last executing test programs: 8m37.074240135s ago: executing program 32 (id=34): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) syz_clone(0xa1208200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x400) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001800010000000000fcdbdf251d01080005000d0001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21701, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x1, 0x153c, &(0x7f0000001340)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x800, @mcast1={0xff, 0x7}, 0xfffffffc}}, {{0xa, 0x4e24, 0xffff, @mcast1, 0x4000}}}, 0x108) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) 8m32.051463951s ago: executing program 3 (id=51): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) syz_emit_ethernet(0x0, 0x0, 0x0) 8m31.872029415s ago: executing program 3 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x4448, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80040, 0x40) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) setfsgid(0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x28014a0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x20000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mremap(&(0x7f0000741000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000af7000/0x3000)=nil) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 8m28.48733634s ago: executing program 3 (id=57): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, 0x0, 0xffffffffffffffff) fcntl$setown(r1, 0x8, r0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000000000000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000002080)={0xffffffffffffffff, 0x2, 0x7, 0x1, 0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x2, 0x246, 0x10007, 0x5, 0xfffffbfffffffff8, 0x1, 0x9, 0xf6b}) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1, 0x105fc, &(0x7f0000010600)="$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") ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000100)=0x1) r5 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) 8m26.45342482s ago: executing program 3 (id=65): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./proc\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 8m25.240204891s ago: executing program 3 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x80003, 0x200000004, 0x40000000004, 0x20000a0e1, 0x100000000, 0x0, 0x200000003, 0x9}, {0x8}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x6c}, 0x2, @in6=@loopback, 0x3502, 0x3, 0x8, 0x2, 0x9075, 0xef, 0xc5e}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e0500000603000003000000fcffffff05010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) write$UHID_INPUT2(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x00!'], 0xc) 8m24.006998672s ago: executing program 3 (id=71): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f000000ef40)=[{{&(0x7f000000abc0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f000000afc0)=[{&(0x7f000000ac40)="8c80fd6803293e3a1ae0b0ced0e6", 0xe}], 0x1}}, {{&(0x7f000000c280)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}}], 0x2, 0x1) 8m23.788396678s ago: executing program 33 (id=71): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f000000ef40)=[{{&(0x7f000000abc0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f000000afc0)=[{&(0x7f000000ac40)="8c80fd6803293e3a1ae0b0ced0e6", 0xe}], 0x1}}, {{&(0x7f000000c280)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}}], 0x2, 0x1) 7m45.769480978s ago: executing program 6 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x23, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000718000/0x2000)=nil) 7m42.643515056s ago: executing program 6 (id=189): mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8410, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2 000\\00 : l\\calhost\n', 0x24) 7m41.432223986s ago: executing program 6 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) syz_open_dev$loop(0x0, 0x6, 0x14f882) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x5821c98b097a09f2) 7m38.920367639s ago: executing program 6 (id=197): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) 7m38.132323839s ago: executing program 6 (id=202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x80000) 7m37.831000716s ago: executing program 6 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x40000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, &(0x7f00000000c0)={0x80, 0x6, 0x7, 0x40, 0x6d22, 0x1ff, 0x3, 0x8001}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000400)}, {&(0x7f0000000ac0)=""/226, 0xe2}], 0x2, &(0x7f0000000c00)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x20) ioctl$SNAPSHOT_FREE(r4, 0x3305) 7m22.47079405s ago: executing program 34 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x40000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, &(0x7f00000000c0)={0x80, 0x6, 0x7, 0x40, 0x6d22, 0x1ff, 0x3, 0x8001}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000400)}, {&(0x7f0000000ac0)=""/226, 0xe2}], 0x2, &(0x7f0000000c00)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x20) ioctl$SNAPSHOT_FREE(r4, 0x3305) 7m6.680891495s ago: executing program 4 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000440)='./dev/ttyS0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}}, {{&(0x7f0000000300)=@file={0x1, './dev/ttyS0\x00'}, 0x6e, 0x0}}], 0x2, 0x604e054) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private=0x4000, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 7m5.107469624s ago: executing program 4 (id=307): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x75, 0x943f41) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x2468) 7m4.961111978s ago: executing program 4 (id=309): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockname$llc(r0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$netlink(0x10, 0x3, 0xe) clock_getres(0x3, &(0x7f0000000000)) r2 = getpid() move_pages(r2, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0x4) 7m3.67607861s ago: executing program 4 (id=313): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000940)=@v2={0x2, @aes128, 0x2, '\x00', @b}) 7m0.08031122s ago: executing program 4 (id=320): syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {}, {0xa, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1001fb2f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f406", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m59.348234018s ago: executing program 4 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x23, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000718000/0x2000)=nil) 6m44.232586106s ago: executing program 35 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x23, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000718000/0x2000)=nil) 6m32.034482881s ago: executing program 1 (id=401): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c000000060000000000000001"], 0x0, 0x4a}, 0x28) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000002c0)={0x1, "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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 6m31.586578272s ago: executing program 1 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000004c0)={0x2, 0x1, "e4580c", 0x0, 0x5}) 6m30.556072828s ago: executing program 1 (id=406): prctl$PR_SET_MM(0xd, 0x0, &(0x7f0000004000/0x3000)=nil) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="19ff00ff0300"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r1, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) 6m29.590001352s ago: executing program 1 (id=410): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./proc\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 6m28.613372186s ago: executing program 1 (id=413): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) lseek(r0, 0x800, 0x0) 6m26.664847595s ago: executing program 1 (id=417): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6m26.384545462s ago: executing program 36 (id=417): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m10.789802862s ago: executing program 8 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x75, 0x943f41) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000000c0)=0x2468) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) 4m10.172255197s ago: executing program 8 (id=703): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0x99, &(0x7f0000010140)="$eJzs1yEKAkEYBeDfFXWrxeoNvINHEaMWMSmewSNuNxi2iyMys2GxGVaQ7wsDbx4Dr84keg63VERKx9N5t9nnM/hLVUTMIqKOiOU85/s6d6PSN+1l27Tjz8fT6+B7AQCA71Wx6udnKheP7iP4tuj6euB9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL/2CgAA//8jYCGK") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0xfffffffe, 0x20000000, 0x3, 0x40000000, 0x7fffffff, 0xc, 0x2, 0x4, 0x8, 0x8, 0x6, 0x5, 0x7ff, 0x830, 0x8, 0x10000, 0x9, 0x800, 0x101, 0x2, 0x8001, 0x7, 0x3, 0x4, 0x5, 0x70f]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0xc000003, 0x0, 0x0, 0x3, 0xfffffffc}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x7) ioctl$TIOCSTI(r0, 0x5412, 0x0) 4m4.268364145s ago: executing program 8 (id=719): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_socket_connect_nvme_tcp() ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0xc4}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4m3.310835409s ago: executing program 8 (id=723): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg(r0, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="a8000000000000000701000001000000b2ebdea74984903f01dbac1a744e4b9a26b28eef97d64cee0124e649c90a3a90331e4a48d0a3e0bd32996aae6676cf44db031986736fe4dee36cfc522f17a604e7dc9325eb9b131487bdff4ede16d5b2f6c9b76ad409e3c5fcf15a13367231bcbdff5f56c60e720864a583a0a1e0ff43a1126fb1d5bf9c06ed882cd8ac8ad9b8847d7a196e8eedc2f880f3bce59f5617e0f50fe8d900000050010000000000008400000005"], 0x380}}], 0x1, 0x8008848) 4m1.67161919s ago: executing program 8 (id=727): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x75, 0x943f41) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000000c0)=0x2468) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) 3m58.943310488s ago: executing program 8 (id=731): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200002, &(0x7f0000000440)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f00000006c0)="$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") r0 = open(&(0x7f00000002c0)='./file1\x00', 0x4827e, 0x1bb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) chdir(&(0x7f0000000540)='./cgroup\x00') r4 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x1f5) fchown(r4, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./file2\x00', 0x2060, 0x0, 0x2, 0x200000000000000, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000000)={[{@block_validity}]}, 0x30, 0x538, &(0x7f0000000c80)="$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") fstat(r3, &(0x7f0000000640)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r5, @ANYRES32=r0, @ANYRES32=r3, @ANYRESOCT], 0x32600) 3m43.823899736s ago: executing program 37 (id=731): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200002, &(0x7f0000000440)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f00000006c0)="$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") r0 = open(&(0x7f00000002c0)='./file1\x00', 0x4827e, 0x1bb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) chdir(&(0x7f0000000540)='./cgroup\x00') r4 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x1f5) fchown(r4, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./file2\x00', 0x2060, 0x0, 0x2, 0x200000000000000, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000000)={[{@block_validity}]}, 0x30, 0x538, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDveDdr7262u4UeCgK6lMKCVmtvvG1U9UK5IKGqKlLhhNA2SrxRFDtexU5pQiSSM1ckKnGCP4EDEgekPXHnBgckLuWAFGAFahAIGc14nM0vJ1aI4yb+fKSR33sz8fc9S/Oe/SYzL4CxdTsiNiLiSkS8FxE38/Ik3+LN7pYe9/HT9dntp+uzSXQ67/7tcn7k+mzv+J7r+XuWIt5J88VD4rZW1xZn6vXacp6vtBuPK63VtXsLjZn52nxtqVqdnpq+//qD16qn1taXGr/c+ubCW9/9za8//9HvNr72w7TOX8/3pW07tUC7dD+XiZjcVZZ+cm8NI9gIXMrbc2XUFeFEChHxqYh4OU/vKI2uTgDAcHU6N6Nzc3e+v2SAYwCAT770N/9kJIVy/vt/MgqFcjmbwyu9ENcK9WarffdRc2VpLrI5rFsxUXi0UK/dz+cKb8VEkuansvSzfHVf/kFEPB8RPylezfLl2WZ9blRfegBgzF3fN/7/s9gd/wfgCgEAnGdGcgAYPwfH/4mR1AMAODt+/wPA+Nk1/h92ry4AcAGV9t37nzlYAgBcIMfO/78YP/r+2VQFADgjrv8DwFj59ttvp1tnO3/+9dz7qyuLzffvzdVai+XGymx5trn8uDzfbM5nz+xpHPd+9Wbz8dSrsfJBpV1rtSut1bWHjebKUvth9lzvhzU3FgDA6D3/0pM/JBGx8cbVbIveWg4u/8OF5zSH8XVp1BUARubyqCsAjIz5eCA5Zn/ffxH6sP/fXP0/6gMM353P9Jn/P/q7wX87Z1M9YIjM/8P4ejb/f5Ke4ImvAXCOmf+H8dXpJNbzB4AxM8D1f/8iCBfcia//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBibzLakUM5XAJ6MQqFcjrgREbdiInm0UK/dj4jnIuL3xYlimp+yIhAAnHOFvyT5+l93br4yuVOcj/FXkn8Vs9eI+MHP3v3pBzPt9vJUWv73nfL2h3l59dAAxbNpBwCQu7y/oDdO98bx3kj/8dP12d52lhXc+kZ3cdE07na+9arerXwpJiLi2j+SPY1JTmlh4o3NiHhxf/sLO/tv5Suf7o+fxr4xtPiRtXByT/zCnviFbF/3Nf0sPn0KdYFx8yTtf9487PwrxO3sNT//kr2daSl+fLBzPYFe/7fd2d//dc/3d26Usr7msP7v9qAxXv3tt3bnd/8g29q81Pns5YjtA/1vb0XoUpY6LP4rA8b/0+e+8HK/fZ2fR9yJo+J3U5V2Y7PSWl27t9CYma/N15aq1emp6fuvP3itWsnmqCu9meqD/vrG3ef6xd/ajLjWJ37pmPZ/ecD2/+I/733vi0fE/+qXDotfiBeOiL8REV8ZMP7MtV/1Xb47jT93oP3/7nQ6yc74241/Zc/fpWV3B4z/0Z/X5gY8FAA4A63VtcWZer22fA4Taf0/AdXoJUrDeufre0r+OPqWShxMXIp6bz5qyLGKww+RJkbbLwHD9+ykH3VNAAAAAAAAAAAAAACAflrfyR/5N8Sb4UbdRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6u/wUAAP//JhLM1w==") fstat(r3, &(0x7f0000000640)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r5, @ANYRES32=r0, @ANYRES32=r3, @ANYRESOCT], 0x32600) 13.189405121s ago: executing program 9 (id=1579): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 9.591659751s ago: executing program 9 (id=1594): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmmsg$inet(r0, &(0x7f0000002500), 0x4000000000000e7, 0x2400c8c4) 9.424572615s ago: executing program 9 (id=1595): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000002e00)={0x1, [{0x1, 0x240, 0x8001, &(0x7f0000000500)="6f3d506a5b92fe690f6d286a0443fbfa7abc651a1aa556a3d97dec9001e7aa9cf25d3f2a0ccf71e3a2fe9f7e20ffd8616c331f5c28b1892ee7a5d4395c4980a18297ed36e00f0ccb"}, {0x3, 0x188, 0x5, &(0x7f0000000580)="3e3f33a9bf91ce7a97978b7b4e792d0acda469542763267e4a1a768d0135c6903c86a143c018ccd3c5c81dec5e63474613"}, {0x1, 0x3398, 0xb, &(0x7f00000005c0)="832011b5624f983fc87037cecbed88ba7871cd803ada30007aa9cdaa35389db69e7b687fc03988bf69504054d45b3f6ea3bb7d5cd12b65c7a4d6c8eee0b28c067392cca03f99458a0e16b7978cb30393063037205dc61f0d83aa783db2c1304e1518e14079819b4a5ead524a5e3995d03a162e00994c89d67b25941bfdea2986372367cea244c0166e83b888b479c4cdcc0c54e05606298c32d5d47f6e718c2bd9ce0f4dda462d801534d228f3baf748050b6d409bd5a796ee4ed9df511d76f52d2addb769ed089598b4a44271c0f12f6804ff0210bc4da82b8936e681edac0244d23a98909b6eda0a0ce543f6176304193edf969d4026d17437b7f2e6c59e533b72721fecdea8a2c221384d73d1fa18300cabfc32eea541e9eabffb786de6917fb922e30eb045823a4fd02e5032f1949676a14d08a0a18c7357c922b3223830a7a725e7e8ad3c796c7201161274651721aa043740adb7e0e14d5ad30181721de570f30ec9ebaf7ae984feeac5b4441ac68ad85af57fe42a7fc07de18807a56088d446c156cd212c1745fcc67ae777934110f33e94ae8122b94b23321b7a4c335b73ee367638f5d6d506dbba76d2be0aeb0035b1df22b66ad1808f65275cc965716f0fb13c965063fb08697e36f4f6f3e2be2bc46105e065d4c3c073b45463efcee625ffda722980c887b2e870b0d551d77e2e8419311e05c740ecf450c124d1bb9b3841bbe758112305f88b25e5127a3ad4acaa5d2b12516254efb3e50a5d7666a93ab5cad758f9694d103d4692e47392b57fb32094528942531ca3f31850def2f9bde86052906ba04598992d6fce0011598c6117e8a91e042047cb570df1e937335f6787d8ec8050181b25c08a3cea8eb3f02de9faec2a23b62f3422636ae2952e0a98947d3f4e7abf14513dc875481b053118edbc95c602df34dc7807edeb260db132d7da388f3870e2afe61f0e536393944cfc954579804d448d7ba720d322cd41ae327a6d151823caee9fbc2c047ba06fa8fdc56ccb898f2466685f7b2d16498dce09211c4ee98d4c75ed792230fc23c77c0604fe5b569d07215afcdbae1fe6cc08ca47b2343a9a69e0ae470a29dc29dbd317637d475ffce449a89bdb40a4178b159766c1ab0506976173d63ac67a66ac4b7217808383a034912af2952946cd4e104f8e6e5c95289612bb561d691cd28f5b28872405a258387f5fcbc309728379783fbf8b6c403d6dba9d512522f6e33092562c1ad56a0f139393a71bbba3b196ffde2e7c267af4e47f6613f80059367c12393509b2a644e2c77376f81cf041ec1ac62936023804f64651dd1e0f962b45f1df8fbb1adc9344e431583cf4c356a25e38ac0f2efd7e370a41bfc1e65efa28362e17a4edd5950553f5441cb4d8c262c6761ff1831186559f4ee0f3bd3e0988217c8a44d5990cbf67f039ac7ea4eb5a3db4fcdbd36232577df31807c7ae5597ab2b81b283b4c900903c78ac7c98ebda186967c7794fc87a1a3d9f8ebefed0dcec1b78cb966ec67a4cb6d7c509ada06686bd9b98490a3589a44100436ca7745167426d94369d821ce6d4df27d90554144b428198470a9be35e657145fede1f2dd6a45210edc030f052c5fac78bcc3099fa6aae2584237b4d5926771bae702365b79331b7bf799798d898b7f1eafa171edc65c9a1aaf83fde0f36417609767ca303026f483b2280cf4d5443c75643f693ccc9cc0f0b33f8b8046e6e42cba7b4848b5825d733e42cb25a6eaca256156893bdb46d651face9e7421b6b8d38ba0ada4f830ce5f4634562cea63bcc1acaef3c5ffcb5197d467cbca687fe8c1011383857d3fa755b21a7bfd32514ec2a94ef04ca269896caa77fb89f4d697c281d0894d8ddd6335108742fe37ab9cca4088b9ee50e37c6b423bb3b67c5d807c22d741c6d8bbcf6efe61156e3a11dae6352737d1caff5a1ced10762cb2ddf090403e1282baebfc8f844efe48cfa40b2ea166a34c53c65fd15f357916428ffc142f2787c0b12ea32a824570d784cbba0617cbf33b446028e4de810aa542eb6200ebd8a72476489cf440230be3ddafa4be88deff5e3c28ddb88788f3b6c9e7965bd397388eaf8e4a17a1b478c4bac8a2ae67d3eb362bad54b5128c9ac196e66adfb8d917bccf2be200b648fb15ab813887d7aa724a179b90e1ef85a8cb4acc54b62460fe01cefb7d0f6108a60eefec3f35067b4977003e32873d959b10192e6fa4a25bd2633e1cb856b60add2ade4691e54eb7fcf0bf8cf5945d75e147dc46e760bae90ad1b6f520d60c1e3232ba17256abad87b2d169669059213d8f4afca8e45db9ea1f"}, {0x1, 0x0, 