempt to access beyond end of device [ 242.085228][ T4265] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.931584][ T6486] netlink: 'syz.3.582': attribute type 1 has an invalid length. [ 245.961784][ T6491] dccp_invalid_packet: P.Data Offset(10) too large [ 246.421867][ T6479] loop1: detected capacity change from 0 to 40427 [ 246.442574][ T6479] F2FS-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 248.542135][ T5026] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 248.754451][ T5026] usb 1-1: Using ep0 maxpacket: 16 [ 248.785559][ T5026] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 248.820626][ T5026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.864385][ T5026] usb 1-1: Product: syz [ 248.868597][ T5026] usb 1-1: Manufacturer: syz [ 248.873195][ T5026] usb 1-1: SerialNumber: syz [ 248.910945][ T5026] usb 1-1: config 0 descriptor?? [ 249.204351][ T5034] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 249.278430][ T6533] FAULT_INJECTION: forcing a failure. [ 249.278430][ T6533] name failslab, interval 1, probability 0, space 0, times 0 [ 249.310123][ T6533] CPU: 1 PID: 6533 Comm: syz.2.595 Not tainted syzkaller #0 [ 249.317463][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.327535][ T6533] Call Trace: [ 249.330660][ T5026] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 249.330809][ T6533] [ 249.330819][ T6533] dump_stack_lvl+0x168/0x22e [ 249.345871][ T6533] ? show_regs_print_info+0x12/0x12 [ 249.351092][ T6533] ? load_image+0x3b0/0x3b0 [ 249.355620][ T6533] ? __lock_acquire+0x7c50/0x7c50 [ 249.360669][ T6533] should_fail_ex+0x399/0x4d0 [ 249.365366][ T6533] should_failslab+0x5/0x20 [ 249.366454][ T5026] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.369868][ T6533] slab_pre_alloc_hook+0x59/0x310 [ 249.369893][ T6533] ? rcu_is_watching+0x11/0xa0 [ 249.388860][ T6533] kmem_cache_alloc+0x56/0x2f0 [ 249.390233][ T5026] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 249.393626][ T6533] ? __build_skb+0x2a/0x3c0 [ 249.393658][ T6533] __build_skb+0x2a/0x3c0 [ 249.410378][ T6533] build_skb+0x1e/0x230 [ 249.414288][ T5034] usb 2-1: Using ep0 maxpacket: 32 [ 249.414535][ T6533] __tun_build_skb+0x36/0x320 [ 249.419788][ T5026] usb 1-1: media controller created [ 249.424329][ T6533] tun_get_user+0x1b24/0x3b90 [ 249.424367][ T6533] ? tun_get_user+0x636/0x3b90 [ 249.424390][ T6533] ? rcu_read_unlock+0xa0/0xa0 [ 249.424416][ T6533] ? tun_get+0x1c/0x2e0 [ 249.424437][ T6533] ? __lock_acquire+0x7c50/0x7c50 [ 249.424461][ T6533] ? tun_get+0x1c/0x2e0 [ 249.432621][ T5034] usb 2-1: config 0 has an invalid interface number: 111 but max is 1 [ 249.434306][ T6533] tun_chr_write_iter+0x112/0x1f0 [ 249.434337][ T6533] vfs_write+0x44c/0x960 [ 249.439076][ T5034] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.443816][ T6533] ? file_end_write+0x250/0x250 [ 249.443843][ T6533] ? __fget_files+0x44a/0x4d0 [ 249.443868][ T6533] ? __fdget_pos+0x1d4/0x360 [ 249.443885][ T6533] ? ksys_write+0x71/0x240 [ 249.443904][ T6533] ksys_write+0x143/0x240 [ 249.443925][ T6533] ? __ia32_sys_read+0x80/0x80 [ 249.443947][ T6533] ? lockdep_hardirqs_on+0x94/0x140 [ 249.443969][ T6533] do_syscall_64+0x4c/0xa0 [ 249.443986][ T6533] ? clear_bhb_loop+0x60/0xb0 [ 249.444002][ T6533] ? clear_bhb_loop+0x60/0xb0 [ 249.444020][ T6533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.444038][ T6533] RIP: 0033:0x7fcbc7b8e17f [ 249.444055][ T6533] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 249.444069][ T6533] RSP: 002b:00007fcbc5df6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 249.444088][ T6533] RAX: ffffffffffffffda RBX: 00007fcbc7de5fa0 RCX: 00007fcbc7b8e17f [ 249.444100][ T6533] RDX: 000000000000003e RSI: 0000200000000000 RDI: 00000000000000c8 [ 249.444110][ T6533] RBP: 00007fcbc5df6090 R08: 0000000000000000 R09: 0000000000000000 [ 249.444121][ T6533] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 249.444131][ T6533] R13: 00007fcbc7de6038 R14: 00007fcbc7de5fa0 R15: 00007ffd1c731928 [ 249.444156][ T6533] [ 249.660017][ T5026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.738378][ T6540] FAULT_INJECTION: forcing a failure. [ 249.738378][ T6540] name failslab, interval 1, probability 0, space 0, times 0 [ 249.771818][ T6540] CPU: 1 PID: 6540 Comm: syz.4.597 Not tainted syzkaller #0 [ 249.779152][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.789230][ T6540] Call Trace: [ 249.792524][ T6540] [ 249.795467][ T6540] dump_stack_lvl+0x168/0x22e [ 249.800179][ T6540] ? show_regs_print_info+0x12/0x12 [ 249.804233][ T5034] usb 2-1: config 0 has no interface number 1 [ 249.805376][ T6540] ? load_image+0x3b0/0x3b0 [ 249.815220][ T5034] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 249.815932][ T6540] ? __might_sleep+0xd0/0xd0 [ 249.815961][ T6540] ? __lock_acquire+0x7c50/0x7c50 [ 249.834585][ T6540] should_fail_ex+0x399/0x4d0 [ 249.839288][ T6540] should_failslab+0x5/0x20 [ 249.843806][ T6540] slab_pre_alloc_hook+0x59/0x310 [ 249.844197][ T5034] usb 2-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 249.848837][ T6540] kmem_cache_alloc_node+0x5a/0x320 [ 249.848861][ T6540] ? __alloc_skb+0xfc/0x7e0 [ 249.848884][ T6540] __alloc_skb+0xfc/0x7e0 [ 249.848898][ T6540] ? netlink_autobind+0xda/0x300 [ 249.848921][ T6540] netlink_sendmsg+0x645/0xbc0 [ 249.848944][ T6540] ? netlink_getsockopt+0x540/0x540 [ 249.848965][ T6540] ? aa_sock_msg_perm+0x94/0x150 [ 249.848987][ T6540] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 249.849003][ T6540] ? security_socket_sendmsg+0x7c/0xa0 [ 249.849025][ T6540] ? netlink_getsockopt+0x540/0x540 [ 249.849043][ T6540] ____sys_sendmsg+0x59b/0x970 [ 249.849070][ T6540] ? __sys_sendmsg_sock+0x30/0x30 [ 249.849088][ T6540] ? __import_iovec+0x315/0x500 [ 249.849116][ T6540] ? import_iovec+0x6f/0xa0 [ 249.849136][ T6540] ___sys_sendmsg+0x21c/0x290 [ 249.849155][ T6540] ? __sys_sendmsg+0x270/0x270 [ 249.849185][ T6540] ? __lock_acquire+0x7c50/0x7c50 [ 249.849219][ T6540] ? __fdget+0x17c/0x200 [ 249.849241][ T6540] __se_sys_sendmsg+0x19e/0x270 [ 249.849262][ T6540] ? __x64_sys_sendmsg+0x80/0x80 [ 249.849295][ T6540] ? lockdep_hardirqs_on+0x94/0x140 [ 249.849319][ T6540] do_syscall_64+0x4c/0xa0 [ 249.849335][ T6540] ? clear_bhb_loop+0x60/0xb0 [ 249.849352][ T6540] ? clear_bhb_loop+0x60/0xb0 [ 249.849370][ T6540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.849387][ T6540] RIP: 0033:0x7f1db1f8f6c9 [ 249.849410][ T6540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.849425][ T6540] RSP: 002b:00007f1db2d8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.849444][ T6540] RAX: ffffffffffffffda RBX: 00007f1db21e5fa0 RCX: 00007f1db1f8f6c9 [ 249.849456][ T6540] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 249.849468][ T6540] RBP: 00007f1db2d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 249.849479][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.849489][ T6540] R13: 00007f1db21e6038 R14: 00007f1db21e5fa0 R15: 00007fff3f2065d8 [ 249.849515][ T6540] [ 249.971337][ T6542] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 249.983540][ T5034] usb 2-1: Product: syz [ 250.074221][ T5026] zl10353_read_register: readreg error (reg=127, ret==0) [ 250.092640][ T5026] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 250.103463][ T5026] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 250.117721][ T5026] usb 1-1: USB disconnect, device number 11 [ 250.164301][ T5034] usb 2-1: Manufacturer: syz [ 250.169058][ T5034] usb 2-1: SerialNumber: syz [ 250.186299][ T5034] usb 2-1: config 0 descriptor?? [ 250.222598][ T5026] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 250.393925][ T5034] snd-usb-6fire 2-1:0.111: unable to receive device firmware state. [ 250.465414][ T5034] snd-usb-6fire: probe of 2-1:0.111 failed with error -71 [ 250.884344][ T5034] usb 2-1: USB disconnect, device number 11 [ 