last executing test programs: 1m35.000752925s ago: executing program 1 (id=258): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x8081, &(0x7f0000000040)={[{}, {@type={'type', 0x3d, "0b4fb860"}}, {@force}, {@uid}, {@force}, {@creator={'creator', 0x3d, "f5e298ff"}}, {@nls={'nls', 0x3d, 'cp860'}}, {@part={'part', 0x3d, 0x5}}, {@creator={'creator', 0x3d, 'YHmr'}}]}, 0x3d, 0x6e8, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x109142, 0x84) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000180)='reiserfs\x00', 0x2004060, &(0x7f00000008c0)='nls') 1m34.102780595s ago: executing program 1 (id=260): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r0, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1m33.216855924s ago: executing program 1 (id=262): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 1m32.297153256s ago: executing program 1 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 1m28.023624803s ago: executing program 1 (id=279): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) setfsgid(0x0) setfsgid(0xee01) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$l2tp(0x2, 0x2, 0x73) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000280)}, 0x20) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000440)={0x0}) syz_read_part_table(0x5c2, &(0x7f0000000f00)="$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") 1m26.960024504s ago: executing program 1 (id=282): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000005c0)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xf0, 0x4}}], 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xffff, 0x8}, {0xfff1, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r8}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m11.34984061s ago: executing program 32 (id=282): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000005c0)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xf0, 0x4}}], 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xffff, 0x8}, {0xfff1, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r8}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.35337602s ago: executing program 0 (id=525): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x400c0d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x103002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x7f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x104a}], 0x1, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8.101561917s ago: executing program 0 (id=527): r0 = syz_io_uring_setup(0x117, 0x0, &(0x7f0000000000), &(0x7f0000000200)) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x25, r1}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x22, &(0x7f0000000340), 0x0) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000ffff25bd6000fddbdf2500000000f963268bcb1877ad802e3a5847d85db28bbf280f2b8460e8c8ca59fa14049c54d35cb2516d5df4b0c395784c58", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000042) tkill(r2, 0x27) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) unshare(0x2060600) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r7, r6}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r8) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x48840) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r8) 8.069277099s ago: executing program 4 (id=529): prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000340)=ANY=[], 0xeb, 0xd3582d001403b3c5) getrlimit(0x6, &(0x7f0000000240)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000001b50fa2f74c5"], 0x18}, 0x1, 0x0, 0x0, 0x400c000}, 0x40880) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) 7.90199119s ago: executing program 2 (id=530): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000980)={[{@part={'part', 0x3d, 0xa980}}, {@gid}, {@nobarrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {}, {@nls={'nls', 0x3d, 'macromanian'}}, {@umask={'umask', 0x3d, 0x40}}]}, 0x5, 0x700, &(0x7f0000000280)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a29143, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x6d, 0x0) 6.773573776s ago: executing program 0 (id=531): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{0x89}, {0x18}, 0x0, 0x5, 0x80}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @empty}, 0x1c) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000140)={0x10009e, 0x10007f, 0x40000}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x1, r2}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000700)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "a7dc05", 0x7c, 0x3a, 0x1, @private2, @private2, {[@fragment={0x2c, 0x0, 0x5, 0x1, 0x0, 0x5, 0x64}], @ndisc_na={0x88, 0x0, 0x0, 0x7, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x1f, 0xb, "8adbf96be0699c98b2df119c83ad26a6804f6932f0a83f71b8a3b520508c756425cdf84924f73b7313e8485aee302f61a4b8916a0fb7ed3d3fd28d4645f4671b714571aa29e0728a1f33dd5c98b1069119e41b7ce58c06e53fa3"}]}}}}}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x72, 0x0, &(0x7f0000000300)="dd17cdb36846b200bcf65e5828633608aa5e516ca25e6c99b2afb5ed99ca57fc6067edc93e4d7097efea54ede81d95e9d681c0dfdd884c1e6e19fce836464449d52c2f4d7d792c4bdb88383369f119e3f6f850ad4dd6c14e7e829c18f92c2ec1bb057e424b514780d835aa314bc829f18ab5"}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe9, 0xb7, 0x2b, 0x40, 0x4e6, 0x5591, 0x20fa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000002c0)={@loopback, 0x0}, &(0x7f00000003c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x18, 0x4, 0x500, 0x20000007, 0x20, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x5, 0x0, 0x1000}, 0x50) write$binfmt_script(r9, &(0x7f0000000100), 0xfffffd9d) write$UHID_CREATE(r4, &(0x7f00000005c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000440)=""/56, 0x38, 0x8000, 0x7, 0x40, 0x8, 0x3}}, 0x120) sendfile(r6, r9, 0x0, 0x8000002b) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r9, 0x4112, 0x0) 6.772536676s ago: executing program 4 (id=532): r0 = syz_io_uring_setup(0x117, 0x0, &(0x7f0000000000), &(0x7f0000000200)) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x25, r1}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x22, &(0x7f0000000340), 0x0) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000ffff25bd6000fddbdf2500000000f963268bcb1877ad802e3a5847d85db28bbf280f2b8460e8c8ca59fa14049c54d35cb2516d5df4b0c395784c58", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000042) tkill(r2, 0x27) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) unshare(0x2060600) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r8, r7}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r9) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r10, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x48840) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r9) write$tun(0xffffffffffffffff, 0x0, 0x0) 6.654467534s ago: executing program 2 (id=533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000def180b1b0000801010000800000000000000000000000050004000500030084000136ca957e5ec2a20000f856c2ab5bcdd977253d8b2048bf000000004000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) 5.987922699s ago: executing program 3 (id=535): openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setxattr$incfs_size(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=0x9, 0x8, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) write$dsp(0xffffffffffffffff, &(0x7f0000000280)="a542096b07fb318a266846d87c0bd1a99a25800efc3c01ddfef9d9862f6b4ffe810e3f252fa051e3221687955f8d63acfdc7b7b180d83460ad60c74ca49e55306098ff5c715bd930c940a83ad2b803a33a288d775d12dd124fd3616387e075fcbfd2f8b14e3ee5e06367afdc23815caa7c7cf5cc6c831ef2ee8e02f2217da148b935bab25a30fe9867f96f569b846452f6427f7f02f5e08e8bd56e163d57893df8eb588ef7ce68ca", 0xa8) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000002340)=0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001d00010029bd7000fedbdf2507000000", @ANYRES32=r5, @ANYBLOB="80007e0a0a000200aaaaaaaaaaeeffff05000500"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) write$proc_mixer(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='LINE \'\' '], 0xbb) close(r3) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x0, 0x5}, {0x8, 0xfff3}}}, 0x24}, 0x1, 0x4000000}, 0x0) 5.985684279s ago: executing program 4 (id=536): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x8b) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000400)={0x0, 0xe703, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="379521000000000003e77200000008000300", @ANYRES32=r3], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f00000001c0)={0x4, 0x0, 0x1e, "1029ea9ba1183c90a99f327d855312da1da2ccd742347535cfc117305da6588ec175eac7fbce524c86cdc67026903bfac4b1c42e57b69c230607c78e", 0xc, "5e21c2d844f81a12dab10efc89e5e8f5627654343857f39293a38fd90e8c9f5c54ab9211b0c699dcbdee4068abbce73b5cd95cc9e35014a3a8adf0b2", 0x10}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r7, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x1, 0x1}, {}, @control={0x0, 0x4}}, {0x0, 0x0, 0xff, 0x0, @tick, {}, {}, @queue={0x0, {0x1, 0x40}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7b7f}, {}, {0x0, 0x8}, @control}, {}], 0x70) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a0"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x1}, 0x7, 0x0, &(0x7f0000000040)={{0x7}}, 0x0, 0x0}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x9}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r10, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0xf7, @loopback, 0x7}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111a900000000008510000002000000850000002a00000095000000000000009500a50500000000cbe629289cb1431ca81a0030c0"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_open_dev$vim2m(0x0, 0x7, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x20, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 5.81591587s ago: executing program 2 (id=537): socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_getaddr={0x4c, 0x16, 0x10, 0x70bd2d, 0x25dfdbfd, {0x2, 0x1f, 0x8, 0xff}, [@IFA_LABEL={0x14, 0x3, 'sit0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x64, 0x9, 0x291}]}, 0x4c}}, 0x40191) (async) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x555e, &(0x7f0000005f80)="$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") r1 = syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x40181) (async) lsetxattr$security_capability(&(0x7f0000000880)='./file2\x00', &(0x7f00000008c0), &(0x7f0000000900)=@v1={0x1000000, [{0x9, 0x2}]}, 0xc, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f00000000c0)={0x892d2c58eb3f8037}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000440)="1feb4e96e4a7dd74a1a7ff26a2", 0xd}, {&(0x7f00000001c0)="67e61e30597ebec5443384059bb0760cb4d8429bdfadf11913c92cd6c1b8c82201e09b69eba5dec509c08c4984eaa26922ee894fb30d183b30747bb3917556ad636abd5f25e7b3ff55a5edd42b647d5bd812eca9c2", 0x55}, {&(0x7f0000000340)="7dc8eb8d01ed4c2bbb9ffb9eb236a332896b82402d", 0x15}], 0x3) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './bus', [{0x20, '#! '}], 0xa, "f3d3115a95f991dbee5ef222d503c42735be7926227d93f43c579976a3152bc75deab38f2e066b74328746"}, 0x38) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) (async) r5 = accept$alg(r4, 0x0, 0x0) sendfile(r5, r2, 0x0, 0x7) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x79}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000010002400000024000000080200000000000000000002000000000c000000000000a91205000000000000000000000d000000000030305f2e2e"], 0x0, 0x44, 0x0, 0x1}, 0x28) (async) mq_unlink(&(0x7f0000000180)='-\'-!%\x00') (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x81c0, 0x0) 5.773524443s ago: executing program 2 (id=538): pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x4020c0, 0x0) write$P9_RSTATu(r3, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) 5.711218767s ago: executing program 5 (id=539): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x17, 0x2000005, 0x2, 0x6, 0x801, 0xffffffffffffffff, 0xffffffff}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1d, 0x1, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x8000000000000003, {}, 0xfd}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) ioctl$VT_RELDISP(r0, 0x5605) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.66607153s ago: executing program 3 (id=540): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x5, 0x79, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c7099e404319572251810000000109026700010400800009042a00039775ba00072401010505000824020140047fae0c2402010703000744d685d50a240201050209ab9bcd0824020108010040092104000a01222d0f09050301400007015009050604200002025409050f10ff0309090804217c3b"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff8000}]}) open(&(0x7f00000000c0)='./file0\x00', 0x1098c2, 0x0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x88, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x2, 0x8, 0x4]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x580]}, @CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}}, 0x40) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x548, 0x6002) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 5.036358403s ago: executing program 4 (id=541): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x71, &(0x7f0000000000), 0x8) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040), 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 4.790830439s ago: executing program 4 (id=542): socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_dev$sndmidi(0x0, 0x8, 0x80) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xfffffffffffffe3e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000040)) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) 4.756604421s ago: executing program 5 (id=543): prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000340)=ANY=[], 0xeb, 0xd3582d001403b3c5) getrlimit(0x6, &(0x7f0000000240)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000001b50fa2f74c5"], 0x18}, 0x1, 0x0, 0x0, 0x400c000}, 0x40880) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) 3.610517968s ago: executing program 0 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r4, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={r7, 0x8}, &(0x7f0000000040)=0x8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x824012, &(0x7f0000000b40)={[{@creator={'creator', 0x3d, '\x00\x00\a\x00'}}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp850'}}, {@gid={'gid', 0x3d, 0xee01}}, {@part={'part', 0x3d, 0x4}}, {@force}, {}, {@nobarrier}]}, 0xff, 0x6bb, &(0x7f0000001bc0)="$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") setxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x31) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x14, 0x0, 0x303, 0x3, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.609656138s ago: executing program 3 (id=545): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000080) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0, 0x3}, 0x8) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0xa, 0x0, '\x00', [{0x7fff, 0x5, 0x6, 0x9, 0xe6, 0x3ca1438d}, {0x10, 0x6, 0x200, 0x5f4d, 0xc, 0x3}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000600)=@rose={'rose', 0x0}, 0x10) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa8, r3, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x6a}}}}, [@NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2e6ebeb0e5645814921259f00e2c6c38aba034d38a8d46c2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f7978b559e9b70ab20d92120dd9792ca"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a213cac9249a58bd08bbbf1330efa085"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c92bbee771639903"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe845}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa34}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2d050624070c7c8e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fab11fad1d0789b2"}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendto$inet(r0, &(0x7f00000007c0)="15d4a9bcb8552847f9f776a9246e325de75372e73161d55826844ddb446e2283c744e80bd85b2840dd55e0cdba3c61f93e420f30785107f7", 0x38, 0x24004100, &(0x7f0000000800)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000840)={0x4, [0x8, 0x2, 0x4, 0x10b2]}, &(0x7f0000000880)=0xc) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000008c0)={0x87, @multicast1, 0x4e24, 0x3, 'ovf\x00', 0x28, 0xc31d, 0x37}, 0x2c) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000a40)=@urb_type_bulk={0x3, {0x8, 0x1}, 0x5, 0x82, &(0x7f0000000900)="aac8b1539fbe65e135f5859f49b71f27965bba894c5cd666270655296f1916c8ef6afbdf8d37ced96215ca6c11d881fb258df16c3ec298d72a05bf3b3c2eda9b", 0x40, 0x5, 0x2, 0x1239, 0x4, 0x0, &(0x7f0000000940)="660c7b7a8579712befe2d2918c4f77863fb46776a58dcf50a060ab17ba3652ce1b5d623e8ec1a58c20b20075a87a78c3dd51a73589e4688b8b314902842f1e3955b5fdc98bd46bc971a784a73fbadbc5c6faafce566c2e5c86a178bd6c7462f3867322b9278769612dd66af834c3dd9445043cc5059673e09a8993e22ad7e5b3f2378ba9f4712e856acf40fa1144c6eae8c8547b6232ccc1254deb4198ab681f924da2fadd0d378787f8de93a4d3c54ad0f7a5f412feb2837167cfae0666f53de2ca292adff0c11aa2fbaff6d9e68eff28c7814a1f"}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1}}}}}, 0x20}}, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) sendto$inet(r0, &(0x7f0000000bc0)="e729d9fbf76e972b41bcabe929025dc9c1be6c58eb85647e6d6148852e4ed082d09488120567fa137ce59b40ed91b90e1dae81a0c0e0ed70cd9e279f6ebabf65b44c5713c7c9d3bccbe62b29aad5e7207113d709304948b3d3e286fa42c3dac185934cecb285d1a28808ae2cf6985107c06a8358048bc1d2131831e5c1639e2263b5f13df752d63406087db4ce6a3a84db8b32ee399201a7003cba5f5161adc426bcd00fc6313781381be17524651f48d42dd45c7928a0c05cef09ae8194faaf2c5210e65fe513d5e37d8e26720c8a9dc048770e77fbce51b6962978998047bff0e20aeba66e", 0xe6, 0x40000, &(0x7f0000000cc0)={0x2, 0x4e21, @multicast1}, 0x10) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) inotify_add_watch(r6, &(0x7f0000000d40)='./file0\x00', 0x4) (async) write$vhost_msg_v2(r6, &(0x7f0000000e80)={0x2, 0x0, {&(0x7f0000000d80)=""/125, 0x7d, &(0x7f0000000e00)=""/83, 0x2, 0x2}}, 0x48) (async) fstat(r4, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$fuse(0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xe1}}, {@allow_other}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@flag='nomand'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, r8}}, {@measure}, {@pcr={'pcr', 0x3d, 0x2a}}]}}) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001280)={0x6}, 0x8) (async) syz_emit_ethernet(0xfe, &(0x7f00000012c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@mpls_mc={0x8848, {[{0x2, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9a, 0x0, 0x1}], @llc={@snap={0xaa, 0x0, "f0f9", 'n+p', 0x9300, "9feae33bc93b32e260b70bb1561cbec9b705bf557fa44f26089447019135e77fec8a4ef1e3638ecbd0f6c5209b86082a9361d4bcfe7b0e185530a67032e6c734aec6d2945068da130940378e05bd92028ff0eeb45a232fe5e7cbdc03e1cec2ec38fa0e5e4e9f54daa4522608e8e29bf475b79061f571c13c7f440f18173ec9e1eeb60ae307586f967d3e96db7afe051b4dd9ce438f59578d52804c60e3e62111d4fe0f478005e628f143425138c0e09d68439e5508e6c85320e9d9be25630049f8b2b4503c98c6aaa2a4ec18018daadabbaa640c4a537101251dcd"}}}}}}, 0x0) (async) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f00000013c0)={0x10, 0x0, "ebc983bada50f8f68a7f585f27e361d6"}) (async) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000001400)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5}}, 