0x72b, &(0x7f00000015c0)}, {0x0, 0x0, 0x8, 0x0}, {0x2, 0x0, 0xe, &(0x7f0000002640)}, {0x2, 0x0, 0xbeef, 0x0}, {0x2, 0x0, 0x0, &(0x7f00000027c0)}, {0x1, 0x0, 0x9, &(0x7f0000002840)}, {0x3, 0x180, 0x9, &(0x7f0000002940)="ff269bd781af767e08fe5aa4241331116650436c8bc0e7ce3e0d0b53a8660a487a103650ff72c9d27f08abcb0f063d1d"}, {0x2, 0x0, 0x1b8, &(0x7f00000029c0)}, {0x0, 0x0, 0xd54, 0x0}, {0x0, 0x128, 0x2, &(0x7f0000002b40)="4d9c313e3f8305285ef44a69002852577621f8d0db97fdbf86120396fa7ea7437578887046"}, {0x0, 0x650, 0x7, &(0x7f0000002b80)="0f1e0e5e6a2f9adbd299241c98f76cbdf8f9eb0d88311d0e70dd1359c72110fd73d29d348a272ba12c85a6f52318bb95f57a3404c536fac60c250be4ce398c516a4be6c7ad2c3298efbabdaf7007c78cd66adbdab0655d694bd0343583d6ac48eaf5a1d77fe9bf9ba38568b2c7e73e70dfaaecdda6411934a9a2ab7c759f0a6e77dddc317958f0c08b4ec9a2e0219a15b3406fd3821407969a93c72c1d1f17a2b55b724160f9ecab7055c6b1d268e3902a99cf5ca4fac9217a851849e11161ab4fedf4b398121ab9fa04"}, {0x3, 0x248, 0x0, &(0x7f0000002c80)="72d902c68b09b8ac36825003ef3653de73ebbf67ea14651e3c07523b870a928c825b9025db6664e49bd1b8b8775641edad1dbad4e1bebd68b40b5690e60dbcf470d3ad4298246056d5"}, {0x1, 0x588, 0x8, &(0x7f0000002d00)="3dd0406c44de9b51389cad3060183b2e0b12ed2b365597769622efa96b17f90aef53dd5d01be5cf1c606fdfbd303affd3a88fc49009524fd1b9638742d3b4d0797edef59257eeb96128ffafe41b7085ca3ed3cd869c22d300294d5099ba5ec32f690de8725aedc17a709921d25948b9c7c2f7faea95d3f8c832fc419044b0e7d13c9a2949cf77de80d133aa7e72f2008a2abd54ea6957f02db767198648898a231ca097c9454ee4b263069a23711618853"}]}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 9.405637176s ago: executing program 0 (id=1596): mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) io_setup(0x202, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, 0x0, 0x0) ptrace(0x10, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) open(0x0, 0x4000, 0x39d) 9.279543099s ago: executing program 0 (id=1597): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@block_validity}, {@nodiscard}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}], [{@dont_measure}, {@audit}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x5) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0x5, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff], [0x1811, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffdf, 0xffffffff, 0x8]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x2, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xa, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x80000001, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000000)={0x0, 0x4, 0xfffffff7, 0x9, 0x101, 0xff, 0x8001, 0x0, 0x7, 0x8, 0x45a, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) 5.684563818s ago: executing program 9 (id=1616): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0, 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101042, 0x1ff) sendfile(r1, r0, 0x0, 0x20000) 4.987428056s ago: executing program 9 (id=1619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f0000003080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) copy_file_range(r2, &(0x7f0000000500), r1, 0x0, 0xa003e458, 0x700000000000000) ftruncate(r1, 0xc) 4.929471157s ago: executing program 0 (id=1622): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd632}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3f, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 4.674498714s ago: executing program 9 (id=1623): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.628271205s ago: executing program 2 (id=1625): syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfc00) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x48, 0xffffffffffffffff) 4.500256548s ago: executing program 0 (id=1627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='cifs\x00', 0x1200010, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x3, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x9, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x4, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0xfffffff3, 0x3, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0xc70, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x3, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x20000006, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x9, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xc47a, 0x136, 0x6]}, 0x45c) fsopen(&(0x7f0000000000)='fuse\x00', 0x0) eventfd2(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 3.544992282s ago: executing program 2 (id=1629): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0, 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101042, 0x1ff) sendfile(r1, r0, 0x0, 0x20000) 3.419352335s ago: executing program 2 (id=1630): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socket(0x2, 0x80805, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x1, {0xa, 0x4e23, 0xa8, @local, 0xe23}}}, 0x3a) 3.130089792s ago: executing program 5 (id=1633): add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x35, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r2, &(0x7f0000000c80)=""/265, 0x109) 3.039467485s ago: executing program 5 (id=1634): unshare(0x2000400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfd, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0xa1081a, &(0x7f0000000640)=ANY=[], 0x21, 0x14fd, &(0x7f00000021c0)="$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") socket$inet6(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$RTC_ALM_SET(r2, 0x40247007, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) socket$inet(0x2, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 2.268137604s ago: executing program 5 (id=1635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f0000003080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) copy_file_range(r2, &(0x7f0000000500), r1, 0x0, 0xa003e458, 0x700000000000000) ftruncate(r1, 0xc) 2.210442585s ago: executing program 7 (id=1636): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[], 0x50) open(0x0, 0x18d03e, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffb000/0x3000)=nil) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 2.071419059s ago: executing program 5 (id=1637): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0x13}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {0x10000}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x27, 0xa0}}]}, 0x13c}}, 0x24000810) 1.992295781s ago: executing program 2 (id=1638): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='offline\n', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory14/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='offline', 0x7) 1.945029082s ago: executing program 5 (id=1639): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1000040, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0xee00, @ANYRES64, @ANYRESOCT, @ANYRES16, @ANYBLOB="2efa45d07f38b38f65c3302f160096b93e33bc2a39e75ce2bf5e7ceeda077daed08c407db98b8f9363b0808034743b787774eea61eecd30de8ebd8e6b9fbec2cd2d3771434ab686ac196100673d68102a8f2df971bfd99da8b44007a2b1d022dd8d381aff46d72eb53d169ec810ac95ba6cada7eff252fa4be6d3cbd2a0c9ee16a7d4c5af1940e8b5b207d1f227e8ef61021c7380344d113614afdf3657ab8284ccca68a2ac11d056ad98b63d8df8880253e38f31908cfe4809f8bf65e5623ff8f3f6202d2369daa1c9bbfdfd212ae354f39c2423a2c0865f74a4ce086da4d9918f2e185"], 0x1, 0x206, &(0x7f0000000480)="$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") rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') 1.915270723s ago: executing program 2 (id=1640): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x20000400) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004040, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x9000) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mount(0x0, 0x0, &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') creat(&(0x7f00000005c0)='./file0\x00', 0x60) mount(0x0, &(0x7f0000000000)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) readv(r3, &(0x7f0000000240)=[{0x0}], 0x1) 1.801743056s ago: executing program 7 (id=1641): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0, 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101042, 0x1ff) sendfile(r1, r0, 0x0, 0x20000) 1.663988809s ago: executing program 7 (id=1642): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x250942, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) io_uring_setup(0x3749, &(0x7f0000000180)={0x0, 0x9aa6, 0x4000, 0x0, 0x21f, 0x0, r3}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) 1.63341821s ago: executing program 0 (id=1643): setns(0xc9, 0x0) unshare(0x22020600) r0 = socket(0x8, 0x2, 0x0) bind(r0, 0x0, 0x0) 1.104343203s ago: executing program 5 (id=1644): statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x7000, 0x40, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 452.150039ms ago: executing program 2 (id=1645): syz_open_dev$vim2m(0x0, 0x800, 0x2) socket$unix(0x1, 0x2, 0x0) unshare(0x22020600) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x15) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 150.573317ms ago: executing program 7 (id=1646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f0000003080)="$eJzs3U9sHNX9APA36/W/2MRr4AcGfoQUWhEo2CGJ1PQWBOqlEuLSOygkNMJQ1NBKREBMD4hKiCIhThUHEBdKpRSpSKBKFeqp7alVb+0F9UKlKpWCemgjJa5iv1nvPu9k12N7dtf7+UjffX7zZuf7HXsTz4xn3wZgZNXWHo8dW8hCeOeztx99+ansk2vL7mqucXDtMYu9RghhvKWfJdv7Ii64cumlk53aLBxZe8z74bGLzefOhBBWwsHweWiEj5aWv/rw3UcOffza1C1vnnvmlV3a/aZ0PwAAYC+68Mflv973jz88MH/5woETYbK5PD8+b8T+TDzuPxwPlPPj5Vpo72ct0WoiWW8sRi1ZbyxZr57kqRfkG0+2M16w3kSXfGMtyzrtJwAAAAyj/Ly2EbLaYlu/VltcXD/vv+aLuYls8bkzy6fP9qlQAAAAoLR/n1+76XaIY2oAahBpTOcvsK0976Pvbv0524paxfnqFecbmSj3ehNCCCGE2LlwPCKGIFbnKrzYAAAAANBhvrBNVnZ2pq7m1hq95b/4cK3z82EHJK+/zdNO7PDr//r5pzavUGn+DnY//3if8193/z941f84AACUt1ePJvP9yo+j83kM0nkEx9qeNTO21fOPWrKd+hbrLJpXcFjmGyyqc6ziOsoqqn+rP8d+Kao/nQ9zUBXVn87TOaiK6p+suI6yiurvcOUnDOI/66L6pyuuo6yi+vdVXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdW/v+I6yiqqf1huqy2qv1FxHWUV1T+/3gz8YURR/TdWXEdZRfXfVHEdZRXVf3PFdfTLnbHNvw8HCtab6XDwN3AHgwAAAEBH/x36+f9GNOoDUIMQQgx9vLr+y7B9+VSHZWJbURuAGnYrpju9hoQQQoiBjPN9vPYAAAAADIb8fQH5u95Xo3x8bNP4396/9piP11vHpzY2kI+Pd9n+RJfxyS7jAAAAQAi/ef30bW9lG/Pdpe/p3+p8ePm8UdPhk6uhxDxG6XyEW82/3XnPtpu/84QjwzIbGwAAAHtV9p3Pr97/6HsvzF++cOBEy9nv1Xi+m88DWo/XBj6N/fy+gNmkn+Xn0Cfa89QK1kuvD9xQtL3Ht7mjAAAAMMLy8/dGyGqLLefdjVCrLS5unI8vhPHs9JnlU4djP/98lt/PjU9eW/5QxXUDAAAAvds43+98/p9/ju9CmMgWnzuzfPrsen+2uXy81npdYG5jedZ6XaCRLD9SsPxo7MfP7wzfn5teW7548gfLT+30zgMAAMCIOPviuWeeXF4+9cPR+aIeQtjWdsIg7IUvfLGrX/T7fyYAAGCnffnl2+M/Ojr72/X3/2/Mf3c1fnEw9htxbr8/xeX5fQL5+wA2vV//ifY8c0XrPd++XiNZbyzGZFL3VMt2wtp8g+3Pmy/K12jfzkRBvpkk32ySL52noJ6sn3WYSzB0mAkwX28uWZ7Ow1hPcmRJ/rs75AIAAIDc0gvPPr909sVzD5559smnTz196rmjR45/+/jxww9966Gltfv6l1rv7gcAAACG0cZNv/2uBAAAAAAAAAAAAAAAAAAAAEZXFR8n1u99BAAAgFH3r/MhhBUhCiL/gMF+1zHskQ1ADbsXq5P9r2FvR/DvUAghhBDbjP6e9005lhmMWF1NP2keAAAAYHddufTSydZ2k5VsR/M1t9ZYb67GvHk7++Bf5q9FvtrFh9uvl+zb0WoYdVW//uUf1PyTHcc/eHVn869diG9s9Lv//1dr38CJtcd67E33mvfepV8sNPOHEG6v95g/3f/He83Y7lCS/97QW/7V95L8T7T1ar3mvy/Jv6/H/Jv2//miDFPXzX9/zL8Q+4fu6TV/+y5OJtl6fQF8M9n/p0Kv+ZP9b/SYMPFAzA8Ao6j523z1fH8L2WH5UUJ+PD0T+/n+5ges6d0PWz3+ryXbqW+78vbt5sdBt8Z+86hupT1vbqv159+X2djeULLO1LDcVVJU/079HHdbUf3jFddRVlH9ExXXUVZR/Z3P3gdPUf3XP3scHEX193whos+K6h+W68pF9c9UXEdZRfXPVlxHWUX1b/X3eL8U1b+/4jrKKqp/ruI6yiqqv+RltcoV1T9fcR1lFdV/Y8V1lFVU/00V11FWUf03V1xHv9wR26Lz4fz8cy6O5f1G0p/s8L3s+Y8hAAAAwK7650DO/9dy5aDvtQghhBBiGGJsAGoQYpjjP6vr+l2HEGL3YnW1n1cf6LdsiO4VB2Dn7O5sFgw6P//R5uc/2vz8uZ78L/FZ0s+NdRmvdxkf7zI+kYxnyRMni8ajm5LtrubXNaObu4z/X9yDovH9yfN/nIzf2mX7C13Gb+syfnuX8Tu6jAMAADAabomt80MAAADYu17+5adv/PreJy7NX75w4ESY2DTv/OHYn4x/W3899tN573Pj8W/+P4n992P7u9j+PVnf/ScAAACw+/LPifH3fwAAANi78s8pdf4PAAAAe9d8bJ3/AwAAwN51Y2yd/wMAAMAelk11Xhzb/LrA3bHtdV4/AGDw/X9s74ztgdjeFduvxTY/Drgntl+vqD4AYOf8/Hs/Pf5WtjHf/9Fk/EpcnrebrKxfKchq7TP5T8d2X2y/0WM96ecB9Jo/t7/HPLuVf26b+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvaO29njs2EIWwjufvf3ozybe+PO1ZXc11zi49pjFXiOEMN58Xj660f9VXPHKpZdOtrZXY5uFIyELWXN5eOxiM9NMCGElHAyfh0b4aGn5qw/ffeTQx69N3fLmuWde2cVvQdv+AQAAwF70vwAAAP//7lUWHg==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfea7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) copy_file_range(0xffffffffffffffff, &(0x7f0000000500), r1, 0x0, 0xa003e458, 0x700000000000000) 84.494368ms ago: executing program 7 (id=1647): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) 216.291µs ago: executing program 7 (id=1648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002400000000e08000140000000030900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 0s ago: executing program 0 (id=1649): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, 0x0) kernel console output (not intermixed with test programs): 236.379259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.428210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.478335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.516645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.631452][ T4229] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.719755][ T4229] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.816514][ T4229] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.122372][ T6519] loop7: detected capacity change from 0 to 512 [ 239.400673][ T4229] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.520895][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.521482][ T25] audit: type=1804 audit(1791463366.661:25): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.473" name="/newroot/35/file1" dev="fuse" ino=1 res=1 errno=0 [ 239.528355][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.662445][ T6261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.842503][ T4229] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.914879][ T4229] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.177570][ T6554] loop7: detected capacity change from 0 to 1024 [ 240.973697][ T6554] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.995547][ T4229] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.088487][ T6554] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000002,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none. [ 241.106983][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.217167][ T6559] loop2: detected capacity change from 0 to 1024 [ 241.341322][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.172816][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.209720][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.310939][ T6261] device veth0_vlan entered promiscuous mode [ 242.359481][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.396051][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.423436][ T6568] loop8: detected capacity change from 0 to 2048 [ 242.437324][ T6559] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 242.455825][ T6261] device veth1_vlan entered promiscuous mode [ 242.546416][ T6571] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.634894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.654387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.707218][ T6261] device veth0_macvtap entered promiscuous mode [ 242.746756][ T6559] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 242.810110][ T6261] device veth1_macvtap entered promiscuous mode [ 243.141919][ T6581] loop7: detected capacity change from 0 to 32768 [ 244.394053][ T6581] JBD2: Ignoring recovery information on journal [ 244.401152][ T6581] jbd2_journal_bmap: journal block not found at offset 32 on loop7-75 [ 244.409329][ T6581] JBD2: bad block at offset 32 [ 244.419236][ T6581] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 244.545513][ T6593] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 244.563782][ T6593] OCFS2: ERROR (device loop7): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 244.585072][ T6593] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 244.594997][ T6593] OCFS2: File system is now read-only. [ 244.600510][ T6593] (syz.7.479,6593,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 244.608989][ T6593] (syz.7.479,6593,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 244.617426][ T6593] (syz.7.479,6593,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 244.625751][ T6593] (syz.7.479,6593,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 244.635027][ T6593] (syz.7.479,6593,0):ocfs2_write_cluster:1156 ERROR: status = -30 [ 244.643116][ T6593] (syz.7.479,6593,0):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 244.651841][ T6593] (syz.7.479,6593,0):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 244.660605][ T6593] (syz.7.479,6593,0):ocfs2_write_begin:1910 ERROR: status = -30 [ 244.770769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.786120][ T6590] loop8: detected capacity change from 0 to 256 [ 244.794393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.807071][ T6590] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 244.827398][ T25] audit: type=1800 audit(1791463371.961:26): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.478" name="file1" dev="loop8" ino=1048748 res=0 errno=0 [ 