last executing test programs: 3m57.615329502s ago: executing program 0 (id=24): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000b200)=[{{&(0x7f0000000040)={0xa, 0xfa04, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000001880)="96", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)='8', 0x1}], 0x1}}], 0x2, 0x20004051) 3m56.006330391s ago: executing program 0 (id=27): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x3}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}}) r3 = openat$sndseq(0xffffff9c, 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x1c, 0x6042c, 0x1, 0x1, 0x6, 0x8, 0x9, 0x0, 0x3, 0x4}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0x8, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x1000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0x4, 0x8000000, 0xd, 0x7, 0x10, 0x81, 0x4, 0x13, 0x4, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x7b, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x4, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x8, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xeeee0000, 0xd, 0x4, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xb, 0x8}, {0x100000, 0x5}, {0xffff1000, 0x9}, 0xa0000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x8]}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$vnet(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 3m51.220899133s ago: executing program 0 (id=34): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@request_death], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) 3m50.900401192s ago: executing program 0 (id=35): mremap(&(0x7f00001f6000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000717000/0x2000)=nil) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)='_', 0x1}], 0x1}}], 0x1, 0x4008000) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e74800", 0xba, 0x0, 0x0, 0x0) 3m50.654211197s ago: executing program 0 (id=36): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000b200)=[{{&(0x7f0000000040)={0xa, 0xfa04, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000001880)="96", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)}}], 0x2, 0x20004051) 3m45.882575863s ago: executing program 0 (id=40): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x10, 0x80}}], 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m30.66638195s ago: executing program 32 (id=40): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x10, 0x80}}], 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.466740966s ago: executing program 5 (id=744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[], 0x6c}}, 0x4) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x4000000, &(0x7f0000000500)={[{@swalloc}]}, 0x1, 0x97b0, &(0x7f00000005c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20001) syz_emit_ethernet(0x6e, &(0x7f0000000540)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd25, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xf}, {0x1, 0xe}, {0x7, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffd3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104"], 0x50}}, 0x4000084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) write$sndseq(r3, &(0x7f00000003c0)=[{0x0, 0xf8, 0x1, 0x6, @tick=0x6, {0x4, 0x7}, {0x8, 0x81}, @ext={0xaa, &(0x7f00000000c0)="7dd0f97018c7f15f84561c3a0cf04e7ad86977575f55dcedb2b19a04edc3fc5dd6dadd610b111d59f1db84acf22bb8cd62c100c7c09a9774f0c4c4d375d082768e2180ed12e3f9fd37a272bb38efa77ee1819d93a10002d7cea9f030cd0c43bb036e74d33f4baf6e8146496644a887108c000c81806145fe24ac15f20c10905f8ebb72b58b3efbdcf98a1266e0bff4e1454a956394dcb2ad0039cdb824b73725cba76c8a78be4ad5e989"}}, {0x2d, 0x7, 0x10, 0x4, @time={0x0, 0x7f}, {0x3e, 0x11}, {0x8, 0xdf}, @ext={0xa3, &(0x7f0000000180)="40ade1d6b3ada7420a533132c07b8a8904a59c8f452718f9874a634ac3929bf3a1aba8a23076c37711e395c97e3ab040f1d2029ffc9e48643893606a123013b8eb6c224b22b81cac6dfddc17902fbb6f6cbbf45fa9ffd843f81ac474bd1f70e673aaaed64396ec36a367d823522bde3949d18e39d0feb3305bcb037f85fd7ffacd754c2f17ec8dd51c0f076f88db5179d4e0fbc332d22b7789523efc3dc72489276506"}}, {0x8, 0x10, 0x40, 0x6f, @tick=0x1, {0x6, 0x3}, {0xfe, 0x4}, @raw32={[0x9, 0x65, 0x8]}}, {0x0, 0x76, 0x8, 0x80, @time={0x9, 0x5}, {0x6, 0x9a}, {0x3, 0x3}, @connect={{0x6}, {0x3, 0x4}}}, {0x0, 0x0, 0xe8, 0x5, @time={0x6, 0x8}, {0xc, 0x6}, {0x81, 0x1}, @control={0x3, 0x0, 0x6}}, {0x4, 0x8, 0x5, 0xb, @time={0xfffffffe, 