0x30) (async) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000001440)={0x3, 0x0, [{}, {}, {}]}) (async) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001540)=[@text32={0x20, &(0x7f00000014c0)="66b8c9008ed8660f3a0f2503000000e1ce0fc72e0f01c3b924020000b8dfbc06f2ba000000000f30d9e0c4c2791c8dd8a8a9f366baf80cb8c8390385ef66bafc0cb8feffffffefb9bd090000b800800000ba000000000f30", 0x58}], 0x1, 0x0, &(0x7f0000001580), 0x0) 3.564047961s ago: executing program 5 (id=546): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000200)={[{@file_umask={'file_umask', 0x3d, 0x80004}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@codepage={'codepage', 0x3d, 'cp866'}}, {}, {}]}, 0x1, 0x2fe, &(0x7f0000001100)="$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") r3 = fsopen(&(0x7f00000000c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a00010024bd70000002000002201400ff0000070002000000000300", @ANYRES32=r4, @ANYBLOB="08000100e0000001080002007f00"], 0x34}}, 0xea5bc50b6199d7fe) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28c101, 0x101) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000ac0)={0x0, "ccc6377f678129ccdcb1de7803b451f2"}) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000480)={0x0, 0x7, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4880e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc9, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.511207815s ago: executing program 3 (id=547): r0 = syz_io_uring_setup(0x117, 0x0, &(0x7f0000000000), &(0x7f0000000200)) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x25, r1}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x22, &(0x7f0000000340), 0x0) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000ffff25bd6000fddbdf2500000000f963268bcb1877ad802e3a5847d85db28bbf280f2b8460e8c8ca59fa14049c54d35cb2516d5df4b0c395784c58", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000042) tkill(r2, 0x27) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) unshare(0x2060600) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r8, r7}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r9) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r10, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x48840) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r9) write$tun(0xffffffffffffffff, 0x0, 0x0) 3.308262408s ago: executing program 2 (id=548): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x2a0, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d8"], 0x188}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xce21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000000c0)) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf, 0x8012, r5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000280)=0x5, 0x4) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x13, '\x00', @buffer={"638391fa1b5e124b43175553975a2561ead98593e9060ad61456e06afea3cd65", 0x20}, 0x7ff}, {0x1a, '\x00', @data=0x7, 0x8}, {0x2b, '\x00', @buffer={"f335f2a95f2639f01c13d5007fbb7424b5e5c361de6d9c57c7b5b0bc0dc4a01f", 0x20}, 0x7a7ce1c2}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="e40000001000010400400000000000000000ffff13e068bec4ae068a7fc452a971ab42086f5675a7da572086407740b2622df4fc5e69fc1b6afba08d0618b9b4488ab3f68b46f6d00c6882f4bc991e1ab178645ba9c1bcaf633feffb9ed05484fe42e9df475bfef89654267deb95f27f518255003c98f689978fd977740d094b1be2c16e0ca6959cce1e529b3290eb641ef0e03aba02130c1a1778", @ANYRES32=0x0, @ANYBLOB="0891040000000000b000128009000100766c616e00000000a00002800400048040000380480001002d0a0000030000000c00010009000000080000000c00010035570000030000000c00010009000000080000000c0001000300000006000000580004800c000100f9ffffff65e200000c00010048000000f80e00000c00010000000000000000000c0001003bf00000150000000c00010002000000080000000c000100030000000300000054000100480000008100000014000300766c616e3000"/204], 0xe4}}, 0x0) r9 = accept4(r4, 0x0, 0x0, 0x800) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a", 0x88}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a3", 0x34}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d", 0xc}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRESHEX], 0xd4}, 0x1, 0x0, 0x0, 0x9491823b27478af3}, 0x20000000) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/213, 0xd5}], 0x1}, 0x43) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x1, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 2.478280034s ago: executing program 3 (id=549): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="89052cbd704c2ec58225310000000a0001007770616e8a6752eb"], 0x20}, 0x1, 0x0, 0x0, 0x4040010}, 0x40000) 2.298791396s ago: executing program 3 (id=550): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000000c40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000004) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x208401, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000140)={0x0, 0x2, r4, 0x1, 0x80000}) r6 = socket$inet6(0xa, 0x80003, 0xff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x14, r8, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r9, 0x40106614, 0x0) 1.459189962s ago: executing program 2 (id=551): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) syz_mount_image$fuse(0x0, 0x0, 0x322020, 0x0, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000280000/0x3000)=nil, &(0x7f00009bb000/0x4000)=nil, 0x3000}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000100)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_void(r7, 0x1, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) io_setup(0x9, 0x0) 1.321026841s ago: executing program 0 (id=552): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x11, &(0x7f0000000100), 0x1, 0x616, &(0x7f0000000b40)="$eJzs3ctvVNUfAPDvnU7f/H4txKi4kCbGQKK0tIIhRiPsCcHHzlWlhSCFElqjIIklwY2JcePCxJUL8b9QErcs3Lpw48qQEGNYiBIZc6d32ss8Sl8zU2Y+n+Qy557L3HMu9Ntz7plz7gTQtcbSPwoReyPiUhIxkjtWjOzg2PLfu/fntdPplkSp9M4fSVz7NFnKnyvJXoezN/87EsnPhYg9PbXlLly5en56bm72crY/sXjh0sTClasHz12YPjt7dvbi1KtTR48cPnJ08tCWrm8glz5x44OPRj4/+d533zxIJr//9WQSx+JhVrf0uqrf27+lktN/s7EoLbufzy/Grji6xXPvFH+NVH5OViXVGexYZ7I4/39EPBMj0ZP73xyJz95qa+WApiolUWmjgK6TbCr+B7a/IkCLVfoBlXv7evfBtQpN7pUArXD3+PIAwHLs90ZEJf6Ly2ODMRBp7tC95JFxniQitjYytywt4/ZPJ2+kWzQYhwOaY+l6ZZS7uv1PyrE5mo2gD90rPBL/hdyW5r+9yfLHqvbFP7TO0vWIeDZr//tiQ/E/lov/9zdZvvgHAAAAAACA7XPreES8nH3+NxgRK5+/FVbm//TVmf8zHBHHtqH8x3/+V7iTJZJtKA7IuXs84vW6839X5viO9mR7/yvPB+hNzpybmz2UrRk8EL396f5k1XnzM4QPfrHn60bl5+f/pVtafmUuYHamO8Wqhbgz04vTW71uIOLu9YjnyvN/92U5j87/Sdv/pE77n8b3pXWWsefFm6caHXt8/APNUvo2Yn/d9n+1u52s/XyOiXJ/YKLSK6j1/Cdf/lCTebt3NSn+oS3S9n9o7fjvT/LP61nY2Pn7ImIwiqVGxzfb/+9L3u2pnD/18fTi4uXJiL7kRG3+1MbqDJ2qEg+VeEnj/8AL9e//a/r/uTgcjIildZb59MPh3xod0/+H9knjf2aN9v+f7DkBq+3/xhNTN0d/bFT+qXrxP1Dd/h8ut+kHshzjf5BX+zyO9QZoW6oLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+4QkTsiqQwvpIuFMbHI4Yj4qkYKszNLyy+dGb+w4sz6bHy9/8XKt/0O7K8n1S+/380tz9Vtf9KROyOiK96Bsv746fn52baffEAAAAAAAAAAAAAAAAAAACwQwyX1/yX+qvX/6d+72l37YCmK2av4h26T3HT7yz1b2tFgJbbfPwDT7r1x39vU+sBtF45/uuG9v0HpbKWVwloEf1/6F6bjH8fF0AH0P5Dt1rnmN5As+sBtIP2HwAAAAAAOsrufbd+SSJi6bXB8pbqy46Z7A+drdDuCgBtYw4vdK/ifPnljXbXA2g99/hAspL6u+5i/8az/5PmVAgAAAAAAAAAAAAAqLF/r/X/0K3WXv9vbj90sjXW/9cLfo8LgA7S+Ks/tP3Q6dZxj+8RYdDhHtfaW/8PAAAAAAAAAAAAADvAwNXz03Nzs5cXrjx5iTd3RjU2llia3hHV2NbEw+acuTcidsYFtjpReQRHG6ux9q8NC4EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB1/gsAAP//BfwsWg==") sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) mremap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f00004d3000/0x1000)=nil) setsockopt$inet_msfilter(r2, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$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") timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={[{'noac,'}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$FITRIM(r6, 0x80086e8a, 0x0) 1.19388677s ago: executing program 5 (id=553): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 416.959272ms ago: executing program 5 (id=554): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x4400, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB="2c7766646e673dbee6f1ee5c582607f471f033d97d6aa9bc887ee6fe3fbe1e90d458d6bd06eb49adc38adfe14464d4d54d88a1610d819148dbd32785a63fdc4bda7016d3c0a5a5fd4505b29ddd37d24ab63040982cfe32515a8f9834ce0e1d1162373c", @ANYRESHEX=r1, @ANYBLOB="0100"]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x41}, 0x0, 0x0, 0x3, 0xd, 0x9, 0x7f}, 0x20) unshare(0x2a020400) r3 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0xd, 0xff, 0x7, 0x18, @mcast1, @empty, 0x1, 0x7, 0xfff, 0x5}}) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001300010000000000fbdbdf2507000000", @ANYRES32=r6, @ANYBLOB="000000002902000014001a80100004800c00038008000100"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x40, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x400c844) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r13, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r14, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB="000228bd7000fddbdf25190000005800018008000100", @ANYRESDEC=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020076657468305f6d61637674617000000008000300010000001400020076657468305f746f5f6873720000000014000200000000000000008c00018014000200766c616e310000000000000000000000140002006361696630000000000000000000000014000200697036746e6c3000000000000000000014000200626f6e645f736c6176655f30000000001400020076657468305f6d61637674617000000008000100", @ANYRES32=r8, @ANYBLOB="140002000008018014000200766574959bebc08c05d0f451ce36e2d50268305f", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYRES64=r6, @ANYRES32=r11, @ANYBLOB="1400020076657468315f746f5f6272696467650008000100", @ANYRES32=r14, @ANYBLOB="1400020076657468315f746f5f6873720000000014000200766c616e300000400000000000000000080003000100000099e7ac3bc0949a7da3210e707ceb4f0687aef799a9e5ecc2fec20b22d504c44d4ca715256e91a4cf94f67646daefec57d4676a8dd4c0f67c0a35d6018d650f613515860725f919a29bb1a79a0820a40266ffea926860e11ad2a75d0d7b00242faadad61f79600646e1cc894672841fbe2e0bfd0519cbc03e95299c7d"], 0x1d4}, 0x1, 0x0, 0x0, 0x4040001}, 0x10) ftruncate(r3, 0x400000) finit_module(r3, 0x0, 0x2) 106.671512ms ago: executing program 0 (id=555): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x101, 0x8, 0xc, 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1, 0x2}, {0x1, 0x2, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 63.028315ms ago: executing program 4 (id=556): prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000340)=ANY=[], 0xeb, 0xd3582d001403b3c5) getrlimit(0x6, &(0x7f0000000240)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000001b50fa2f74c5"], 0x18}, 0x1, 0x0, 0x0, 0x400c000}, 0x40880) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) 0s ago: executing program 5 (id=557): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): only [ 61.354579][ T1252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.369681][ T4273] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,prjquota,noauto_da_alloc,test_dummy_encryption,errors=remount-ro,. Quota mode: writeback. [ 61.500971][ T4293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 61.616594][ T4274] [U] [ 62.116170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.223335][ T4273] device syzkaller0 entered promiscuous mode [ 62.392673][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.401803][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 62.410829][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 62.419943][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 62.428970][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 63.734393][ T4307] loop4: detected capacity change from 0 to 256 [ 63.868155][ T4306] loop1: detected capacity change from 0 to 2048 [ 65.024343][ T4176] Alternate GPT is invalid, using primary GPT. [ 65.030729][ T4176] loop1: p1 p2 p3 [ 65.163422][ T4322] loop2: detected capacity change from 0 to 4096 [ 65.291184][ T4322] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 65.329086][ T4306] Alternate GPT is invalid, using primary GPT. [ 65.341951][ T4306] loop1: p1 p2 p3 [ 65.477920][ T4331] mmap: syz.0.15 (4331) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 65.509767][ T4330] sp0: Synchronizing with TNC [ 65.566346][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 65.641970][ T4334] dlm: no locking on control device [ 65.652285][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 65.679375][ T4329] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.715203][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 65.749962][ T4338] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 65.770935][ T4330] xt_hashlimit: max too large, truncated to 1048576 [ 65.795935][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 65.846567][ T4327] [U] ` [ 66.366719][ T4341] loop3: detected capacity change from 0 to 32768 [ 66.394445][ T4348] fuse: Unknown parameter 'group_i00000000000000000000' [ 66.407623][ T4348] overlayfs: overlapping lowerdir path [ 66.420544][ T4348] overlayfs: overlapping lowerdir path [ 66.431536][ T4237] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.791945][ T4237] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 66.841169][ T4237] usb 3-1: config 0 has an invalid interface number: 39 but max is 0 [ 66.980080][ T4237] usb 3-1: config 0 has no interface number 0 [ 67.057355][ T4237] usb 3-1: too many endpoints for config 0 interface 39 altsetting 147: 48, using maximum allowed: 30 [ 67.196299][ T4237] usb 3-1: config 0 interface 39 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 67.512489][ T4237] usb 3-1: config 0 interface 39 has no altsetting 0 [ 67.561095][ T4237] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 67.588539][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.646901][ T4237] usb 3-1: config 0 descriptor?? [ 67.713114][ T4359] loop4: detected capacity change from 0 to 4096 [ 67.754271][ T4359] ntfs: volume version 3.1. [ 67.780865][ T4359] ntfs: (device loop4): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80. Aborting truncate. [ 67.815607][ T4361] device syzkaller0 entered promiscuous mode [ 67.931585][ T4237] usb 3-1: string descriptor 0 read error: -71 [ 67.955104][ T4237] ftdi_sio 3-1:0.39: FTDI USB Serial Device converter detected [ 68.009383][ T4363] sp0: Synchronizing with TNC [ 68.028328][ T4237] usb 3-1: Detected FT-X [ 68.052584][ T4363] dlm: no locking on control device [ 68.148838][ T4370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25'. [ 68.252211][ T4237] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 68.801637][ T4237] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 68.894668][ T4369] loop1: detected capacity change from 0 to 2048 [ 68.994151][ T4237] ftdi_sio 3-1:0.39: GPIO initialisation failed: -71 [ 69.919062][ T4369] Alternate GPT is invalid, using primary GPT. [ 69.926086][ T4369] loop1: p1 p2 p3 [ 69.937189][ T4237] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 70.017027][ T4375] dlm: no locking on control device [ 70.056385][ T4237] usb 3-1: USB disconnect, device number 2 [ 70.107852][ T4237] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 70.136394][ T4376] xt_hashlimit: max too large, truncated to 1048576 [ 70.147831][ T4371] xt_hashlimit: max too large, truncated to 1048576 [ 70.204187][ T4381] loop2: detected capacity change from 0 to 2048 [ 70.268425][ T4381] Alternate GPT is invalid, using primary GPT. [ 70.274911][ T4381] loop2: p1 p2 p3 [ 70.352272][ T4237] ftdi_sio 3-1:0.39: device disconnected [ 70.435441][ T4362] [U] `` [ 70.477416][ T3560] Alternate GPT is invalid, using primary GPT. [ 70.567571][ T3560] loop2: p1 p2 p3 [ 71.118444][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.125141][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.206831][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 71.232093][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 71.282332][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 71.387189][ T4388] sp0: Synchronizing with TNC [ 71.400016][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 71.432714][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 71.485089][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 71.506245][ T4388] dlm: no locking on control device [ 71.549072][ T4388] xt_hashlimit: max too large, truncated to 1048576 [ 71.929704][ T4386] [U] ` [ 71.939976][ T4396] ALSA: mixer_oss: invalid OSS volume '' [ 71.946092][ T4396] ALSA: mixer_oss: invalid OSS volume '' [ 72.020279][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 72.043090][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 72.057799][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 72.151671][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 72.164826][ T4402] loop3: detected capacity change from 0 to 2048 [ 72.208717][ T4404] loop1: detected capacity change from 0 to 512 [ 72.261737][ T4337] Alternate GPT is invalid, using primary GPT. [ 72.271013][ T4337] loop3: p1 p2 p3 [ 72.326761][ T4402] Alternate GPT is invalid, using primary GPT. [ 72.336993][ T4402] loop3: p1 p2 p3 [ 72.422327][ T4407] loop2: detected capacity change from 0 to 8 [ 72.462282][ T4407] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 72.491238][ T4407] process 'syz.2.37' launched './file2' with NULL argv: empty string added [ 72.595563][ T4411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.38'. [ 73.097046][ T4407] cramfs: Error -5 while decompressing! [ 73.159130][ T4407] cramfs: ffffffff964020a8(26)->ffff88805e2fc000(4096) [ 73.167128][ T4407] cramfs: Error -3 while decompressing! [ 73.187525][ T4407] cramfs: ffffffff964020c2(26)->ffff88805c426000(4096) [ 73.218710][ T4407] cramfs: Error -3 while decompressing! [ 73.260864][ T4407] cramfs: ffffffff964020dc(16)->ffff88805c428000(4096) [ 73.336046][ T4407] cramfs: Error -5 while decompressing! [ 73.369298][ T4407] cramfs: ffffffff964020a8(26)->ffff88805e2fc000(4096) [ 73.420064][ T4419] loop3: detected capacity change from 0 to 512 [ 73.528889][ T4419] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 73.598115][ T4419] EXT4-fs (loop3): 1 truncate cleaned up [ 73.623943][ T4419] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 74.965946][ T4229] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.422104][ T4419] EXT4-fs (loop3): Unrecognized mount option "uuota="errors=continue" or missing value [ 75.467417][ T4419] device syzkaller0 entered promiscuous mode [ 75.542966][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 75.549853][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 75.613209][ T4434] ceph: No mds server is up or the cluster is laggy [ 75.813017][ T4262] libceph: connect (1)[c::]:6789 error -101 [ 75.819047][ T4262] libceph: mon0 (1)[c::]:6789 connect error [ 76.541759][ T4229] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 76.549402][ T4229] usb 1-1: can't read configurations, error -71 [ 77.383949][ T4448] ALSA: mixer_oss: invalid OSS volume '' [ 77.415646][ T4448] ALSA: mixer_oss: invalid OSS volume '' [ 77.528988][ T4451] dlm: no locking on control device [ 77.590076][ T4458] delete_channel: no stack [ 77.602845][ T4452] xt_hashlimit: max too large, truncated to 1048576 [ 77.685502][ T4458] loop4: detected capacity change from 0 to 8192 [ 77.732130][ T4458] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 77.751809][ T4458] REISERFS (device loop4): using ordered data mode [ 77.773089][ T4458] reiserfs: using flush barriers [ 77.782184][ T4458] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.792801][ T4462] fuse: Invalid rootmode [ 77.804385][ T4462] overlayfs: overlapping lowerdir path [ 77.813000][ T4458] REISERFS (device loop4): checking transaction log (loop4) [ 77.822904][ T4462] overlayfs: overlapping lowerdir path [ 77.838212][ T4458] REISERFS (device loop4): Using r5 hash to sort names [ 77.848742][ T4458] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 77.903493][ T4464] loop3: detected capacity change from 0 to 4096 [ 77.914922][ T4464] ntfs: (device loop3): parse_options(): Unrecognized mount option hash. [ 77.929899][ T4464] ntfs: (device loop3): parse_options(): Unrecognized mount option pcr. [ 77.989706][ T4464] ntfs: (device loop3): parse_options(): Unrecognized mount option . [ 79.175674][ T4480] FAULT_INJECTION: forcing a failure. [ 79.175674][ T4480] name failslab, interval 1, probability 0, space 0, times 1 [ 79.188564][ T4480] CPU: 1 PID: 4480 Comm: syz.2.60 Not tainted syzkaller #0 [ 79.195774][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.205847][ T4480] Call Trace: [ 79.209147][ T4480] [ 79.212095][ T4480] dump_stack_lvl+0x188/0x250 [ 79.216813][ T4480] ? show_regs_print_info+0x20/0x20 [ 79.222030][ T4480] ? load_image+0x400/0x400 [ 79.226562][ T4480] ? __might_sleep+0xf0/0xf0 [ 79.231162][ T4480] ? __lock_acquire+0x7d10/0x7d10 [ 79.236256][ T4480] should_fail+0x38c/0x4c0 [ 79.240741][ T4480] should_failslab+0x5/0x20 [ 79.245289][ T4480] slab_pre_alloc_hook+0x51/0xc0 [ 79.250252][ T4480] kmem_cache_alloc_trace+0x47/0x2a0 [ 79.255648][ T4480] ? snd_pcm_oss_change_params_locked+0x1b4/0x3f20 [ 79.262177][ T4480] snd_pcm_oss_change_params_locked+0x1b4/0x3f20 [ 79.268533][ T4480] ? rcu_lock_release+0x20/0x20 [ 79.273405][ T4480] ? snd_pcm_oss_make_ready+0xc0/0x330 [ 79.278881][ T4480] ? __mutex_lock_common+0x465/0x2400 [ 79.284281][ T4480] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 79.289410][ T4480] ? mutex_lock_io_nested+0x60/0x60 [ 79.294626][ T4480] ? __rwlock_init+0x140/0x140 [ 79.299408][ T4480] snd_pcm_oss_make_ready+0x11b/0x330 [ 79.304996][ T4480] snd_pcm_oss_set_trigger+0x95/0x720 [ 79.310386][ T4480] ? _raw_spin_unlock_irq+0x1f/0x40 [ 79.315594][ T4480] ? lockdep_hardirqs_on+0x94/0x140 [ 79.320812][ T4480] snd_pcm_oss_poll+0x59f/0x7e0 [ 79.325685][ T4480] ? snd_pcm_oss_write+0xae0/0xae0 [ 79.330805][ T4480] io_submit_one+0xbac/0x1380 [ 79.335505][ T4480] ? lookup_ioctx+0x5f0/0x5f0 [ 79.340194][ T4480] ? aio_poll_complete_work+0x610/0x610 [ 79.345770][ T4480] ? __might_fault+0xb3/0x110 [ 79.350468][ T4480] __se_sys_io_submit+0x19d/0x310 [ 79.355510][ T4480] ? __x64_sys_io_submit+0x80/0x80 [ 79.360639][ T4480] ? vtime_user_exit+0x2c8/0x3e0 [ 79.365594][ T4480] ? lockdep_hardirqs_on+0x94/0x140 [ 79.370812][ T4480] do_syscall_64+0x4c/0xa0 [ 79.375241][ T4480] ? clear_bhb_loop+0x30/0x80 [ 79.379928][ T4480] ? clear_bhb_loop+0x30/0x80 [ 79.384618][ T4480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.390530][ T4480] RIP: 0033:0x7f83d44c7799 [ 79.394988][ T4480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.414607][ T4480] RSP: 002b:00007f83d26df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 79.423074][ T4480] RAX: ffffffffffffffda RBX: 00007f83d4741180 RCX: 00007f83d44c7799 [ 79.431076][ T4480] RDX: 0000200000000500 RSI: 0000000000000001 RDI: 00007f83d263e000 [ 79.439063][ T4480] RBP: 00007f83d26df090 R08: 0000000000000000 R09: 0000000000000000 [ 79.447050][ T4480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.455046][ T4480] R13: 00007f83d4741218 R14: 00007f83d4741180 R15: 00007ffebae0e828 [ 79.463060][ T4480] [ 79.466107][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.669626][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.947362][ T4473] loop3: detected capacity change from 0 to 8192 [ 80.357113][ T4473] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 80.530455][ T4473] REISERFS (device loop3): using ordered data mode [ 80.581243][ T4473] reiserfs: using flush barriers [ 80.603554][ T4473] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.673734][ T4473] REISERFS (device loop3): checking transaction log (loop3) [ 80.692656][ T4473] REISERFS (device loop3): Using r5 hash to sort names [ 80.699835][ T4473] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 80.794025][ T4473] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "dax=never" [ 80.987911][ T4495] ALSA: mixer_oss: invalid OSS volume '' [ 81.005110][ T4495] ALSA: mixer_oss: invalid OSS volume '' [ 81.121702][ T4228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.132323][ T4500] fuse: Bad value for 'rootmode' [ 81.140656][ T4498] loop0: detected capacity change from 0 to 4096 [ 81.148529][ T4500] overlayfs: overlapping lowerdir path [ 81.166353][ T4500] overlayfs: overlapping lowerdir path [ 81.222756][ T4489] loop1: detected capacity change from 0 to 32768 [ 81.236902][ T4309] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.244601][ T4228] usb 5-1: config 33 has an invalid descriptor of length 1, skipping remainder of the config [ 81.267167][ T4502] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.269834][ T4228] usb 5-1: config 33 has 0 interfaces, different from the descriptor's value: 1 [ 81.354087][ T3158] cfg80211: failed to load regulatory.db [ 81.386745][ T4489] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.63 (4489) [ 81.467117][ T4489] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 81.481106][ T4489] BTRFS info (device loop1): force zlib compression, level 3 [ 81.491137][ T4489] BTRFS info (device loop1): force clearing of disk cache [ 81.500419][ T4489] BTRFS info (device loop1): setting nodatasum [ 81.534580][ T4489] BTRFS info (device loop1): use zlib compression, level 3 [ 81.551525][ T4309] usb 4-1: Using ep0 maxpacket: 32 [ 81.565263][ T4228] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 81.622311][ T4506] loop2: detected capacity change from 0 to 2048 [ 81.669213][ T4506] Alternate GPT is invalid, using primary GPT. [ 81.676030][ T4506] loop2: p1 p2 p3 [ 81.694820][ T4489] BTRFS info (device loop1): allowing degraded mounts [ 81.805343][ T4489] BTRFS info (device loop1): enabling disk space caching [ 82.003994][ T4489] BTRFS info (device loop1): disk space caching is enabled [ 82.179642][ T4489] BTRFS info (device loop1): has skinny extents [ 82.294325][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.302458][ T4228] usb 5-1: Product: syz [ 82.306634][ T4228] usb 5-1: Manufacturer: syz [ 82.311241][ T4228] usb 5-1: SerialNumber: syz [ 82.343840][ T4508] sp0: Synchronizing with TNC [ 82.351910][ T4228] usb 5-1: can't set config #33, error -71 [ 82.373239][ T4228] usb 5-1: USB disconnect, device number 2 [ 82.401722][ T4309] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 82.409328][ T4309] usb 4-1: can't read configurations, error -71 [ 82.543721][ T4509] [U] ` [ 83.352744][ T4489] BTRFS info (device loop1): enabling ssd optimizations [ 83.451714][ T4489] BTRFS info (device loop1): clearing free space tree [ 83.467536][ T4489] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.478837][ T4489] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.528088][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 83.546452][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 83.766759][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 85.564928][ T4176] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop1 scanned by udevd (4176) [ 85.688725][ T4568] sp0: Synchronizing with TNC [ 85.746306][ T4574] fuse: Bad value for 'rootmode' [ 85.761623][ T4568] dlm: no locking on control device [ 85.797910][ T4578] overlayfs: overlapping lowerdir path [ 85.834241][ T4577] xt_hashlimit: max too large, truncated to 1048576 [ 85.873955][ T4579] overlayfs: overlapping lowerdir path [ 86.056598][ T4584] netlink: 72 bytes leftover after parsing attributes in process `syz.4.82'. [ 86.465014][ T4567] [U] ` [ 86.867945][ T4586] netlink: 72 bytes leftover after parsing attributes in process `syz.3.83'. [ 87.033031][ T4591] sp0: Synchronizing with TNC [ 87.053890][ T4595] dlm: no locking on control device [ 87.173284][ T4595] xt_hashlimit: max too large, truncated to 1048576 [ 87.268746][ T4600] loop2: detected capacity change from 0 to 2048 [ 87.575071][ T4337] Alternate GPT is invalid, using primary GPT. [ 87.691638][ T4337] loop2: p1 p2 p3 [ 87.699153][ T4590] [U] ` [ 88.071404][ T4600] Alternate GPT is invalid, using primary GPT. [ 88.134565][ T4600] loop2: p1 p2 p3 [ 88.642996][ T4611] netlink: 72 bytes leftover after parsing attributes in process `syz.1.90'. [ 89.709482][ T4618] Option '2 OǗWz [ 89.709482][ T4618] f:5A- [ 89.709482][ T4618] )d::l]GY;m~R N+o{j\' to dns_resolver key: bad/missing value [ 89.729186][ T4612] ALSA: mixer_oss: invalid OSS volume '' [ 89.748271][ T4612] ALSA: mixer_oss: invalid OSS volume '' [ 89.756997][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 89.769432][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 89.795622][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 89.817628][ T4618] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 89.847232][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 89.859752][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 89.894188][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 89.975933][ T4624] fuse: Bad value for 'rootmode' [ 90.010139][ T4624] overlayfs: overlapping lowerdir path [ 90.017521][ T4625] Zero length message leads to an empty skb [ 90.053458][ T4624] overlayfs: overlapping lowerdir path [ 90.087240][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 90.401063][ T4636] FAULT_INJECTION: forcing a failure. [ 90.401063][ T4636] name failslab, interval 1, probability 0, space 0, times 0 [ 90.424967][ T4635] sp0: Synchronizing with TNC [ 90.444171][ T4635] dlm: no locking on control device [ 90.461597][ T4636] CPU: 0 PID: 4636 Comm: syz.0.98 Not tainted syzkaller #0 [ 90.468855][ T4636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.478939][ T4636] Call Trace: [ 90.482231][ T4636] [ 90.485184][ T4636] dump_stack_lvl+0x188/0x250 [ 90.489904][ T4636] ? show_regs_print_info+0x20/0x20 [ 90.495133][ T4636] ? load_image+0x400/0x400 [ 90.499679][ T4636] ? __might_sleep+0xf0/0xf0 [ 90.504283][ T4636] ? __lock_acquire+0x7d10/0x7d10 [ 90.509341][ T4636] should_fail+0x38c/0x4c0 [ 90.513780][ T4636] should_failslab+0x5/0x20 [ 90.518301][ T4636] slab_pre_alloc_hook+0x51/0xc0 [ 90.523270][ T4636] __kmalloc_node_track_caller+0x68/0x3a0 [ 90.529007][ T4636] ? netlink_ack+0x372/0xb50 [ 90.533608][ T4636] ? kmem_cache_alloc_node+0x162/0x2d0 [ 90.539074][ T4636] ? __alloc_skb+0xf4/0x750 [ 90.543598][ T4636] ? netlink_ack+0x372/0xb50 [ 90.548207][ T4636] __alloc_skb+0x22c/0x750 [ 90.552642][ T4636] netlink_ack+0x372/0xb50 [ 90.557071][ T4636] ? netlbl_unlabel_staticadddef+0x640/0x640 [ 90.563065][ T4636] ? netlink_dump+0xcf0/0xcf0 [ 90.567767][ T4636] netlink_rcv_skb+0x27a/0x440 [ 90.572553][ T4636] ? genl_bind+0x380/0x380 [ 90.576986][ T4636] ? netlink_ack+0xb50/0xb50 [ 90.581595][ T4636] ? __lock_acquire+0x7d10/0x7d10 [ 90.586661][ T4636] ? down_read+0x1aa/0x2e0 [ 90.591098][ T4636] genl_rcv+0x24/0x40 [ 90.595093][ T4636] netlink_unicast+0x774/0x920 [ 90.599882][ T4636] netlink_sendmsg+0x8ba/0xbe0 [ 90.604669][ T4636] ? netlink_getsockopt+0x570/0x570 [ 90.609884][ T4636] ? aa_sock_msg_perm+0x94/0x150 [ 90.614836][ T4636] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 90.620139][ T4636] ? security_socket_sendmsg+0x7c/0xa0 [ 90.625620][ T4636] ? netlink_getsockopt+0x570/0x570 [ 90.630828][ T4636] ____sys_sendmsg+0x5b7/0x8f0 [ 90.635632][ T4636] ? __sys_sendmsg_sock+0x30/0x30 [ 90.640686][ T4636] ? import_iovec+0x6f/0xa0 [ 90.645212][ T4636] ___sys_sendmsg+0x236/0x2e0 [ 90.649917][ T4636] ? __sys_sendmsg+0x2a0/0x2a0 [ 90.654706][ T4636] ? vfs_write+0x8b2/0xd60 [ 90.659156][ T4636] __se_sys_sendmsg+0x1af/0x290 [ 90.664034][ T4636] ? __x64_sys_sendmsg+0x80/0x80 [ 90.668983][ T4636] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 90.674988][ T4636] ? lockdep_hardirqs_on+0x94/0x140 [ 90.677814][ T4640] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.680207][ T4636] do_syscall_64+0x4c/0xa0 [ 90.702963][ T4636] ? clear_bhb_loop+0x30/0x80 [ 90.707665][ T4636] ? clear_bhb_loop+0x30/0x80 [ 90.712371][ T4636] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.718315][ T4636] RIP: 0033:0x7f9862d81799 [ 90.722757][ T4636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.742427][ T4636] RSP: 002b:00007f9860fdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.750855][ T4636] RAX: ffffffffffffffda RBX: 00007f9862ffafa0 RCX: 00007f9862d81799 [ 90.758837][ T4636] RDX: 0000000004000004 RSI: 0000200000000400 RDI: 0000000000000004 [ 90.766819][ T4636] RBP: 00007f9860fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 90.774809][ T4636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.782792][ T4636] R13: 00007f9862ffb038 R14: 00007f9862ffafa0 R15: 00007ffcdd608098 [ 90.790798][ T4636] [ 91.505365][ T4643] [U] ` [ 92.273716][ T4651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.101'. [ 92.655601][ T4620] loop1: detected capacity change from 0 to 40427 [ 92.711379][ C0] sched: RT throttling activated [ 92.752404][ T4620] F2FS-fs (loop1): invalid crc value [ 92.804762][ T4620] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 92.857663][ T4660] capability: warning: `syz.0.105' uses 32-bit capabilities (legacy support in use) [ 92.973263][ T4662] loop2: detected capacity change from 0 to 2048 [ 93.504465][ T4662] Alternate GPT is invalid, using primary GPT. [ 93.511003][ T4662] loop2: p1 p2 p3 [ 93.959741][ T4668] fuse: Unknown parameter 'use00000000000000000000' [ 94.099367][ T4668] overlayfs: overlapping lowerdir path [ 94.127378][ T4668] overlayfs: overlapping lowerdir path [ 94.229858][ T4671] loop1: detected capacity change from 0 to 4096 [ 94.287787][ T4675] FAULT_INJECTION: forcing a failure. [ 94.287787][ T4675] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.325770][ T4675] CPU: 1 PID: 4675 Comm: syz.2.109 Not tainted syzkaller #0 [ 94.333206][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.343275][ T4675] Call Trace: [ 94.346567][ T4675] [ 94.349500][ T4675] dump_stack_lvl+0x188/0x250 [ 94.354195][ T4675] ? show_regs_print_info+0x20/0x20 [ 94.359408][ T4675] ? load_image+0x400/0x400 [ 94.363918][ T4675] ? __lock_acquire+0x7d10/0x7d10 [ 94.368955][ T4675] ? __mutex_lock_common+0x465/0x2400 [ 94.374351][ T4675] should_fail+0x38c/0x4c0 [ 94.378776][ T4675] _copy_from_user+0x2e/0x170 [ 94.383460][ T4675] proc_control_compat+0xae/0x190 [ 94.388494][ T4675] ? proc_submiturb+0x150/0x150 [ 94.393365][ T4675] usbdev_ioctl+0x1322/0x1f10 [ 94.398055][ T4675] ? usbdev_poll+0x1f0/0x1f0 [ 94.402657][ T4675] ? bpf_lsm_file_ioctl+0x5/0x10 [ 94.407685][ T4675] ? security_file_ioctl+0x7c/0xa0 [ 94.412836][ T4675] ? usbdev_poll+0x1f0/0x1f0 [ 94.417437][ T4675] __se_sys_ioctl+0xfa/0x170 [ 94.422039][ T4675] do_syscall_64+0x4c/0xa0 [ 94.426469][ T4675] ? clear_bhb_loop+0x30/0x80 [ 94.431157][ T4675] ? clear_bhb_loop+0x30/0x80 [ 94.435869][ T4675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.441767][ T4675] RIP: 0033:0x7f83d44c7799 [ 94.446201][ T4675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.465814][ T4675] RSP: 002b:00007f83d2721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.474238][ T4675] RAX: ffffffffffffffda RBX: 00007f83d4740fa0 RCX: 00007f83d44c7799 [ 94.482211][ T4675] RDX: 0000200000000200 RSI: 00000000c0105500 RDI: 0000000000000003 [ 94.490193][ T4675] RBP: 00007f83d2721090 R08: 0000000000000000 R09: 0000000000000000 [ 94.498163][ T4675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.506146][ T4675] R13: 00007f83d4741038 R14: 00007f83d4740fa0 R15: 00007ffebae0e828 [ 94.514128][ T4675] [ 94.601671][ T4229] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.637969][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 94.665016][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 94.677533][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 94.792123][ T4229] usb 4-1: device descriptor read/64, error -71 [ 94.867443][ T4687] sp0: Synchronizing with TNC [ 94.884006][ T4671] overlayfs: missing 'lowerdir' [ 94.899237][ T4687] dlm: no locking on control device [ 94.970379][ T4689] xt_hashlimit: max too large, truncated to 1048576 [ 95.061506][ T4229] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.154600][ T4693] ALSA: seq fatal error: cannot create timer (-22) [ 95.251640][ T4229] usb 4-1: device descriptor read/64, error -71 [ 95.386310][ T4229] usb usb4-port1: attempt power cycle [ 95.626000][ T4685] [U] ` [ 95.950896][ T4229] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 96.235143][ T4229] usb 4-1: device descriptor read/8, error -71 [ 96.911502][ T4229] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 97.051872][ T4229] usb 4-1: device descriptor read/8, error -71 [ 97.187112][ T4229] usb usb4-port1: unable to enumerate USB device [ 97.759764][ T4709] loop2: detected capacity change from 0 to 40427 [ 97.799938][ T4721] fuse: Unknown parameter 'use00000000000000000000' [ 97.806663][ T4709] F2FS-fs (loop2): invalid crc value [ 97.887268][ T4718] loop0: detected capacity change from 0 to 2048 [ 98.433086][ T4723] overlayfs: overlapping lowerdir path [ 98.459350][ T4709] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.495903][ T4721] overlayfs: overlapping lowerdir path [ 98.549266][ T4176] Alternate GPT is invalid, using primary GPT. [ 98.584122][ T4176] loop0: p1 p2 p3 [ 98.616723][ T4728] loop3: detected capacity change from 0 to 128 [ 98.645750][ T4718] Alternate GPT is invalid, using primary GPT. [ 98.667820][ T4725] loop4: detected capacity change from 0 to 2048 [ 98.718086][ T4725] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 98.758516][ T4725] UDF-fs: Scanning with blocksize 512 failed [ 98.772384][ T4709] F2FS-fs (loop2): Start checkpoint disabled! [ 98.779871][ T4725] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 98.829765][ T4718] loop0: p1 p2 p3 [ 98.835033][ T4725] UDF-fs: Scanning with blocksize 1024 failed [ 98.843212][ T4725] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 98.850771][ T4725] UDF-fs: Scanning with blocksize 2048 failed [ 98.857311][ T4725] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 98.864989][ T4709] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 98.888903][ T4725] UDF-fs: Scanning with blocksize 4096 failed [ 98.919831][ T4707] attempt to access beyond end of device [ 98.919831][ T4707] loop2: rw=10241, want=45104, limit=40427 [ 98.936357][ T4728] EXT4-fs (loop3): Mount option "delalloc" incompatible with ext3 [ 98.947225][ T4709] attempt to access beyond end of device [ 98.947225][ T4709] loop2: rw=2049, want=45104, limit=40427 [ 99.057973][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 99.059041][ T4733] sp0: Synchronizing with TNC [ 99.080625][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 99.091095][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 99.180298][ T4733] dlm: no locking on control device [ 99.247135][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 99.259663][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 99.272938][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 99.303253][ T4468] attempt to access beyond end of device [ 99.303253][ T4468] loop2: rw=2049, want=40976, limit=40427 [ 99.315911][ T4737] xt_hashlimit: max too large, truncated to 1048576 [ 99.562943][ T4741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.129'. [ 99.865705][ T4732] [U] ` [ 100.868156][ T4756] capability: warning: `syz.1.133' uses deprecated v2 capabilities in a way that may be insecure [ 101.301987][ T4766] netlink: 72 bytes leftover after parsing attributes in process `syz.4.136'. [ 102.363579][ T4774] loop2: detected capacity change from 0 to 2048 [ 102.480458][ T4774] Alternate GPT is invalid, using primary GPT. [ 102.487020][ T4774] loop2: p1 p2 p3 [ 103.311006][ T4778] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 103.442565][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 103.459755][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 103.472631][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 103.628114][ T4786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.141'. [ 104.464158][ T26] audit: type=1326 audit(1772615735.724:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4789 comm="syz.1.143" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca22b09799 code=0x0 [ 104.588371][ T4770] loop4: detected capacity change from 0 to 40427 [ 104.616308][ T4770] F2FS-fs (loop4): invalid crc value [ 104.649363][ T4770] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.761066][ T4770] F2FS-fs (loop4): Start checkpoint disabled! [ 104.780457][ T4770] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 104.859744][ T4769] attempt to access beyond end of device [ 104.859744][ T4769] loop4: rw=10241, want=45104, limit=40427 [ 104.902546][ T4770] attempt to access beyond end of device [ 104.902546][ T4770] loop4: rw=2049, want=45104, limit=40427 [ 105.097268][ T4318] attempt to access beyond end of device [ 105.097268][ T4318] loop4: rw=2049, want=40976, limit=40427 [ 105.121861][ T4798] ALSA: mixer_oss: invalid OSS volume '' [ 105.127877][ T4798] ALSA: mixer_oss: invalid OSS volume '' [ 105.572607][ T4804] netlink: 72 bytes leftover after parsing attributes in process `syz.0.147'. [ 106.462716][ T4813] Scaler: ================= START STATUS ================= [ 107.216559][ T4816] loop3: detected capacity change from 0 to 2048 [ 107.628940][ T4813] Scaler: ================== END STATUS ================== [ 107.792055][ T4820] loop1: detected capacity change from 0 to 1024 [ 107.966093][ T4337] Alternate GPT is invalid, using primary GPT. [ 107.974193][ T4337] loop3: p1 p2 p3 [ 107.994436][ T4816] Alternate GPT is invalid, using primary GPT. [ 108.013463][ T4816] loop3: p1 p2 p3 [ 108.229328][ T4829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.152'. [ 108.611440][ T4830] netlink: 72 bytes leftover after parsing attributes in process `syz.2.153'. [ 109.766032][ T4836] netlink: 72 bytes leftover after parsing attributes in process `syz.4.155'. [ 110.708894][ T4840] ALSA: mixer_oss: invalid OSS volume '' [ 110.722948][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 110.744092][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 110.766073][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.806136][ T4840] ALSA: mixer_oss: invalid OSS volume '' [ 110.981570][ T4844] FAULT_INJECTION: forcing a failure. [ 110.981570][ T4844] name failslab, interval 1, probability 0, space 0, times 0 [ 110.994576][ T4844] CPU: 1 PID: 4844 Comm: syz.4.158 Not tainted syzkaller #0 [ 111.001882][ T4844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.011961][ T4844] Call Trace: [ 111.015251][ T4844] [ 111.018187][ T4844] dump_stack_lvl+0x188/0x250 [ 111.022893][ T4844] ? show_regs_print_info+0x20/0x20 [ 111.028104][ T4844] ? load_image+0x400/0x400 [ 111.032628][ T4844] ? __lock_acquire+0x7d10/0x7d10 [ 111.037680][ T4844] ? lockdep_hardirqs_on+0x94/0x140 [ 111.042901][ T4844] should_fail+0x38c/0x4c0 [ 111.047334][ T4844] should_failslab+0x5/0x20 [ 111.051854][ T4844] slab_pre_alloc_hook+0x51/0xc0 [ 111.056814][ T4844] __kmalloc+0x6b/0x330 [ 111.060983][ T4844] ? snd_pcm_hw_refine+0x99b/0x1710 [ 111.066202][ T4844] snd_pcm_hw_refine+0x99b/0x1710 [ 111.071267][ T4844] ? snd_pcm_oss_change_params_locked+0x1b4/0x3f20 [ 111.077790][ T4844] ? snd_pcm_oss_set_rate+0x1bd/0x4e0 [ 111.083173][ T4844] ? __se_sys_ioctl+0xfa/0x170 [ 111.087950][ T4844] ? snd_pcm_info_user+0x4f0/0x4f0 [ 111.093098][ T4844] ? memset+0x1e/0x40 [ 111.097094][ T4844] ? snd_pcm_oss_change_params_locked+0x6a2/0x3f20 [ 111.103607][ T4844] ? snd_pcm_oss_change_params_locked+0x6ed/0x3f20 [ 111.110117][ T4844] snd_pcm_oss_change_params_locked+0x7f5/0x3f20 [ 111.116467][ T4844] ? __mutex_lock_common+0x465/0x2400 [ 111.121862][ T4844] ? __lock_acquire+0x7d10/0x7d10 [ 111.126914][ T4844] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 111.132055][ T4844] ? mutex_lock_io_nested+0x60/0x60 [ 111.137279][ T4844] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 111.142947][ T4844] ? mutex_unlock+0x10/0x10 [ 111.147472][ T4844] ? __might_fault+0xb7/0x110 [ 111.152168][ T4844] snd_pcm_oss_get_active_substream+0x206/0x270 [ 111.158441][ T4844] snd_pcm_oss_set_rate+0x1bd/0x4e0 [ 111.163657][ T4844] snd_pcm_oss_ioctl+0xa0d/0xc60 [ 111.168629][ T4844] ? bpf_lsm_file_ioctl+0x5/0x10 [ 111.173603][ T4844] ? snd_pcm_oss_poll+0x7e0/0x7e0 [ 111.178647][ T4844] __se_sys_ioctl+0xfa/0x170 [ 111.183265][ T4844] do_syscall_64+0x4c/0xa0 [ 111.187706][ T4844] ? clear_bhb_loop+0x30/0x80 [ 111.192421][ T4844] ? clear_bhb_loop+0x30/0x80 [ 111.197118][ T4844] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.203032][ T4844] RIP: 0033:0x7f2d71cd6799 [ 111.207589][ T4844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.227207][ T4844] RSP: 002b:00007f2d6feee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.235725][ T4844] RAX: ffffffffffffffda RBX: 00007f2d71f50180 RCX: 00007f2d71cd6799 [ 111.243711][ T4844] RDX: 0000200000000040 RSI: 00000000c0045002 RDI: 0000000000000009 [ 111.251703][ T4844] RBP: 00007f2d6feee090 R08: 0000000000000000 R09: 0000000000000000 [ 111.259693][ T4844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.267676][ T4844] R13: 00007f2d71f50218 R14: 00007f2d71f50180 R15: 00007ffe4ead03d8 [ 111.275685][ T4844] [ 111.278724][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.429867][ T4843] sp0: Synchronizing with TNC [ 111.513299][ T4843] dlm: no locking on control device [ 111.526145][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 111.544693][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 111.556029][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 111.644178][ T4845] xt_hashlimit: max too large, truncated to 1048576 [ 111.729786][ T4848] dlm: no locking on control device [ 111.810843][ T4849] xt_hashlimit: max too large, truncated to 1048576 [ 111.829095][ T4835] loop2: detected capacity change from 0 to 40427 [ 111.853440][ T4855] ALSA: seq fatal error: cannot create timer (-22) [ 111.884404][ T4835] F2FS-fs (loop2): invalid crc value [ 111.896118][ T4835] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.230637][ T4835] F2FS-fs (loop2): Start checkpoint disabled! [ 112.305184][ T4835] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 112.432548][ T4847] [U] `` [ 113.025687][ T4871] ALSA: seq fatal error: cannot create timer (-22) [ 114.106251][ T4874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.166'. [ 114.774152][ T4879] ALSA: mixer_oss: invalid OSS volume '' [ 114.779934][ T4879] ALSA: mixer_oss: invalid OSS volume '' [ 114.836074][ T4883] loop1: detected capacity change from 0 to 1024 [ 114.849720][ T4886] loop0: detected capacity change from 0 to 2048 [ 114.926652][ T4888] netlink: 72 bytes leftover after parsing attributes in process `syz.2.167'. [ 115.376235][ T4886] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.796580][ T4900] loop3: detected capacity change from 0 to 40427 [ 116.961162][ T4900] F2FS-fs (loop3): invalid crc value [ 117.107611][ T4900] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.705605][ T4913] loop2: detected capacity change from 0 to 2048 [ 117.773206][ T4337] Alternate GPT is invalid, using primary GPT. [ 118.558172][ T4337] loop2: p1 p2 p3 [ 118.590910][ T4898] loop0: detected capacity change from 0 to 32768 [ 118.832570][ T4900] F2FS-fs (loop3): Start checkpoint disabled! [ 118.859220][ T4913] Alternate GPT is invalid, using primary GPT. [ 118.876485][ T4913] loop2: p1 p2 p3 [ 118.884117][ T4898] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.175 (4898) [ 118.916553][ T4900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 119.026516][ T4921] loop4: detected capacity change from 0 to 2048 [ 119.093613][ T4921] Alternate GPT is invalid, using primary GPT. [ 119.100117][ T4921] loop4: p1 p2 p3 [ 119.206454][ T3560] Alternate GPT is invalid, using primary GPT. [ 119.414272][ T4898] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 119.897673][ T4898] BTRFS info (device loop0): enabling auto defrag [ 119.906227][ T3560] loop4: p1 p2 p3 [ 119.933431][ T4898] BTRFS info (device loop0): use no compression [ 119.971715][ T4898] BTRFS info (device loop0): max_inline at 4096 [ 119.978003][ T4898] BTRFS info (device loop0): using free space tree [ 120.037018][ T4898] BTRFS info (device loop0): has skinny extents [ 120.281861][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 120.294574][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 120.307487][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 120.394430][ T4944] netlink: 72 bytes leftover after parsing attributes in process `syz.2.184'. [ 121.181585][ T4946] netlink: 72 bytes leftover after parsing attributes in process `syz.4.182'. [ 122.293798][ T4942] loop1: detected capacity change from 0 to 764 [ 122.364115][ T4898] BTRFS error (device loop0): open_ctree failed: -12 [ 122.431732][ T4176] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4176) [ 122.483599][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 122.501908][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 122.530325][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 122.535295][ T4954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.187'. [ 122.628645][ T4953] ALSA: mixer_oss: invalid OSS volume '' [ 122.637900][ T4956] loop2: detected capacity change from 0 to 256 [ 122.662403][ T4953] ALSA: mixer_oss: invalid OSS volume '' [ 122.707312][ T4951] loop4: detected capacity change from 0 to 1024 [ 122.819737][ T4951] EXT4-fs (loop4): Unrecognized mount option "context=unconfined_u" or missing value [ 122.839584][ T4956] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 123.029191][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 123.040322][ T26] audit: type=1326 audit(1772615754.284:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4950 comm="syz.4.187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d71cd6799 code=0x0 [ 123.096099][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 123.222877][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 123.310831][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 124.043204][ T4979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.191'. [ 124.212601][ T4976] loop4: detected capacity change from 0 to 4096 [ 124.630086][ T4969] loop3: detected capacity change from 0 to 32768 [ 124.642994][ T4969] jfs: Unrecognized mount option "" or missing value [ 124.681262][ T4976] ntfs3: Unknown parameter 'V5a' [ 125.000283][ T4990] netlink: 72 bytes leftover after parsing attributes in process `syz.0.196'. [ 126.516263][ T4997] netlink: 72 bytes leftover after parsing attributes in process `syz.0.198'. [ 126.587856][ T4992] netlink: 156 bytes leftover after parsing attributes in process `syz.3.197'. [ 127.347905][ T5003] ALSA: mixer_oss: invalid OSS volume '' [ 127.366787][ T5003] ALSA: mixer_oss: invalid OSS volume '' [ 128.440522][ T5013] sp0: Synchronizing with TNC [ 128.546891][ T5014] xt_hashlimit: max too large, truncated to 1048576 [ 129.097743][ T5012] [U] ` [ 129.146584][ T5022] loop3: detected capacity change from 0 to 32768 [ 129.223723][ T5022] jfs: Unrecognized mount option "" or missing value [ 129.232382][ T5028] ALSA: seq fatal error: cannot create timer (-22) [ 129.757716][ T5034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 130.561599][ T5036] netlink: 72 bytes leftover after parsing attributes in process `syz.2.210'. [ 131.355299][ T5052] ALSA: mixer_oss: invalid OSS volume '' [ 131.380854][ T5052] ALSA: mixer_oss: invalid OSS volume '' [ 132.415756][ T5061] loop0: detected capacity change from 0 to 2048 [ 132.566357][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.573934][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.400331][ T4967] Alternate GPT is invalid, using primary GPT. [ 133.421120][ T4967] loop0: p1 p2 p3 [ 133.469125][ T5061] Alternate GPT is invalid, using primary GPT. [ 133.495990][ T5061] loop0: p1 p2 p3 [ 133.568590][ T5071] loop2: detected capacity change from 0 to 1024 [ 133.610059][ T5075] ALSA: seq fatal error: cannot create timer (-22) [ 133.932366][ T5077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.222'. [ 134.773905][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 134.874283][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 134.904856][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 134.915843][ T5083] loop0: detected capacity change from 0 to 8 [ 135.048989][ T5090] netlink: 72 bytes leftover after parsing attributes in process `syz.1.224'. [ 135.834449][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 135.870278][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 135.928317][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 136.962655][ T5108] FAULT_INJECTION: forcing a failure. [ 136.962655][ T5108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.001692][ T5108] CPU: 0 PID: 5108 Comm: syz.3.231 Not tainted syzkaller #0 [ 137.009024][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.019096][ T5108] Call Trace: [ 137.022393][ T5108] [ 137.025352][ T5108] dump_stack_lvl+0x188/0x250 [ 137.030046][ T5108] ? show_regs_print_info+0x20/0x20 [ 137.035248][ T5108] ? load_image+0x400/0x400 [ 137.039757][ T5108] ? __lock_acquire+0x7d10/0x7d10 [ 137.044799][ T5108] should_fail+0x38c/0x4c0 [ 137.049226][ T5108] _copy_to_user+0x2e/0x130 [ 137.053733][ T5108] simple_read_from_buffer+0xe3/0x150 [ 137.059113][ T5108] proc_fail_nth_read+0x1a6/0x220 [ 137.064145][ T5108] ? proc_fault_inject_write+0x310/0x310 [ 137.069789][ T5108] ? fsnotify_perm+0x254/0x560 [ 137.074556][ T5108] ? proc_fault_inject_write+0x310/0x310 [ 137.080211][ T5108] vfs_read+0x301/0xd60 [ 137.084371][ T5108] ? kernel_read+0x1e0/0x1e0 [ 137.088979][ T5108] ? __fget_files+0x40f/0x480 [ 137.093656][ T5108] ? mutex_lock_nested+0x17/0x20 [ 137.098590][ T5108] ? __fdget_pos+0x2bf/0x370 [ 137.103179][ T5108] ? ksys_read+0x71/0x260 [ 137.107507][ T5108] ksys_read+0x152/0x260 [ 137.111751][ T5108] ? vfs_write+0xd60/0xd60 [ 137.116172][ T5108] ? lockdep_hardirqs_on+0x94/0x140 [ 137.121387][ T5108] do_syscall_64+0x4c/0xa0 [ 137.125817][ T5108] ? clear_bhb_loop+0x30/0x80 [ 137.130491][ T5108] ? clear_bhb_loop+0x30/0x80 [ 137.135165][ T5108] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.141060][ T5108] RIP: 0033:0x7f49107aefce [ 137.145480][ T5108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.165090][ T5108] RSP: 002b:00007f490ea47fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.173519][ T5108] RAX: ffffffffffffffda RBX: 00007f490ea486c0 RCX: 00007f49107aefce [ 137.181500][ T5108] RDX: 000000000000000f RSI: 00007f490ea480a0 RDI: 0000000000000004 [ 137.189476][ T5108] RBP: 00007f490ea48090 R08: 0000000000000000 R09: 0000000000000000 [ 137.197449][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.205422][ T5108] R13: 00007f4910a68038 R14: 00007f4910a67fa0 R15: 00007ffcbaf12158 [ 137.213403][ T5108] [ 137.216457][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.236043][ T5080] loop4: detected capacity change from 0 to 32768 [ 137.348881][ T5080] jfs: Unrecognized mount option "" or missing value [ 137.420639][ T5112] ALSA: seq fatal error: cannot create timer (-22) [ 137.605808][ T5119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.234'. [ 138.464938][ T5123] loop1: detected capacity change from 0 to 2048 [ 138.519571][ T5123] Alternate GPT is invalid, using primary GPT. [ 138.526182][ T5123] loop1: p1 p2 p3 [ 138.904009][ T3560] Alternate GPT is invalid, using primary GPT. [ 138.946298][ T5127] loop3: detected capacity change from 0 to 2048 [ 139.009883][ T5127] Alternate GPT is invalid, using primary GPT. [ 139.016394][ T5127] loop3: p1 p2 p3 [ 139.060608][ T3560] loop1: p1 p2 p3 [ 139.896286][ T5129] sp0: Synchronizing with TNC [ 139.984375][ T5134] xt_hashlimit: max too large, truncated to 1048576 [ 140.119354][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 140.160813][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 140.330164][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 140.345863][ T5128] [U] ` [ 140.554020][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 140.801803][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 140.879063][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 140.908910][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 140.924908][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 140.976653][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 141.069689][ T5146] loop2: detected capacity change from 0 to 256 [ 141.152716][ T5146] exfat: Deprecated parameter 'utf8' [ 141.169865][ T5152] ALSA: seq fatal error: cannot create timer (-22) [ 141.172279][ T5146] exfat: Deprecated parameter 'namecase' [ 141.259571][ T5146] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 141.358138][ T5146] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 141.398481][ T5146] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 141.473125][ T5146] comedi comedi0: pcl812: I/O port conflict (0x8001,16) [ 141.880681][ T5163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.247'. [ 142.800343][ T5170] loop4: detected capacity change from 0 to 1024 [ 143.078973][ T5174] loop2: detected capacity change from 0 to 2048 [ 143.104211][ T5170] blk_update_request: I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 143.115989][ T5170] hfsplus: unable to find HFS+ superblock [ 143.219015][ T5174] Alternate GPT is invalid, using primary GPT. [ 143.226027][ T5174] loop2: p1 p2 p3 [ 143.832562][ T5156] loop3: detected capacity change from 0 to 32768 [ 143.907527][ T5159] loop1: detected capacity change from 0 to 32768 [ 144.082169][ T5159] jfs: Unrecognized mount option "" or missing value [ 144.180208][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 144.647206][ T5183] fuse: Unknown parameter '0x0000000000000003' [ 144.658426][ T5183] overlayfs: overlapping lowerdir path [ 144.666082][ T5183] overlayfs: overlapping lowerdir path [ 144.726671][ T5187] ALSA: seq fatal error: cannot create timer (-22) [ 145.848914][ T5204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 147.341391][ T5211] fuse: Unknown parameter '0x0000000000000003' [ 147.358602][ T5211] overlayfs: overlapping lowerdir path [ 147.413106][ T5220] overlayfs: overlapping lowerdir path [ 147.427890][ T5217] sp0: Synchronizing with TNC [ 147.476435][ T5217] dlm: no locking on control device [ 147.611886][ T5225] dlm: no locking on control device [ 147.708911][ T5227] ALSA: seq fatal error: cannot