244.875210][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.983347][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.088805][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.124385][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.173503][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.203705][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.238239][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.279756][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.308139][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.354724][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.389229][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.399921][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.412335][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.422650][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.450168][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.461845][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.472549][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.482647][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.493303][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.503359][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.514029][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.524111][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.535494][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.546788][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.560239][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.577581][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.610037][ T5389] ocfs2: Unmounting device (7,7) on (node local) [ 245.620490][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.647534][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.748023][ T6604] loop8: detected capacity change from 0 to 256 [ 247.265260][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.274368][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.285775][ T6261] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.295850][ T6261] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.304709][ T6261] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.313539][ T6261] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.411503][ T6612] nvmet_tcp: address family 255 not supported [ 248.693689][ T6619] binder: 6613:6619 ioctl c00c620f 200000000000 returned -22 [ 249.465978][ T6617] loop7: detected capacity change from 0 to 32768 [ 249.517008][ T6622] kvm [6621]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x41003c [ 249.628744][ T6617] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.487 (6617) [ 249.713925][ T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.747812][ T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.814716][ T6631] loop5: detected capacity change from 0 to 1024 [ 252.565773][ T6631] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.590060][ T6631] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 252.617916][ T6237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 252.635862][ T6617] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 252.644861][ T6617] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 252.654658][ T6617] BTRFS info (device loop7): use zstd compression, level 3 [ 252.662178][ T6617] BTRFS info (device loop7): force clearing of disk cache [ 252.669347][ T6617] BTRFS info (device loop7): enabling disk space caching [ 252.676377][ T6617] BTRFS info (device loop7): disk space caching is enabled [ 252.683617][ T6617] BTRFS info (device loop7): has skinny extents [ 252.872649][ T6237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.989950][ T6237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.074561][ T6617] BTRFS error (device loop7): open_ctree failed: -12 [ 253.109483][ T6531] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by udevd (6531) [ 253.671218][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.448715][ T4230] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 255.470472][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.476749][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.240935][ T6695] loop7: detected capacity change from 0 to 512 [ 256.468721][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 256.503812][ T6702] loop5: detected capacity change from 0 to 1024 [ 257.629378][ T6695] EXT4-fs (loop7): 1 truncate cleaned up [ 258.610308][ T6695] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 258.655124][ T6702] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 259.638916][ T6702] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 259.811149][ T6704] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 260.429219][ T6708] loop9: detected capacity change from 0 to 512 [ 260.508676][ T4230] usb 3-1: unable to read config index 0 descriptor/all [ 260.515632][ T4230] usb 3-1: can't read configurations, error -71 [ 261.676198][ T6715] FAULT_INJECTION: forcing a failure. [ 261.676198][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 261.775864][ T6715] CPU: 1 PID: 6715 Comm: syz.8.505 Not tainted syzkaller #0 [ 261.783185][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.793265][ T6715] Call Trace: [ 261.796547][ T6715] [ 261.799479][ T6715] dump_stack_lvl+0x188/0x250 [ 261.804165][ T6715] ? show_regs_print_info+0x20/0x20 [ 261.809371][ T6715] ? load_image+0x410/0x410 [ 261.813884][ T6715] ? __lock_acquire+0x7d40/0x7d40 [ 261.818914][ T6715] should_fail+0x383/0x4b0 [ 261.823338][ T6715] should_failslab+0x5/0x20 [ 261.827833][ T6715] slab_pre_alloc_hook+0x51/0xc0 [ 261.832756][ T6715] ? security_inode_alloc+0x30/0x110 [ 261.838040][ T6715] kmem_cache_alloc+0x3d/0x280 [ 261.842786][ T6715] security_inode_alloc+0x30/0x110 [ 261.847879][ T6715] inode_init_always+0x8e5/0xc90 [ 261.852798][ T6715] new_inode_pseudo+0x8e/0x210 [ 261.857540][ T6715] __sock_create+0x128/0x910 [ 261.862111][ T6715] __sys_socketpair+0x1bd/0x540 [ 261.866941][ T6715] __x64_sys_socketpair+0x97/0xb0 [ 261.871943][ T6715] do_syscall_64+0x4c/0xa0 [ 261.876338][ T6715] ? clear_bhb_loop+0x30/0x80 [ 261.880994][ T6715] ? clear_bhb_loop+0x30/0x80 [ 261.885657][ T6715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.891530][ T6715] RIP: 0033:0x7f99b9822199 [ 261.895944][ T6715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.915530][ T6715] RSP: 002b:00007f99b7a7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 261.923919][ T6715] RAX: ffffffffffffffda RBX: 00007f99b9aa9fa0 RCX: 00007f99b9822199 [ 261.931868][ T6715] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 261.939820][ T6715] RBP: 00007f99b98b9888 R08: 0000000000000000 R09: 0000000000000000 [ 261.947768][ T6715] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 261.955715][ T6715] R13: 00007f99b9aaa038 R14: 00007f99b9aa9fa0 R15: 00007fffbd2b34f8 [ 261.963671][ T6715] [ 262.459057][ T6715] socket: no more sockets [ 262.462182][ T6708] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 262.584725][ T6708] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.067532][ T6737] kvm [6735]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x41003c [ 264.089351][ T6741] Cannot find add_set index 0 as target [ 265.154168][ T4229] device hsr_slave_0 left promiscuous mode [ 265.199281][ T4229] device hsr_slave_1 left promiscuous mode [ 265.245329][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.278781][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.330164][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.337630][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.377085][ T6762] loop7: detected capacity change from 0 to 512 [ 265.416678][ T4229] device bridge_slave_1 left promiscuous mode [ 265.423263][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.489126][ T4229] device bridge_slave_0 left promiscuous mode [ 265.507539][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.571859][ T4229] device hsr_slave_0 left promiscuous mode [ 265.595967][ T4229] device hsr_slave_1 left promiscuous mode [ 265.651922][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.670718][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.802470][ T6772] loop7: detected capacity change from 0 to 256 [ 267.057940][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.084366][ T6772] exfat: Deprecated parameter 'utf8' [ 267.151857][ T6772] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 267.172618][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.342132][ T4229] device bridge_slave_1 left promiscuous mode [ 267.443709][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.856359][ T4229] device bridge_slave_0 left promiscuous mode [ 267.911804][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.062576][ T4229] device veth1_macvtap left promiscuous mode [ 268.275014][ T4229] device veth0_macvtap left promiscuous mode [ 268.322733][ T4229] device veth1_vlan left promiscuous mode [ 268.358499][ T4229] device veth0_vlan left promiscuous mode [ 268.406568][ T4229] device veth1_macvtap left promiscuous mode [ 268.457631][ T4229] device veth0_macvtap left promiscuous mode [ 268.515094][ T4229] device veth1_vlan left promiscuous mode [ 268.552773][ T4229] device veth0_vlan left promiscuous mode [ 268.709048][ T6797] CacheFiles: No cache directory specified [ 273.089022][ T6826] loop7: detected capacity change from 0 to 8 [ 273.150139][ T6826] unable to read fragment index table [ 273.575834][ T6832] FAULT_INJECTION: forcing a failure. [ 273.575834][ T6832] name fail_futex, interval 1, probability 0, space 0, times 1 [ 273.674367][ T4229] team0 (unregistering): Port device team_slave_1 removed [ 273.713252][ T4229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.755984][ T6832] CPU: 1 PID: 6832 Comm: syz.7.536 Not tainted syzkaller #0 [ 273.763295][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.773355][ T6832] Call Trace: [ 273.776637][ T6832] [ 273.779564][ T6832] dump_stack_lvl+0x188/0x250 [ 273.784227][ T6832] ? show_regs_print_info+0x20/0x20 [ 273.789400][ T6832] ? load_image+0x410/0x410 [ 273.793890][ T6832] ? cgroup_rstat_updated+0xce/0x350 [ 273.799180][ T6832] should_fail+0x383/0x4b0 [ 273.803617][ T6832] get_futex_key+0x1a1/0x12d0 [ 273.808304][ T6832] ? release_firmware_map_entry+0x190/0x190 [ 273.814196][ T6832] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 273.820158][ T6832] ? futex_wait_restart+0x250/0x250 [ 273.825334][ T6832] ? lock_chain_count+0x20/0x20 [ 273.830164][ T6832] ? preempt_schedule+0xbc/0xd0 [ 273.835004][ T6832] futex_wait_setup+0x4b/0x520 [ 273.839747][ T6832] ? schedule_preempt_disabled+0x20/0x20 [ 273.845355][ T6832] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 273.851241][ T6832] futex_wait+0x22f/0x680 [ 273.855582][ T6832] ? __lock_acquire+0x13b3/0x7d40 [ 273.860611][ T6832] ? do_futex+0x12b0/0x12b0 [ 273.865104][ T6832] ? verify_lock_unused+0x140/0x140 [ 273.870278][ T6832] ? verify_lock_unused+0x140/0x140 [ 273.875452][ T6832] do_futex+0xdc2/0x12b0 [ 273.879671][ T6832] ? __lock_acquire+0x7d40/0x7d40 [ 273.884672][ T6832] ? vfs_write+0xaa6/0xd70 [ 273.889086][ T6832] ? futex_exit_release+0x1c0/0x1c0 [ 273.894262][ T6832] ? __context_tracking_exit+0x4c/0x80 [ 273.899710][ T6832] __se_sys_futex+0x389/0x420 [ 273.904387][ T6832] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 273.910347][ T6832] ? __x64_sys_futex+0xf0/0xf0 [ 273.915104][ T6832] ? __x64_sys_futex+0x1d/0xf0 [ 273.919866][ T6832] do_syscall_64+0x4c/0xa0 [ 273.924262][ T6832] ? clear_bhb_loop+0x30/0x80 [ 273.928915][ T6832] ? clear_bhb_loop+0x30/0x80 [ 273.933569][ T6832] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 273.939449][ T6832] RIP: 0033:0x7fb492e21199 [ 273.943845][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.963427][ T6832] RSP: 002b:00007fb4910580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 273.971819][ T6832] RAX: ffffffffffffffda RBX: 00007fb4930a9098 RCX: 00007fb492e21199 [ 273.979768][ T6832] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb4930a9098 [ 273.987712][ T6832] RBP: 00007fb4930a9090 R08: 0000000000000000 R09: 0000000000000000 [ 273.995657][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.003604][ T6832] R13: 00007fb4930a9128 R14: 00007ffccb045cf0 R15: 00007ffccb045dd8 [ 274.011561][ T6832] [ 274.016306][ T4229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.337290][ T4229] bond0 (unregistering): Released all slaves [ 274.722392][ T4229] team0 (unregistering): Port device team_slave_1 removed [ 274.764265][ T4229] team0 (unregistering): Port device team_slave_0 removed [ 274.852137][ T4229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.897575][ T4229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.115804][ T6841] loop7: detected capacity change from 0 to 32768 [ 275.161619][ T4229] bond0 (unregistering): Released all slaves [ 275.291452][ T6841] JBD2: Ignoring recovery information on journal [ 275.297814][ T6841] JBD2: corrupted journal superblock [ 275.446039][ T6841] JBD2: error -117 scanning journal [ 275.451970][ T6841] (syz.7.538,6841,0):ocfs2_journal_wipe:1155 ERROR: status = -117 [ 275.460147][ T6841] (syz.7.538,6841,0):ocfs2_check_volume:2422 ERROR: status = -117 [ 275.468774][ T6841] (syz.7.538,6841,0):ocfs2_check_volume:2491 ERROR: status = -117 [ 275.476740][ T6841] (syz.7.538,6841,0):ocfs2_mount_volume:1824 ERROR: status = -117 [ 275.501468][ T6841] (syz.7.538,6841,0):ocfs2_fill_super:1177 ERROR: status = -117 [ 275.555905][ T6795] device veth1_macvtap left promiscuous mode [ 275.921533][ T6852] loop9: detected capacity change from 0 to 512 [ 275.965626][ T6850] batman_adv: batadv0: Adding interface: syzkaller0 [ 275.989747][ T6852] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 276.001989][ T6850] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.175354][ T6841] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 276.961769][ T6850] batman_adv: batadv0: Interface activated: syzkaller0 [ 277.021817][ T6849] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 277.143548][ T6849] batman_adv: batadv0: Removing interface: syzkaller0 [ 277.212123][ T6866] capability: warning: `syz.7.543' uses 32-bit capabilities (legacy support in use) [ 277.363183][ T6872] loop2: detected capacity change from 0 to 8 [ 278.019952][ T6884] loop8: detected capacity change from 0 to 16 [ 278.027425][ T6161] Bluetooth: hci5: command 0x0406 tx timeout [ 278.125788][ T6884] erofs: (device loop8): mounted with root inode @ nid 36. [ 278.151949][ T6872] unable to read fragment index table [ 278.191515][ T6878] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 278.199591][ T6878] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 278.208357][ T6878] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 278.218497][ T6878] Error parsing options; rc = [-22] [ 278.279653][ T6890] loop9: detected capacity change from 0 to 1024 [ 278.388727][ T6890] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.491807][ T4197] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 278.513520][ T6879] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 278.618162][ T6890] EXT4-fs (loop9): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 278.704342][ T25] audit: type=1800 audit(1791463405.841:27): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.547" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 278.928012][ T6910] loop2: detected capacity change from 0 to 512 [ 280.740500][ T6910] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 280.753788][ T6910] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.273479][ T6938] loop8: detected capacity change from 0 to 8192 [ 284.410316][ T6949] loop5: detected capacity change from 0 to 8 [ 284.437823][ T25] audit: type=1800 audit(1791463411.581:28): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.558" name="file1" dev="loop8" ino=1048762 res=0 errno=0 [ 284.542779][ T6949] unable to read fragment index table [ 287.130785][ T6985] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 287.512646][ T6994] Bluetooth: hci0: unsupported parameter 255 [ 287.519172][ T6994] Bluetooth: hci0: unsupported parameter 255 [ 287.635149][ T6997] loop7: detected capacity change from 0 to 512 [ 288.832704][ T4319] Bluetooth: hci2: command 0x0401 tx timeout [ 289.010744][ T6997] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 289.024091][ T6997] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.328931][ T25] audit: type=1804 audit(1791463418.471:29): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.579" name="/newroot/122/file1" dev="fuse" ino=1 res=1 errno=0 [ 291.350891][ T7032] ip_tables: iptables: counters copy to user failed while replacing table [ 291.877629][ T7042] loop7: detected capacity change from 0 to 512 [ 292.483891][ T7054] loop2: detected capacity change from 0 to 512 [ 293.724435][ T25] audit: type=1326 audit(1791463420.861:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.8.587" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b9822199 code=0x7ffc0000 [ 293.929415][ T7054] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 293.942715][ T7054] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.512524][ T25] audit: type=1326 audit(1791463420.861:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.8.587" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b9822199 code=0x7ffc0000 [ 294.542179][ T25] audit: type=1326 audit(1791463421.681:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.8.587" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f99b9822199 code=0x7ffc0000 [ 294.667642][ T25] audit: type=1326 audit(1791463421.681:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.8.587" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b9822199 code=0x7ffc0000 [ 294.715294][ T25] audit: type=1326 audit(1791463421.681:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.8.587" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b9822199 code=0x7ffc0000 [ 294.817114][ T7068] loop8: detected capacity change from 0 to 256 [ 294.829552][ T25] audit: type=1326 audit(1791463421.711:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.8.587" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f99b9822199 code=0x7ffc0000 [ 295.737651][ T25] audit: type=1326 audit(1791463421.711:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.8.587" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b9822199 code=0x7ffc0000 [ 295.762243][ T25] audit: type=1326 audit(1791463421.711:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.8.587" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b9822199 code=0x7ffc0000 [ 295.788807][ T25] audit: type=1326 audit(1791463421.721:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.8.587" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f99b9822199 code=0x7ffc0000 [ 295.825308][ T7068] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 295.943628][ T7076] kAFS: bad VL server IP address [ 295.957789][ T7076] kAFS: No cell specified [ 297.018921][ T7088] ip_tables: iptables: counters copy to user failed while replacing table [ 297.813927][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 297.813942][ T25] audit: type=1804 audit(1791463424.951:47): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.596" name="/newroot/126/file1" dev="fuse" ino=1 res=1 errno=0 [ 298.457922][ T7102] overlayfs: missing 'lowerdir' [ 298.480732][ T7105] loop2: detected capacity change from 0 to 128 [ 298.656626][ T7107] loop8: detected capacity change from 0 to 8 [ 298.914917][ T7115] loop9: detected capacity change from 0 to 256 [ 298.991822][ T7117] loop5: detected capacity change from 0 to 8 [ 300.475394][ T7115] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 300.475394][ T7115] [ 300.489694][ T7115] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 300.503993][ T7115] CIFS: Attempting to mount \\127.0.0.1\share [ 300.522258][ T7115] CIFS: VFS: Error connecting to socket. Aborting operation. [ 300.540935][ T7115] CIFS: VFS: cifs_mount failed w/return code = -111 [ 300.733048][ T4319] Bluetooth: hci2: command 0x0401 tx timeout [ 301.728616][ T7132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.630809][ T7139] loop5: detected capacity change from 0 to 4096 [ 303.671968][ T7135] FAULT_INJECTION: forcing a failure. [ 303.671968][ T7135] name failslab, interval 1, probability 0, space 0, times 0 [ 303.698978][ T7135] CPU: 1 PID: 7135 Comm: syz.2.607 Not tainted syzkaller #0 [ 303.706290][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.716343][ T7135] Call Trace: [ 303.719620][ T7135] [ 303.722549][ T7135] dump_stack_lvl+0x188/0x250 [ 303.727233][ T7135] ? show_regs_print_info+0x20/0x20 [ 303.732438][ T7135] ? load_image+0x410/0x410 [ 303.736949][ T7135] ? __might_sleep+0xf0/0xf0 [ 303.741547][ T7135] ? __lock_acquire+0x7d40/0x7d40 [ 303.746583][ T7135] should_fail+0x383/0x4b0 [ 303.751013][ T7135] should_failslab+0x5/0x20 [ 303.755518][ T7135] slab_pre_alloc_hook+0x51/0xc0 [ 303.760466][ T7135] __kmalloc+0x6b/0x340 [ 303.764622][ T7135] ? security_sk_alloc+0x47/0x130 [ 303.769646][ T7135] ? sk_prot_alloc+0x57/0x210 [ 303.774308][ T7135] security_sk_alloc+0x47/0x130 [ 303.779138][ T7135] sk_prot_alloc+0x101/0x210 [ 303.783703][ T7135] sk_alloc+0x2f/0x310 [ 303.787743][ T7135] ? ieee802154_create+0x7f/0x2e0 [ 303.792745][ T7135] ieee802154_create+0xcd/0x2e0 [ 303.797572][ T7135] __sock_create+0x473/0x910 [ 303.802144][ T7135] __sys_socket+0xe2/0x170 [ 303.806535][ T7135] __x64_sys_socket+0x76/0x80 [ 303.811188][ T7135] do_syscall_64+0x4c/0xa0 [ 303.815582][ T7135] ? clear_bhb_loop+0x30/0x80 [ 303.820237][ T7135] ? clear_bhb_loop+0x30/0x80 [ 303.824896][ T7135] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.830766][ T7135] RIP: 0033:0x7efc705b0199 [ 303.835171][ T7135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.854763][ T7135] RSP: 002b:00007efc6e807fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 303.863154][ T7135] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007efc705b0199 [ 303.871102][ T7135] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000024 [ 303.879047][ T7135] RBP: 00007efc70647888 R08: 0000000000000000 R09: 0000000000000000 [ 303.886992][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.894935][ T7135] R13: 00007efc70838038 R14: 00007efc70837fa0 R15: 00007fffcf24cca8 [ 303.902899][ T7135] [ 303.958152][ T7142] ip_tables: iptables: counters copy to user failed while replacing table [ 304.617076][ T7147] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.691639][ T7150] loop9: detected capacity change from 0 to 1024 [ 304.720072][ T7154] overlayfs: missing 'lowerdir' [ 305.210176][ T7150] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.641185][ T7150] EXT4-fs (loop9): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 305.816816][ T7186] loop2: detected capacity change from 0 to 512 [ 305.821978][ T25] audit: type=1804 audit(1791463432.891:48): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.613" name="/newroot/66/file1" dev="fuse" ino=1 res=1 errno=0 [ 310.347673][ T7220] loop2: detected capacity change from 0 to 1024 [ 311.239939][ T7223] loop9: detected capacity change from 0 to 128 [ 314.572260][ T1323] Bluetooth: hci2: command 0x0406 tx timeout [ 314.705834][ T25] audit: type=1804 audit(1791463441.841:49): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.631" name="/newroot/132/file1" dev="fuse" ino=1 res=1 errno=0 [ 314.741160][ T7242] loop9: detected capacity change from 0 to 1024 [ 314.785280][ T25] audit: type=1800 audit(1791463441.921:50): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.633" name="p_chmask" dev="configfs" ino=44103 res=0 errno=0 [ 314.837367][ T7242] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 314.916587][ T7242] EXT4-fs (loop9): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 315.031601][ T7258] loop7: detected capacity change from 0 to 128 [ 315.240083][ T7258] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 315.312208][ T7258] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.901790][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.908257][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.057370][ T7289] loop5: detected capacity change from 0 to 1024 [ 320.151232][ T21] Bluetooth: hci2: command 0x0401 tx timeout [ 321.200667][ T7289] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 322.491104][ T7289] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 322.729876][ T7307] ip_tables: iptables: counters copy to user failed while replacing table [ 322.742260][ T7307] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 322.891548][ T7302] qfq: no options [ 324.108814][ T1323] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 324.364886][ T7328] loop9: detected capacity change from 0 to 1024 [ 324.371916][ T1323] usb 6-1: Using ep0 maxpacket: 32 [ 324.488887][ T1323] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.564784][ T1323] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.614045][ T7328] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 324.980720][ T1323] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.097678][ T7328] EXT4-fs (loop9): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 325.169683][ T1323] usb 6-1: config 0 interface 0 has no altsetting 0 [ 325.247196][ T1323] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 325.334801][ T1323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.563772][ T1323] usb 6-1: config 0 descriptor?? [ 326.312095][ T1323] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 326.394795][ T7351] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 326.403714][ T7351] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 326.758633][ T1323] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 326.766151][ T1323] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 326.788623][ T1323] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 326.796126][ T1323] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0 [ 326.825566][ T1323] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 326.922751][ T7362] loop7: detected capacity change from 0 to 512 [ 327.001116][ T7362] EXT4-fs (loop7): 1 truncate cleaned up [ 327.021713][ T7362] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 327.068808][ T5525] Bluetooth: hci2: command 0x0401 tx timeout [ 328.061144][ T7375] ip_tables: iptables: counters copy to user failed while replacing table [ 328.620689][ T1323] corsair-cpro: probe of 0003:1B1C:0C10.0002 failed with error -38 [ 328.747581][ T1323] usb 6-1: USB disconnect, device number 4 [ 329.292514][ T7386] netlink: 32 bytes leftover after parsing attributes in process `syz.7.661'. [ 330.132630][ T7380] fido_id[7380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 331.813729][ T7413] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 331.822616][ T7413] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 332.528257][ T7423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.898757][ T7409] loop5: detected capacity change from 0 to 32768 [ 334.189760][ T7409] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.671 (7409) [ 334.360640][ T4232] Bluetooth: hci0: command 0x0406 tx timeout [ 334.584211][ T7409] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 334.696010][ T7409] BTRFS info (device loop5): setting nodatasum [ 334.702321][ T7409] BTRFS info (device loop5): force zlib compression, level 3 [ 334.709757][ T7409] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 334.719023][ T7409] BTRFS info (device loop5): use lzo compression, level 0 [ 334.726139][ T7409] BTRFS info (device loop5): turning on flush-on-commit [ 334.738921][ T7409] BTRFS info (device loop5): enabling auto defrag [ 334.745893][ T7409] BTRFS info (device loop5): max_inline at 4096 [ 334.752415][ T7409] BTRFS info (device loop5): using free space tree [ 334.762265][ T7409] BTRFS info (device loop5): has skinny extents [ 335.049669][ T7460] loop9: detected capacity change from 0 to 512 [ 335.110010][ T7430] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (7430) [ 335.121858][ T7409] BTRFS error (device loop5): open_ctree failed: -12 [ 337.045852][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.681'. [ 337.270207][ T7492] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 337.279089][ T7492] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 338.433886][ T7510] loop2: detected capacity change from 0 to 2048 [ 338.463787][ T7513] device bridge_slave_0 left promiscuous mode [ 338.491073][ T7513] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.692170][ T7510] loop2: detected capacity change from 0 to 512 [ 340.303118][ T7510] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 340.322005][ T4319] Bluetooth: hci0: command 0x0c24 tx timeout [ 340.377537][ T7510] EXT4-fs (loop2): 1 truncate cleaned up [ 340.383667][ T7510] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 340.510477][ T7529] loop5: detected capacity change from 0 to 512 [ 341.739260][ T1323] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 341.758935][ T7542] loop7: detected capacity change from 0 to 1024 [ 341.878846][ T7542] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 342.008102][ T7542] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 342.663553][ T7544] loop9: detected capacity change from 0 to 32768 [ 342.768767][ T25] audit: type=1800 audit(1791463469.841:51): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.700" name="p_chmask" dev="configfs" ino=43971 res=0 errno=0 [ 344.360391][ T7544] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 344.397870][ T7578] loop5: detected capacity change from 0 to 512 [ 345.522182][ T6261] ocfs2: Unmounting device (7,9) on (node local) [ 346.189627][ T7589] loop2: detected capacity change from 0 to 32768 [ 346.248677][ T7589] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.707 (7589) [ 346.274662][ T7600] mmap: syz.9.705 (7600) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 346.307290][ T7589] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 346.318696][ T7589] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 346.328118][ T7589] BTRFS info (device loop2): use zstd compression, level 3 [ 346.335369][ T7589] BTRFS info (device loop2): using free space tree [ 346.341907][ T7589] BTRFS info (device loop2): has skinny extents [ 346.375755][ T7605] loop5: detected capacity change from 0 to 1024 [ 346.401723][ T7605] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 346.472263][ T7614] loop8: detected capacity change from 0 to 64 [ 346.607499][ T7605] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 347.300147][ T7589] BTRFS info (device loop2): enabling ssd optimizations [ 347.343590][ T7600] FAULT_INJECTION: forcing a failure. [ 347.343590][ T7600] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 347.357781][ T7600] CPU: 1 PID: 7600 Comm: syz.9.705 Not tainted syzkaller #0 [ 347.365084][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.375144][ T7600] Call Trace: [ 347.378427][ T7600] [ 347.381361][ T7600] dump_stack_lvl+0x188/0x250 [ 347.386056][ T7600] ? show_regs_print_info+0x20/0x20 [ 347.391260][ T7600] ? load_image+0x410/0x410 [ 347.395770][ T7600] ? uncharge_page+0x490/0x490 [ 347.400534][ T7600] should_fail+0x383/0x4b0 [ 347.404960][ T7600] prepare_alloc_pages+0x1e3/0x5b0 [ 347.410082][ T7600] __alloc_pages+0x11b/0x480 [ 347.414678][ T7600] ? zone_statistics+0x170/0x170 [ 347.419626][ T7600] ? rcu_lock_acquire+0x30/0x30 [ 347.424479][ T7600] ? alloc_pages+0x452/0x560 [ 347.429094][ T7600] __get_free_pages+0x8/0x30 [ 347.433688][ T7600] __tlb_remove_page_size+0x1f2/0x3f0 [ 347.439065][ T7600] unmap_page_range+0xfcf/0x2410 [ 347.444037][ T7600] unmap_vmas+0x131/0x250 [ 347.448367][ T7600] ? unmap_page_range+0x2410/0x2410 [ 347.453567][ T7600] ? __mutex_lock_common+0x435/0x2400 [ 347.458941][ T7600] ? exit_mm_release+0x16/0x30 [ 347.463707][ T7600] exit_mmap+0x3b9/0x640 [ 347.467945][ T7600] ? vm_brk+0x20/0x20 [ 347.471942][ T7600] ? uprobe_clear_state+0x2f6/0x460 [ 347.477146][ T7600] __mmput+0x115/0x390 [ 347.481219][ T7600] exit_mm+0x632/0x7b0 [ 347.485289][ T7600] ? perf_pmu_migrate_context+0xb70/0xb70 [ 347.491014][ T7600] ? do_exit+0x2110/0x2110 [ 347.495439][ T7600] ? __ia32_sys_timer_delete+0x40/0x40 [ 347.500901][ T7600] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 347.506371][ T7600] ? tty_audit_exit+0x149/0x1f0 [ 347.511232][ T7600] do_exit+0x5b8/0x2110 [ 347.515397][ T7600] ? put_task_struct+0x80/0x80 [ 347.520167][ T7600] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 347.526156][ T7600] ? _raw_spin_lock_irq+0xb7/0xf0 [ 347.531185][ T7600] do_group_exit+0x12c/0x2f0 [ 347.535775][ T7600] ? lockdep_hardirqs_on+0x94/0x140 [ 347.540981][ T7600] get_signal+0x7eb/0x12e0 [ 347.545422][ T7600] arch_do_signal_or_restart+0xe6/0x12a0 [ 347.551074][ T7600] ? get_sigframe_size+0x10/0x10 [ 347.556024][ T7600] ? kick_process+0xd4/0x140 [ 347.560634][ T7600] ? ksys_write+0x203/0x260 [ 347.565139][ T7600] ? exit_to_user_mode_loop+0x3b/0x130 [ 347.570601][ T7600] exit_to_user_mode_loop+0x9e/0x130 [ 347.575889][ T7600] exit_to_user_mode_prepare+0xee/0x180 [ 347.581439][ T7600] syscall_exit_to_user_mode+0x16/0x40 [ 347.586902][ T7600] do_syscall_64+0x58/0xa0 [ 347.591322][ T7600] ? clear_bhb_loop+0x30/0x80 [ 347.596005][ T7600] ? clear_bhb_loop+0x30/0x80 [ 347.600696][ T7600] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.606591][ T7600] RIP: 0033:0x7f5cf3427199 [ 347.611004][ T7600] Code: Unable to access opcode bytes at RIP 0x7f5cf342716f. [ 347.618372][ T7600] RSP: 002b:00007f5cf167f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 347.626791][ T7600] RAX: ffffffffffffffea RBX: 00007f5cf36aefa0 RCX: 00007f5cf3427199 [ 347.634762][ T7600] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 347.642733][ T7600] RBP: 00007f5cf34be888 R08: 0000000000000000 R09: 0000000000000000 [ 347.650710][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.658684][ T7600] R13: 00007f5cf36af038 R14: 00007f5cf36aefa0 R15: 00007ffce40c94e8 [ 347.666667][ T7600] [ 348.471588][ T7652] loop7: detected capacity change from 0 to 512 [ 349.629044][ T4200] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 350.335387][ T7665] loop2: detected capacity change from 0 to 512 [ 352.802402][ T7682] trusted_key: encrypted_key: insufficient parameters specified [ 354.032081][ T7694] loop9: detected capacity change from 0 to 512 [ 355.885868][ T7708] loop2: detected capacity change from 0 to 8 [ 356.019739][ T7708] unable to read fragment index table [ 356.100418][ T7716] loop7: detected capacity change from 0 to 512 [ 356.229700][ T7718] loop2: detected capacity change from 0 to 1024 [ 357.277620][ T25] audit: type=1400 audit(1791463484.411:52): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/o/" pid=7711 comm="syz.9.733" [ 357.603856][ T7732] overlayfs: missing 'lowerdir' [ 357.822027][ T7731] loop2: detected capacity change from 0 to 256 [ 357.876137][ T7731] exfat: Unknown parameter 'zero_size_dir' [ 358.084491][ T7738] loop8: detected capacity change from 0 to 1024 [ 358.153682][ T7738] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 358.208658][ T7738] EXT4-fs (loop8): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 359.749015][ T7763] loop2: detected capacity change from 0 to 512 [ 359.901257][ T7757] nvme_fabrics: missing parameter 'transport=%s' [ 359.938838][ T7757] nvme_fabrics: missing