0x2}, {0x8, 0x7}, {0x7, 0x3}, @note={0xb2, 0x10, 0x31, 0xf1, 0x6}}], 0xa8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000480)=r2, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) r6 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) ioctl$VIDIOC_G_FMT(r6, 0xc0d05605, &(0x7f0000000380)={0xd, @vbi={0x8, 0x4, 0xa7, 0x32315258, [0x8000fb, 0x3], [0x7, 0x7c]}}) r7 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x8040587f, &(0x7f0000000040)={0x8a0, 0x800800000000000c, 0x408a}) 4.220933773s ago: executing program 1 (id=751): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0xc}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/wireless\x00') read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0x2020) pread64(r1, &(0x7f0000004500)=""/122, 0x7a, 0x3) read$FUSE(r1, &(0x7f0000004580)={0x2020}, 0x2020) r2 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8970, &(0x7f0000000180)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) syz_clone3(&(0x7f0000000080)={0x80, &(0x7f0000000000), 0x0, 0x0, {0x403d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 3.926440102s ago: executing program 4 (id=753): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[], 0xf030e35c1ffd4cc}, 0x1, 0x0, 0x0, 0x800}, 0x4804) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0xb4, 0x25, 0x301, 0x670bd24, 0x25dfdbfb, {0x15}, [@typed={0xa0, 0x14e, 0x0, 0x0, @str='\x00VE\x19\xeb\x9f\xe7;\xb4xjH\xdc\x05\x0e\x89V\x81\x9f4\xbb\xb2\xf6\x11G\x96(\xf8^r\x9a\xb2\xb0\t\xd0Z\xa5p\xf37\xd5\xa3G\x16\x00A\xbe\xd8\xb8\x189\x95\xd5,X\xc4|N\xe4-\xa3&\xabG\xa3\x11*\xa1\xcc\x1b\xf2Pq;\"\x06\xd7\x1a\x1f\x15\x1b\xb3KI\x9c[n\xf7\x0e\xe7\xa6\x16Cj\x1b\xf1]\xdd\xe60f\x96\x14\xedbeTu\xa7T\xe8\x03\xbf\x88\x9e\xf6\xd3\xde\xd95-\xab\xc4q\xf9~\xe8s\x9d\xaal~XLA\x98\x00\xfe\xfa\xcfA\xbbw\xb3\x02\xccT\b\xff\x90\x04\xfb\xef\x196\xcb'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) close_range(r0, 0xffffffffffffffff, 0x0) 3.849066949s ago: executing program 1 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0x5, 0x0, 0x3, 0x0, 0x8, 0xe9, 0x1, 0x7, 0x2, 0x1, 0x93, 0x84, 0x0, 0x7, 0x8, 0xec, 0xe2, 0x7, 0xe, '\x00', 0x9, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.788677431s ago: executing program 2 (id=755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0x5, 0x0, 0x3, 0x0, 0x8, 0xe9, 0x1, 0x7, 0x2, 0x1, 0x93, 0x84, 0x0, 0x7, 0x8, 0xec, 0xe2, 0x7, 0xe, '\x00', 0x9, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 3.614806308s ago: executing program 4 (id=756): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) (fail_nth: 1) 3.407525805s ago: executing program 5 (id=757): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) 3.124259604s ago: executing program 4 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002340), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002380)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40080) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x8, 0x0) (async) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x34}, 0x2}, 0x1c) 2.93242288s ago: executing program 1 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="14000000040000000800000022"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x73, &(0x7f00000000c0)}, 0x8) dup3(r0, r0, 0x80000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000080)='0', 0x1}], 0x1, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 2.920596492s ago: executing program 4 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x54, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x54}}, 0x20004800) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) acct(0x0) r7 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000200)=0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0), 0x106, 0x6}}, 0x20) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000804}], 0x1, 0x2ede8ec33678cf20) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r12, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r7, 0x623, 0x4c1, 0x4, 0x0, 0x0) 2.865336318s ago: executing program 2 (id=762): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 2.864678785s ago: executing program 3 (id=763): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x10, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001e580)=""/102378, 