create timer (-22) [ 147.916069][ T5208] loop3: detected capacity change from 0 to 32768 [ 148.052665][ T5208] JBD2: Ignoring recovery information on journal [ 148.198657][ T5208] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 148.357993][ T5233] loop2: detected capacity change from 0 to 16 [ 148.421219][ T5224] [U] `` [ 148.455145][ T5233] erofs: (device loop2): mounted with root inode @ nid 36. [ 148.653311][ T5239] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.940750][ T5247] ALSA: mixer_oss: invalid OSS volume '' [ 148.967288][ T5247] ALSA: mixer_oss: invalid OSS volume '' [ 150.242756][ T5258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.275'. [ 150.892833][ T5208] syz.3.263 (5208) used greatest stack depth: 21136 bytes left [ 150.972771][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 151.944956][ T5276] loop1: detected capacity change from 0 to 2048 [ 152.010010][ T5276] Alternate GPT is invalid, using primary GPT. [ 152.016539][ T5276] loop1: p1 p2 p3 [ 152.988598][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 153.651844][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 153.663254][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 153.676396][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 153.766017][ T5290] ALSA: mixer_oss: invalid OSS volume '' [ 153.772131][ T5290] ALSA: mixer_oss: invalid OSS volume '' [ 153.925672][ T5293] loop3: detected capacity change from 0 to 4096 [ 154.126603][ T5300] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 154.171393][ T5300] loop2: detected capacity change from 0 to 512 [ 155.287471][ T5300] EXT4-fs (loop2): Test dummy encryption mode enabled [ 155.294535][ T5300] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 155.307699][ T5300] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.782138][ T5300] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.287: bad orphan inode 131083 [ 155.793633][ T5300] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 155.902289][ T5293] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 156.780510][ T5300] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 156.850678][ T5316] ntfs3: loop3: ino=21, "memory.swap.current" mmap(write) compressed not supported [ 156.892661][ T4187] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 156.941533][ T4227] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 157.122571][ T5322] sp0: Synchronizing with TNC [ 157.128876][ T5324] ALSA: seq fatal error: cannot create timer (-22) [ 157.156558][ T5322] dlm: no locking on control device [ 157.341674][ T4227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.361406][ T4227] usb 5-1: config 0 interface 0 has no altsetting 0 [ 157.541666][ T4227] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 157.560900][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.579368][ T4227] usb 5-1: Product: syz [ 157.583796][ T4227] usb 5-1: Manufacturer: syz [ 157.589721][ T4227] usb 5-1: SerialNumber: syz [ 157.609266][ T4227] usb 5-1: config 0 descriptor?? [ 157.663694][ T4227] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 157.692092][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.742298][ T4227] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 157.751274][ T4227] usb 5-1: media controller created [ 157.780641][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.850067][ T5319] [U] ` [ 157.879815][ T4227] DVB: Unable to find symbol tda10046_attach() [ 157.891444][ T4227] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 157.901078][ T4227] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 158.191540][ T4227] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 158.206719][ T4227] usb 5-1: USB disconnect, device number 3 [ 158.865731][ T5334] device ipvlan2 entered promiscuous mode [ 159.321203][ T5309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.480541][ T5341] loop2: detected capacity change from 0 to 8 [ 159.519850][ T5343] ALSA: mixer_oss: invalid OSS volume '' [ 159.529900][ T5345] loop3: detected capacity change from 0 to 8 [ 159.536677][ T5343] ALSA: mixer_oss: invalid OSS volume '' [ 159.552460][ T5341] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 159.567941][ T5341] cramfs: Error -5 while decompressing! [ 159.569247][ T4337] udevd[4337]: incorrect cramfs checksum on /dev/loop2 [ 159.574257][ T5341] cramfs: ffffffff964060a8(26)->ffff888072115000(4096) [ 159.587930][ T5341] cramfs: Error -3 while decompressing! [ 159.595972][ T5345] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 159.628622][ T5341] cramfs: ffffffff964060c2(26)->ffff88805e531000(4096) [ 159.680023][ T4967] udevd[4967]: incorrect cramfs checksum on /dev/loop3 [ 159.690684][ T5341] cramfs: Error -3 while decompressing! [ 159.700767][ T5341] cramfs: ffffffff964060dc(16)->ffff88805cc67000(4096) [ 159.738767][ T4337] udevd[4337]: incorrect cramfs checksum on /dev/loop3 [ 159.758597][ T5345] cramfs: Error -5 while decompressing! [ 159.765437][ T5345] cramfs: ffffffff964020a8(26)->ffff88805626e000(4096) [ 159.789569][ T5349] sp0: Synchronizing with TNC [ 159.793169][ T4337] udevd[4337]: incorrect cramfs checksum on /dev/loop3 [ 159.808729][ T5345] cramfs: Error -3 while decompressing! [ 159.814785][ T5345] cramfs: ffffffff964020c2(26)->ffff88805b658000(4096) [ 159.822702][ T5341] cramfs: Error -5 while decompressing! [ 159.828388][ T5341] cramfs: ffffffff964060a8(26)->ffff888072115000(4096) [ 159.837009][ T5345] cramfs: Error -3 while decompressing! [ 159.850455][ T5345] cramfs: ffffffff964020dc(16)->ffff8880592bb000(4096) [ 159.859564][ T5345] cramfs: Error -5 while decompressing! [ 159.866118][ T5345] cramfs: ffffffff964020a8(26)->ffff88805626e000(4096) [ 159.965394][ T5353] dlm: no locking on control device [ 160.515820][ T5355] [U] ` [ 160.837308][ T5367] loop3: detected capacity change from 0 to 2048 [ 160.889931][ T4337] Alternate GPT is invalid, using primary GPT. [ 160.923713][ T4337] loop3: p1 p2 p3 [ 161.592780][ T5367] Alternate GPT is invalid, using primary GPT. [ 161.622737][ T5367] loop3: p1 p2 p3 [ 161.702892][ T3560] Alternate GPT is invalid, using primary GPT. [ 161.741702][ T3560] loop3: p1 p2 p3 [ 161.812913][ T5374] sp0: Synchronizing with TNC [ 161.842337][ T5374] dlm: no locking on control device [ 161.878334][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 161.891632][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 161.905207][ T5362] loop4: detected capacity change from 0 to 32768 [ 161.905947][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 162.029149][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 162.030551][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 162.052223][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 162.312659][ T5372] loop2: detected capacity change from 0 to 40427 [ 162.323642][ T5362] loop4: detected capacity change from 0 to 64 [ 162.355303][ T5372] F2FS-fs (loop2): invalid crc value [ 162.370884][ T5372] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.471536][ T5372] F2FS-fs (loop2): Start checkpoint disabled! [ 162.500364][ T4173] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/1 [ 162.517582][ T5372] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 162.534461][ T4173] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 [ 162.608849][ T5371] attempt to access beyond end of device [ 162.608849][ T5371] loop2: rw=10241, want=45104, limit=40427 [ 162.626556][ T5373] [U] ` [ 162.649591][ T5372] attempt to access beyond end of device [ 162.649591][ T5372] loop2: rw=2049, want=45104, limit=40427 [ 162.776122][ T5381] FAULT_INJECTION: forcing a failure. [ 162.776122][ T5381] name failslab, interval 1, probability 0, space 0, times 0 [ 162.819746][ T5381] CPU: 1 PID: 5381 Comm: syz.4.307 Not tainted syzkaller #0 [ 162.827078][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.833082][ T9] attempt to access beyond end of device [ 162.833082][ T9] loop2: rw=2049, want=40976, limit=40427 [ 162.837143][ T5381] Call Trace: [ 162.851285][ T5384] loop0: detected capacity change from 0 to 8 [ 162.851627][ T5381] [ 162.851638][ T5381] dump_stack_lvl+0x188/0x250 [ 162.851673][ T5381] ? show_regs_print_info+0x20/0x20 [ 162.870550][ T5381] ? load_image+0x400/0x400 [ 162.875073][ T5381] ? __might_sleep+0xf0/0xf0 [ 162.879675][ T5381] ? __lock_acquire+0x7d10/0x7d10 [ 162.884713][ T5381] ? mark_lock+0x94/0x320 [ 162.889066][ T5381] should_fail+0x38c/0x4c0 [ 162.893504][ T5381] should_failslab+0x5/0x20 [ 162.898038][ T5381] slab_pre_alloc_hook+0x51/0xc0 [ 162.902989][ T5381] __kmalloc+0x6b/0x330 [ 162.907152][ T5381] ? tomoyo_realpath_from_path+0x118/0x610 [ 162.912979][ T5381] tomoyo_realpath_from_path+0x118/0x610 [ 162.918634][ T5381] tomoyo_path_number_perm+0x242/0x660 [ 162.924108][ T5381] ? verify_lock_unused+0x140/0x140 [ 162.929316][ T5381] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 162.934780][ T5381] ? ksys_write+0x1c6/0x260 [ 162.939333][ T5381] security_file_ioctl+0x6c/0xa0 [ 162.944299][ T5381] __se_sys_ioctl+0x48/0x170 [ 162.948893][ T5381] do_syscall_64+0x4c/0xa0 [ 162.953311][ T5381] ? clear_bhb_loop+0x30/0x80 [ 162.957988][ T5381] ? clear_bhb_loop+0x30/0x80 [ 162.962671][ T5381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.968569][ T5381] RIP: 0033:0x7f2d71cd6799 [ 162.972988][ T5381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.992603][ T5381] RSP: 002b:00007f2d6ff30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.001029][ T5381] RAX: ffffffffffffffda RBX: 00007f2d71f4ffa0 RCX: 00007f2d71cd6799 [ 163.009006][ T5381] RDX: 0000000000000000 RSI: 0000000000004148 RDI: 0000000000000005 [ 163.016979][ T5381] RBP: 00007f2d6ff30090 R08: 0000000000000000 R09: 0000000000000000 [ 163.024949][ T5381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.032924][ T5381] R13: 00007f2d71f50038 R14: 00007f2d71f4ffa0 R15: 00007ffe4ead03d8 [ 163.040908][ T5381] [ 163.097002][ T5381] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.229891][ T5384] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 163.257811][ T5384] cramfs: Error -5 while decompressing! [ 163.271436][ T5384] cramfs: ffffffff964020a8(26)->ffff88805797c000(4096) [ 163.676813][ T5384] cramfs: Error -3 while decompressing! [ 164.178073][ T5384] cramfs: ffffffff964020c2(26)->ffff88805797d000(4096) [ 164.231589][ T5384] cramfs: Error -3 while decompressing! [ 164.277852][ T5384] cramfs: ffffffff964020dc(16)->ffff88805549a000(4096) [ 164.315498][ T5384] cramfs: Error -5 while decompressing! [ 164.336582][ T5384] cramfs: ffffffff964020a8(26)->ffff88805797c000(4096) [ 164.489381][ T5381] loop4: detected capacity change from 0 to 65536 [ 164.522669][ T5395] ALSA: mixer_oss: invalid OSS volume '' [ 164.528339][ T5395] ALSA: mixer_oss: invalid OSS volume '' [ 164.740170][ T5381] XFS (loop4): Mounting V5 Filesystem [ 164.777385][ T5381] XFS (loop4): Ending clean mount [ 164.792824][ T5381] XFS (loop4): Quotacheck needed: Please wait. [ 164.815826][ T5393] loop3: detected capacity change from 0 to 65536 [ 164.895528][ T5381] XFS (loop4): Quotacheck: Done. [ 164.926725][ T5405] 9pnet: Insufficient options for proto=fd [ 164.953651][ T5393] XFS (loop3): Mounting V5 Filesystem [ 164.982802][ T4185] XFS (loop4): Unmounting Filesystem [ 165.063876][ T5417] loop0: detected capacity change from 0 to 2048 [ 165.087566][ T5393] XFS (loop3): Ending clean mount [ 165.095698][ T5393] XFS (loop3): Quotacheck needed: Please wait. [ 165.172939][ T5417] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.204242][ T5393] XFS (loop3): Quotacheck: Done. [ 165.304896][ T4187] XFS (loop3): Unmounting Filesystem [ 165.587262][ T5421] loop4: detected capacity change from 0 to 2048 [ 165.683753][ T4176] Alternate GPT is invalid, using primary GPT. [ 165.719475][ T4176] loop4: p1 p2 p3 [ 165.921285][ T5421] Alternate GPT is invalid, using primary GPT. [ 165.927949][ T5421] loop4: p1 p2 p3 [ 166.414251][ T5423] loop0: detected capacity change from 0 to 8 [ 166.437715][ T5425] FAULT_INJECTION: forcing a failure. [ 166.437715][ T5425] name failslab, interval 1, probability 0, space 0, times 0 [ 166.450553][ T5425] CPU: 0 PID: 5425 Comm: syz.2.318 Not tainted syzkaller #0 [ 166.457850][ T5425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.467916][ T5425] Call Trace: [ 166.471200][ T5425] [ 166.474163][ T5425] dump_stack_lvl+0x188/0x250 [ 166.478856][ T5425] ? show_regs_print_info+0x20/0x20 [ 166.484069][ T5425] ? load_image+0x400/0x400 [ 166.488608][ T5425] ? __might_sleep+0xf0/0xf0 [ 166.493209][ T5425] ? __lock_acquire+0x7d10/0x7d10 [ 166.498254][ T5425] should_fail+0x38c/0x4c0 [ 166.502695][ T5425] should_failslab+0x5/0x20 [ 166.507217][ T5425] slab_pre_alloc_hook+0x51/0xc0 [ 166.512175][ T5425] __kmalloc+0x6b/0x330 [ 166.516354][ T5425] ? tomoyo_encode+0x27e/0x540 [ 166.521141][ T5425] tomoyo_encode+0x27e/0x540 [ 166.525749][ T5425] tomoyo_realpath_from_path+0x5cd/0x610 [ 166.531424][ T5425] tomoyo_path_number_perm+0x242/0x660 [ 166.536923][ T5425] ? verify_lock_unused+0x140/0x140 [ 166.542148][ T5425] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 166.547634][ T5425] ? ksys_write+0x1c6/0x260 [ 166.552200][ T5425] security_file_ioctl+0x6c/0xa0 [ 166.557173][ T5425] __se_sys_ioctl+0x48/0x170 [ 166.561790][ T5425] do_syscall_64+0x4c/0xa0 [ 166.566229][ T5425] ? clear_bhb_loop+0x30/0x80 [ 166.570924][ T5425] ? clear_bhb_loop+0x30/0x80 [ 166.575630][ T5425] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.581541][ T5425] RIP: 0033:0x7f83d44c7799 [ 166.585981][ T5425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.605594][ T5425] RSP: 002b:00007f83d2721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.614017][ T5425] RAX: ffffffffffffffda RBX: 00007f83d4740fa0 RCX: 00007f83d44c7799 [ 166.621994][ T5425] RDX: 0000200000003440 RSI: 00000000800448d2 RDI: 0000000000000004 [ 166.629978][ T5425] RBP: 00007f83d2721090 R08: 0000000000000000 R09: 0000000000000000 [ 166.637950][ T5425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.645928][ T5425] R13: 00007f83d4741038 R14: 00007f83d4740fa0 R15: 00007ffebae0e828 [ 166.653918][ T5425] [ 166.661650][ T5425] ERROR: Out of memory at tomoyo_realpath_from_path. [ 166.674205][ T5423] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 166.728126][ T5423] cramfs: Error -5 while decompressing! [ 166.729823][ T4967] udevd[4967]: incorrect cramfs checksum on /dev/loop0 [ 166.744674][ T5423] cramfs: ffffffff964060a8(26)->ffff88805b163000(4096) [ 166.765982][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 166.784999][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 166.803848][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 166.812386][ T5423] cramfs: Error -3 while decompressing! [ 166.829721][ T4967] udevd[4967]: incorrect cramfs checksum on /dev/loop0 [ 166.838650][ T5423] cramfs: ffffffff964060c2(26)->ffff88805c03f000(4096) [ 166.847135][ T5423] cramfs: Error -3 while decompressing! [ 166.868504][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 166.868933][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 166.901180][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 166.912482][ T5423] cramfs: ffffffff964060dc(16)->ffff88805565e000(4096) [ 166.923958][ T5423] cramfs: Error -5 while decompressing! [ 166.933783][ T5423] cramfs: ffffffff964060a8(26)->ffff88805b163000(4096) [ 167.113540][ T5427] sp0: Synchronizing with TNC [ 167.123736][ T5437] ALSA: seq fatal error: cannot create timer (-22) [ 168.356189][ T5431] [U] ` [ 168.571987][ T5445] ALSA: mixer_oss: invalid OSS volume '' [ 168.601611][ T5445] ALSA: mixer_oss: invalid OSS volume '' [ 168.628660][ T5429] loop4: detected capacity change from 0 to 32768 [ 168.667770][ T5429] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 168.694331][ T5429] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 168.776518][ T5450] openvswitch: netlink: EtherType 0 is less than min 600 [ 168.777824][ T5429] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 168.876717][ T5429] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 169.111975][ T5451] chnl_net:caif_netlink_parms(): no params data found [ 169.525912][ T5470] netlink: 72 bytes leftover after parsing attributes in process `syz.4.329'. [ 169.629835][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.786405][ T5451] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.999038][ T5451] device bridge_slave_0 entered promiscuous mode [ 170.190677][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.216959][ T5451] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.267752][ T5451] device bridge_slave_1 entered promiscuous mode [ 170.352956][ T5451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.362195][ T5454] loop0: detected capacity change from 0 to 32768 [ 170.373653][ T5451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.400446][ T5451] team0: Port device team_slave_0 added [ 170.425804][ T5451] team0: Port device team_slave_1 added [ 170.596858][ T5454] JBD2: Ignoring recovery information on journal [ 170.677000][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.853346][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.966372][ T5454] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 171.145476][ T5482] netlink: 3576 bytes leftover after parsing attributes in process `syz.4.331'. [ 171.177407][ T5451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.307527][ T4556] Bluetooth: hci5: command 0x0409 tx timeout [ 171.338683][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.406890][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.452704][ T5451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.516279][ T5488] sp0: Synchronizing with TNC [ 171.535708][ T5488] dlm: no locking on control device [ 171.567808][ T5497] loop4: detected capacity change from 0 to 128 [ 171.576983][ T5490] ALSA: mixer_oss: invalid OSS volume '' [ 171.596241][ T5490] ALSA: mixer_oss: invalid OSS volume '' [ 171.609181][ T5497] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 171.694397][ T5451] device hsr_slave_0 entered promiscuous mode [ 171.721864][ T5451] device hsr_slave_1 entered promiscuous mode [ 171.736339][ T5451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.749008][ T5451] Cannot create hsr debugfs directory [ 171.845587][ T5501] Cannot find del_set index 1 as target [ 171.869519][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 171.923396][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 171.983384][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 172.025840][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 172.035053][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 172.048407][ T5503] device erspan0 entered promiscuous mode [ 172.057812][ T5503] device gretap0 entered promiscuous mode [ 172.070392][ T5486] [U] ` [ 172.092780][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 172.116384][ T5451] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.133384][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 172.191483][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 172.257680][ T5451] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.282829][ T5505] loop0: detected capacity change from 0 to 8 [ 172.290858][ T5451] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.298658][ T5505] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 172.314846][ T4337] udevd[4337]: incorrect