251.407049][ T6564] FAULT_INJECTION: forcing a failure. [ 251.407049][ T6564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.421802][ T6564] CPU: 0 PID: 6564 Comm: syz.4.604 Not tainted syzkaller #0 [ 251.429098][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 251.439153][ T6564] Call Trace: [ 251.442432][ T6564] [ 251.445368][ T6564] dump_stack_lvl+0x168/0x22e [ 251.450055][ T6564] ? show_regs_print_info+0x12/0x12 [ 251.455264][ T6564] ? load_image+0x3b0/0x3b0 [ 251.459769][ T6564] ? mark_lock+0x94/0x320 [ 251.464106][ T6564] ? __lock_acquire+0x12e5/0x7c50 [ 251.469140][ T6564] ? do_ipv6_setsockopt+0x2b94/0x3b20 [ 251.474519][ T6564] should_fail_ex+0x399/0x4d0 [ 251.479209][ T6564] strncpy_from_user+0x32/0x350 [ 251.484074][ T6564] strncpy_from_user_nofault+0x6d/0x140 [ 251.489625][ T6564] bpf_bprintf_prepare+0xba0/0x13d0 [ 251.494839][ T6564] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 251.499982][ T6564] bpf_trace_printk+0xd8/0x190 [ 251.504756][ T6564] ? bpf_probe_write_user+0xe0/0xe0 [ 251.509977][ T6564] bpf_prog_7c77c7e0f6645ad8+0x35/0x37 [ 251.515442][ T6564] bpf_trace_run2+0x1cd/0x3b0 [ 251.520125][ T6564] ? bpf_trace_run2+0xda/0x3b0 [ 251.524893][ T6564] ? bpf_trace_run1+0x3b0/0x3b0 [ 251.529799][ T6564] ? read_lock_is_recursive+0x10/0x10 [ 251.535188][ T6564] ? preempt_schedule_common+0xa5/0xd0 [ 251.540660][ T6564] ? preempt_schedule+0xa7/0xb0 [ 251.545517][ T6564] ? schedule_preempt_disabled+0x20/0x20 [ 251.551159][ T6564] trace_contention_begin+0x123/0x170 [ 251.556539][ T6564] __mutex_lock+0x131/0xaf0 [ 251.561059][ T6564] ? __mutex_lock+0x1b2/0xaf0 [ 251.565749][ T6564] ? nf_setsockopt+0x36/0x280 [ 251.570432][ T6564] ? mutex_lock_nested+0x10/0x10 [ 251.575374][ T6564] ? __might_sleep+0xd0/0xd0 [ 251.579988][ T6564] ? smc_setsockopt+0x183/0xb60 [ 251.584843][ T6564] ? mutex_lock_nested+0x10/0x10 [ 251.589784][ T6564] ? lock_chain_count+0x20/0x20 [ 251.594639][ T6564] ? sock_common_recvmsg+0x1a0/0x1a0 [ 251.599930][ T6564] nf_setsockopt+0x36/0x280 [ 251.604454][ T6564] ? sock_common_recvmsg+0x1a0/0x1a0 [ 251.609746][ T6564] smc_setsockopt+0x229/0xb60 [ 251.614430][ T6564] ? smc_shutdown+0x9a0/0x9a0 [ 251.619107][ T6564] ? aa_sock_opt_perm+0x74/0x100 [ 251.624052][ T6564] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 251.629597][ T6564] ? security_socket_setsockopt+0x7a/0xa0 [ 251.635319][ T6564] ? smc_shutdown+0x9a0/0x9a0 [ 251.640001][ T6564] __sys_setsockopt+0x2bf/0x3d0 [ 251.644862][ T6564] __x64_sys_setsockopt+0xb1/0xc0 [ 251.649894][ T6564] do_syscall_64+0x4c/0xa0 [ 251.654317][ T6564] ? clear_bhb_loop+0x60/0xb0 [ 251.659071][ T6564] ? clear_bhb_loop+0x60/0xb0 [ 251.663764][ T6564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.669664][ T6564] RIP: 0033:0x7f1db1f8f6c9 [ 251.674085][ T6564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.693702][ T6564] RSP: 002b:00007f1db2d48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 251.702121][ T6564] RAX: ffffffffffffffda RBX: 00007f1db21e6180 RCX: 00007f1db1f8f6c9 [ 251.710094][ T6564] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 251.718069][ T6564] RBP: 00007f1db2d48090 R08: 0000000000000380 R09: 0000000000000000 [ 251.726042][ T6564] R10: 0000200000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 251.734014][ T6564] R13: 00007f1db21e6218 R14: 00007f1db21e6180 R15: 00007fff3f2065d8 [ 251.742009][ T6564] [ 251.756772][ T6564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.987479][ T6563] ptrace attach of "./syz-executor exec"[6566] was attempted by "./syz-executor exec"[6563] [ 252.907316][ T6568] loop1: detected capacity change from 0 to 512 [ 252.937802][ T6568] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 252.982092][ T6568] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #17: comm syz.1.606: corrupted in-inode xattr [ 253.021951][ T6568] EXT4-fs (loop1): Remounting filesystem read-only [ 253.120046][ T6568] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.606: couldn't read orphan inode 17 (err -117) [ 253.159697][ T6568] EXT4-fs (loop1): Remounting filesystem read-only [ 253.172414][ T6568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 253.406795][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.609'. [ 253.806821][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 254.488962][ T6593] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 255.009675][ T6599] loop1: detected capacity change from 0 to 4096 [ 255.063487][ T6599] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 255.496733][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.503123][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.882900][ T6607] FAULT_INJECTION: forcing a failure. [ 255.882900][ T6607] name failslab, interval 1, probability 0, space 0, times 0 [ 255.931637][ T6607] CPU: 0 PID: 6607 Comm: syz.4.619 Not tainted syzkaller #0 [ 255.938962][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.949019][ T6607] Call Trace: [ 255.952295][ T6607] [ 255.955226][ T6607] dump_stack_lvl+0x168/0x22e [ 255.959912][ T6607] ? show_regs_print_info+0x12/0x12 [ 255.965114][ T6607] ? load_image+0x3b0/0x3b0 [ 255.969627][ T6607] ? __might_sleep+0xd0/0xd0 [ 255.974226][ T6607] ? __lock_acquire+0x7c50/0x7c50 [ 255.979260][ T6607] should_fail_ex+0x399/0x4d0 [ 255.983947][ T6607] should_failslab+0x5/0x20 [ 255.988452][ T6607] slab_pre_alloc_hook+0x59/0x310 [ 255.993486][ T6607] kmem_cache_alloc_node+0x5a/0x320 [ 255.998689][ T6607] ? __alloc_skb+0xfc/0x7e0 [ 256.003197][ T6607] __alloc_skb+0xfc/0x7e0 [ 256.007538][ T6607] alloc_skb_with_frags+0xa7/0x710 [ 256.012648][ T6607] ? __rb_reserve_next+0x793/0xd50 [ 256.017767][ T6607] sock_alloc_send_pskb+0x853/0x980 [ 256.022986][ T6607] ? sock_kzfree_s+0x50/0x50 [ 256.027586][ T6607] ? do_raw_spin_lock+0x11d/0x280 [ 256.032621][ T6607] ? __rwlock_init+0x140/0x140 [ 256.037407][ T6607] ? do_raw_spin_unlock+0x11d/0x230 [ 256.042627][ T6607] unix_dgram_sendmsg+0x592/0x16c0 [ 256.047763][ T6607] ? aa_sk_perm+0x7e5/0x920 [ 256.052280][ T6607] ? unix_dgram_poll+0x660/0x660 [ 256.057231][ T6607] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 256.063663][ T6607] ? aa_sock_msg_perm+0x94/0x150 [ 256.068619][ T6607] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 256.073908][ T6607] ? security_socket_sendmsg+0x7c/0xa0 [ 256.079379][ T6607] ? unix_dgram_poll+0x660/0x660 [ 256.084321][ T6607] ____sys_sendmsg+0x59b/0x970 [ 256.089098][ T6607] ? __might_fault+0xa6/0x120 [ 256.093785][ T6607] ? __sys_sendmsg_sock+0x30/0x30 [ 256.098820][ T6607] ? __import_iovec+0x315/0x500 [ 256.103689][ T6607] ? __might_fault+0xa6/0x120 [ 256.108386][ T6607] ? import_iovec+0x6f/0xa0 [ 256.112911][ T6607] ___sys_sendmsg+0x21c/0x290 [ 256.117607][ T6607] ? __sys_sendmsg+0x270/0x270 [ 256.122401][ T6607] ? __lock_acquire+0x7c50/0x7c50 [ 256.127452][ T6607] ? __fdget+0x17c/0x200 [ 256.131711][ T6607] __se_sys_sendmsg+0x19e/0x270 [ 256.136583][ T6607] ? __x64_sys_sendmsg+0x80/0x80 [ 256.141549][ T6607] ? lockdep_hardirqs_on+0x94/0x140 [ 256.146766][ T6607] do_syscall_64+0x4c/0xa0 [ 256.151192][ T6607] ? clear_bhb_loop+0x60/0xb0 [ 256.155879][ T6607] ? clear_bhb_loop+0x60/0xb0 [ 256.160579][ T6607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.164183][ T4848] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 256.166468][ T6607] RIP: 0033:0x7f1db1f8f6c9 [ 256.178417][ T6607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.198034][ T6607] RSP: 002b:00007f1db2d8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.206463][ T6607] RAX: ffffffffffffffda RBX: 00007f1db21e5fa0 RCX: 00007f1db1f8f6c9 [ 256.214447][ T6607] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 256.222434][ T6607] RBP: 00007f1db2d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 256.230416][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.238396][ T6607] R13: 