0x18fea) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x64048080) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f00000001c0)={0x3}) pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) 2.745499063s ago: executing program 1 (id=764): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x6c, 0x0, 0x2, 0x9}]}}}}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000000)=0x400) 1.969252292s ago: executing program 3 (id=765): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x60, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x60}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff080002"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.950792255s ago: executing program 5 (id=766): syz_mount_image$nilfs2(&(0x7f0000003380), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f00000002c0)={[{}, {@discard}, {@snapshot={'cp', 0x3d, 0x3}}, {@snapshot={'cp', 0x3d, 0x3}}, {@nobarrier}, {@errors_continue}, {@nodiscard}, {@order_relaxed}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}], 0x2c}, 0x3, 0xed3, &(0x7f0000002400)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS88FhYRGGIoaeiDiT+gBUQlRJMSp4kDFhVIpRWolUKsK9dT21Kq3nlBViUpVKgX1UtTEVZz31rsvnu56bM96d38/6du3b97sfN94I2dmPPs2AGOrsfZ49OhiEcLbH7/18ItPFL+6suyO9hoH1h6L2GuFEJod/SLb3qdxwaWLL5zYqC3C4bXH1A+PXGi/djaEcC4cCJ+EVvhgeeXz99956OCHr87c9MbZp17aod1vy/cDAABG0fk/rvz1nn/84b6FL87vPx6m28vT8Xkr9mfjcf+heKCcjpcbobtfdESnqWy9iRiNbL2JbL3JLM9kSb5mtp1myXpTPfJNdCzbaD8BAABgGKXz2lYoGktd/UZjaenqef8Vn85PFUvPnF45dWZAhQIAAACV/fvltZtuhRBCCCGEELs0/rs6+BqEEEMVxUbLV+cHfQUCAAAAGDf5fGHXOLe9M3W1t9bqL/+FBxsbvx62Qd3//uUfrvzvveI3DgAA1Y3q0WTar3QcneYxyOcRnMhet9nj/0a2nclN1lk2r+CwzDdYVmf+c92tyurf7Ps4KGX15/Nh7lZl9efzdO5WZfVP11xHVWX1z9RcR1Vl9e+puY6qyurfW3MdVZXVP1tzHVWV1T9Xcx1VldV/Xc11VFVW/76a66iqrP5hua22rP5WzXVUVVb/Qs11VFVW//U111FVWf031FxHVWX131hzHYNye2zTz2F/Nt55/pyf0w3LOR4AAACMu/+Y/08IIYQQQgghhBj5eHnQFyAAAACAgUufC0ifel+N0vhEj/HJHuPNHuNTPcane4wDAAAAIfz6tVO3vFmsf85/q/PhpXmj0vxLm53HKJ+PcLP5tzrv2VbzD8u8ZQAAAIyX4lufXL734XefW/ji/P7jHWe/l+P5bpoHdDJeG/go9tN9AXNZv0jn0Me78zRK1suvD1xXtr1Ht7ijAAAAMMbS+XsrFI2ljvPuVmg0lpbWz8cXQ7M4dXrl5KHYT9/P8vv55vSV5Q/UXDcAAADQv/Xz/Y3P/9P3+C6GqWLpmdMrp85c7c+1lzcbndcF5teXF53XBVrZ8sMly4/Efvr+zu/O71lbvnTieytPbPfOAwAAwJg48/zZpx5fWTn5fU888cST9pNB/2YCAAC222efvdX8wZG53179/P/6/Hfp8/8HYr8V5/b7U1wh3SeQPgdwzef1H+vOM1+23rPd67Wy9SZiTGd1z3RsJ3TMN5het1CWr9W9namSfLNZvrksXz5PwWS2fsq3L1uez0+Y1pvPlufzME5mOYos/50BAAAAyi0/9/Szy2eeP3v/6acff/LkkyefOXL42DePHTv0wDceWF67r3+58+5+AAAAYBit3/Q76EoAAAAAAAAAAAAAAAAAAABgfNXxdWKD3kcAAAAYd/96OYRwTghREle/AnPwdQghhBBiBOLvO51jYvD7KITYvbG6mn/TPAAAAMDOunTxhROd7TXOFduar7211tXmcsyb2rn7/7JwJdJqFx7svl6yd1urYdzV/e9f/uHK/94r25t/Jj3p+/dfo3sDx6vlvXv5Z4ud+W+d7DN/vv+PVst/MMt/d+gv/+q7Wf7HquW/J8u/t8/81+z/s9Xy3xvzL8b+wbv6zd/9/k/HNu3Hnj7zfz3b/ydCv/mz/W/1mTBzX8wPAOOoMegCdkg6SkjH0bOxn/Y3Hm6G/O6HzR7/N7LtTG658u7tpuOgm2M/HS/NZXmTzdY/m23vuop15oblrpKy+rfrfdxpZfU3a66jqrL6p2quo6qy+qdrrqOqsvpnaq6jqrL6+z0PHbSy+oflunJZ/bM111FVWf1zNddRVVn9m/1/fFDK6t9Xcx1VldU/X3MdVZXVX/GyWu3K6l+ouY6qyuq/vuY6qiqr/4aa66iqrP4ba65jUG6Lbdn5cDr/nI9jqd/K+tMb/CxH9doCAAAADJt/mv9PCCGEEEIIIYS4Et/5zeBr2LFYXR30FQgGaWc/zQzAbuX3/3jz/o837/948/7z/6R7+Iusn0z0GJ/sMd7sMT6Vjef/Xqd7jN+QbXc1SuM39hj/Uo/xfT3Gb+4xvthj/JYe47f2GL+txzgAAADj4abYOj8EAACA0fXizz96/Zd3P3Zx4Yvz+4+HqWvmnT8U+9Pxb+uvxX4+733SjH/z/2Hs/zS2v4vt37L13X8CAAAAOy99T4y//wMAAMDoSt9T6vwfAAAARtdCbJ3/AwAAwOi6PrbO/wEAAGCEFTMbL45tui5wZ2z7ndcPANj9vhzb22O7P7Z3xPYrsU3HAXfF9qs11QcAbJ+ffPtHx94s1uf7P5KNX4rLU3uNc1evFBSN7pn898R2b2y/1mc9+fcB9Js/2ddnnp3KP7/F/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6GisPR49uliE8PbHbz3846nX/3xl2R3tNQ6sPRax1wohNNuvS6Pr/V/EFS9dfOFEZ3s5tkU4HIpQtJeHRy60M82GEM6FA+GT0AofLK98/v47Dx388NWZm944+9RLO/gj6No/AAAAGEX/CwAA//96ziHH") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = msgget$private(0x0, 0x790) msgrcv(r1, 0x0, 0x0, 0x2, 0x3000) msgrcv(r1, 0x0, 0x0, 0x0, 0x1000) msgctl$IPC_RMID(r1, 0x0) fdatasync(r0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newtaction={0x84, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x70, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x34, 0x11, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x84}}, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x91c5, @mcast1, 0xffffffff}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0xbffffffe}}, {{0xa, 0x4e21, 0x7d1b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100b}}}, 0x108) r4 = syz_clone3(&(0x7f0000000200)={0x10900, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x17}, &(0x7f00000000c0)=""/197, 