cramfs checksum on /dev/loop0 [ 172.353111][ T5451] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.362497][ T5505] cramfs: Error -5 while decompressing! [ 172.368073][ T5505] cramfs: ffffffff964020a8(26)->ffff8880579bb000(4096) [ 172.410418][ T5505] cramfs: Error -3 while decompressing! [ 172.416438][ T5505] cramfs: ffffffff964020c2(26)->ffff88805583e000(4096) [ 172.423874][ T5505] cramfs: Error -3 while decompressing! [ 172.429541][ T5505] cramfs: ffffffff964020dc(16)->ffff88807229e000(4096) [ 172.450052][ T5505] cramfs: Error -5 while decompressing! [ 172.455797][ T5505] cramfs: ffffffff964020a8(26)->ffff8880579bb000(4096) [ 172.488985][ T5512] ALSA: seq fatal error: cannot create timer (-22) [ 172.576118][ T5451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.656112][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.665142][ T5515] sp0: Synchronizing with TNC [ 172.673740][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.690339][ T5451] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.700599][ T5515] dlm: no locking on control device [ 172.725193][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.746721][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.759324][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.766502][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.777380][ T5516] xt_hashlimit: max too large, truncated to 1048576 [ 172.787583][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.798376][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.815414][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.822608][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.834575][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.868458][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.876831][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.894084][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.912465][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.930192][ T5451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.949035][ T5451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.964657][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.980321][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.990562][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.006590][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.018211][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.045076][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.064516][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.090156][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.308745][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.346355][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.361662][ T4227] Bluetooth: hci5: command 0x041b tx timeout [ 173.375203][ T5451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.452814][ T5514] [U] ` [ 173.467146][ T5524] loop2: detected capacity change from 0 to 512 [ 173.490010][ T5524] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 173.500327][ T5524] EXT4-fs (loop2): group descriptors corrupted! [ 176.028076][ T4947] Bluetooth: hci5: command 0x040f tx timeout [ 176.034334][ T4947] Bluetooth: hci3: command 0x0406 tx timeout [ 176.040409][ T4947] Bluetooth: hci2: command 0x0406 tx timeout [ 176.046517][ T4947] Bluetooth: hci4: command 0x0406 tx timeout [ 176.052724][ T4947] Bluetooth: hci0: command 0x0406 tx timeout [ 176.058771][ T4947] Bluetooth: hci1: command 0x0406 tx timeout [ 176.255846][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.273547][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.356099][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.386240][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.420906][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.634444][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.695150][ T5451] device veth0_vlan entered promiscuous mode [ 176.756933][ T5451] device veth1_vlan entered promiscuous mode [ 176.787625][ T5451] device veth0_macvtap entered promiscuous mode [ 176.797560][ T5451] device veth1_macvtap entered promiscuous mode [ 176.814629][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.834633][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.868424][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.889870][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.900895][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.928619][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.950505][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.963284][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.973866][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.986092][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.010404][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.019566][ T5536] netlink: 72 bytes leftover after parsing attributes in process `syz.2.347'. [ 177.085433][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.124966][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.135776][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.156595][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.168854][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.181320][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.192914][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.204119][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.229723][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.243386][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.266247][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.296437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.311052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.371912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.427449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.436297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.450300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.579383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.587102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.594795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.789594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.005150][ T4553] Bluetooth: hci5: command 0x0419 tx timeout [ 179.143581][ T5451] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.160504][ T5451] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.318517][ T5451] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.347460][ T5451] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.361149][ T5567] loop2: detected capacity change from 0 to 2048 [ 179.510220][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.543049][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.577341][ T5567] FAULT_INJECTION: forcing a failure. [ 179.577341][ T5567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.590503][ T5567] CPU: 0 PID: 5567 Comm: syz.2.355 Not tainted syzkaller #0 [ 179.597799][ T5567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.607862][ T5567] Call Trace: [ 179.611256][ T5567] [ 179.614209][ T5567] dump_stack_lvl+0x188/0x250 [ 179.618913][ T5567] ? show_regs_print_info+0x20/0x20 [ 179.624129][ T5567] ? load_image+0x400/0x400 [ 179.628654][ T5567] ? __lock_acquire+0x7d10/0x7d10 [ 179.633705][ T5567] ? vfs_write+0x8b2/0xd60 [ 179.638140][ T5567] should_fail+0x38c/0x4c0 [ 179.642580][ T5567] _copy_from_user+0x2e/0x170 [ 179.647285][ T5567] get_nodes+0x2b2/0x3c0 [ 179.651553][ T5567] ? hugetlb_pmd_shared+0xe0/0xe0 [ 179.656614][ T5567] __se_sys_migrate_pages+0xa6/0x5e0 [ 179.661921][ T5567] ? __x64_sys_migrate_pages+0xa0/0xa0 [ 179.667409][ T5567] ? lockdep_hardirqs_on+0x94/0x140 [ 179.672632][ T5567] do_syscall_64+0x4c/0xa0 [ 179.677063][ T5567] ? clear_bhb_loop+0x30/0x80 [ 179.681761][ T5567] ? clear_bhb_loop+0x30/0x80 [ 179.686465][ T5567] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.692379][ T5567] RIP: 0033:0x7f83d44c7799 [ 179.696849][ T5567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.716467][ T5567] RSP: 002b:00007f83d2721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 179.724885][ T5567] RAX: ffffffffffffffda RBX: 00007f83d4740fa0 RCX: 00007f83d44c7799 [ 179.732869][ T5567] RDX: 0000200000000300 RSI: 0000000000000003 RDI: 0000000000000000 [ 179.740869][ T5567] RBP: 00007f83d2721090 R08: 0000000000000000 R09: 0000000000000000 [ 179.748835][ T5567] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 179.756798][ T5567] R13: 00007f83d4741038 R14: 00007f83d4740fa0 R15: 00007ffebae0e828 [ 179.764784][ T5567] [ 179.774858][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.800763][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.819267][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.835590][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.999280][ T5575] FAULT_INJECTION: forcing a failure. [ 179.999280][ T5575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.050745][ T5575] CPU: 1 PID: 5575 Comm: syz.4.357 Not tainted syzkaller #0 [ 180.058069][ T5575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.068134][ T5575] Call Trace: [ 180.071422][ T5575] [ 180.074368][ T5575] dump_stack_lvl+0x188/0x250 [ 180.079085][ T5575] ? show_regs_print_info+0x20/0x20 [ 180.084300][ T5575] ? load_image+0x400/0x400 [ 180.088825][ T5575] ? __lock_acquire+0x7d10/0x7d10 [ 180.093868][ T5575] should_fail+0x38c/0x4c0 [ 180.098310][ T5575] _copy_from_user+0x2e/0x170 [ 180.103028][ T5575] __se_sys_memfd_create+0x189/0x450 [ 180.108333][ T5575] ? __x64_sys_memfd_create+0x60/0x60 [ 180.113721][ T5575] ? lockdep_hardirqs_on+0x94/0x140 [ 180.118934][ T5575] do_syscall_64+0x4c/0xa0 [ 180.123371][ T5575] ? clear_bhb_loop+0x30/0x80 [ 180.128057][ T5575] ? clear_bhb_loop+0x30/0x80 [ 180.132745][ T5575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.138671][ T5575] RIP: 0033:0x7f2d71cd6799 [ 180.143096][ T5575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.162713][ T5575] RSP: 002b:00007f2d6ff2fe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 180.171145][ T5575] RAX: ffffffffffffffda RBX: 00000000000007b0 RCX: 00007f2d71cd6799 [ 180.179130][ T5575] RDX: 00007f2d6ff2fee0 RSI: 0000000000000000 RDI: 00007f2d71d6cdb9 [ 180.187118][ T5575] RBP: 0000200000001680 R08: 00000000ffffffff R09: 0000000000000000 [ 180.195103][ T5575] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000100 [ 180.203088][ T5575] R13: 00007f2d6ff2fee0 R14: 00007f2d6ff2fea0 R15: 0000200000000340 [ 180.211089][ T5575] [ 180.297781][ T5578] ALSA: seq fatal error: cannot create timer (-22) [ 180.623504][ T5583] netlink: 72 bytes leftover after parsing attributes in process `syz.2.356'. [ 182.091181][ T5586] netlink: 72 bytes leftover after parsing attributes in process `syz.4.361'. [ 182.210785][ T5590] netlink: 'syz.3.360': attribute type 21 has an invalid length. [ 182.564444][ T5590] netlink: 132 bytes leftover after parsing attributes in process `syz.3.360'. [ 184.088888][ T5590] netlink: 'syz.3.360': attribute type 1 has an invalid length. [ 184.113517][ T5593] loop3: detected capacity change from 0 to 2048 [ 184.448971][ T5609] udc-core: couldn't find an available UDC or it's busy [ 184.471540][ T5609] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 184.556968][ T5593] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.661486][ T4173] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 185.039185][ T5618] loop3: detected capacity change from 0 to 2048 [ 185.061633][ T4173] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.116630][ T4173] usb 3-1: not running at top speed; connect to a high speed hub [ 185.167326][ T5618] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.177965][ T5621] loop0: detected capacity change from 0 to 1024 [ 185.224306][ T4173] usb 3-1: config 5 has an invalid interface number: 150 but max is 0 [ 185.227730][ T5621] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 185.252162][ T4173] usb 3-1: config 5 has no interface number 0 [ 185.258467][ T4173] usb 3-1: config 5 interface 150 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 185.269624][ T4173] usb 3-1: config 5 interface 150 has no altsetting 0 [ 185.276920][ T5621] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.353720][ T5621] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,acl,max_dir_size_kb=0x00000000004007b1,dioread_nolock,data_err=ignore,max_batch_time=0x0000000000000007,mblk_io_submit,delalloc,norecovery,barrier,auto_da_alloc,errors=continue. Quota mode: none. [ 185.442071][ T4173] usb 3-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice=7a.a6 [ 185.451165][ T4173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.597881][ T5632] loop3: detected capacity change from 0 to 2048 [ 185.669849][ T5632] Alternate GPT is invalid, using primary GPT. [ 185.677043][ T5632] loop3: p1 p2 p3 [ 186.230622][ T5631] overlayfs: statfs failed on './file0' [ 186.463425][ T4173] usb 3-1: Product: syz [ 186.467659][ T4173] usb 3-1: Manufacturer: syz [ 186.472814][ T4173] usb 3-1: SerialNumber: syz [ 186.640451][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 186.658971][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 186.684877][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 186.853574][ T5645] netlink: 72 bytes leftover after parsing attributes in process `syz.4.374'. [ 187.450560][ T4173] usb 3-1: USB disconnect, device number 3 [ 187.811188][ T5660] ALSA: seq fatal error: cannot create timer (-22) [ 188.396097][ T5663] netlink: 72 bytes leftover after parsing attributes in process `syz.2.375'. [ 188.502545][ T5651] tipc: Started in network mode [ 188.507799][ T5651] tipc: Node identity ac14140f, cluster identity 4711 [ 188.696133][ T5657] FAULT_INJECTION: forcing a failure. [ 188.696133][ T5657] name failslab, interval 1, probability 0, space 0, times 0 [ 188.753596][ T5651] tipc: New replicast peer: 255.255.255.255 [ 188.760741][ T5651] tipc: Enabled bearer , priority 10 [ 188.767900][ T5657] CPU: 1 PID: 5657 Comm: syz.3.381 Not tainted syzkaller #0 [ 188.775208][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.785272][ T5657] Call Trace: [ 188.788566][ T5657] [ 188.791520][ T5657] dump_stack_lvl+0x188/0x250 [ 188.796229][ T5657] ? show_regs_print_info+0x20/0x20 [ 188.801525][ T5657] ? load_image+0x400/0x400 [ 188.806051][ T5657] ? __might_sleep+0xf0/0xf0 [ 188.810655][ T5657] ? __lock_acquire+0x7d10/0x7d10 [ 188.815682][ T5657] should_fail+0x38c/0x4c0 [ 188.820116][ T5657] should_failslab+0x5/0x20 [ 188.824638][ T5657] slab_pre_alloc_hook+0x51/0xc0 [ 188.829601][ T5657] kmem_cache_alloc_node+0x47/0x2d0 [ 188.834800][ T5657] ? __alloc_skb+0xf4/0x750 [ 188.839308][ T5657] __alloc_skb+0xf4/0x750 [ 188.843641][ T5657] netlink_ack+0x372/0xb50 [ 188.848066][ T5657] ? __copy_skb_header+0x3ba/0x4f0 [ 188.853183][ T5657] ? netlink_dump+0xcf0/0xcf0 [ 188.857856][ T5657] ? __skb_clone+0x480/0x790 [ 188.862465][ T5657] netlink_rcv_skb+0x27a/0x440 [ 188.867229][ T5657] ? rtnetlink_bind+0x80/0x80 [ 188.871918][ T5657] ? netlink_ack+0xb50/0xb50 [ 188.876543][ T5657] netlink_unicast+0x774/0x920 [ 188.881341][ T5657] netlink_sendmsg+0x8ba/0xbe0 [ 188.886137][ T5657] ? netlink_getsockopt+0x570/0x570 [ 188.891352][ T5657] ? aa_sock_msg_perm+0x94/0x150 [ 188.896304][ T5657] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 188.901594][ T5657] ? security_socket_sendmsg+0x7c/0xa0 [ 188.907063][ T5657] ? netlink_getsockopt+0x570/0x570 [ 188.912270][ T5657] ____sys_sendmsg+0x5b7/0x8f0 [ 188.917066][ T5657] ? __sys_sendmsg_sock+0x30/0x30 [ 188.922125][ T5657] ? import_iovec+0x6f/0xa0 [ 188.926651][ T5657] ___sys_sendmsg+0x236/0x2e0 [ 188.931344][ T5657] ? __sys_sendmsg+0x2a0/0x2a0 [ 188.936132][ T5657] ? vfs_write+0x8b2/0xd60 [ 188.940575][ T5657] __se_sys_sendmsg+0x1af/0x290 [ 188.945431][ T5657] ? __x64_sys_sendmsg+0x80/0x80 [ 188.950378][ T5657] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 188.956374][ T5657] ? lockdep_hardirqs_on+0x94/0x140 [ 188.961586][ T5657] do_syscall_64+0x4c/0xa0 [ 188.966011][ T5657] ? clear_bhb_loop+0x30/0x80 [ 188.970688][ T5657] ? clear_bhb_loop+0x30/0x80 [ 188.975379][ T5657] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.981279][ T5657] RIP: 0033:0x7f49107ee799 [ 188.985702][ T5657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.005304][ T5657] RSP: 002b:00007f490ea48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.013726][ T5657] RAX: ffffffffffffffda RBX: 00007f4910a67fa0 RCX: 00007f49107ee799 [ 189.021703][ T5657] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 189.029687][ T5657] RBP: 00007f490ea48090 R08: 0000000000000000 R09: 0000000000000000 [ 189.037662][ T5657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.045636][ T5657] R13: 00007f4910a68038 R14: 00007f4910a67fa0 R15: 00007ffcbaf12158 [ 189.053631][ T5657] [ 189.102040][ T5670] dlm: no locking on control device [ 189.268378][ T5679] mkiss: ax0: crc mode is auto. [ 189.350489][ T5682] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 189.599705][ T5679] loop5: detected capacity change from 0 to 32768 [ 189.642934][ T5679] XFS (loop5): Mounting V5 Filesystem [ 189.696093][ T5679] XFS (loop5): Ending clean mount [ 189.763209][ T4173] tipc: Node number set to 2886997007 [ 189.787352][ T5451] XFS (loop5): Unmounting Filesystem [ 189.941578][ T4237] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 190.071102][ T5684] overlayfs: statfs failed on './file0' [ 190.125471][ T5700] 9pnet: Insufficient options for proto=fd [ 190.139762][ T5705] loop3: detected capacity change from 0 to 256 [ 190.170658][ T5705] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 190.451653][ T4237] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.466517][ T4237] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.536375][ T5714] netlink: 72 bytes leftover after parsing attributes in process `syz.3.392'. [ 190.729933][ T5715] ALSA: seq fatal error: cannot create timer (-22) [ 191.581722][ T4237] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.593569][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.627791][ T5720] loop5: detected capacity change from 0 to 256 [ 191.637723][ T4237] usb 3-1: Product: syz [ 191.652915][ T4237] usb 3-1: Manufacturer: syz [ 191.670366][ T4237] usb 3-1: SerialNumber: syz [ 191.675778][ T5720] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.782798][ T5720] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.046555][ T5731] FAULT_INJECTION: forcing a failure. [ 192.046555][ T5731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.059763][ T5731] CPU: 1 PID: 5731 Comm: syz.4.397 Not tainted syzkaller #0 [ 192.067063][ T5731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.077135][ T5731] Call Trace: [ 192.080419][ T5731] [ 192.083361][ T5731] dump_stack_lvl+0x188/0x250 [ 192.088061][ T5731] ? show_regs_print_info+0x20/0x20 [ 192.093284][ T5731] ? load_image+0x400/0x400 [ 192.097807][ T5731] ? __lock_acquire+0x7d10/0x7d10 [ 192.102845][ T5731] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 192.108868][ T5731] should_fail+0x38c/0x4c0 [ 192.113302][ T5731] _copy_from_user+0x2e/0x170 [ 192.117995][ T5731] dma_buf_ioctl+0xe7/0x360 [ 192.122505][ T5731] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 192.128157][ T5731] ? dma_buf_poll+0x9a0/0x9a0 [ 192.132844][ T5731] ? __se_sys_ioctl+0xee/0x170 [ 192.137618][ T5731] ? dma_buf_poll+0x9a0/0x9a0 [ 192.142306][ T5731] __se_sys_ioctl+0xfa/0x170 [ 