00007f1db21e6038 R14: 00007f1db21e5fa0 R15: 00007fff3f2065d8 [ 256.246388][ T6607] [ 256.320891][ T6617] dccp_invalid_packet: P.Data Offset(224) too large [ 256.394195][ T4848] usb 1-1: Using ep0 maxpacket: 16 [ 256.406403][ T4848] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 256.434230][ T4848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.484215][ T4848] usb 1-1: Product: syz [ 256.504182][ T4848] usb 1-1: Manufacturer: syz [ 256.519246][ T4848] usb 1-1: SerialNumber: syz [ 256.585014][ T4848] usb 1-1: config 0 descriptor?? [ 256.819782][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.624'. [ 257.944015][ T4848] dvb_usb_dtv5100: probe of 1-1:0.0 failed with error -110 [ 258.027232][ T4848] usb 1-1: USB disconnect, device number 12 [ 258.276555][ T6640] loop0: detected capacity change from 0 to 1024 [ 258.286947][ T6640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.372698][ T6638] netlink: 'syz.4.628': attribute type 1 has an invalid length. [ 260.563399][ T6652] netlink: 'syz.3.630': attribute type 29 has an invalid length. [ 260.623333][ T6652] netlink: 'syz.3.630': attribute type 29 has an invalid length. [ 261.896100][ T6680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.638'. [ 262.989096][ T6697] FAULT_INJECTION: forcing a failure. [ 262.989096][ T6697] name failslab, interval 1, probability 0, space 0, times 0 [ 263.014656][ T5034] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 263.129153][ T6697] CPU: 1 PID: 6697 Comm: syz.0.645 Not tainted syzkaller #0 [ 263.136488][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.146551][ T6697] Call Trace: [ 263.149833][ T6697] [ 263.152769][ T6697] dump_stack_lvl+0x168/0x22e [ 263.157462][ T6697] ? show_regs_print_info+0x12/0x12 [ 263.162678][ T6697] ? load_image+0x3b0/0x3b0 [ 263.167196][ T6697] ? __might_sleep+0xd0/0xd0 [ 263.171801][ T6697] ? __lock_acquire+0x7c50/0x7c50 [ 263.176850][ T6697] should_fail_ex+0x399/0x4d0 [ 263.181543][ T6697] should_failslab+0x5/0x20 [ 263.186062][ T6697] slab_pre_alloc_hook+0x59/0x310 [ 263.191100][ T6697] ? __se_sys_mount+0x152/0x3c0 [ 263.195966][ T6697] __kmem_cache_alloc_node+0x4f/0x260 [ 263.197646][ T6702] loop4: detected capacity change from 0 to 256 [ 263.201341][ T6697] ? __se_sys_mount+0x152/0x3c0 [ 263.212411][ T6697] kmalloc_trace+0x26/0xe0 [ 263.216838][ T6697] __se_sys_mount+0x152/0x3c0 [ 263.221512][ T6697] ? __x64_sys_mount+0xc0/0xc0 [ 263.226272][ T6697] ? lockdep_hardirqs_on+0x94/0x140 [ 263.231461][ T6697] ? __x64_sys_mount+0x1c/0xc0 [ 263.236220][ T6697] do_syscall_64+0x4c/0xa0 [ 263.240623][ T6697] ? clear_bhb_loop+0x60/0xb0 [ 263.245285][ T6697] ? clear_bhb_loop+0x60/0xb0 [ 263.249949][ T6697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.255845][ T6697] RIP: 0033:0x7f8e7078f6c9 [ 263.260255][ T6697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.279861][ T6697] RSP: 002b:00007f8e716c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 263.288279][ T6697] RAX: ffffffffffffffda RBX: 00007f8e709e5fa0 RCX: 00007f8e7078f6c9 [ 263.296241][ T6697] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000000000000000 [ 263.304209][ T6697] RBP: 00007f8e716c7090 R08: 0000200000000200 R09: 0000000000000000 [ 263.312172][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.320139][ T6697] R13: 00007f8e709e6038 R14: 00007f8e709e5fa0 R15: 00007ffd3be92538 [ 263.328131][ T6697] [ 263.331254][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.365292][ T6702] FAT-fs (loop4): Directory bread(block 64) failed [ 263.365368][ T5034] usb 2-1: Using ep0 maxpacket: 16 [ 263.386262][ T6702] FAT-fs (loop4): Directory bread(block 65) failed [ 263.392923][ T6702] FAT-fs (loop4): Directory bread(block 66) failed [ 263.418383][ T6702] FAT-fs (loop4): Directory bread(block 67) failed [ 263.433986][ T6702] FAT-fs (loop4): Directory bread(block 68) failed [ 263.495764][ T6702] FAT-fs (loop4): Directory bread(block 69) failed [ 263.537783][ T6702] FAT-fs (loop4): Directory bread(block 70) failed [ 263.588980][ T6701] netlink: 'syz.3.646': attribute type 1 has an invalid length. [ 263.597449][ T6702] FAT-fs (loop4): Directory bread(block 71) failed [ 263.645915][ T6702] FAT-fs (loop4): Directory bread(block 72) failed [ 263.671535][ T6702] FAT-fs (loop4): Directory bread(block 73) failed [ 263.880193][ T26] audit: type=1800 audit(1762844243.142:94): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.647" name="file1" dev="loop4" ino=1048621 res=0 errno=0 [ 263.919629][ T6702] syz.4.647: attempt to access beyond end of device [ 263.919629][ T6702] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 263.969621][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 263.984466][ T6702] bond0: option arp_interval: invalid value (18446744072568700931) [ 263.992410][ T6702] bond0: option arp_interval: allowed values 0 - 2147483647 [ 264.421533][ T5034] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 264.448584][ T5034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.167953][ T5034] usb 2-1: Product: syz [ 265.172296][ T5034] usb 2-1: Manufacturer: syz [ 265.177163][ T5034] usb 2-1: SerialNumber: syz [ 265.315552][ T5034] usb 2-1: config 0 descriptor?? [ 265.355843][ T6708] loop0: detected capacity change from 0 to 4096 [ 265.484050][ T6708] NILFS (loop0): invalid segment: Checksum error in segment payload [ 265.543093][ T6708] NILFS (loop0): trying rollback from an earlier position [ 265.635684][ T6708] NILFS (loop0): recovery complete [ 265.742009][ T5034] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 265.773588][ T5034] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.814333][ T6722] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.840233][ T5034] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 266.057545][ T5034] usb 2-1: media controller created [ 266.398589][ T6727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.651'. [ 266.425351][ T6706] device syzkaller0 entered promiscuous mode [ 267.201793][ T26] audit: type=1326 audit(1762844246.462:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.3.655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18db98f6c9 code=0x0 [ 267.418683][ T5034] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.809481][ T5034] zl10353_read_register: readreg error (reg=127, ret==0) [ 267.818256][ T5034] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 267.844218][ T5034] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 267.975013][ T5034] usb 2-1: USB disconnect, device number 12 [ 268.037567][ T5034] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 268.146227][ T6750] loop1: detected capacity change from 0 to 128 [ 268.436216][ T6752] loop1: detected capacity change from 0 to 8192 [ 268.517451][ T6712] syz.4.647: attempt to access beyond end of device [ 268.517451][ T6712] loop4: rw=2049, sector=1224, nr_sectors = 544 limit=256 [ 268.522289][ T6752] loop1: p1 p3 p4 [ 268.522289][ T6752] p1: [ 268.532981][ T6712] syz.4.647: attempt to access beyond end of device [ 268.532981][ T6712] loop4: rw=2049, sector=1800, nr_sectors = 128 limit=256 [ 268.560542][ T6752] loop1: p3 size 100663552 extends beyond EOD, truncated [ 268.570707][ T6752] loop1: p4 size 50331648 extends beyond EOD, truncated [ 268.599229][ T6712] syz.4.647: attempt to access beyond end of device [ 268.599229][ T6712] loop4: rw=2049, sector=1960, nr_sectors = 4496 limit=256 [ 268.690491][ T6712] syz.4.647: attempt to access beyond end of device [ 268.690491][ T6712] loop4: rw=2049, sector=6456, nr_sectors = 4032 limit=256 [ 268.757279][ T6712] syz.4.647: attempt to access beyond end of device [ 268.757279][ T6712] loop4: rw=2049, sector=10488, nr_sectors = 2128 limit=256 [ 269.618251][ T6769] FAULT_INJECTION: forcing a failure. [ 269.618251][ T6769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.633229][ T6769] CPU: 