parameter 'nqn=%s' [ 360.418845][ T7776] loop5: detected capacity change from 0 to 256 [ 360.753737][ T7783] loop9: detected capacity change from 0 to 164 [ 361.830395][ T7801] loop7: detected capacity change from 0 to 512 [ 362.211461][ T7776] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 362.234574][ T25] audit: type=1800 audit(1791463489.361:53): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.747" name="file1" dev="loop5" ino=1048795 res=0 errno=0 [ 362.809831][ T7781] loop9: detected capacity change from 0 to 2048 [ 363.047034][ T7816] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 363.166872][ T7819] overlayfs: missing 'workdir' [ 363.852295][ T7822] NILFS (loop9): nilfs_sufile_do_free: segment 8 is already clean [ 364.858762][ T7781] syz.9.749 (7781) used greatest stack depth: 19984 bytes left [ 366.062249][ T7839] batman_adv: batadv0: Adding interface: syzkaller0 [ 366.088672][ T7839] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.217375][ T7839] batman_adv: batadv0: Interface activated: syzkaller0 [ 366.265815][ T7836] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 366.294880][ T7836] batman_adv: batadv0: Removing interface: syzkaller0 [ 367.083183][ T7864] overlayfs: missing 'workdir' [ 368.219839][ T7875] loop2: detected capacity change from 0 to 512 [ 368.338214][ T25] audit: type=1800 audit(1791463495.451:54): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.768" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 369.476611][ T7889] loop9: detected capacity change from 0 to 256 [ 369.819533][ T7889] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 369.862784][ T25] audit: type=1800 audit(1791463496.991:55): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.762" name="file1" dev="loop9" ino=1048802 res=0 errno=0 [ 370.496108][ T7908] kvm [7905]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x41003c [ 370.550952][ T7903] loop7: detected capacity change from 0 to 4096 [ 370.559306][ T7909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.609243][ T7913] device bond_slave_0 entered promiscuous mode [ 370.615987][ T7913] device bond_slave_1 entered promiscuous mode [ 370.647569][ T7903] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 370.702926][ T7913] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 370.790491][ T7913] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 370.835560][ T7909] netlink: 14 bytes leftover after parsing attributes in process `syz.9.776'. [ 371.023669][ T7909] device bond_slave_0 left promiscuous mode [ 371.117601][ T7909] device bond_slave_1 left promiscuous mode [ 371.770189][ T7909] bond1: (slave macvlan2): Removing an active aggregator [ 371.825619][ T7939] ip_tables: iptables: counters copy to user failed while replacing table [ 371.878651][ T4317] bond1: Warning: Found an uninitialized port [ 371.932305][ T7909] bond1: (slave macvlan2): Releasing backup interface [ 372.630706][ T7909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.682305][ T7909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.762730][ T7909] bond0 (unregistering): Released all slaves [ 372.763027][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.7.787'. [ 372.838749][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.7.787'. [ 373.924230][ T25] audit: type=1800 audit(1791463501.041:56): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.793" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 373.944938][ T4234] Bluetooth: hci1: command 0x0409 tx timeout [ 374.172803][ T7932] chnl_net:caif_netlink_parms(): no params data found [ 374.593048][ T7988] ip_tables: iptables: counters copy to user failed while replacing table [ 375.024074][ T7961] loop2: detected capacity change from 0 to 32768 [ 375.024076][ T7995] loop7: detected capacity change from 0 to 512 [ 375.047305][ T7991] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 375.051948][ T7932] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.073338][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.084292][ T7932] device bridge_slave_0 entered promiscuous mode [ 375.093592][ T7932] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.103470][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.112257][ T7932] device bridge_slave_1 entered promiscuous mode [ 375.138948][ T7932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.148872][ T8000] fuse: Bad value for 'fd' [ 375.154307][ T7991] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 375.157526][ T7995] EXT4-fs (loop7): 1 truncate cleaned up [ 375.168462][ T7995] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 375.180138][ T7991] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 375.182004][ T7932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.223205][ T7932] team0: Port device team_slave_0 added [ 375.234969][ T7991] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 375.243938][ T7991] page dumped because: unmovable page [ 375.250314][ T7991] page_owner info is not present (never set?) [ 375.306513][ T7961] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 375.335848][ T8009] fuse: Bad value for 'fd' [ 375.526225][ T8002] page:ffffea0001cc0000 refcount:5 mapcount:4 mapping:0000000000000000 index:0x0 pfn:0x73000 [ 375.541482][ T8002] flags: 0xfff00000000008(dirty|node=0|zone=1|lastcpupid=0x7ff) [ 375.607886][ T8002] raw: 00fff00000000008 0000000000000000 dead000000000122 0000000000000000 [ 375.888743][ T8002] raw: 0000000000000000 0000000000000000 0000000500000003 0000000000000000 [ 375.948112][ T8002] page dumped because: unmovable page [ 375.958218][ T8002] page_owner tracks the page as allocated [ 375.998999][ T8002] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 4387, ts 77588290768, free_ts 72260716007 [ 376.028832][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 376.056307][ T8002] get_page_from_freelist+0x24f6/0x2670 [ 376.070466][ T7932] team0: Port device team_slave_1 added [ 376.100471][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 376.118678][ T8002] __alloc_pages+0x1ee/0x480 [ 376.123313][ T8002] __vmalloc_node_range+0x4b1/0x8b0 [ 376.128517][ T8002] vmalloc_user+0x70/0x80 [ 376.171911][ T7932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.182366][ T8002] kcov_mmap+0x27/0x120 [ 376.186761][ T7932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.215731][ T8002] mmap_file+0x5d/0xb0 [ 376.248696][ T8002] mmap_region+0x1048/0x1730 [ 376.253332][ T8002] do_mmap+0x801/0xe30 [ 376.294775][ T8002] vm_mmap_pgoff+0x1c1/0x2d0 [ 376.302690][ T8002] ksys_mmap_pgoff+0x4e2/0x790 [ 376.307484][ T8002] do_syscall_64+0x4c/0xa0 [ 376.330464][ T7932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.344268][ T8002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.385339][ T8002] page last free stack trace: [ 376.387942][ T7932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.410529][ T8002] free_unref_page_prepare+0x637/0x6c0 [ 376.435340][ T7932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.436867][ T8002] free_unref_page+0x8f/0x2a0 [ 376.513791][ T25] audit: type=1800 audit(1791463503.651:57): pid=8041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.806" name="p_chmask" dev="configfs" ino=45032 res=0 errno=0 [ 376.540413][ T8043] kernel profiling enabled (shift: 4) [ 376.548123][ T7932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.638256][ T8002] __unfreeze_partials+0x188/0x1e0 [ 376.643650][ T8002] put_cpu_partial+0x12d/0x190 [ 376.648564][ T8002] qlist_free_all+0x35/0x90 [ 376.653216][ T8002] kasan_quarantine_reduce+0x150/0x160 [ 376.659429][ T8002] __kasan_slab_alloc+0x2f/0xc0 [ 376.664374][ T8002] slab_post_alloc_hook+0x4c/0x380 [ 376.669631][ T8002] __kmalloc+0x189/0x340 [ 376.673943][ T8002] tomoyo_realpath_from_path+0xed/0x5e0 [ 376.679746][ T8002] tomoyo_path_perm+0x23f/0x5d0 [ 376.698701][ T8002] security_inode_getattr+0xcf/0x120 [ 376.717082][ T7932] device hsr_slave_0 entered promiscuous mode [ 376.726042][ T8002] vfs_getattr+0x26/0x3a0 [ 376.735943][ T8002] __x64_sys_newfstat+0x137/0x210 [ 376.762814][ T8002] do_syscall_64+0x4c/0xa0 [ 376.822123][ T8049] loop7: detected capacity change from 0 to 512 [ 376.920850][ T8002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.068076][ T7932] device hsr_slave_1 entered promiscuous mode [ 377.147328][ T8049] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 377.160985][ T8049] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.811997][ T8056] ip_tables: iptables: counters copy to user failed while replacing table [ 378.198211][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 378.267207][ T8061] fuse: Bad value for 'fd' [ 378.399247][ T7932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.407500][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.416425][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.483881][ T7932] Cannot create hsr debugfs directory [ 379.111992][ T25] audit: type=1804 audit(1791463506.251:58): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.814" name="/newroot/48/file1" dev="fuse" ino=1 res=1 errno=0 [ 379.888057][ T8084] FAULT_INJECTION: forcing a failure. [ 379.888057][ T8084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 379.902137][ T8084] CPU: 1 PID: 8084 Comm: syz.7.816 Not tainted syzkaller #0 [ 379.909439][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.919569][ T8084] Call Trace: [ 379.922855][ T8084] [ 379.925782][ T8084] dump_stack_lvl+0x188/0x250 [ 379.930489][ T8084] ? show_regs_print_info+0x20/0x20 [ 379.935695][ T8084] ? load_image+0x410/0x410 [ 379.940207][ T8084] ? mark_lock+0x94/0x320 [ 379.944636][ T8084] should_fail+0x383/0x4b0 [ 379.949133][ T8084] prepare_alloc_pages+0x1e3/0x5b0 [ 379.954256][ T8084] __alloc_pages+0x11b/0x480 [ 379.958860][ T8084] ? zone_statistics+0x170/0x170 [ 379.963807][ T8084] ? rcu_lock_acquire+0x30/0x30 [ 379.968728][ T8084] ? alloc_pages+0x452/0x560 [ 379.973362][ T8084] __get_free_pages+0x8/0x30 [ 379.977956][ T8084] __tlb_remove_page_size+0x1f2/0x3f0 [ 379.983338][ T8084] unmap_page_range+0xfcf/0x2410 [ 379.988313][ T8084] unmap_vmas+0x131/0x250 [ 379.992644][ T8084] ? unmap_page_range+0x2410/0x2410 [ 379.997842][ T8084] ? __mutex_lock_common+0x435/0x2400 [ 380.003218][ T8084] ? exit_mm_release+0x16/0x30 [ 380.008079][ T8084] exit_mmap+0x3b9/0x640 [ 380.012325][ T8084] ? vm_brk+0x20/0x20 [ 380.016338][ T8084] ? uprobe_clear_state+0x2f6/0x460 [ 380.021563][ T8084] __mmput+0x115/0x390 [ 380.025636][ T8084] exit_mm+0x632/0x7b0 [ 380.029764][ T8084] ? perf_pmu_migrate_context+0xb70/0xb70 [ 380.035546][ T8084] ? do_exit+0x2110/0x2110 [ 380.039972][ T8084] ? __ia32_sys_timer_delete+0x40/0x40 [ 380.045492][ T8084] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 380.051009][ T8084] ? tty_audit_exit+0x149/0x1f0 [ 380.055914][ T8084] do_exit+0x5b8/0x2110 [ 380.060079][ T8084] ? put_task_struct+0x80/0x80 [ 380.064846][ T8084] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 380.070830][ T8084] ? _raw_spin_lock_irq+0xb7/0xf0 [ 380.075861][ T8084] do_group_exit+0x12c/0x2f0 [ 380.080452][ T8084] ? lockdep_hardirqs_on+0x94/0x140 [ 380.085733][ T8084] get_signal+0x7eb/0x12e0 [ 380.090221][ T8084] arch_do_signal_or_restart+0xe6/0x12a0 [ 380.095932][ T8084] ? futex_exit_release+0x1c0/0x1c0 [ 380.101169][ T8084] ? get_sigframe_size+0x10/0x10 [ 380.106110][ T8084] ? __context_tracking_exit+0x4c/0x80 [ 380.111588][ T8084] ? exit_to_user_mode_loop+0x3b/0x130 [ 380.117051][ T8084] exit_to_user_mode_loop+0x9e/0x130 [ 380.122335][ T8084] exit_to_user_mode_prepare+0xee/0x180 [ 380.127881][ T8084] syscall_exit_to_user_mode+0x16/0x40 [ 380.133343][ T8084] do_syscall_64+0x58/0xa0 [ 380.137755][ T8084] ? clear_bhb_loop+0x30/0x80 [ 380.142503][ T8084] ? clear_bhb_loop+0x30/0x80 [ 380.147177][ T8084] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 380.153095][ T8084] RIP: 0033:0x7fb492e21199 [ 380.157512][ T8084] Code: Unable to access opcode bytes at RIP 0x7fb492e2116f. [ 380.164871][ T8084] RSP: 002b:00007fb4910790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 380.173290][ T8084] RAX: 0000000000000001 RBX: 00007fb4930a8fa8 RCX: 00007fb492e21199 [ 380.181285][ T8084] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4930a8fac [ 380.189253][ T8084] RBP: 00007fb4930a8fa0 R08: 003302458ecdc77c R09: 0000000000000000 [ 380.197226][ T8084] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 380.205192][ T8084] R13: 00007fb4930a9038 R14: 00007ffccb045cf0 R15: 00007ffccb045dd8 [ 380.213180][ T8084] [ 380.271724][ T25] audit: type=1800 audit(1791463507.411:59): pid=8093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.817" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 380.435080][ T25] audit: type=1800 audit(1791463507.571:60): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.818" name="file" dev="configfs" ino=46192 res=0 errno=0 [ 380.818871][ T5526] Bluetooth: hci1: command 0x0419 tx timeout [ 382.593307][ T8143] ip_tables: iptables: counters copy to user failed while replacing table [ 382.657909][ T8151] loop7: detected capacity change from 0 to 512 [ 382.942120][ T25] audit: type=1800 audit(1791463510.081:61): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.832" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 383.720654][ T7932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.064311][ T7932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.282483][ T7932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.356482][ T7932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.541432][ T7932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.562128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 384.574647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 384.592620][ T7932] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.239172][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.259000][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.285703][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.292823][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.551820][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 386.595080][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 386.610296][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 386.639146][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.646229][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.657061][ T8210] tmpfs: Unknown parameter 'quota' [ 386.729347][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 386.758417][ T8214] loop9: detected capacity change from 0 to 128 [ 386.771060][ T8208] loop2: detected capacity change from 0 to 8192 [ 386.778459][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 386.787401][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 386.798212][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.483498][ T25] audit: type=1800 audit(1791463514.511:62): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.844" name="file1" dev="loop2" ino=1048803 res=0 errno=0 [ 389.092178][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 389.152558][ T25] audit: type=1800 audit(1791463516.221:63): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.845" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 389.216019][ T7932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.310679][ T8236] Bluetooth: hci0: unsupported parameter 255 [ 389.458023][ T7932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.477529][ T8236] Bluetooth: hci0: unsupported parameter 255 [ 389.978780][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 389.997837][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 390.010174][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 390.071515][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 390.133190][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 390.165682][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 390.214215][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 390.609368][ T8276] loop9: detected capacity change from 0 to 1024 [ 390.687418][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 391.728878][ T25] audit: type=1800 audit(1791463517.921:64): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.862" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 391.758860][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 391.835405][ T7932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.185973][ T7932] device veth0_vlan entered promiscuous mode [ 392.198120][ T7932] device veth1_vlan entered promiscuous mode [ 393.388170][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 393.405771][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 393.450205][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 393.475381][ T8285] fuse: Bad value for 'fd' [ 393.490963][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 393.521000][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 393.576787][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 393.599285][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 393.633291][ T7932] device veth0_macvtap entered promiscuous mode [ 393.653385][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 393.677719][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 393.709834][ T7932] device veth1_macvtap entered promiscuous mode [ 393.731043][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 393.754087][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 