192.146913][ T5731] do_syscall_64+0x4c/0xa0 [ 192.151339][ T5731] ? clear_bhb_loop+0x30/0x80 [ 192.156037][ T5731] ? clear_bhb_loop+0x30/0x80 [ 192.160730][ T5731] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.166640][ T5731] RIP: 0033:0x7f2d71cd6799 [ 192.171093][ T5731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.190710][ T5731] RSP: 002b:00007f2d6feee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.199145][ T5731] RAX: ffffffffffffffda RBX: 00007f2d71f50180 RCX: 00007f2d71cd6799 [ 192.207127][ T5731] RDX: 0000200000000080 RSI: 0000000040086200 RDI: 0000000000000008 [ 192.215103][ T5731] RBP: 00007f2d6feee090 R08: 0000000000000000 R09: 0000000000000000 [ 192.223081][ T5731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.231062][ T5731] R13: 00007f2d71f50218 R14: 00007f2d71f50180 R15: 00007ffe4ead03d8 [ 192.239063][ T5731] [ 192.299299][ T5731] loop4: detected capacity change from 0 to 512 [ 192.950133][ T5734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.399'. [ 193.164824][ T5731] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 193.207561][ T5743] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.401'. [ 193.249789][ T5731] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.397: iget: bad i_size value: 360287970189639680 [ 193.268444][ T5731] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.397: couldn't read orphan inode 15 (err -117) [ 193.290223][ T5731] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 193.307686][ T5691] loop2: detected capacity change from 0 to 512 [ 193.613887][ T5691] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,. Quota mode: writeback. [ 193.825362][ T5691] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.211257][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.218081][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.268135][ T5691] EXT4-fs (loop2): shut down requested (0) [ 194.389699][ T26] audit: type=1800 audit(1772615825.644:4): pid=5760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.388" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 194.421841][ T4237] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 194.590456][ T5771] ALSA: seq fatal error: cannot create timer (-22) [ 195.328347][ T5775] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 195.352092][ T4237] cdc_ncm 3-1:1.0: bind() failure [ 195.386455][ T4237] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 195.451474][ T4237] cdc_ncm 3-1:1.1: bind() failure [ 195.497317][ T4237] usb 3-1: USB disconnect, device number 4 [ 195.508058][ T5768] loop3: detected capacity change from 0 to 4096 [ 195.550503][ T5773] netlink: 72 bytes leftover after parsing attributes in process `syz.4.405'. [ 195.667926][ T5768] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 195.851550][ T5772] syz.5.404 (5772): attempted to duplicate a private mapping with mremap. This is not supported. [ 196.985017][ T5762] loop5: detected capacity change from 0 to 256 [ 197.153154][ T5789] sp0: Synchronizing with TNC [ 197.209462][ T5792] dlm: no locking on control device [ 197.218151][ T5793] Unsupported ieee802154 address type: 0 [ 197.246830][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 197.341047][ T5792] xt_hashlimit: max too large, truncated to 1048576 [ 197.461530][ T5762] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 197.508191][ T5787] [U] ` [ 198.767255][ T5807] FAULT_INJECTION: forcing a failure. [ 198.767255][ T5807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.780531][ T5807] CPU: 0 PID: 5807 Comm: syz.3.415 Not tainted syzkaller #0 [ 198.787846][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 198.797916][ T5807] Call Trace: [ 198.801201][ T5807] [ 198.804179][ T5807] dump_stack_lvl+0x188/0x250 [ 198.808880][ T5807] ? show_regs_print_info+0x20/0x20 [ 198.814093][ T5807] ? load_image+0x400/0x400 [ 198.818619][ T5807] ? __lock_acquire+0x7d10/0x7d10 [ 198.823690][ T5807] should_fail+0x38c/0x4c0 [ 198.828122][ T5807] _copy_from_user+0x2e/0x170 [ 198.832812][ T5807] bpf_test_init+0x136/0x1b0 [ 198.837423][ T5807] bpf_prog_test_run_skb+0x181/0x1180 [ 198.842819][ T5807] ? __fget_files+0x40f/0x480 [ 198.847517][ T5807] ? cpu_online+0x60/0x60 [ 198.851860][ T5807] bpf_prog_test_run+0x31e/0x390 [ 198.856824][ T5807] __sys_bpf+0x5a5/0x6f0 [ 198.861080][ T5807] ? bpf_link_show_fdinfo+0x380/0x380 [ 198.866481][ T5807] __x64_sys_bpf+0x78/0x90 [ 198.870909][ T5807] do_syscall_64+0x4c/0xa0 [ 198.875421][ T5807] ? clear_bhb_loop+0x30/0x80 [ 198.880109][ T5807] ? clear_bhb_loop+0x30/0x80 [ 198.884806][ T5807] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.890716][ T5807] RIP: 0033:0x7f49107ee799 [ 198.895142][ T5807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.914753][ T5807] RSP: 002b:00007f490ea06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.923181][ T5807] RAX: ffffffffffffffda RBX: 00007f4910a68180 RCX: 00007f49107ee799 [ 198.931162][ T5807] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 198.939144][ T5807] RBP: 00007f490ea06090 R08: 0000000000000000 R09: 0000000000000000 [ 198.947120][ T5807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.955099][ T5807] R13: 00007f4910a68218 R14: 00007f4910a68180 R15: 00007ffcbaf12158 [ 198.963093][ T5807] [ 199.923966][ T5820] ALSA: seq fatal error: cannot create timer (-22) [ 200.586536][ T5823] loop4: detected capacity change from 0 to 2048 [ 200.635347][ T4967] Alternate GPT is invalid, using primary GPT. [ 200.663712][ T4967] loop4: p1 p2 p3 [ 200.691691][ T5824] netlink: 72 bytes leftover after parsing attributes in process `syz.2.419'. [ 200.818590][ T5823] Alternate GPT is invalid, using primary GPT. [ 200.825803][ T5823] loop4: p1 p2 p3 [ 200.909994][ T5835] overlayfs: missing 'lowerdir' [ 201.453996][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 201.464791][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 201.467973][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 201.723866][ T5839] overlayfs: statfs failed on './file0' [ 202.106886][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 202.117282][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 202.227130][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 202.303255][ T5844] loop4: detected capacity change from 0 to 4096 [ 202.405269][ T5844] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 202.433311][ T5851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.429'. [ 203.117307][ T5867] loop2: detected capacity change from 0 to 64 [ 203.543533][ T5880] ALSA: seq fatal error: cannot create timer (-22) [ 203.827660][ T4552] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 204.033574][ T5885] netlink: 72 bytes leftover after parsing attributes in process `syz.5.435'. [ 204.750182][ T5892] overlayfs: missing 'lowerdir' [ 204.762618][ T5890] loop2: detected capacity change from 0 to 1024 [ 204.974973][ T5887] loop0: detected capacity change from 0 to 2048 [ 204.981944][ T4552] usb 5-1: device descriptor read/all, error -71 [ 205.035712][ T4337] Alternate GPT is invalid, using primary GPT. [ 205.056925][ T4337] loop0: p1 p2 p3 [ 205.137764][ T5887] Alternate GPT is invalid, using primary GPT. [ 205.144083][ T5887] loop0: p1 p2 p3 [ 205.331467][ T4556] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.321545][ T4556] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.403858][ T5912] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 206.427662][ T5912] loop5: detected capacity change from 0 to 512 [ 207.150751][ T5912] EXT4-fs (loop5): Test dummy encryption mode enabled [ 207.157928][ T5912] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 207.284672][ T5912] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.444: bad orphan inode 131083 [ 207.296629][ T5912] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 207.580581][ T4556] usb 3-1: config 0 has no interface number 0 [ 207.586910][ T4556] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.597864][ T4556] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.607666][ T4556] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 207.616762][ T4556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.637944][ T4556] usb 3-1: config 0 descriptor?? [ 207.701736][ T5917] dlm: no locking on control device [ 207.711602][ T4556] usb 3-1: can't set config #0, error -71 [ 207.717906][ T4468] hfsplus: b-tree write err: -5, ino 4 [ 207.729400][ T4556] usb 3-1: USB disconnect, device number 5 [ 207.793558][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 207.795582][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 207.827618][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 207.924891][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 207.935736][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 207.954546][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 209.659724][ T5943] ALSA: seq fatal error: cannot create timer (-22) [ 210.221632][ T5948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.453'. [ 210.829277][ T5956] loop3: detected capacity change from 0 to 128 [ 210.958063][ T5956] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 211.081233][ T5956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.165779][ T5949] loop4: detected capacity change from 0 to 8192 [ 211.269388][ T5964] loop2: detected capacity change from 0 to 128 [ 211.430451][ T5949] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 211.481671][ T5964] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 211.531807][ T5949] REISERFS (device loop4): using ordered data mode [ 211.581613][ T5964] hpfs: filesystem error: improperly stopped [ 211.588162][ T5964] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 211.627390][ T5964] hpfs: You really don't want any checks? You are crazy... [ 211.631268][ T5949] reiserfs: using flush barriers [ 211.681770][ T5964] hpfs: Code page index out of array [ 211.691725][ T5964] hpfs: code page support is disabled [ 211.719919][ T5964] hpfs: hpfs_map_4sectors(): unaligned read [ 211.732873][ T5964] hpfs: hpfs_map_4sectors(): unaligned read [ 211.738889][ T5964] hpfs: filesystem error: unable to find root dir [ 211.805247][ T5949] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 211.909855][ T5949] REISERFS (device loop4): checking transaction log (loop4) [ 211.928113][ T5949] REISERFS (device loop4): Using r5 hash to sort names [ 212.038600][ T5949] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 212.080577][ T26] audit: type=1326 audit(1772615843.334:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.5.463" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b5b886799 code=0x0 [ 212.427320][ T26] audit: type=1800 audit(1772615843.684:6): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.452" name="bus" dev="ramfs" ino=38880 res=0 errno=0 [ 213.065587][ T5998] loop4: detected capacity change from 0 to 256 [ 214.383363][ T5998] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011ded, chksum : 0xa21f83b3, utbl_chksum : 0xe619d30d) [ 214.713256][ T6010] ALSA: seq fatal error: cannot create timer (-22) [ 214.876456][ T6013] ALSA: seq fatal error: cannot create timer (-22) [ 215.011846][ T6016] loop4: detected capacity change from 0 to 64 [ 215.566762][ T6019] loop4: detected capacity change from 0 to 32768 [ 215.655154][ T6019] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.473 (6019) [ 215.674195][ T6019] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 215.683943][ T6019] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 215.693639][ T6019] BTRFS info (device loop4): use zstd compression, level 3 [ 215.700862][ T6019] BTRFS info (device loop4): using free space tree [ 215.707434][ T6019] BTRFS info (device loop4): has skinny extents [ 215.891449][ T4556] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.976459][ T6036] ALSA: mixer_oss: invalid OSS volume '' [ 216.009873][ T6036] ALSA: mixer_oss: invalid OSS volume '' [ 216.019701][ T6019] BTRFS info (device loop4): enabling ssd optimizations [ 216.151576][ T4556] usb 3-1: Using ep0 maxpacket: 32 [ 216.381817][ T4556] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.415066][ T4556] usb 3-1: config 1 interface 0 has no altsetting 0 [ 216.639154][ T4556] usb 3-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.40 [ 216.741704][ T3158] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 216.885088][ T6019] syz.4.473 (6019) used greatest stack depth: 20760 bytes left [ 216.911792][ T4556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.920682][ T4556] usb 3-1: Product: ᰁ [ 216.929973][ T4556] usb 3-1: Manufacturer: 톨摤䁰讁㽦ꄇ爁㳕િ虴⌫⻥﹁㛭ꊼ릢痶쬻鷠숵灻ᆶ͇돿ሷⲄ嵯㪹৒ꃵꊅ揈ͱ볼⿓࣭쥂ೠ䲄ｙǰ㵂닋 [ 216.952712][ T4556] usb 3-1: SerialNumber: 䐊 [ 217.001663][ T3158] usb 4-1: Using ep0 maxpacket: 32 [ 217.122760][ T3158] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 217.298166][ T6021] udc-core: couldn't find an available UDC or it's busy [ 217.332230][ T3158] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 217.369937][ T6021] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 217.382568][ T3158] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 217.462600][ T3158] usb 4-1: Product: syz [ 217.508422][ T3158] usb 4-1: Manufacturer: syz [ 217.545692][ T3158] usb 4-1: SerialNumber: syz [ 217.621566][ T3158] usb 4-1: config 0 descriptor?? [ 217.683626][ T6049] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 217.920977][ T26] audit: type=1326 audit(1772615849.174:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.5.481" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b5b886799 code=0x0 [ 218.671524][ T4556] usbhid 3-1:1.0: can't add hid device: -71 [ 218.687768][ T4556] usbhid: probe of 3-1:1.0 failed with error -71 [ 218.883534][ T4556] usb 3-1: USB disconnect, device number 6 [ 218.942575][ T6076] syz.5.484 uses obsolete (PF_INET,SOCK_PACKET) [ 218.944513][ T4173] usb 4-1: USB disconnect, device number 8 [ 219.294970][ T6084] ALSA: mixer_oss: invalid OSS volume '' [ 219.350398][ T6084] ALSA: mixer_oss: invalid OSS volume '' [ 219.528974][ T6095] ALSA: seq fatal error: cannot create timer (-22) [ 220.269912][ T6094] loop2: detected capacity change from 0 to 32768 [ 220.452218][ T6094] XFS (loop2): Mounting V5 Filesystem [ 220.623555][ T6094] XFS (loop2): Starting recovery (logdev: internal) [ 220.717680][ T6094] XFS (loop2): Ending recovery (logdev: internal) [ 220.855716][ T4188] XFS (loop2): Unmounting Filesystem [ 221.089876][ T6115] overlayfs: unrecognized mount option "/" or missing value [ 221.276502][ T6117] loop4: detected capacity change from 0 to 512 [ 221.381047][ T6117] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 221.437623][ T6117] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 221.584408][ T6117] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 221.725715][ T6126] loop5: detected capacity change from 0 to 64 [ 221.815503][ T6117] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 222.554159][ T6117] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 222.618033][ T6117] EXT4-fs (loop4): orphan cleanup on readonly fs [ 222.760057][ T6117] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.494: bg 0: block 34: padding at end of block bitmap is not set [ 222.920747][ T6117] Quota error (device loop4): write_blk: dquota write failed [ 222.928700][ T6117] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 222.939162][ T6117] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.494: Failed to acquire dquot type 1 [ 223.097389][ T6149] loop3: detected capacity change from 0 to 1024 [ 223.202330][ T6117] EXT4-fs (loop4): 1 truncate cleaned up [ 223.219336][ T6117] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,bsdgroups,barrier=0x0000000000000003,noblock_validity,,errors=continue. Quota mode: writeback. [ 223.978749][ T6167] netlink: 72 bytes leftover after parsing attributes in process `syz.4.504'. [ 224.111467][ T4553] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 224.638956][ T4553] usb 1-1: Using ep0 maxpacket: 16 [ 224.730565][ T6163] loop3: detected capacity change from 0 to 2048 [ 224.767762][ T6163] Alternate GPT is invalid, using primary GPT. [ 224.774126][ T6163] loop3: p1 p2 p3 [ 224.903812][ T4553] usb 1-1: config 3 has an invalid interface number: 252 but max is 0 [ 224.914654][ T4553] usb 1-1: config 3 has no interface number 0 [ 224.920769][ T4553] usb 1-1: config 3 interface 252 has no altsetting 0 [ 225.123800][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 225.128568][ T4553] usb 1-1: New USB device found, idVendor=04ca, idProduct=3004, bcdDevice=cc.9f [ 225.156873][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 225.157196][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 225.192975][ T6176] loop5: detected capacity change from 0 to 4096 [ 225.205540][ T4553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.220564][ T6176] EXT4-fs (loop5): Test dummy encryption mode enabled [ 225.242374][ T4553] usb 1-1: Product: syz [ 225.249259][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 225.249736][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 225.270871][ T4553] usb 1-1: Manufacturer: syz [ 225.292800][ T4553] usb 1-1: SerialNumber: syz [ 225.303545][ T4967] udevd[4967]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 225.321009][ T6176] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 225.336057][ T6176] System zones: 0-5 [ 225.358061][ T6176] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 225.860624][ T6154] netlink: 404 bytes leftover after parsing attributes in process `syz.0.502'. [ 226.040719][ T6154] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.502'. [ 226.295132][ T4553] usb 1-1: USB disconnect, device number 4 [ 226.307856][ T4176] udevd[4176]: setting mode of /dev/bus/usb/001/004 to 020664 failed: No such file or directory [ 226.373812][ T4176] udevd[4176]: setting owner of /dev/bus/usb/001/004 to uid=0, gid=0 failed: No such file or directory [ 226.909833][ T6192] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 226.988872][ T6193] loop3: detected capacity change from 0 to 8 [ 227.764569][ T6195] loop2: detected capacity change from 0 to 512 [ 227.945927][ T6190] SQUASHFS error: Failed to read block 0x6e6: -5 [ 227.952708][ T6190] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 227.960017][ T6190] SQUASHFS error: Unable to read directory block [631:26] [ 227.966919][ T6195] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 227.977189][ T6193] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 227.984852][ T6193] SQUASHFS error: Unable to read directory block [631:26] [ 227.992907][ T6193] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 228.000428][ T6193] SQUASHFS error: Unable to read directory block [631:26] [ 228.146671][ T6199] loop0: detected capacity change from 0 to 1024 [ 228.641746][ T6195] EXT4-fs (loop2): Ignoring removed orlov option [ 228.656997][ T6195] EXT4-fs (loop2): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 229.359902][ T6212] loop2: detected capacity change from 0 to 512 [ 229.398443][ T6212] EXT4-fs (loop2): Mount option "journal_ioprio=0x0000000000000004" incompatible with ext2 [ 229.430918][ T6211] loop4: detected capacity change from 0 to 764 [ 229.488900][ T6214] netlink: 72 bytes leftover after parsing attributes in process `syz.0.517'. [ 230.150474][ T6211] Symlink component flag not implemented [ 230.184419][ T6211] Symlink component flag not implemented (15) [ 230.625871][ T6218] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 230.740727][ T6218] netlink: 'syz.5.521': attribute type 3 has an invalid length. [ 230.772174][ T6218] loop5: detected capacity change from 0 to 512 [ 230.860532][ T6218] EXT4-fs (loop5): Test dummy encryption mode enabled [ 230.878891][ T6218] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 230.926952][ T6218] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.521: bad orphan inode 131083 [ 230.943828][ T6218] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 231.878540][ T6249] loop2: detected capacity change from 0 to 1024 [ 232.300209][ T6252] netlink: 72 bytes leftover after parsing attributes in process `syz.0.527'. [ 232.326610][ T6251] loop3: detected capacity change from 0 to 1024 [ 233.093434][ T1153] hfsplus: b-tree write err: -5, ino 4 [ 233.470925][ T6258] netlink: 72 bytes leftover after parsing attributes in process `syz.4.532'. [ 233.742315][ T6234] loop5: detected capacity change from 0 to 40427 [ 233.751882][ T4237] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 233.775348][ T6268] dlm: no locking on control device [ 233.799544][ T6269] ALSA: mixer_oss: invalid OSS volume '' [ 233.811434][ T6234] F2FS-fs (loop5): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 233.831454][ T6269] ALSA: mixer_oss: invalid OSS volume '' [ 233.840075][ T6234] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 233.865577][ T6234] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 233.876764][ T6234] F2FS-fs (loop5): Unrecognized mount option "memory=low" or missing value [ 233.887722][ T6273] xt_hashlimit: max too large, truncated to 1048576 [ 234.251687][ T4237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.287767][ T4237] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.391466][ T4227] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 234.481704][ T4237] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=20.fa [ 234.497379][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.518415][ T4237] usb 1-1: Product: syz [ 234.564867][ T6267] [U] [ 234.611649][ T4237] usb 1-1: Manufacturer: syz [ 234.616345][ T4237] usb 1-1: SerialNumber: syz [ 234.623434][ T4237] usb 1-1: config 0 descriptor?? [ 235.146342][ T4227] usb 4-1: config 4 has an invalid interface number: 42 but max is 0 [ 235.164769][ T4227] usb 4-1: config 4 has no interface number 0 [ 235.184440][ T4227] usb 4-1: config 4 interface 42 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 235.215159][ T4227] usb 4-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=81.51 [ 235.242513][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.304675][ T4227] s2255 4-1:4.42: Could not find bulk-in endpoint [ 235.321493][ T4227] Sensoray 2255 driver load failed: 0xfffffff4 [ 235.336699][ T4227] s2255: probe of 4-1:4.42 failed with error -12 [ 235.409926][ T4237] usb 1-1: USB disconnect, device number 5 [ 235.515817][ T4227] usb 4-1: USB disconnect, device number 9 [ 236.269529][ T6307] loop5: detected capacity change from 0 to 64 [ 237.291650][ T6314] x_tables: duplicate underflow at hook 4 [ 237.463926][ T6314] netlink: 196 bytes leftover after parsing attributes in process `syz.2.548'. [ 237.618759][ T6325] loop0: detected capacity change from 0 to 1024 [ 238.519350][ T6332] loop0: detected capacity change from 0 to 1024 [ 238.575797][ T6332] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 238.591764][ T6332] EXT4-fs error (device loop0): ext4_get_journal_inode:5185: inode #8: comm syz.0.552: inode has both inline data and extents flags [ 238.606512][ T6332] EXT4-fs (loop0): no journal found [ 238.979017][ T6337] loop0: detected capacity change from 0 to 4096 [ 239.217011][ T6327] loop3: detected capacity change from 0 to 32768 [ 239.263222][ T6340] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.360824][ T6327] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 239.377281][ T26] audit: type=1804 audit(1772615870.634:8): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.552" name="/newroot/106/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 239.459390][ T6327] JBD2: Ignoring recovery information on journal [ 239.507612][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.5.554'. [ 239.579719][ T6332] syz.0.552 (6332) used greatest stack depth: 20112 bytes left [ 239.684136][ T6327] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 239.787983][ T6355] netlink: 'syz.0.555': attribute type 10 has an invalid length. [ 239.798138][ T6355] device hsr0 entered promiscuous mode [ 239.832039][ T6329] netlink: 'syz.2.551': attribute type 3 has an invalid length. [ 239.857174][ T6355] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 239.890901][ T6355] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 239.911192][ T6361] x_tables: duplicate underflow at hook 3 [ 239.913931][ T6355] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 239.932489][ T6353] [ 239.934844][ T6353] ====================================================== [ 239.941874][ T6353] WARNING: possible circular locking dependency detected [ 239.948936][ T6353] syzkaller #0 Not tainted [ 239.953360][ T6353] ------------------------------------------------------ [ 239.960383][ T6353] syz.3.550/6353 is trying to acquire lock: [ 239.966246][ T6357] FAULT_INJECTION: forcing a failure. [ 239.966246][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 239.966279][ T6353] ffff88805ee06a20 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 239.983608][ T6355] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 239.990465][ T6353] [ 239.990465][ T6353] but task is already holding lock: [ 239.990473][ T6353] ffff88805ee06ab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x340 [ 240.015112][ T6353] [ 240.015112][ T6353] which lock already depends on the new lock. [ 240.015112][ T6353] [ 240.025505][ T6353] [ 240.025505][ T6353] the existing dependency chain (in reverse order) is: [ 240.034515][ T6353] [ 240.034515][ T6353] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 240.042356][ T6353] down_read+0x44/0x2e0 [ 240.047056][ T6353] ocfs2_init_acl+0x307/0x770 [ 240.052253][ T6353] ocfs2_mknod+0x15cb/0x2510 [ 240.057366][ T6353] ocfs2_create+0x192/0x420 [ 240.062406][ T6353] vfs_create+0x2db/0x460 [ 240.067292][ T6353] do_mknodat+0x49e/0x630 [ 240.072142][ T6353] __x64_sys_mknod+0x8a/0xa0 [ 240.077281][ T6353] do_syscall_64+0x4c/0xa0 [ 240.082225][ T6353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 240.088646][ T6353] [ 240.088646][ T6353] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 240.097150][ T6353] down_read+0x44/0x2e0 [ 240.101829][ T6353] ocfs2_start_trans+0x3a6/0x6f0 [ 240.107296][ T6353] ocfs2_shutdown_local_alloc+0x1f8/0xaa0 [ 240.113628][ T6353] ocfs2_dismount_volume+0x1e1/0x8a0 [ 240.119550][ T6353] generic_shutdown_super+0x130/0x300 [ 240.125451][ T6353] kill_block_super+0x7c/0xe0 [ 240.130682][ T6353] deactivate_locked_super+0x93/0xf0 [ 240.136504][ T6353] cleanup_mnt+0x42d/0x4e0 [ 240.141446][ T6353] task_work_run+0x125/0x1a0 [ 240.146575][ T6353] exit_to_user_mode_loop+0x10f/0x130 [ 240.152475][ T6353] exit_to_user_mode_prepare+0xee/0x180 [ 240.158550][ T6353] syscall_exit_to_user_mode+0x16/0x40 [ 240.164544][ T6353] do_syscall_64+0x58/0xa0 [ 240.169482][ T6353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 240.175905][ T6353] [ 240.175905][ T6353] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 240.183383][ T6353] ocfs2_start_trans+0x2a7/0x6f0 [ 240.188843][ T6353] ocfs2_truncate_file+0x62d/0x1460 [ 240.194635][ T6353] ocfs2_setattr+0x14dd/0x1ad0 [ 240.199926][ T6353] notify_change+0xbcd/0xee0 [ 240.205037][ T6353] do_truncate+0x1ac/0x240 [ 240.209985][ T6353] do_coredump+0x272d/0x2ac0 [ 240.215120][ T6353] get_signal+0x40a/0x12c0 [ 240.220063][ T6353] arch_do_signal_or_restart+0xe7/0x12c0 [ 240.226227][ T6353] exit_to_user_mode_loop+0x9e/0x130 [ 240.232046][ T6353] exit_to_user_mode_prepare+0xee/0x180 [ 240.238120][ T6353] irqentry_exit_to_user_mode+0x5/0x30 [ 240.244101][ T6353] exc_page_fault+0x88/0x100 [ 240.249211][ T6353] asm_exc_page_fault+0x22/0x30 [ 240.254585][ T6353] [ 240.254585][ T6353] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 240.263353][ T6353] __lock_acquire+0x2c42/0x7d10 [ 240.268728][ T6353] lock_acquire+0x19e/0x400 [ 240.273751][ T6353] down_write+0x38/0x60 [ 240.278426][ T6353] ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 240.284929][ T6353] ocfs2_truncate_file+0xe03/0x1460 [ 240.290649][ T6353] ocfs2_setattr+0x14dd/0x1ad0 [ 240.295931][ T6353] notify_change+0xbcd/0xee0 [ 240.301044][ T6353] do_truncate+0x1ac/0x240 [ 240.305984][ T6353] do_coredump+0x272d/0x2ac0 [ 240.311105][ T6353] get_signal+0x40a/0x12c0 [ 240.316049][ T6353] arch_do_signal_or_restart+0xe7/0x12c0 [ 240.322206][ T6353] exit_to_user_mode_loop+0x9e/0x130 [ 240.328025][ T6353] exit_to_user_mode_prepare+0xee/0x180 [ 240.334101][ T6353] irqentry_exit_to_user_mode+0x5/0x30 [ 240.340087][ T6353] exc_page_fault+0x88/0x100 [ 240.345194][ T6353] asm_exc_page_fault+0x22/0x30 [ 240.350582][ T6353] [ 240.350582][ T6353] other info that might help us debug this: [ 240.350582][ T6353] [ 240.360803][ T6353] Chain exists of: [ 240.360803][ T6353] &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 240.360803][ T6353] [ 240.376110][ T6353] Possible unsafe locking scenario: [ 240.376110][ T6353] [ 240.383559][ T6353] CPU0 CPU1 [ 240.388917][ T6353] ---- ---- [ 240.394285][ T6353] lock(&oi->ip_xattr_sem); [ 240.398879][ T6353] lock(&journal->j_trans_barrier); [ 240.406681][ T6353] lock(&oi->ip_xattr_sem); [ 240.413792][ T6353] lock(&ocfs2_file_ip_alloc_sem_key); [ 240.419334][ T6353] [ 240.419334][ T6353] *** DEADLOCK *** [ 240.419334][ T6353] [ 240.427468][ T6353] 2 locks held by syz.3.550/6353: [ 240.432500][ T6353] #0: ffff88805ee06d88 (&sb->s_type->i_mutex_key#37){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 240.442860][ T6353] #1: ffff88805ee06ab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x340 [ 240.453907][ T6353] [ 240.453907][ T6353] stack backtrace: [ 240.459813][ T6353] CPU: 1 PID: 6353 Comm: syz.3.550 Not tainted syzkaller #0 [ 240.467119][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.477174][ T6353] Call Trace: [ 240.480465][ T6353] [ 240.483398][ T6353] dump_stack_lvl+0x188/0x250 [ 240.488082][ T6353] ? load_image+0x400/0x400 [ 240.492594][ T6353] ? show_regs_print_info+0x20/0x20 [ 240.497803][ T6353] ? print_circular_bug+0x12b/0x1a0 [ 240.503014][ T6353] check_noncircular+0x296/0x330 [ 240.507954][ T6353] ? add_chain_block+0x940/0x940 [ 240.512893][ T6353] ? lockdep_lock+0xf1/0x1f0 [ 240.517488][ T6353] ? lockdep_unlock+0x143/0x2e0 [ 240.522346][ T6353] ? mark_lock+0x94/0x320 [ 240.526700][ T6353] ? _find_first_zero_bit+0xce/0xf0 [ 240.531913][ T6353] __lock_acquire+0x2c42/0x7d10 [ 240.536786][ T6353] ? mark_lock+0x94/0x320 [ 240.541118][ T6353] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 240.547134][ T6353] ? verify_lock_unused+0x140/0x140 [ 240.552342][ T6353] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 240.558512][ T6353] ? lockdep_hardirqs_on+0x94/0x140 [ 240.563713][ T6353] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 240.569867][ T6353] lock_acquire+0x19e/0x400 [ 240.574374][ T6353] ? ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 240.580535][ T6353] ? __might_sleep+0xf0/0xf0 [ 240.585121][ T6353] ? read_lock_is_recursive+0x10/0x10 [ 240.590493][ T6353] ? rwsem_write_trylock+0x135/0x1c0 [ 240.595778][ T6353] ? clear_nonspinnable+0x60/0x60 [ 240.600802][ T6353] ? ocfs2_truncate_file+0xd29/0x1460 [ 240.606174][ T6353] down_write+0x38/0x60 [ 240.610328][ T6353] ? ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 240.616480][ T6353] ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 240.622484][ T6353] ? ocfs2_remove_refcount_tree+0xe40/0xe40 [ 240.628384][ T6353] ? up_write+0x1bb/0x420 [ 240.632720][ T6353] ocfs2_truncate_file+0xe03/0x1460 [ 240.637924][ T6353] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 240.643648][ T6353] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 240.649370][ T6353] ? do_raw_spin_unlock+0x11d/0x230 [ 240.654565][ T6353] ? _raw_spin_unlock+0x24/0x40 [ 240.659415][ T6353] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 240.665131][ T6353] ? ocfs2_inode_lock_atime+0x530/0x530 [ 240.670676][ T6353] ? ocfs2_rw_lock+0x134/0x250 [ 240.675442][ T6353] ? dquot_initialize+0x20/0x20 [ 240.680291][ T6353] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 240.686365][ T6353] ? mark_lock+0x94/0x320 [ 240.690690][ T6353] ? jbd2_journal_begin_ordered_truncate+0xb7/0x150 [ 240.697279][ T6353] ocfs2_setattr+0x14dd/0x1ad0 [ 240.702057][ T6353] ? ocfs2_extend_allocation+0x1830/0x1830 [ 240.707879][ T6353] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 240.713683][ T6353] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 240.719923][ T6353] ? ocfs2_xattr_get+0x149/0x260 [ 240.724861][ T6353] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 240.730757][ T6353] ? current_time+0x1ad/0x2c0 [ 240.735434][ T6353] ? atime_needs_update+0x780/0x780 [ 240.740641][ T6353] ? bpf_lsm_inode_setattr+0x5/0x10 [ 240.745836][ T6353] ? try_break_deleg+0x79/0x120 [ 240.750688][ T6353] ? ocfs2_extend_allocation+0x1830/0x1830 [ 240.756498][ T6353] notify_change+0xbcd/0xee0 [ 240.761102][ T6353] do_truncate+0x1ac/0x240 [ 240.765527][ T6353] ? rcu_lock_release+0x20/0x20 [ 240.770402][ T6353] ? filp_open+0x195/0x1e0 [ 240.774843][ T6353] ? getname_kernel+0x142/0x2e0 [ 240.779708][ T6353] ? memcpy+0x3c/0x60 [ 240.783690][ T6353] ? i_uid_into_mnt+0x90/0x120 [ 240.788455][ T6353] do_coredump+0x272d/0x2ac0 [ 240.793049][ T6353] ? nfs_stat_to_errno+0x190/0x190 [ 240.798171][ T6353] ? lock_chain_count+0x20/0x20 [ 240.803022][ T6353] ? _raw_spin_unlock_irq+0x1f/0x40 [ 240.808225][ T6353] ? lockdep_hardirqs_on+0x94/0x140 [ 240.813431][ T6353] get_signal+0x40a/0x12c0 [ 240.817854][ T6353] arch_do_signal_or_restart+0xe7/0x12c0 [ 240.823493][ T6353] ? force_sig_info_to_task+0x320/0x3d0 [ 240.829055][ T6353] ? get_sigframe_size+0x10/0x10 [ 240.834018][ T6353] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 240.840024][ T6353] ? exit_to_user_mode_loop+0x3b/0x130 [ 240.845488][ T6353] exit_to_user_mode_loop+0x9e/0x130 [ 240.850770][ T6353] exit_to_user_mode_prepare+0xee/0x180 [ 240.856317][ T6353] irqentry_exit_to_user_mode+0x5/0x30 [ 240.861780][ T6353] exc_page_fault+0x88/0x100 [ 240.866378][ T6353] asm_exc_page_fault+0x22/0x30 [ 240.871226][ T6353] RIP: 0033:0x7f49107ee7a1 [ 240.875691][ T6353] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 240.895296][ T6353] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 240.901366][ T6353] RAX: 0000000000000000 RBX: 00007f4910a67fa0 RCX: 00007f49107ee799 [ 240.909340][ T6353] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 240.917310][ T6353] RBP: 00007f4910884bd9 R08: 0000000000000000 R09: 0000000000000000 [ 240.925287][ T6353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 240.933270][ T6353] R13: 00007f4910a68038 R14: 00007f4910a67fa0 R15: 00007ffcbaf12158 [ 240.941281][ T6353] [ 240.953232][ T6357] CPU: 1 PID: 6357 Comm: syz.5.557 Not tainted syzkaller #0 [ 240.960625][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.970691][ T6357] Call Trace: [ 240.973989][ T6357] [ 240.976935][ T6357] dump_stack_lvl+0x188/0x250 [ 240.981639][ T6357] ? show_regs_print_info+0x20/0x20 [ 240.986868][ T6357] ? load_image+0x400/0x400 [ 240.991388][ T6357] ? lock_release+0xb5/0x8a0 [ 240.996011][ T6357] ? __might_sleep+0xf0/0xf0 [ 241.000616][ T6357] ? __lock_acquire+0x7d10/0x7d10 [ 241.005655][ T6357] ? rcu_is_watching+0x11/0xa0 [ 241.010431][ T6357] should_fail+0x38c/0x4c0 [ 241.014864][ T6357] should_failslab+0x5/0x20 [ 241.019377][ T6357] slab_pre_alloc_hook+0x51/0xc0 [ 241.024326][ T6357] __kmalloc+0x6b/0x330 [ 241.028491][ T6357] ? sock_kmalloc+0x92/0xf0 [ 241.033011][ T6357] sock_kmalloc+0x92/0xf0 [ 241.037367][ T6357] af_alg_alloc_areq+0x95/0x1d0 [ 241.042237][ T6357] skcipher_recvmsg+0x321/0xd60 [ 241.047113][ T6357] ? skcipher_sendmsg+0xe0/0xe0 [ 241.051977][ T6357] ? lock_release+0xb5/0x8a0 [ 241.056592][ T6357] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 241.061897][ T6357] ? security_socket_recvmsg+0x85/0xb0 [ 241.067379][ T6357] ? skcipher_sendmsg+0xe0/0xe0 [ 241.072243][ T6357] ____sys_recvmsg+0x2cd/0x5e0 [ 241.077034][ T6357] ? __might_fault+0xb3/0x110 [ 241.081743][ T6357] ? __sys_recvmsg_sock+0x40/0x40 [ 241.086797][ T6357] ? import_iovec+0x6f/0xa0 [ 241.091330][ T6357] ___sys_recvmsg+0x21a/0x5c0 [ 241.096045][ T6357] ? __sys_recvmsg+0x280/0x280 [ 241.100841][ T6357] ? __lock_acquire+0x7d10/0x7d10 [ 241.105891][ T6357] __x64_sys_recvmsg+0x1f9/0x2c0 [ 241.110868][ T6357] ? ___sys_recvmsg+0x5c0/0x5c0 [ 241.115737][ T6357] ? rcu_is_watching+0x11/0xa0 [ 241.120515][ T6357] do_syscall_64+0x4c/0xa0 [ 241.124946][ T6357] ? clear_bhb_loop+0x30/0x80 [ 241.129633][ T6357] ? clear_bhb_loop+0x30/0x80 [ 241.134347][ T6357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.140340][ T6357] RIP: 0033:0x7f3b5b886799 [ 241.144771][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.164383][ T6357] RSP: 002b:00007f3b59ae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 241.172811][ T6357] RAX: ffffffffffffffda RBX: 00007f3b5bafffa0 RCX: 00007f3b5b886799 [ 241.180793][ T6357] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 241.188779][ T6357] RBP: 00007f3b59ae0090 R08: 0000000000000000 R09: 0000000000000000 [ 241.196768][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.204765][ T6357] R13: 00007f3b5bb00038 R14: 00007f3b5bafffa0 R15: 00007ffd74affda8 [ 241.212759][ T6357] [ 241.887453][ T4270] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.935400][ T4270] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.985188][ T4270] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.034751][ T4270] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.477879][ T6353] ocfs2: Unmounting device (7,3) on (node local) [ 242.621044][ T6353] syz.3.550 (6353) used greatest stack depth: 17328 bytes left [ 242.883456][ T4270] device hsr_slave_0 left promiscuous mode [ 242.900412][ T4270] device hsr_slave_1 left promiscuous mode [ 242.908239][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.918024][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.925802][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.935831][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.943595][ T4270] device bridge_slave_1 left promiscuous mode [ 242.949765][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.961123][ T4270] device bridge_slave_0 left promiscuous mode [ 242.968720][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.981831][ T4270] device veth1_macvtap left promiscuous mode [ 242.988657][ T4270] device veth0_macvtap left promiscuous mode [ 242.997425][ T4270] device veth1_vlan left promiscuous mode [ 243.003366][ T4270] device veth0_vlan left promiscuous mode [ 243.144681][ T4270] team0 (unregistering): Port device team_slave_1 removed [ 243.158876][ T4270] team0 (unregistering): Port device team_slave_0 removed [ 243.175035][ T4270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.190911][ T4270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.247306][ T4270] bond0 (unregistering): Released all slaves