0 PID: 6769 Comm: syz.2.665 Not tainted syzkaller #0 [ 269.640758][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.650807][ T6769] Call Trace: [ 269.654084][ T6769] [ 269.657012][ T6769] dump_stack_lvl+0x168/0x22e [ 269.661689][ T6769] ? show_regs_print_info+0x12/0x12 [ 269.666878][ T6769] ? load_image+0x3b0/0x3b0 [ 269.671373][ T6769] ? __lock_acquire+0x7c50/0x7c50 [ 269.676389][ T6769] ? do_vfs_ioctl+0xcb5/0x1d10 [ 269.681148][ T6769] should_fail_ex+0x399/0x4d0 [ 269.685819][ T6769] _copy_from_user+0x2c/0x170 [ 269.690486][ T6769] kvm_vm_ioctl+0x68c/0xa80 [ 269.694976][ T6769] ? kvm_device_release+0x1f0/0x1f0 [ 269.700163][ T6769] ? __kmem_cache_free+0xb6/0x1f0 [ 269.705183][ T6769] ? tomoyo_path_number_perm+0x503/0x600 [ 269.710825][ T6769] ? tomoyo_path_number_perm+0x1b6/0x600 [ 269.716471][ T6769] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 269.721964][ T6769] ? __fget_files+0x28/0x4d0 [ 269.726558][ T6769] ? bpf_lsm_file_ioctl+0x5/0x10 [ 269.731486][ T6769] ? security_file_ioctl+0x7c/0xa0 [ 269.736586][ T6769] ? kvm_device_release+0x1f0/0x1f0 [ 269.741771][ T6769] __se_sys_ioctl+0xfa/0x170 [ 269.746354][ T6769] do_syscall_64+0x4c/0xa0 [ 269.750765][ T6769] ? clear_bhb_loop+0x60/0xb0 [ 269.755428][ T6769] ? clear_bhb_loop+0x60/0xb0 [ 269.760093][ T6769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.765971][ T6769] RIP: 0033:0x7fcbc7b8f6c9 [ 269.770370][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.789966][ T6769] RSP: 002b:00007fcbc5dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.798367][ T6769] RAX: ffffffffffffffda RBX: 00007fcbc7de6090 RCX: 00007fcbc7b8f6c9 [ 269.806329][ T6769] RDX: 0000200000000000 RSI: 000000004020aea5 RDI: 0000000000000004 [ 269.814287][ T6769] RBP: 00007fcbc5dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 269.822249][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.830206][ T6769] R13: 00007fcbc7de6128 R14: 00007fcbc7de6090 R15: 00007ffd1c731928 [ 269.838186][ T6769] [ 270.328329][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.666'. [ 272.673544][ T26] audit: type=1326 audit(1762844251.932:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18db98f6c9 code=0x7ffc0000 [ 272.724208][ T26] audit: type=1326 audit(1762844251.962:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18db98f6c9 code=0x7ffc0000 [ 272.814578][ T26] audit: type=1326 audit(1762844251.962:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18db98f6c9 code=0x7ffc0000 [ 272.841433][ T26] audit: type=1326 audit(1762844251.962:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f18db98f6c9 code=0x7ffc0000 [ 272.867284][ T26] audit: type=1326 audit(1762844251.962:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18db98f6c9 code=0x7ffc0000 [ 272.930718][ T26] audit: type=1326 audit(1762844251.962:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f18db98f6c9 code=0x7ffc0000 [ 272.960017][ T26] audit: type=1326 audit(1762844251.962:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18db98f6c9 code=0x7ffc0000 [ 273.083859][ T26] audit: type=1326 audit(1762844251.962:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18db98f6c9 code=0x7ffc0000 [ 273.130969][ T26] audit: type=1326 audit(1762844251.962:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18db98f6c9 code=0x7ffc0000 [ 273.153645][ T26] audit: type=1326 audit(1762844251.962:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.3.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f18db98f6c9 code=0x7ffc0000 [ 274.295080][ T6748] netlink: 'syz.0.659': attribute type 1 has an invalid length. [ 274.636078][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.678'. [ 275.405595][ T6824] loop0: detected capacity change from 0 to 65 [ 275.455801][ T6824] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 275.479467][ T4851] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 275.814332][ T4851] usb 5-1: Using ep0 maxpacket: 16 [ 275.823209][ T4851] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 276.463020][ T6832] loop1: detected capacity change from 0 to 8192 [ 276.513798][ T6832] REISERFS warning (device loop1): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 276.781852][ T6837] loop0: detected capacity change from 0 to 2048 [ 276.841276][ T6837] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.994181][ T5026] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 277.186062][ T5026] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 277.201357][ T5026] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 277.213333][ T5026] usb 2-1: config 0 has no interface number 0 [ 277.225021][ T5026] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 277.239593][ T5026] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 277.250617][ T5026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.282465][ T5026] usb 2-1: config 0 descriptor?? [ 277.302528][ T6832] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 277.405307][ T4851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.413752][ T4851] usb 5-1: Product: syz [ 277.418010][ T4851] usb 5-1: Manufacturer: syz [ 277.422616][ T4851] usb 5-1: SerialNumber: syz [ 277.437973][ T4851] usb 5-1: config 0 descriptor?? [ 278.023188][ T5026] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input9 [ 278.328397][ T4851] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 278.345129][ T4851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.365539][ T4851] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 278.373497][ T4851] usb 5-1: media controller created [ 278.428452][ T4851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.455023][ T6845] loop0: detected capacity change from 0 to 4096 [ 278.461870][ T5026] usb 2-1: USB disconnect, device number 13 [ 278.467977][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 278.599634][ T6852] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.928811][ T6854] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 279.064444][ T4851] zl10353_read_register: readreg error (reg=127, ret==0) [ 279.071905][ T4851] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 279.083451][ T4851] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 279.121181][ T4851] usb 5-1: USB disconnect, device number 19 [ 279.308461][ T4851] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 280.137648][ T6876] loop0: detected capacity change from 0 to 128 [ 280.411754][ T6883] loop0: detected capacity change from 0 to 512 [ 280.435410][ T6883] EXT4-fs: Ignoring removed oldalloc option [ 280.450240][ T6861] loop1: detected capacity change from 0 to 32768 [ 280.457085][ T6883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 280.480532][ T6861] xfs: Unknown parameter 'appraise' [ 280.514413][ T5026] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 280.553785][ T6883] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2816c018, mo2=0002] [ 280.577665][ T6883] System zones: 1-3, 19-19, 35-38 [ 280.636121][ T6883] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 280.681437][ T6883] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.714242][ T5026] usb 5-1: Using ep0 maxpacket: 16 [ 280.731023][ T5026] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 280.771109][ T5026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.811216][ T5026] usb 5-1: Product: syz [ 280.824536][ T5026] usb 5-1: Manufacturer: syz [ 280.829175][ T5026] usb 5-1: SerialNumber: syz [ 280.863829][ T5026] usb 5-1: config 0 descriptor?? [ 280.886541][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 281.259907][ T6892] dccp_close: ABORT with 114 bytes unread [ 282.120483][ T6897] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 282.334168][ T4353] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 282.414751][ T5026] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 282.425811][ T5026] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 282.435640][ T5026] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 282.443659][ T5026] usb 5-1: media controller created [ 282.536741][ T4353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 282.551753][ T4353] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 282.570814][ T4353] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 282.580183][ T4353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.593723][ T4353] usb 2-1: Product: syz [ 282.598277][ T4353] usb 2-1: Manufacturer: syz [ 282.602963][ T4353] usb 2-1: SerialNumber: syz [ 282.631628][ T4353] usb 2-1: config 0 descriptor?? [ 282.666962][ T4353] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 282.900228][ T6861] loop1: detected capacity change from 0 to 16 [ 282.959261][ T6861] erofs: (device loop1): mounted with root inode @ nid 36. [ 283.057290][ T5026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.134754][ T5026] zl10353_read_register: readreg error (reg=127, ret==0) [ 283.141865][ T5026] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 283.157662][ T5026] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 283.169390][ T5026] usb 5-1: USB disconnect, device number 20 [ 283.223629][ T5026] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 283.251892][ T4723] usb 2-1: USB disconnect, device number 14 [ 283.995416][ T6904] netlink: 'syz.0.705': attribute type 1 has an invalid length. [ 285.043138][ T6923] loop0: detected capacity change from 0 to 16 [ 285.068353][ T6923] erofs: (device loop0): mounted with root inode @ nid 36. [ 285.378992][ T6925] dccp_close: ABORT with 114 bytes unread [ 285.432015][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'. [ 286.308099][ T6935] loop4: detected capacity change from 0 to 164 [ 286.318838][ T6935] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 286.665034][ T6951] netlink: 56 bytes leftover after parsing attributes in process `syz.3.717'. [ 287.102667][ T6924] loop1: detected capacity change from 0 to 32768 [ 287.154042][ T6924] ERROR: (device loop1): diAllocBit: iag inconsistent [ 287.154042][ T6924] [ 287.733806][ T6924] ialloc: diAlloc returned -5! [ 288.271294][ T6979] device dummy0 entered promiscuous mode [ 288.291091][ T6979] device dummy0 left promiscuous mode [ 288.314264][ T5026] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 288.398008][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 288.414811][ T6986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.728'. [ 288.602481][ T5026] usb 1-1: Using ep0 maxpacket: 16 [ 288.619469][ T5026] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 288.649221][ T5026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.668852][ T5026] usb 1-1: Product: syz [ 288.676953][ T5026] usb 1-1: Manufacturer: syz [ 288.681827][ T5026] usb 1-1: SerialNumber: syz [ 288.686112][ T6993] 9pnet_fd: Insufficient options for proto=fd [ 288.692381][ T5026] usb 1-1: config 0 descriptor?? [ 288.718888][ T6994] user requested TSC rate below hardware speed [ 288.959919][ T7001] loop1: detected capacity change from 0 to 512 [ 288.972740][ T7001] EXT4-fs: inline encryption not supported [ 288.980285][ T7001] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.997416][ T7001] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.033720][ T7001] EXT4-fs (loop1): Test dummy encryption mode enabled [ 289.042222][ T7001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 289.051925][ T7001] EXT4-fs (loop1): orphan cleanup on readonly fs [ 289.064677][ T7001] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.737: inode #13: comm syz.1.737: iget: illegal inode # [ 289.084193][ T7001] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.737: couldn't read orphan inode 13 (err -117) [ 289.116043][ T5026] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 289.122856][ T7001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 289.147076][ T5026] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.204005][ T5026] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 289.206336][ T7001] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 289.222675][ T7001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 289.233426][ T7001] EXT4-fs error (device loop1): __ext4_remount:6618: comm syz.1.737: Abort forced by user [ 289.242891][ T5026] usb 1-1: media controller created [ 289.247298][ T7001] EXT4-fs (loop1): Remounting filesystem read-only [ 289.258699][ T7001] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 289.271325][ T5026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.337474][ T5026] zl10353_read_register: readreg error (reg=127, ret==0) [ 289.356930][ T5026] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 289.365237][ T5026] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 289.390002][ T5026] usb 1-1: USB disconnect, device number 13 [ 289.463674][ T5026] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 289.724803][ T7016] ptrace attach of "./syz-executor exec"[7017] was attempted by "./syz-executor exec"[7016] [ 290.673025][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 291.140278][ T7041] loop1: detected capacity change from 0 to 128 [ 291.243713][ T4382] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 291.434265][ T7048] loop1: detected capacity change from 0 to 1024 [ 291.454345][ T4312] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 291.506881][ T7048] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 291.533102][ T7048] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.656098][ T4312] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 291.682312][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.708039][ T7048] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.751: inode has both inline data and extents flags [ 291.735763][ T4312] usb 5-1: config 0 descriptor?? [ 291.751540][ T4312] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 291.775871][ T7052] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.751: inode has both inline data and extents flags [ 291.892960][ T7052] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.751: inode has both inline data and extents flags [ 291.914270][ T7042] loop0: detected capacity change from 0 to 32768 [ 292.412092][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 292.429740][ T7042] XFS (loop0): Mounting V5 Filesystem [ 293.344813][ T4312] gspca_cpia1: usb_control_msg 01, error -110 [ 293.809357][ T4312] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 294.763159][ T7066] ptrace attach of "./syz-executor exec"[7067] was attempted by "./syz-executor exec"[7066] [ 295.489523][ T7042] XFS (loop0): Ending clean mount [ 295.616914][ T7] usb 5-1: USB disconnect, device number 21 [ 295.660404][ T4268] XFS (loop0): Unmounting Filesystem [ 295.983853][ T7083] loop1: detected capacity change from 0 to 65 [ 296.234265][ T7083] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 296.767125][ T5033] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 296.950552][ T7103] netlink: 40 bytes leftover after parsing attributes in process `syz.3.768'. [ 296.964434][ T5033] usb 5-1: Using ep0 maxpacket: 8 [ 296.979218][ T5033] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 296.990662][ T5033] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.006589][ T5033] usb 5-1: config 0 has no interface number 0 [ 297.020932][ T5033] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 297.036594][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 297.036607][ T26] audit: type=1326 audit(1762844276.302:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.3.768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18db98f6c9 code=0x0 [ 297.069871][ T5033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.079791][ T5033] usb 5-1: Product: syz [ 297.084885][ T5033] usb 5-1: Manufacturer: syz [ 297.089939][ T5033] usb 5-1: SerialNumber: syz [ 297.107636][ T5033] usb 5-1: config 0 descriptor?? [ 297.121665][ T5033] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 297.128534][ T5033] usb 5-1: No valid video chain found. [ 297.368217][ T26] audit: type=1326 audit(1762844276.612:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db1f8f6c9 code=0x7ffc0000 [ 297.396301][ T26] audit: type=1326 audit(1762844276.612:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db1f8f6c9 code=0x7ffc0000 [ 297.430372][ T26] audit: type=1326 audit(1762844276.622:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1db1f8f6c9 code=0x7ffc0000 [ 297.452842][ T26] audit: type=1326 audit(1762844276.622:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db1f8f6c9 code=0x7ffc0000 [ 297.571889][ T26] audit: type=1326 audit(1762844276.622:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db1f8f6c9 code=0x7ffc0000 [ 297.703662][ T7116] loop4: detected capacity change from 0 to 64 [ 298.063250][ T26] audit: type=1326 audit(1762844276.622:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1db1f8f6c9 code=0x7ffc0000 [ 298.337484][ T26] audit: type=1326 audit(1762844276.622:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db1f8f6c9 code=0x7ffc0000 [ 298.728188][ T26] audit: type=1326 audit(1762844276.622:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db1f8f6c9 code=0x7ffc0000 [ 299.048897][ T26] audit: type=1326 audit(1762844276.622:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1db1f8f6c9 code=0x7ffc0000 [ 301.420350][ T4851] usb 5-1: USB disconnect, device number 22 [ 301.577652][ T7126] loop1: detected capacity change from 0 to 32768 [ 301.669529][ T7126] XFS (loop1): Mounting V5 Filesystem [ 301.744193][ T4850] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 301.802830][ T7126] XFS (loop1): Ending clean mount [ 301.867657][ T7126] XFS (loop1): Quotacheck needed: Please wait. [ 301.934354][ T4359] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2a9/0x1060, inode 0x424 dinode [ 301.964310][ T4850] usb 1-1: Using ep0 maxpacket: 16 [ 301.972352][ T4850] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.992936][ T4359] XFS (loop1): Unmount and run xfs_repair [ 302.008318][ T4359] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 302.016204][ T4850] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.043077][ T4359] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 302.072598][ T4850] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 302.093690][ T4359] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 302.113227][ T4850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.121675][ T4359] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 302.150044][ T4850] usb 1-1: config 0 descriptor?? [ 302.155298][ T4359] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 04 1a 4.Xh............ [ 302.174369][ T4359] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 302.186685][ T4850] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 302.205981][ T4359] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 11 ad c0 55 ...............U [ 302.225765][ T4359] 00000060: ff ff ff ff de 0a af 16 00 00 00 00 00 07 00 00 ................ [ 302.244135][ T4359] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 302.272117][ T7165] loop4: detected capacity change from 0 to 4096 [ 302.308524][ T7126] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 302.371438][ T7165] NILFS (loop4): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0 [ 302.383209][ T7173] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.414053][ T7165] NILFS (loop4): error -5 getting root inode [ 302.448324][ T4265] XFS (loop1): Unmounting Filesystem [ 305.196872][ T5026] usb 1-1: USB disconnect, device number 14 [ 305.635202][ T4851] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 305.749156][ T7209] overlayfs: failed to clone upperpath [ 305.834263][ T4851] usb 2-1: Using ep0 maxpacket: 8 [ 305.850029][ T4851] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 305.879924][ T4851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.897754][ T4851] usb 2-1: config 0 has no interface number 0 [ 305.918924][ T4851] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 305.947095][ T4851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.968434][ T4851] usb 2-1: Product: syz [ 305.972651][ T4851] usb 2-1: Manufacturer: syz [ 306.028215][ T4851] usb 2-1: SerialNumber: syz [ 306.077087][ T4851] usb 2-1: config 0 descriptor?? [ 306.107841][ T4851] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 306.492259][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 306.492289][ T26] audit: type=1326 audit(1762844285.752:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.1.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 306.647963][ T4851] usb 2-1: No valid video chain found. [ 307.022690][ T26] audit: type=1326 audit(1762844285.792:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.1.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 307.280693][ T7222] loop1: detected capacity change from 0 to 64 [ 307.348782][ T26] audit: type=1326 audit(1762844285.802:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.1.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 307.691410][ T26] audit: type=1326 audit(1762844285.802:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.1.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 307.714287][ T26] audit: type=1326 audit(1762844285.802:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.1.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 307.741759][ T4312] usb 2-1: USB disconnect, device number 15 [ 307.800584][ T26] audit: type=1326 audit(1762844285.822:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.1.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 307.825061][ T4851] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 307.931763][ T26] audit: type=1326 audit(1762844285.832:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.1.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 307.988029][ T26] audit: type=1326 audit(1762844285.832:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.1.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 308.041192][ T26] audit: type=1326 audit(1762844285.842:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.1.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 308.071698][ T4851] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.094137][ T26] audit: type=1326 audit(1762844285.842:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.1.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10498f6c9 code=0x7ffc0000 [ 308.102182][ T4851] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.199139][ T4851] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.228678][ T4851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.238787][ T4851] usb 1-1: Product: syz [ 308.242975][ T4851] usb 1-1: Manufacturer: syz [ 308.259039][ T4851] usb 1-1: SerialNumber: syz [ 308.332771][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 308.695756][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.774770][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.027379][ T4851] usb 1-1: 0:2 : does not exist [ 309.054525][ T4851] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 309.060075][ T7249] loop4: detected capacity change from 0 to 512 [ 309.068597][ T5027] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 309.123768][ T4851] usb 1-1: USB disconnect, device number 15 [ 309.265997][ T5027] usb 2-1: config 0 has no interfaces? [ 309.271627][ T5027] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 309.322210][ T5027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.354879][ T5027] usb 2-1: config 0 descriptor?? [ 309.421922][ T4382] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.682841][ T5027] usb 2-1: USB disconnect, device number 16 [ 309.910233][ T7256] netlink: 216 bytes leftover after parsing attributes in process `syz.4.812'. [ 309.932373][ T7258] FAULT_INJECTION: forcing a failure. [ 309.932373][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 309.992656][ T7258] CPU: 0 PID: 7258 Comm: syz.0.813 Not tainted syzkaller #0 [ 309.999997][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.010078][ T7258] Call Trace: [ 310.013365][ T7258] [ 310.016310][ T7258] dump_stack_lvl+0x168/0x22e [ 310.021007][ T7258] ? show_regs_print_info+0x12/0x12 [ 310.026227][ T7258] ? load_image+0x3b0/0x3b0 [ 310.030756][ T7258] ? __might_sleep+0xd0/0xd0 [ 310.035368][ T7258] ? __lock_acquire+0x7c50/0x7c50 [ 310.040416][ T7258] should_fail_ex+0x399/0x4d0 [ 310.045117][ T7258] should_failslab+0x5/0x20 [ 310.049639][ T7258] slab_pre_alloc_hook+0x59/0x310 [ 310.054689][ T7258] kmem_cache_alloc_node+0x5a/0x320 [ 310.059906][ T7258] ? __alloc_skb+0xfc/0x7e0 [ 310.064437][ T7258] __alloc_skb+0xfc/0x7e0 [ 310.068784][ T7258] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 310.075050][ T7258] netlink_sendmsg+0x645/0xbc0 [ 310.079843][ T7258] ? netlink_getsockopt+0x540/0x540 [ 310.085063][ T7258] ? aa_sock_msg_perm+0x94/0x150 [ 310.090023][ T7258] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 310.095323][ T7258] ? security_socket_sendmsg+0x7c/0xa0 [ 310.100798][ T7258] ? netlink_getsockopt+0x540/0x540 [ 310.106011][ T7258] ____sys_sendmsg+0x59b/0x970 [ 310.110802][ T7258] ? __sys_sendmsg_sock+0x30/0x30 [ 310.115840][ T7258] ? __import_iovec+0x315/0x500 [ 310.120716][ T7258] ? import_iovec+0x6f/0xa0 [ 310.125248][ T7258] ___sys_sendmsg+0x21c/0x290 [ 310.129946][ T7258] ? __sys_sendmsg+0x270/0x270 [ 310.134743][ T7258] ? __lock_acquire+0x7c50/0x7c50 [ 310.139800][ T7258] ? __fdget+0x17c/0x200 [ 310.144062][ T7258] __se_sys_sendmsg+0x19e/0x270 [ 310.148933][ T7258] ? __x64_sys_sendmsg+0x80/0x80 [ 310.153903][ T7258] ? lockdep_hardirqs_on+0x94/0x140 [ 310.159125][ T7258] do_syscall_64+0x4c/0xa0 [ 310.163563][ T7258] ? clear_bhb_loop+0x60/0xb0 [ 310.168257][ T7258] ? clear_bhb_loop+0x60/0xb0 [ 310.172949][ T7258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.178855][ T7258] RIP: 0033:0x7f8e7078f6c9 [ 310.183284][ T7258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.202904][ T7258] RSP: 002b:00007f8e716c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.211335][ T7258] RAX: ffffffffffffffda RBX: 00007f8e709e5fa0 RCX: 00007f8e7078f6c9 [ 310.219316][ T7258] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004 [ 310.227296][ T7258] RBP: 00007f8e716c7090 R08: 0000000000000000 R09: 0000000000000000 [ 310.235278][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.243258][ T7258] R13: 00007f8e709e6038 R14: 00007f8e709e5fa0 R15: 00007ffd3be92538 [ 310.251256][ T7258] [ 311.008955][ T7270] tipc: Started in network mode [ 311.085024][ T7270] tipc: Node identity 4, cluster identity 4711 [ 311.215106][ T7270] tipc: Node number set to 4 [ 311.293757][ T7271] loop4: detected capacity change from 0 to 1024 [ 311.429655][ T7271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 311.482782][ T7283] loop0: detected capacity change from 0 to 2048 [ 311.512557][ T7283] NILFS (loop0): invalid segment: Magic number mismatch [ 311.519605][ T7283] NILFS (loop0): trying rollback from an earlier position [ 311.532445][ T7283] NILFS (loop0): recovery complete [ 311.573496][ T7270] ================================================================== [ 311.581057][ T7285] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.581578][ T7270] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x17c1/0x1e90 [ 311.581605][ T7270] Read of size 18446744073709550592 at addr ffff88802554dc00 by task syz.4.817/7270 [ 311.609258][ T7270] [ 311.611591][ T7270] CPU: 0 PID: 7270 Comm: syz.4.817 Not tainted syzkaller #0 [ 311.618893][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 311.628979][ T7270] Call Trace: [ 311.632278][ T7270] [ 311.635226][ T7270] dump_stack_lvl+0x168/0x22e [ 311.639921][ T7270] ? __lock_acquire+0x7c50/0x7c50 [ 311.644964][ T7270] ? show_regs_print_info+0x12/0x12 [ 311.650176][ T7270] ? load_image+0x3b0/0x3b0 [ 311.654701][ T7270] ? __virt_addr_valid+0x465/0x540 [ 311.659827][ T7270] ? ext4_xattr_set_entry+0x17c1/0x1e90 [ 311.665388][ T7270] print_report+0xa8/0x210 [ 311.669819][ T7270] kasan_report+0x10b/0x140 [ 311.674346][ T7270] ? ext4_xattr_set_entry+0x17c1/0x1e90 [ 311.679909][ T7270] ? ext4_xattr_set_entry+0x17c1/0x1e90 [ 311.685474][ T7270] kasan_check_range+0x27b/0x290 [ 311.690433][ T7270] memmove+0x25/0x60 [ 311.694345][ T7270] ext4_xattr_set_entry+0x17c1/0x1e90 [ 311.699741][ T7270] ext4_xattr_block_set+0xadf/0x32a0 [ 311.705048][ T7270] ? ext4_destroy_inode+0x200/0x200 [ 311.710272][ T7270] ? proc_nr_inodes+0x2f0/0x2f0 [ 311.715140][ T7270] ? _raw_spin_unlock+0x24/0x40 [ 311.720010][ T7270] ? iput+0x768/0x980 [ 311.724008][ T7270] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 311.729488][ T7270] ? ext4_xattr_ibody_set+0x509/0x690 [ 311.734881][ T7270] ext4_xattr_set_handle+0xbd5/0x12b0 [ 311.740272][ T7270] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 311.746273][ T7270] ext4_xattr_set+0x22a/0x320 [ 311.750968][ T7270] ? ext4_xattr_set_credits+0x290/0x290 [ 311.756530][ T7270] ? posix_xattr_acl+0x8f/0xb0 [ 311.761308][ T7270] ? evm_protect_xattr+0x333/0x990 [ 311.766437][ T7270] ? ext4_xattr_trusted_get+0x40/0x40 [ 311.771828][ T7270] __vfs_setxattr+0x3e0/0x420 [ 311.776529][ T7270] __vfs_setxattr_noperm+0x129/0x5e0 [ 311.781832][ T7270] vfs_setxattr+0x168/0x2f0 [ 311.786354][ T7270] ? xattr_permission+0x500/0x500 [ 311.791392][ T7270] ? _copy_from_user+0x10b/0x170 [ 311.796341][ T7270] ? setxattr+0x243/0x2d0 [ 311.800686][ T7270] setxattr+0x2b2/0x2d0 [ 311.804862][ T7270] ? path_setxattr+0x280/0x280 [ 311.809650][ T7270] ? __mnt_want_write+0x21f/0x2a0 [ 311.814697][ T7270] path_setxattr+0x142/0x280 [ 311.819302][ T7270] ? simple_xattr_list_add+0xf0/0xf0 [ 311.824601][ T7270] ? lock_chain_count+0x20/0x20 [ 311.829471][ T7270] __x64_sys_lsetxattr+0xb4/0xd0 [ 311.834429][ T7270] do_syscall_64+0x4c/0xa0 [ 311.838859][ T7270] ? clear_bhb_loop+0x60/0xb0 [ 311.843546][ T7270] ? clear_bhb_loop+0x60/0xb0 [ 311.848236][ T7270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.854144][ T7270] RIP: 0033:0x7f1db1f8f6c9 [ 311.858568][ T7270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.878189][ T7270] RSP: 002b:00007f1db2d8a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 311.886622][ T7270] RAX: ffffffffffffffda RBX: 00007f1db21e5fa0 RCX: 00007f1db1f8f6c9 [ 311.894605][ T7270] RDX: 0000200000000380 RSI: 00002000000000c0 RDI: 0000200000000100 [ 311.902571][ T7270] RBP: 00007f1db2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 311.910535][ T7270] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 311.918497][ T7270] R13: 00007f1db21e6038 R14: 00007f1db21e5fa0 R15: 00007fff3f2065d8 [ 311.926467][ T7270] [ 311.929518][ T7270] [ 311.931830][ T7270] Allocated by task 7270: [ 311.936142][ T7270] kasan_set_track+0x4b/0x70 [ 311.940727][ T7270] __kasan_kmalloc+0x8e/0xa0 [ 311.945307][ T7270] __kmalloc_node_track_caller+0xae/0x230 [ 311.951019][ T7270] kmemdup+0x27/0x60 [ 311.954912][ T7270] ext4_xattr_block_set+0x9e1/0x32a0 [ 311.960190][ T7270] ext4_xattr_set_handle+0xbd5/0x12b0 [ 311.965552][ T7270] ext4_xattr_set+0x22a/0x320 [ 311.970217][ T7270] __vfs_setxattr+0x3e0/0x420 [ 311.974884][ T7270] __vfs_setxattr_noperm+0x129/0x5e0 [ 311.980165][ T7270] vfs_setxattr+0x168/0x2f0 [ 311.984654][ T7270] setxattr+0x2b2/0x2d0 [ 311.988799][ T7270] path_setxattr+0x142/0x280 [ 311.993379][ T7270] __x64_sys_lsetxattr+0xb4/0xd0 [ 311.998305][ T7270] do_syscall_64+0x4c/0xa0 [ 312.002709][ T7270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.008593][ T7270] [ 312.010903][ T7270] Last potentially related work creation: [ 312.016601][ T7270] kasan_save_stack+0x3a/0x60 [ 312.021265][ T7270] __kasan_record_aux_stack+0xb2/0xc0 [ 312.026628][ T7270] call_rcu+0x154/0x980 [ 312.030774][ T7270] sctp_association_free+0x69d/0x7e0 [ 312.036053][ T7270] sctp_do_sm+0x36a4/0x5500 [ 312.040542][ T7270] sctp_assoc_bh_rcv+0x3ee/0x630 [ 312.045466][ T7270] sctp_rcv+0x2161/0x2930 [ 312.049783][ T7270] ip_protocol_deliver_rcu+0x3ad/0x780 [ 312.055229][ T7270] ip_local_deliver_finish+0x2c7/0x510 [ 312.060672][ T7270] NF_HOOK+0x2ff/0x390 [ 312.064724][ T7270] NF_HOOK+0x2ff/0x390 [ 312.068783][ T7270] __netif_receive_skb+0xcc/0x290 [ 312.073795][ T7270] process_backlog+0x37c/0x6e0 [ 312.078546][ T7270] __napi_poll+0xc0/0x460 [ 312.082863][ T7270] net_rx_action+0x5b1/0xad0 [ 312.087442][ T7270] handle_softirqs+0x2a1/0x920 [ 312.092196][ T7270] run_ksoftirqd+0x98/0xf0 [ 312.096598][ T7270] smpboot_thread_fn+0x64a/0xa40 [ 312.101524][ T7270] kthread+0x29d/0x330 [ 312.105582][ T7270] ret_from_fork+0x1f/0x30 [ 312.109988][ T7270] [ 312.112299][ T7270] The buggy address belongs to the object at ffff88802554d800 [ 312.112299][ T7270] which belongs to the cache kmalloc-1k of size 1024 [ 312.126350][ T7270] The buggy address is located 0 bytes to the right of [ 312.126350][ T7270] 1024-byte region [ffff88802554d800, ffff88802554dc00) [ 312.140042][ T7270] [ 312.142353][ T7270] The buggy address belongs to the physical page: [ 312.148760][ T7270] page:ffffea0000955200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25548 [ 312.158893][ T7270] head:ffffea0000955200 order:3 compound_mapcount:0 compound_pincount:0 [ 312.167203][ T7270] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 312.175177][ T7270] raw: 00fff00000010200 ffffea00016a2000 dead000000000002 ffff888017441dc0 [ 312.183741][ T7270] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 312.192304][ T7270] page dumped because: kasan: bad access detected [ 312.198701][ T7270] page_owner tracks the page as allocated [ 312.204438][ T7270] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4255, tgid 4255 (syz-executor), ts 57884316698, free_ts 47768251254 [ 312.225785][ T7270] post_alloc_hook+0x173/0x1a0 [ 312.230537][ T7270] get_page_from_freelist+0x1a26/0x1ac0 [ 312.236073][ T7270] __alloc_pages+0x1df/0x4e0 [ 312.240648][ T7270] alloc_slab_page+0x5d/0x160 [ 312.245308][ T7270] new_slab+0x87/0x2c0 [ 312.249360][ T7270] ___slab_alloc+0xbc6/0x1230 [ 312.254032][ T7270] __kmem_cache_alloc_node+0x1a0/0x260 [ 312.259476][ T7270] __kmalloc_node_track_caller+0x9e/0x230 [ 312.265188][ T7270] __alloc_skb+0x22a/0x7e0 [ 312.269588][ T7270] tcp_stream_alloc_skb+0x3e/0x330 [ 312.274686][ T7270] tcp_sendmsg_locked+0xd1c/0x3f10 [ 312.279786][ T7270] tcp_sendmsg+0x2b/0x40 [ 312.284019][ T7270] sock_write_iter+0x2b5/0x3a0 [ 312.288771][ T7270] vfs_write+0x44c/0x960 [ 312.293003][ T7270] ksys_write+0x143/0x240 [ 312.297321][ T7270] do_syscall_64+0x4c/0xa0 [ 312.301727][ T7270] page last free stack trace: [ 312.306381][ T7270] free_unref_page_prepare+0x8b4/0x9a0 [ 312.311826][ T7270] free_unref_page+0x2e/0x3f0 [ 312.316488][ T7270] skb_release_data+0x499/0x7c0 [ 312.321323][ T7270] napi_consume_skb+0x12f/0x1d0 [ 312.326159][ T7270] net_rx_action+0x3d8/0xad0 [ 312.330736][ T7270] handle_softirqs+0x2a1/0x920 [ 312.335488][ T7270] __irq_exit_rcu+0x12f/0x220 [ 312.340152][ T7270] irq_exit_rcu+0x5/0x20 [ 312.344384][ T7270] common_interrupt+0xb5/0xd0 [ 312.349049][ T7270] asm_common_interrupt+0x22/0x40 [ 312.354060][ T7270] [ 312.356370][ T7270] Memory state around the buggy address: [ 312.361980][ T7270] ffff88802554db00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.370025][ T7270] ffff88802554db80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.378072][ T7270] >ffff88802554dc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 312.386113][ T7270] ^ [ 312.390161][ T7270] ffff88802554dc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 312.398207][ T7270] ffff88802554dd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 312.406248][ T7270] ================================================================== [ 312.619996][ T7270] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 312.627233][ T7270] CPU: 1 PID: 7270 Comm: syz.4.817 Not tainted syzkaller #0 [ 312.634535][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.644596][ T7270] Call Trace: [ 312.647883][ T7270] [ 312.650825][ T7270] dump_stack_lvl+0x168/0x22e [ 312.655522][ T7270] ? memcpy+0x3c/0x60 [ 312.659498][ T7270] ? show_regs_print_info+0x12/0x12 [ 312.664685][ T7270] ? load_image+0x3b0/0x3b0 [ 312.669209][ T7270] panic+0x2c9/0x710 [ 312.673098][ T7270] ? bpf_jit_dump+0xd0/0xd0 [ 312.677594][ T7270] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 312.683486][ T7270] ? _raw_spin_unlock+0x40/0x40 [ 312.688336][ T7270] ? print_memory_metadata+0x314/0x400 [ 312.693788][ T7270] check_panic_on_warn+0x80/0xa0 [ 312.698718][ T7270] ? ext4_xattr_set_entry+0x17c1/0x1e90 [ 312.704252][ T7270] end_report+0x66/0x110 [ 312.708484][ T7270] kasan_report+0x118/0x140 [ 312.712977][ T7270] ? ext4_xattr_set_entry+0x17c1/0x1e90 [ 312.718545][ T7270] ? ext4_xattr_set_entry+0x17c1/0x1e90 [ 312.724086][ T7270] kasan_check_range+0x27b/0x290 [ 312.729021][ T7270] memmove+0x25/0x60 [ 312.732904][ T7270] ext4_xattr_set_entry+0x17c1/0x1e90 [ 312.738271][ T7270] ext4_xattr_block_set+0xadf/0x32a0 [ 312.743542][ T7270] ? ext4_destroy_inode+0x200/0x200 [ 312.748732][ T7270] ? proc_nr_inodes+0x2f0/0x2f0 [ 312.753569][ T7270] ? _raw_spin_unlock+0x24/0x40 [ 312.758408][ T7270] ? iput+0x768/0x980 [ 312.762380][ T7270] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 312.767828][ T7270] ? ext4_xattr_ibody_set+0x509/0x690 [ 312.773191][ T7270] ext4_xattr_set_handle+0xbd5/0x12b0 [ 312.778561][ T7270] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 312.784535][ T7270] ext4_xattr_set+0x22a/0x320 [ 312.789204][ T7270] ? ext4_xattr_set_credits+0x290/0x290 [ 312.794740][ T7270] ? posix_xattr_acl+0x8f/0xb0 [ 312.799490][ T7270] ? evm_protect_xattr+0x333/0x990 [ 312.804589][ T7270] ? ext4_xattr_trusted_get+0x40/0x40 [ 312.809948][ T7270] __vfs_setxattr+0x3e0/0x420 [ 312.814622][ T7270] __vfs_setxattr_noperm+0x129/0x5e0 [ 312.819897][ T7270] vfs_setxattr+0x168/0x2f0 [ 312.824386][ T7270] ? xattr_permission+0x500/0x500 [ 312.829396][ T7270] ? _copy_from_user+0x10b/0x170 [ 312.834321][ T7270] ? setxattr+0x243/0x2d0 [ 312.838638][ T7270] setxattr+0x2b2/0x2d0 [ 312.842780][ T7270] ? path_setxattr+0x280/0x280 [ 312.847564][ T7270] ? __mnt_want_write+0x21f/0x2a0 [ 312.852578][ T7270] path_setxattr+0x142/0x280 [ 312.857165][ T7270] ? simple_xattr_list_add+0xf0/0xf0 [ 312.862438][ T7270] ? lock_chain_count+0x20/0x20 [ 312.867276][ T7270] __x64_sys_lsetxattr+0xb4/0xd0 [ 312.872201][ T7270] do_syscall_64+0x4c/0xa0 [ 312.876605][ T7270] ? clear_bhb_loop+0x60/0xb0 [ 312.881267][ T7270] ? clear_bhb_loop+0x60/0xb0 [ 312.885929][ T7270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.891807][ T7270] RIP: 0033:0x7f1db1f8f6c9 [ 312.896210][ T7270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.915806][ T7270] RSP: 002b:00007f1db2d8a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 312.924209][ T7270] RAX: ffffffffffffffda RBX: 00007f1db21e5fa0 RCX: 00007f1db1f8f6c9 [ 312.932169][ T7270] RDX: 0000200000000380 RSI: 00002000000000c0 RDI: 0000200000000100 [ 312.940126][ T7270] RBP: 00007f1db2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 312.948082][ T7270] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 312.956037][ T7270] R13: 00007f1db21e6038 R14: 00007f1db21e5fa0 R15: 00007fff3f2065d8 [ 312.964005][ T7270] [ 312.967259][ T7270] Kernel Offset: disabled [ 312.971574][ T7270] Rebooting in 86400 seconds..