394.237579][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.300420][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.366182][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.384743][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.395134][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.405686][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.415606][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.426469][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.464518][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.518570][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.539670][ T7932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.838495][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.178660][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.231521][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.245692][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.256254][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.269720][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.279569][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.290092][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.290363][ T8302] FAULT_INJECTION: forcing a failure. [ 395.290363][ T8302] name failslab, interval 1, probability 0, space 0, times 0 [ 395.299958][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.299974][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.301142][ T7932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.349342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 395.357990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 395.378353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 395.396431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 395.412304][ T7932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.421160][ T8302] CPU: 1 PID: 8302 Comm: syz.9.871 Not tainted syzkaller #0 [ 395.428424][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.438469][ T8302] Call Trace: [ 395.441735][ T8302] [ 395.444659][ T8302] dump_stack_lvl+0x188/0x250 [ 395.449320][ T8302] ? show_regs_print_info+0x20/0x20 [ 395.454495][ T8302] ? load_image+0x410/0x410 [ 395.458975][ T8302] ? __might_sleep+0xf0/0xf0 [ 395.463603][ T8302] ? __lock_acquire+0x7d40/0x7d40 [ 395.468611][ T8302] ? __up_read+0x2b4/0x6b0 [ 395.473026][ T8302] should_fail+0x383/0x4b0 [ 395.477433][ T8302] should_failslab+0x5/0x20 [ 395.481978][ T8302] slab_pre_alloc_hook+0x51/0xc0 [ 395.486896][ T8302] kmem_cache_alloc_trace+0x47/0x290 [ 395.492156][ T8302] ? afs_lookup_cell+0x55f/0x1680 [ 395.497211][ T8302] afs_lookup_cell+0x55f/0x1680 [ 395.502042][ T8302] ? __lock_acquire+0x7d40/0x7d40 [ 395.507043][ T8302] ? afs_find_cell+0x310/0x310 [ 395.511793][ T8302] afs_cell_init+0x6a/0x300 [ 395.516274][ T8302] proc_simple_write+0x102/0x130 [ 395.521206][ T8302] ? PDE_DATA+0x60/0x60 [ 395.525336][ T8302] proc_reg_write+0x1dd/0x2c0 [ 395.530037][ T8302] ? proc_reg_llseek+0x280/0x280 [ 395.534949][ T8302] vfs_write+0x304/0xd70 [ 395.539177][ T8302] ? file_end_write+0x250/0x250 [ 395.544009][ T8302] ? mutex_lock_nested+0x17/0x20 [ 395.548922][ T8302] ? __fdget_pos+0x2bf/0x370 [ 395.553536][ T8302] ? ksys_write+0x70/0x260 [ 395.557929][ T8302] ksys_write+0x153/0x260 [ 395.562233][ T8302] ? __ia32_sys_read+0x80/0x80 [ 395.566988][ T8302] ? lockdep_hardirqs_on+0x94/0x140 [ 395.572201][ T8302] do_syscall_64+0x4c/0xa0 [ 395.576620][ T8302] ? clear_bhb_loop+0x30/0x80 [ 395.581279][ T8302] ? clear_bhb_loop+0x30/0x80 [ 395.585934][ T8302] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 395.591808][ T8302] RIP: 0033:0x7f5cf3427199 [ 395.596201][ T8302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.615783][ T8302] RSP: 002b:00007f5cf167f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 395.624177][ T8302] RAX: ffffffffffffffda RBX: 00007f5cf36aefa0 RCX: 00007f5cf3427199 [ 395.632129][ T8302] RDX: 0000000000000001 RSI: 0000200000000070 RDI: 0000000000000003 [ 395.640081][ T8302] RBP: 00007f5cf34be888 R08: 0000000000000000 R09: 0000000000000000 [ 395.648045][ T8302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.656005][ T8302] R13: 00007f5cf36af038 R14: 00007f5cf36aefa0 R15: 00007ffce40c94e8 [ 395.663962][ T8302] [ 395.682425][ T8299] netlink: 64 bytes leftover after parsing attributes in process `syz.7.869'. [ 395.688363][ T7932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.708584][ T7932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.727561][ T7932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.903362][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.918473][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.937250][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 395.961685][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.976991][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.035687][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 396.503233][ T8321] overlayfs: missing 'workdir' [ 399.774293][ T8330] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 399.783064][ T8330] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 401.850965][ T8383] fuse: Bad value for 'fd' [ 402.895493][ T8362] loop0: detected capacity change from 0 to 32768 [ 404.866759][ T8418] loop0: detected capacity change from 0 to 8 [ 404.969183][ T8422] fuse: Bad value for 'fd' [ 404.991066][ T25] audit: type=1800 audit(1791463532.131:65): pid=8426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.903" name="p_chmask" dev="configfs" ino=46989 res=0 errno=0 [ 405.027855][ T8418] unable to read fragment index table [ 405.508619][ T4242] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 405.570257][ T8444] loop9: detected capacity change from 0 to 512 [ 405.638152][ T8444] EXT4-fs (loop9): 1 truncate cleaned up [ 405.719554][ T8444] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 406.848737][ T4242] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 406.877739][ T4242] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 407.118694][ T4242] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.172356][ T4242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 407.241595][ T4242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 407.388888][ T4242] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 407.418304][ T4242] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 407.458711][ T4242] usb 3-1: Product: syz [ 407.477721][ T4242] usb 3-1: Manufacturer: syz [ 407.559866][ T4242] cdc_wdm 3-1:1.0: skipping garbage [ 407.565102][ T4242] cdc_wdm 3-1:1.0: skipping garbage [ 407.599108][ T4242] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 407.626864][ T4242] cdc_wdm 3-1:1.0: Unknown control protocol [ 408.053853][ T4230] usb 3-1: USB disconnect, device number 8 [ 409.211721][ T8509] loop2: detected capacity change from 0 to 1024 [ 409.379111][ T8509] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 409.484728][ T8509] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 409.939339][ T8529] loop0: detected capacity change from 0 to 256 [ 410.917271][ T8528] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 410.917271][ T8528] [ 410.931714][ T8528] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 410.945309][ T8528] CIFS: Attempting to mount \\127.0.0.1\share [ 410.962056][ T8528] CIFS: VFS: Error connecting to socket. Aborting operation. [ 410.970522][ T8528] CIFS: VFS: cifs_mount failed w/return code = -111 [ 414.267994][ T8584] loop2: detected capacity change from 0 to 1024 [ 414.613164][ T8584] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 414.745940][ T8584] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 416.042155][ T8630] loop0: detected capacity change from 0 to 512 [ 416.249943][ T8634] fuse: Bad value for 'fd' [ 417.663062][ T25] audit: type=1800 audit(1791463544.801:66): pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.956" name="p_chmask" dev="configfs" ino=47430 res=0 errno=0 [ 418.941985][ T8676] fuse: Bad value for 'fd' [ 419.571339][ T8681] loop0: detected capacity change from 0 to 8 [ 419.667359][ T8681] unable to read fragment index table [ 423.212992][ T8776] fuse: Bad value for 'fd' [ 426.084145][ T8814] udc-core: couldn't find an available UDC or it's busy [ 426.946158][ T8835] fuse: Bad value for 'fd' [ 427.181744][ T8846] loop2: detected capacity change from 0 to 512 [ 428.478454][ T8846] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 428.492398][ T8846] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.866908][ T25] audit: type=1800 audit(1791463558.001:67): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1017" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 431.756749][ T8900] loop9: detected capacity change from 0 to 128 [ 431.876929][ T8900] EXT4-fs (loop9): Test dummy encryption mode enabled [ 431.911475][ T8900] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,noquota,,errors=continue. Quota mode: none. [ 431.929025][ T8900] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 434.890281][ T8943] fuse: Bad value for 'fd' [ 436.208918][ T8975] loop2: detected capacity change from 0 to 512 [ 437.142653][ T8986] loop9: detected capacity change from 0 to 512 [ 437.916637][ T8986] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 437.930077][ T8986] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.144588][ T25] audit: type=1800 audit(1791463566.281:68): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1047" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 439.782899][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.789467][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.934533][ T9050] loop2: detected capacity change from 0 to 256 [ 443.391657][ T25] audit: type=1800 audit(1791463570.531:69): pid=9070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1065" name="file" dev="configfs" ino=47837 res=0 errno=0 [ 443.854869][ T25] audit: type=1800 audit(1791463570.991:70): pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1067" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 443.857381][ T9086] fuse: Bad value for 'fd' [ 446.842814][ T9148] fuse: Bad value for 'fd' [ 448.084166][ T9169] loop0: detected capacity change from 0 to 512 [ 448.126498][ T9175] loop9: detected capacity change from 0 to 1024 [ 449.299732][ T9169] EXT4-fs (loop0): Ignoring removed bh option [ 449.418806][ T9169] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 449.452198][ T9175] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 449.540784][ T9169] EXT4-fs (loop0): 1 truncate cleaned up [ 449.588237][ T9169] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 449.604098][ T9175] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 449.649095][ T9175] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 449.983864][ T9218] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 450.720974][ T25] audit: type=1800 audit(1791463577.861:71): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1102" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 450.795048][ T9231] loop9: detected capacity change from 0 to 512 [ 453.425816][ T9254] loop9: detected capacity change from 0 to 2048 [ 453.498507][ T9254] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.746905][ T9270] loop2: detected capacity change from 0 to 1024 [ 453.772869][ T9266] fuse: Bad value for 'fd' [ 453.952160][ T9278] loop9: detected capacity change from 0 to 256 [ 453.987494][ T9278] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 453.987494][ T9278] [ 454.001310][ T9278] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 454.014117][ T9278] CIFS: Attempting to mount \\127.0.0.1\share [ 454.025054][ T9278] CIFS: VFS: Error connecting to socket. Aborting operation. [ 454.032732][ T9278] CIFS: VFS: cifs_mount failed w/return code = -111 [ 454.811276][ T9270] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 454.931995][ T9270] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 457.355821][ T9326] loop0: detected capacity change from 0 to 512 [ 457.759114][ T9337] loop9: detected capacity change from 0 to 256 [ 458.912665][ T9347] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 458.912665][ T9347] [ 458.926337][ T9347] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 458.938864][ T9347] CIFS: Attempting to mount \\127.0.0.1\share [ 458.945961][ T9347] CIFS: VFS: Error connecting to socket. Aborting operation. [ 458.953701][ T9347] CIFS: VFS: cifs_mount failed w/return code = -111 [ 459.299107][ T9363] loop0: detected capacity change from 0 to 512 [ 461.185186][ T9359] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 461.212014][ T9359] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 461.228638][ T9359] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 461.388654][ T9359] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 461.418847][ T9359] page dumped because: unmovable page [ 461.428648][ T9359] page_owner info is not present (never set?) [ 462.779047][ T25] audit: type=1800 audit(1791463589.921:72): pid=9380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1138" name="file" dev="configfs" ino=49015 res=0 errno=0 [ 465.836917][ T9425] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 465.935121][ T9425] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 466.083330][ T9425] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 466.763731][ T9425] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 466.773014][ T9425] page dumped because: unmovable page [ 466.778394][ T9425] page_owner info is not present (never set?) [ 467.853241][ T25] audit: type=1800 audit(1791463594.981:73): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1155" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 468.375319][ T9476] ip_tables: iptables: counters copy to user failed while replacing table [ 469.939068][ T9495] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 469.988690][ T9495] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 470.148773][ T9495] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 470.157481][ T9495] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 470.988680][ T9495] page dumped because: unmovable page [ 471.016082][ T9495] page_owner info is not present (never set?) [ 471.140646][ T9511] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 471.140646][ T9511] [ 471.154351][ T9511] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 471.166843][ T9511] CIFS: Attempting to mount \\127.0.0.1\share [ 471.173811][ T9511] CIFS: VFS: Error connecting to socket. Aborting operation. [ 471.181289][ T9511] CIFS: VFS: cifs_mount failed w/return code = -111 [ 471.419594][ T25] audit: type=1800 audit(1791463598.551:74): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1168" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 472.293436][ T25] audit: type=1800 audit(1791463599.431:75): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1173" name="p_chmask" dev="configfs" ino=49367 res=0 errno=0 [ 474.519013][ T9552] loop0: detected capacity change from 0 to 512 [ 474.707779][ T9552] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 474.721430][ T9552] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.780518][ T9571] loop2: detected capacity change from 0 to 128 [ 476.900465][ T9565] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 476.900465][ T9565] [ 476.914513][ T9565] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 476.926983][ T9565] CIFS: Attempting to mount \\127.0.0.1\share [ 476.934088][ T9565] CIFS: VFS: Error connecting to socket. Aborting operation. [ 476.941515][ T9565] CIFS: VFS: cifs_mount failed w/return code = -111 [ 477.062472][ T25] audit: type=1800 audit(1791463604.201:76): pid=9580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1185" name="p_chmask" dev="configfs" ino=50266 res=0 errno=0 [ 477.233023][ T9589] ip_tables: iptables: counters copy to user failed while replacing table [ 477.243233][ T9589] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 478.468812][ T5526] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 479.278740][ T5526] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 479.290760][ T5526] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 479.302272][ T5526] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 479.316547][ T5526] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 479.328836][ T5526] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 479.401898][ T9630] loop9: detected capacity change from 0 to 512 [ 479.458975][ T5526] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 479.539123][ T5526] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 479.740733][ T5526] usb 3-1: Product: syz [ 479.771060][ T5526] usb 3-1: Manufacturer: syz [ 479.820477][ T5526] cdc_wdm 3-1:1.0: skipping garbage [ 479.827679][ T5526] cdc_wdm 3-1:1.0: skipping garbage [ 479.858349][ T5526] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 479.866353][ T5526] cdc_wdm 3-1:1.0: Unknown control protocol [ 480.120798][ T4233] usb 3-1: USB disconnect, device number 9 [ 480.323986][ T9649] loop9: detected capacity change from 0 to 256 [ 481.671895][ T9664] ip_tables: iptables: counters copy to user failed while replacing table [ 482.096339][ T9673] fuse: Bad value for 'fd' [ 482.134705][ T9677] loop9: detected capacity change from 0 to 512 [ 482.222613][ T9677] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 482.235862][ T9677] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.997683][ T9688] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 483.024735][ T9688] CIFS mount error: No usable UNC path provided in device string! [ 483.024735][ T9688] [ 483.035218][ T9688] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 483.757194][ T9696] FAULT_INJECTION: forcing a failure. [ 483.757194][ T9696] name failslab, interval 1, probability 0, space 0, times 0 [ 483.788624][ T9696] CPU: 1 PID: 9696 Comm: syz.9.1209 Not tainted syzkaller #0 [ 483.796029][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.806084][ T9696] Call Trace: [ 483.809360][ T9696] [ 483.812294][ T9696] dump_stack_lvl+0x188/0x250 [ 483.816984][ T9696] ? show_regs_print_info+0x20/0x20 [ 483.822193][ T9696] ? load_image+0x410/0x410 [ 483.826702][ T9696] ? __might_sleep+0xf0/0xf0 [ 483.831290][ T9696] ? __lock_acquire+0x7d40/0x7d40 [ 483.836324][ T9696] should_fail+0x383/0x4b0 [ 483.840753][ T9696] should_failslab+0x5/0x20 [ 483.845259][ T9696] slab_pre_alloc_hook+0x51/0xc0 [ 483.850208][ T9696] kmem_cache_alloc_trace+0x47/0x290 [ 483.855491][ T9696] ? call_usermodehelper_setup+0x8a/0x260 [ 483.861219][ T9696] call_usermodehelper_setup+0x8a/0x260 [ 483.866767][ T9696] ? __request_module+0x980/0x980 [ 483.871878][ T9696] __request_module+0x3ea/0x980 [ 483.876744][ T9696] ? umd_cleanup+0x110/0x110 [ 483.881348][ T9696] ? __lock_acquire+0x7d40/0x7d40 [ 483.886382][ T9696] ? tomoyo_realpath_from_path+0x5b7/0x5e0 [ 483.892202][ T9696] get_fs_type+0x17c/0x480 [ 483.896620][ T9696] tomoyo_mount_permission+0x43c/0x9b0 [ 483.902084][ T9696] ? ____kasan_slab_free+0xd5/0x110 [ 483.907285][ T9696] ? slab_free_freelist_hook+0xec/0x170 [ 483.912827][ T9696] ? tomoyo_get_name+0x520/0x520 [ 483.917767][ T9696] security_sb_mount+0x83/0xb0 [ 483.922511][ T9696] path_mount+0xb8/0xfe0 [ 483.926739][ T9696] ? user_path_at_empty+0x13e/0x190 [ 483.931936][ T9696] __se_sys_mount+0x2e3/0x3d0 [ 483.936604][ T9696] ? __x64_sys_mount+0xc0/0xc0 [ 483.941348][ T9696] ? lockdep_hardirqs_on+0x94/0x140 [ 483.946530][ T9696] ? __x64_sys_mount+0x1c/0xc0 [ 483.951280][ T9696] do_syscall_64+0x4c/0xa0 [ 483.955677][ T9696] ? clear_bhb_loop+0x30/0x80 [ 483.960332][ T9696] ? clear_bhb_loop+0x30/0x80 [ 483.964988][ T9696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 483.970859][ T9696] RIP: 0033:0x7f5cf3427199 [ 483.975254][ T9696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.994832][ T9696] RSP: 002b:00007f5cf167f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 484.003227][ T9696] RAX: ffffffffffffffda RBX: 00007f5cf36aefa0 RCX: 00007f5cf3427199 [ 484.011182][ T9696] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 484.019140][ T9696] RBP: 00007f5cf34be888 R08: 0000000000000000 R09: 0000000000000000 [ 484.027097][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.035048][ T9696] R13: 00007f5cf36af038 R14: 00007f5cf36aefa0 R15: 00007ffce40c94e8 [ 484.043013][ T9696] [ 484.106285][ T9701] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 484.106285][ T9701] [ 484.119953][ T9701] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 484.132421][ T9701] CIFS: Attempting to mount \\127.0.0.1\share [ 484.139390][ T9701] CIFS: VFS: Error connecting to socket. Aborting operation. [ 484.147280][ T9701] CIFS: VFS: cifs_mount failed w/return code = -111 [ 484.461943][ T9724] ip_tables: iptables: counters copy to user failed while replacing table [ 484.729630][ T25] audit: type=1800 audit(1791463611.871:77): pid=9727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1219" name="file" dev="configfs" ino=50441 res=0 errno=0 [ 485.187691][ T9743] page:ffffea0001cc0000 refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x73000 [ 485.232671][ T9753] loop9: detected capacity change from 0 to 64 [ 485.258747][ T9743] flags: 0xfff00000000008(dirty|node=0|zone=1|lastcpupid=0x7ff) [ 485.330180][ T9743] raw: 00fff00000000008 0000000000000000 dead000000000122 0000000000000000 [ 485.381546][ T9743] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 485.414604][ T9762] Trying to free block not in datazone [ 485.443478][ T9743] page dumped because: unmovable page [ 485.472083][ T9743] page_owner tracks the page as allocated [ 485.508865][ T9743] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 4387, ts 77588290768, free_ts 72260716007 [ 485.608804][ T9743] get_page_from_freelist+0x24f6/0x2670 [ 485.617405][ T9743] __alloc_pages+0x1ee/0x480 [ 485.646386][ T9743] __vmalloc_node_range+0x4b1/0x8b0 [ 485.699996][ T9743] vmalloc_user+0x70/0x80 [ 485.752722][ T9743] kcov_mmap+0x27/0x120 [ 485.762903][ T9743] mmap_file+0x5d/0xb0 [ 485.773071][ T9743] mmap_region+0x1048/0x1730 [ 485.797696][ T9743] do_mmap+0x801/0xe30 [ 485.807875][ T9743] vm_mmap_pgoff+0x1c1/0x2d0 [ 485.817035][ T9743] ksys_mmap_pgoff+0x4e2/0x790 [ 485.864946][ T9743] do_syscall_64+0x4c/0xa0 [ 485.879833][ T9743] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 485.919887][ T9743] page last free stack trace: [ 485.937846][ T9743] free_unref_page_prepare+0x637/0x6c0 [ 485.998619][ T9743] free_unref_page+0x8f/0x2a0 [ 486.003357][ T9743] __unfreeze_partials+0x188/0x1e0 [ 486.040457][ T9743] put_cpu_partial+0x12d/0x190 [ 486.056006][ T9743] qlist_free_all+0x35/0x90 [ 486.067483][ T9743] kasan_quarantine_reduce+0x150/0x160 [ 486.087800][ T9743] __kasan_slab_alloc+0x2f/0xc0 [ 486.098707][ T9743] slab_post_alloc_hook+0x4c/0x380 [ 486.116318][ T9743] __kmalloc+0x189/0x340 [ 486.128645][ T9743] tomoyo_realpath_from_path+0xed/0x5e0 [ 486.150481][ T9743] tomoyo_path_perm+0x23f/0x5d0 [ 486.155372][ T9743] security_inode_getattr+0xcf/0x120 [ 486.308844][ T9743] vfs_getattr+0x26/0x3a0 [ 486.324689][ T9743] __x64_sys_newfstat+0x137/0x210 [ 486.550420][ T9743] do_syscall_64+0x4c/0xa0 [ 487.085381][ T9743] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 487.491105][ T9791] kAFS: No cell specified [ 487.573560][ T9797] loop0: detected capacity change from 0 to 2048 [ 487.594535][ T9804] ip_tables: iptables: counters copy to user failed while replacing table [ 487.884912][ T9808] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.918266][ T9814] overlayfs: failed to clone upperpath [ 490.703225][ T25] audit: type=1804 audit(1791463617.841:78): pid=9837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1241" name="/newroot/62/file1" dev="fuse" ino=1 res=1 errno=0 [ 491.630544][ T9860] loop2: detected capacity change from 0 to 8 [ 491.698172][ T9860] unable to read fragment index table [ 493.090333][ T9882] loop0: detected capacity change from 0 to 512 [ 493.262379][ T9882] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 493.270648][ T9882] System zones: 1-12 [ 493.309275][ T9889] fuse: Bad value for 'fd' [ 493.335292][ T9882] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1252: missing EA_INODE flag [ 493.416203][ T9882] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1252: error while reading EA inode 12 err=-117 [ 493.571438][ T9882] EXT4-fs (loop0): 1 orphan inode deleted [ 493.577209][ T9882] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 494.971627][ T9910] ip_tables: iptables: counters copy to user failed while replacing table [ 496.251270][ T9932] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 497.408635][ T9956] fuse: Bad value for 'fd' [ 498.249281][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 500.826804][ T9995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.074990][ T8111] Bluetooth: Unexpected continuation frame (len 150) [ 501.222879][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.229904][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.459853][ T6237] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.751814][ T6237] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.617764][ T6237] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.681744][ T25] audit: type=1800 audit(1791463629.821:79): pid=10027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1284" name="file" dev="configfs" ino=50794 res=0 errno=0 [ 502.815236][ T6237] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.866184][T10051] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1288'. [ 506.492248][T10071] loop0: detected capacity change from 0 to 256 [ 507.279451][T10071] FAT-fs (loop0): Directory bread(block 64) failed [ 507.338669][T10071] FAT-fs (loop0): Directory bread(block 65) failed [ 507.393382][T10071] FAT-fs (loop0): Directory bread(block 66) failed [ 507.428727][T10071] FAT-fs (loop0): Directory bread(block 67) failed [ 507.455524][T10071] FAT-fs (loop0): Directory bread(block 68) failed [ 507.478754][T10071] FAT-fs (loop0): Directory bread(block 69) failed [ 507.489587][T10071] FAT-fs (loop0): Directory bread(block 70) failed [ 507.520774][T10071] FAT-fs (loop0): Directory bread(block 71) failed [ 507.569267][T10071] FAT-fs (loop0): Directory bread(block 72) failed [ 507.575789][T10071] FAT-fs (loop0): Directory bread(block 73) failed [ 507.654783][ T25] audit: type=1800 audit(1791463634.791:80): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1294" name="file1" dev="loop0" ino=1048843 res=0 errno=0 [ 507.686551][T10071] attempt to access beyond end of device [ 507.686551][T10071] loop0: rw=2049, want=1780, limit=256 [ 507.835693][ T6237] device hsr_slave_0 left promiscuous mode [ 507.857925][ T6237] device hsr_slave_1 left promiscuous mode [ 507.933100][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.973262][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.013651][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.037247][ T25] audit: type=1800 audit(1791463635.171:81): pid=10091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1299" name="file" dev="configfs" ino=50981 res=0 errno=0 [ 508.077889][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.144945][ T6237] device bridge_slave_1 left promiscuous mode [ 508.159272][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.195559][ T6237] device bridge_slave_0 left promiscuous mode [ 508.220043][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.235446][T10097] loop9: detected capacity change from 0 to 128 [ 508.268031][ T6237] device veth0_macvtap left promiscuous mode [ 508.312811][ T6237] device veth1_vlan left promiscuous mode [ 508.323854][T10097] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 508.346242][ T6237] device veth0_vlan left promiscuous mode [ 509.031482][ T6237] team0 (unregistering): Port device team_slave_1 removed [ 509.108318][ T6237] team0 (unregistering): Port device team_slave_0 removed [ 509.222139][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.235959][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.042040][ T6237] bond0 (unregistering): Released all slaves [ 511.303584][ T25] audit: type=1800 audit(1791463638.441:82): pid=10139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1311" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 512.373654][T10156] loop0: detected capacity change from 0 to 4096 [ 512.489572][T10158] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 515.548040][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1328'. [ 515.892326][T10209] loop2: detected capacity change from 0 to 512 [ 516.872056][T10209] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 517.006265][T10209] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.269838][T10209] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 517.324014][T10209] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 517.426129][T10209] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1330: Failed to acquire dquot type 0 [ 517.790795][ T25] audit: type=1800 audit(1791463644.931:83): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1336" name="file" dev="configfs" ino=50056 res=0 errno=0 [ 518.312510][T10265] loop9: detected capacity change from 0 to 512 [ 518.446993][T10265] FAT-fs (loop9): bogus logical sector size 256 [ 518.507609][T10265] FAT-fs (loop9): Can't find a valid FAT filesystem [ 522.526027][T10301] loop0: detected capacity change from 0 to 512 [ 523.725518][ T25] audit: type=1800 audit(1791463650.861:84): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1354" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 524.862968][T10335] loop9: detected capacity change from 0 to 512 [ 526.274482][T10346] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 526.323892][T10357] loop2: detected capacity change from 0 to 512 [ 526.408627][T10346] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 526.417954][T10346] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 526.522959][T10357] EXT4-fs (loop2): 1 truncate cleaned up [ 526.537365][T10357] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 526.648720][T10346] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 526.720749][T10346] page dumped because: unmovable page [ 526.751170][T10346] page_owner info is not present (never set?) [ 526.852378][T10366] loop9: detected capacity change from 0 to 512 [ 526.970933][T10366] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 526.985060][T10366] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.716881][ T25] audit: type=1800 audit(1791463654.851:85): pid=10373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1368" name="file" dev="configfs" ino=51296 res=0 errno=0 [ 528.968857][T10395] loop0: detected capacity change from 0 to 512 [ 530.693534][T10411] loop9: detected capacity change from 0 to 128 [ 530.793356][T10411] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 532.513548][T10431] fuse: Bad value for 'fd' [ 532.717629][T10436] loop9: detected capacity change from 0 to 4096 [ 532.795804][ T25] audit: type=1400 audit(1791463659.931:86): apparmor="STATUS" operation="profile_load" profile="unconfined" name="fo/" pid=10429 comm="syz.0.1377" [ 533.357103][T10440] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 533.464144][T10449] CIFS mount error: No usable UNC path provided in device string! [ 533.464144][T10449] [ 533.474292][T10449] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 534.980930][T10459] loop0: detected capacity change from 0 to 512 [ 536.987656][T10480] loop2: detected capacity change from 0 to 512 [ 537.172045][T10488] fuse: Bad value for 'fd' [ 537.295915][T10480] EXT4-fs (loop2): 1 orphan inode deleted [ 537.313839][T10480] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,dax=never,min_batch_time=0x0000000000000076,,errors=continue. Quota mode: writeback. [ 537.350928][T10480] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.383422][T10493] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 537.409257][T10501] CIFS mount error: No usable UNC path provided in device string! [ 537.409257][T10501] [ 537.419375][T10501] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 537.499579][T10493] overlayfs: failed to set xattr on upper [ 537.505333][T10493] overlayfs: ...falling back to index=off,metacopy=off. [ 540.368476][ T25] audit: type=1400 audit(1791463667.501:87): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/o/" pid=10523 comm="syz.9.1403" [ 542.756437][T10572] loop0: detected capacity change from 0 to 256 [ 542.809628][T10572] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 542.809628][T10572] [ 542.823665][T10572] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 542.836165][T10572] CIFS: Attempting to mount \\127.0.0.1\share [ 542.843081][T10572] CIFS: VFS: Error connecting to socket. Aborting operation. [ 542.850558][T10572] CIFS: VFS: cifs_mount failed w/return code = -111 [ 542.919932][T10577] ip_tables: iptables: counters copy to user failed while replacing table [ 544.094840][ T25] audit: type=1800 audit(1791463671.231:88): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1416" name="file" dev="configfs" ino=51531 res=0 errno=0 [ 544.853575][T10607] loop0: detected capacity change from 0 to 512 [ 544.906252][T10607] EXT4-fs (loop0): Unrecognized mount option "quota.dax=always" or missing value [ 544.977352][T10575] loop2: detected capacity change from 0 to 32768 [ 545.384153][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1417'. [ 545.434684][T10575] ea_get: invalid extended attribute [ 545.643247][T10615] FAULT_INJECTION: forcing a failure. [ 545.643247][T10615] name failslab, interval 1, probability 0, space 0, times 0 [ 545.788910][T10615] CPU: 0 PID: 10615 Comm: syz.9.1420 Not tainted syzkaller #0 [ 545.796397][T10615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.806453][T10615] Call Trace: [ 545.809737][T10615] [ 545.812674][T10615] dump_stack_lvl+0x188/0x250 [ 545.817370][T10615] ? show_regs_print_info+0x20/0x20 [ 545.822575][T10615] ? load_image+0x410/0x410 [ 545.827094][T10615] ? __lock_acquire+0x7d40/0x7d40 [ 545.832130][T10615] ? rcu_is_watching+0x11/0xa0 [ 545.836989][T10615] should_fail+0x383/0x4b0 [ 545.841426][T10615] should_failslab+0x5/0x20 [ 545.845934][T10615] slab_pre_alloc_hook+0x51/0xc0 [ 545.850883][T10615] __kmalloc_node+0x6d/0x3a0 [ 545.855479][T10615] ? __rb_allocate_pages+0x197/0x6b0 [ 545.860857][T10615] __rb_allocate_pages+0x197/0x6b0 [ 545.865984][T10615] rb_allocate_cpu_buffer+0x625/0x9e0 [ 545.871379][T10615] ? rb_wake_up_waiters+0x190/0x190 [ 545.876601][T10615] __ring_buffer_alloc+0x24b/0x540 [ 545.881729][T10615] allocate_trace_buffers+0x70/0x2c0 [ 545.887026][T10615] ? __raw_spin_lock_init+0x41/0x100 [ 545.892324][T10615] trace_array_create+0x2ac/0xc00 [ 545.897363][T10615] instance_mkdir+0xc8/0x120 [ 545.902039][T10615] tracefs_syscall_mkdir+0xb7/0x110 [ 545.907315][T10615] vfs_mkdir+0x386/0x570 [ 545.911583][T10615] do_mkdirat+0x1dd/0x5c0 [ 545.915927][T10615] ? vfs_mkdir+0x570/0x570 [ 545.920363][T10615] __x64_sys_mkdirat+0x85/0x90 [ 545.925132][T10615] do_syscall_64+0x4c/0xa0 [ 545.929548][T10615] ? clear_bhb_loop+0x30/0x80 [ 545.934226][T10615] ? clear_bhb_loop+0x30/0x80 [ 545.938903][T10615] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 545.944803][T10615] RIP: 0033:0x7f5cf3427199 [ 545.949231][T10615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.968843][T10615] RSP: 002b:00007f5cf167f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 545.977266][T10615] RAX: ffffffffffffffda RBX: 00007f5cf36aefa0 RCX: 00007f5cf3427199 [ 545.985238][T10615] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 545.993215][T10615] RBP: 00007f5cf34be888 R08: 0000000000000000 R09: 0000000000000000 [ 546.001191][T10615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.009165][T10615] R13: 00007f5cf36af038 R14: 00007f5cf36aefa0 R15: 00007ffce40c94e8 [ 546.017154][T10615] [ 546.035719][T10575] ffff88806129bab0: 04 00 00 00 .... [ 546.532712][T10674] ip_tables: iptables: counters copy to user failed while replacing table [ 546.834794][T10683] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 546.834794][T10683] [ 546.848662][T10683] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 546.861204][T10683] CIFS: Attempting to mount \\127.0.0.1\share [ 546.870326][T10683] CIFS: VFS: Error connecting to socket. Aborting operation. [ 546.877825][T10683] CIFS: VFS: cifs_mount failed w/return code = -111 [ 548.052061][ T25] audit: type=1400 audit(1791463675.191:89): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/o/" pid=10695 comm="syz.2.1429" [ 548.338501][T10723] loop2: detected capacity change from 0 to 128 [ 548.579868][T10723] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 548.674259][T10723] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 548.713017][T10723] ext2 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 548.796833][T10740] ip_tables: iptables: counters copy to user failed while replacing table [ 549.222073][T10742] loop9: detected capacity change from 0 to 512 [ 549.366417][T10742] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 553.341793][T10784] ip_tables: iptables: counters copy to user failed while replacing table [ 553.428799][T10803] fuse: Bad value for 'fd' [ 554.618885][T10826] loop0: detected capacity change from 0 to 256 [ 554.869614][T10826] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 554.920214][T10826] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 556.503065][T10836] loop0: detected capacity change from 0 to 32768 [ 556.657472][T10836] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 556.707703][T10836] BTRFS info (device loop0): setting nodatasum [ 556.787690][T10836] BTRFS info (device loop0): force zlib compression, level 3 [ 556.908011][T10836] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 557.047302][T10836] BTRFS info (device loop0): use lzo compression, level 0 [ 557.150860][T10836] BTRFS info (device loop0): turning on flush-on-commit [ 557.265416][T10836] BTRFS info (device loop0): enabling auto defrag [ 557.358300][T10836] BTRFS info (device loop0): max_inline at 4096 [ 557.481384][T10836] BTRFS info (device loop0): using free space tree [ 557.582191][T10836] BTRFS info (device loop0): has skinny extents [ 558.418669][ T4233] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 560.280649][ T4233] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 560.412408][T10836] BTRFS error (device loop0): open_ctree failed: -22 [ 560.422372][T10869] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (10869) [ 560.471973][ T4233] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 560.489054][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.516581][ T4233] usb 3-1: Product: syz [ 560.532093][ T4233] usb 3-1: Manufacturer: syz [ 560.561423][ T4233] usb 3-1: SerialNumber: syz [ 560.920851][ T4233] usb 3-1: USB disconnect, device number 10 [ 561.275787][T10990] ip_tables: iptables: counters copy to user failed while replacing table [ 561.517043][T10999] loop2: detected capacity change from 0 to 4096 [ 561.680828][T11008] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 561.800760][ T25] audit: type=1400 audit(1791463688.941:90): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/o/" pid=10978 comm="syz.0.1490" [ 562.742321][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.748679][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.025604][T11024] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 563.310672][T11046] FAULT_INJECTION: forcing a failure. [ 563.310672][T11046] name failslab, interval 1, probability 0, space 0, times 0 [ 563.378683][T11046] CPU: 1 PID: 11046 Comm: syz.0.1507 Not tainted syzkaller #0 [ 563.386178][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.396240][T11046] Call Trace: [ 563.399523][T11046] [ 563.402456][T11046] dump_stack_lvl+0x188/0x250 [ 563.407146][T11046] ? show_regs_print_info+0x20/0x20 [ 563.412353][T11046] ? load_image+0x410/0x410 [ 563.416864][T11046] ? __might_sleep+0xf0/0xf0 [ 563.421461][T11046] ? __lock_acquire+0x7d40/0x7d40 [ 563.426497][T11046] should_fail+0x383/0x4b0 [ 563.430927][T11046] should_failslab+0x5/0x20 [ 563.435437][T11046] slab_pre_alloc_hook+0x51/0xc0 [ 563.440383][T11046] ? getname_flags+0xb7/0x4f0 [ 563.445068][T11046] kmem_cache_alloc+0x3d/0x280 [ 563.449848][T11046] getname_flags+0xb7/0x4f0 [ 563.454364][T11046] user_path_at_empty+0x2a/0x190 [ 563.459310][T11046] vfs_statx+0x107/0x4c0 [ 563.463563][T11046] ? vfs_write+0xaa6/0xd70 [ 563.467986][T11046] ? vfs_fstatat+0x40/0x40 [ 563.472419][T11046] __x64_sys_newfstatat+0x15f/0x200 [ 563.477628][T11046] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 563.482929][T11046] ? lock_chain_count+0x20/0x20 [ 563.487797][T11046] ? lockdep_hardirqs_on+0x94/0x140 [ 563.493009][T11046] do_syscall_64+0x4c/0xa0 [ 563.497432][T11046] ? clear_bhb_loop+0x30/0x80 [ 563.502117][T11046] ? clear_bhb_loop+0x30/0x80 [ 563.506800][T11046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 563.512697][T11046] RIP: 0033:0x7f5628014199 [ 563.517117][T11046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.536725][T11046] RSP: 002b:00007f562626c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 563.545143][T11046] RAX: ffffffffffffffda RBX: 00007f562829bfa0 RCX: 00007f5628014199 [ 563.553124][T11046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 563.556992][T11053] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.561104][T11046] RBP: 00007f56280ab888 R08: 0000000000000000 R09: 0000000000000000 [ 563.561120][T11046] R10: 0000000000000900 R11: 0000000000000246 R12: 0000000000000000 [ 563.561132][T11046] R13: 00007f562829c038 R14: 00007f562829bfa0 R15: 00007ffcd45298e8 [ 563.561165][T11046] [ 563.600200][T11053] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.821514][T11057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.359495][ T25] audit: type=1800 audit(1791463692.421:91): pid=11072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1513" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 568.443301][T11118] loop2: detected capacity change from 0 to 512 [ 568.670274][T11118] EXT4-fs (loop2): 1 truncate cleaned up [ 568.675945][T11118] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 569.174420][T11140] ip_tables: iptables: counters copy to user failed while replacing table [ 569.449504][T11146] loop0: detected capacity change from 0 to 256 [ 569.564331][T11143] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 569.564331][T11143] [ 569.627325][T11143] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 569.649249][T11143] CIFS: Attempting to mount \\127.0.0.1\share [ 569.712105][T11143] CIFS: VFS: Error connecting to socket. Aborting operation. [ 569.727961][T11143] CIFS: VFS: cifs_mount failed w/return code = -111 [ 569.949676][T11166] fuse: Bad value for 'fd' [ 569.985047][T11167] loop0: detected capacity change from 0 to 512 [ 571.141578][T11123] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 571.492256][T11192] loop0: detected capacity change from 0 to 128 [ 571.557517][T11192] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 571.874406][T11206] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6261] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11206] [ 572.559215][T11203] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 572.559215][T11203] [ 572.638758][T11203] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 572.655669][ T25] audit: type=1804 audit(1791463699.791:92): pid=11208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1548" name="/newroot/320/file1" dev="fuse" ino=1 res=1 errno=0 [ 572.680287][T11203] CIFS: Attempting to mount \\127.0.0.1\share [ 572.715937][T11217] loop0: detected capacity change from 0 to 1024 [ 572.740625][T11203] CIFS: VFS: Error connecting to socket. Aborting operation. [ 572.759613][T11203] CIFS: VFS: cifs_mount failed w/return code = -111 [ 572.768077][T11217] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 575.318483][T11241] loop2: detected capacity change from 0 to 4096 [ 575.421270][T11244] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 576.662488][T11262] fuse: Bad value for 'fd' [ 576.755094][T11266] loop2: detected capacity change from 0 to 128 [ 576.824585][T11266] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 577.256842][T11277] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 577.256842][T11277] [ 577.334208][T11283] ip_tables: iptables: counters copy to user failed while replacing table [ 578.075893][T11277] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 578.090911][T11277] CIFS: Attempting to mount \\127.0.0.1\share [ 578.177603][T11277] CIFS: VFS: Error connecting to socket. Aborting operation. [ 578.845261][T11277] CIFS: VFS: cifs_mount failed w/return code = -111 [ 578.959273][T11298] loop0: detected capacity change from 0 to 2048 [ 580.188706][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 580.332294][T11321] fuse: Bad value for 'fd' [ 580.428737][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 580.534561][T11328] CIFS mount error: No usable UNC path provided in device string! [ 580.534561][T11328] [ 580.545213][T11328] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 581.217190][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.260687][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.338723][ T13] usb 1-1: string descriptor 0 read error: -71 [ 581.345650][ T13] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.414823][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.478802][ T13] usb 1-1: can't set config #1, error -71 [ 581.503942][ T13] usb 1-1: USB disconnect, device number 2 [ 583.221457][T11359] loop0: detected capacity change from 0 to 4096 [ 583.861554][T11363] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 583.928049][T11370] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1589'. [ 584.890954][T11375] loop0: detected capacity change from 0 to 4096 [ 584.932404][T11387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.978187][T11375] ntfs3: loop0: Failed to load $Extend. [ 585.076046][T11381] ODEBUG: Out of memory. ODEBUG disabled [ 585.277969][T11398] loop0: detected capacity change from 0 to 512 [ 586.130287][T11398] EXT4-fs (loop0): 1 truncate cleaned up [ 586.146631][T11398] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 586.290203][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1600'. [ 586.432369][T11417] ip_tables: iptables: counters copy to user failed while replacing table [ 589.546532][T11483] loop2: detected capacity change from 0 to 256 [ 590.031309][T11502] CIFS mount error: No usable UNC path provided in device string! [ 590.031309][T11502] [ 590.128675][T11502] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 591.251829][T11527] ip_tables: iptables: counters copy to user failed while replacing table [ 592.692982][T11556] loop2: detected capacity change from 0 to 512 [ 592.700352][T11555] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 592.700352][T11555] [ 592.743816][T11555] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 592.774263][T11555] CIFS: Attempting to mount \\127.0.0.1\share [ 592.810747][T11555] CIFS: VFS: Error connecting to socket. Aborting operation. [ 592.829288][T11555] CIFS: VFS: cifs_mount failed w/return code = -111 [ 594.539887][T11579] INFO: trying to register non-static key. [ 594.545697][T11579] The code is fine but needs lockdep annotation, or maybe [ 594.552791][T11579] you didn't initialize this object before use? [ 594.559018][T11579] turning off the locking correctness validator. [ 594.565334][T11579] CPU: 0 PID: 11579 Comm: syz.2.1645 Not tainted syzkaller #0 [ 594.572787][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 594.582838][T11579] Call Trace: [ 594.586132][T11579] [ 594.589060][T11579] dump_stack_lvl+0x188/0x250 [ 594.593747][T11579] ? show_regs_print_info+0x20/0x20 [ 594.598950][T11579] ? load_image+0x410/0x410 [ 594.603449][T11579] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 594.609346][T11579] ? cpumask_next+0xb3/0xd0 [ 594.613934][T11579] assign_lock_key+0x1ec/0x200 [ 594.618699][T11579] ? SOFTIRQ_verbose+0x10/0x10 [ 594.623463][T11579] ? mark_lock+0x94/0x320 [ 594.627792][T11579] ? verify_lock_unused+0x140/0x140 [ 594.632997][T11579] register_lock_class+0x21d/0x880 [ 594.638125][T11579] ? is_dynamic_key+0x1f0/0x1f0 [ 594.642981][T11579] ? rcu_lock_release+0x5/0x20 [ 594.647827][T11579] __lock_acquire+0x265/0x7d40 [ 594.652593][T11579] ? __lock_acquire+0x12df/0x7d40 [ 594.657621][T11579] ? __rwlock_init+0x140/0x140 [ 594.662392][T11579] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 594.668290][T11579] ? verify_lock_unused+0x140/0x140 [ 594.673491][T11579] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 594.679387][T11579] ? _raw_spin_unlock+0x40/0x40 [ 594.684242][T11579] ? verify_lock_unused+0x140/0x140 [ 594.689447][T11579] ? stack_trace_save+0xa6/0xf0 [ 594.694301][T11579] ? stack_depot_save+0x41b/0x460 [ 594.699335][T11579] lock_acquire+0x19f/0x400 [ 594.703839][T11579] ? gsmld_write+0x57/0x120 [ 594.708347][T11579] ? memcpy+0x3c/0x60 [ 594.712328][T11579] ? read_lock_is_recursive+0x10/0x10 [ 594.717700][T11579] ? _copy_from_iter+0x8f9/0x1160 [ 594.722756][T11579] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 594.728214][T11579] ? lockdep_hardirqs_off+0x70/0x100 [ 594.733505][T11579] _raw_spin_lock_irqsave+0xb0/0x100 [ 594.738826][T11579] ? gsmld_write+0x57/0x120 [ 594.743336][T11579] ? _raw_spin_lock+0x40/0x40 [ 594.748016][T11579] ? __virt_addr_valid+0x3c6/0x470 [ 594.753204][T11579] gsmld_write+0x57/0x120 [ 594.757540][T11579] file_tty_write+0x50c/0x8a0 [ 594.762292][T11579] ? gsmld_read+0x10/0x10 [ 594.766629][T11579] do_iter_readv_writev+0x47d/0x5f0 [ 594.771832][T11579] ? aa_path_link+0x8a0/0x8a0 [ 594.776575][T11579] ? generic_file_rw_checks+0x280/0x280 [ 594.782127][T11579] ? common_file_perm+0x171/0x1c0 [ 594.787152][T11579] ? fsnotify_perm+0x5d/0x560 [ 594.791824][T11579] ? security_file_permission+0x75/0xa0 [ 594.797372][T11579] do_iter_write+0x1f8/0x7a0 [ 594.801965][T11579] ? memset+0x1e/0x40 [ 594.805949][T11579] ? iov_iter_bvec+0xb4/0x170 [ 594.810626][T11579] iter_file_splice_write+0x6be/0xcf0 [ 594.816089][T11579] ? splice_from_pipe+0x180/0x180 [ 594.821111][T11579] ? generic_file_splice_read+0x463/0x5f0 [ 594.826829][T11579] ? splice_shrink_spd+0xc0/0xc0 [ 594.832427][T11579] ? splice_from_pipe+0x180/0x180 [ 594.837458][T11579] direct_splice_actor+0xe1/0x130 [ 594.842492][T11579] splice_direct_to_actor+0x4e8/0xc00 [ 594.847876][T11579] ? direct_file_splice_eof+0xa0/0xa0 [ 594.853259][T11579] ? pipe_to_sendpage+0x320/0x320 [ 594.858292][T11579] ? common_file_perm+0x171/0x1c0 [ 594.863328][T11579] ? fsnotify_perm+0x5d/0x560 [ 594.868022][T11579] ? security_file_permission+0x75/0xa0 [ 594.868049][T11579] do_splice_direct+0x1d4/0x2f0 [ 594.868070][T11579] ? verify_lock_unused+0x140/0x140 [ 594.868091][T11579] ? splice_direct_to_actor+0xc00/0xc00 [ 594.868110][T11579] ? do_splice_direct+0x2f0/0x2f0 [ 594.868127][T11579] ? common_file_perm+0x171/0x1c0 [ 594.868145][T11579] ? fsnotify_perm+0x5d/0x560 [ 594.868161][T11579] ? security_file_permission+0x75/0xa0 [ 594.868179][T11579] do_sendfile+0x524/0xe30 [ 594.868201][T11579] ? do_pwritev+0x3a0/0x3a0 [ 594.868218][T11579] ? __lock_acquire+0x7d40/0x7d40 [ 594.868239][T11579] __se_sys_sendfile64+0x141/0x1a0 [ 594.868256][T11579] ? lock_chain_count+0x20/0x20 [ 594.868274][T11579] ? __x64_sys_sendfile64+0xa0/0xa0 [ 594.868292][T11579] ? lockdep_hardirqs_on+0x94/0x140 [ 594.868312][T11579] do_syscall_64+0x4c/0xa0 [ 594.868329][T11579] ? clear_bhb_loop+0x30/0x80 [ 594.868347][T11579] ? clear_bhb_loop+0x30/0x80 [ 594.868365][T11579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 594.868383][T11579] RIP: 0033:0x7efc705b0199 [ 594.868399][T11579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.868412][T11579] RSP: 002b:00007efc6e808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 594.868431][T11579] RAX: ffffffffffffffda RBX: 00007efc70837fa0 RCX: 00007efc705b0199 [ 594.868445][T11579] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 594.868455][T11579] RBP: 00007efc70647888 R08: 0000000000000000 R09: 0000000000000000 [ 594.868467][T11579] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000000 [ 594.868478][T11579] R13: 00007efc70838038 R14: 00007efc70837fa0 R15: 00007fffcf24cca8 [ 594.868496][T11579]