0xc5, &(0x7f0000000f40)=""/4096, &(0x7f00000001c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x8, {r0}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x3, &(0x7f0000000280)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)={'a', ' *:* ', 'r\x00'}, 0x8) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000280)=0x5d0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000040)=0x8) gettid() 1.727027784s ago: executing program 3 (id=767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 1.69863864s ago: executing program 4 (id=768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000014c0)=@svm={0x0, 0x1, 0x1080, {0x4}, {"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"}}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0x4, 0x1000, 0x4, 0x30000], 0x40, 0x0, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.361985491s ago: executing program 1 (id=769): r0 = timerfd_create(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)="af2178d12dd14c1ac862abd8b7fcf7ae604f7d0a", 0x14}], 0x1, 0x2) (async) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)="af2178d12dd14c1ac862abd8b7fcf7ae604f7d0a", 0x14}], 0x1, 0x2) r4 = socket$inet(0x2, 0x3, 0x7f) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00000df000/0x400000)=nil) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5a3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$tipc(0x1e, 0x5, 0x0) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x80800) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) (async) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x20, @remote}, 0x10) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) (async) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) r8 = eventfd2(0x3, 0x1) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f00000001c0)="888a16c95f9ab42f", 0x8, 0x8, 0x0, 0x3, r8}]) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000100)=0x8001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x6, 0x10}, &(0x7f0000000180)=0xc) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x6, 0x10}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r10, 0x0, 0x7, 0x5fc9}, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000492bee9046", @ANYRES16=r11, @ANYBLOB="21020000000000000000040000000800020005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 1.289454694s ago: executing program 3 (id=770): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3010080, &(0x7f0000000180)=ANY=[], 0xfd, 0x1504, &(0x7f00000018c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x143142, 0x142) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 1.069687933s ago: executing program 5 (id=771): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x2, 0xfc, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0x8, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0xb, 0x76, 0x0, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0x3000, [0x80000008, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0xc, 0xb, 0x5, 0x0, 0x8, 0x4, 0x13, 0x7, 0xe3, 0x8, 0x1, 0x8, 0x0, 0x10001, 0x6, 0x88, 0x5, 0x1, 0xb, '\x00', 0xf9, 0x68c}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 934.578555ms ago: executing program 2 (id=772): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0x20fca0, 0x0, 0x2000003, 0x22f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc4) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) read(r2, &(0x7f0000001400)=""/4096, 0x1000) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000001bc0), 0x2) 743.833786ms ago: executing program 3 (id=773): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0x20fca0, 0x0, 0x2000003, 0x22f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc4) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) read(r2, &(0x7f0000001400)=""/4096, 0x1000) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000001bc0), 0x2) 550.717015ms ago: executing program 4 (id=774): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)={0x12}) kexec_load(0xa254, 0x2, &(0x7f0000000000)=[{&(0x7f0000000580)="e4a9f83f073a3612f2802ffa8537bf6623b3b1ffd1a83acee1d9633bc30edc195af8349fac64eaa7eaeb553fb2444badc82768cc90cb9da782a3a7780a4250f789cf07f5e42572c532cdae761e98f6810f6b1e51b754bb0d9103bd9733555dceebc501ea2a73e9cba37cbb8b5ddfed3393c4e80ef390bfe6a4b219d19c9adaf61c6bbb5564f01297c5e5e86f2727a36342915f1694c154f33f306918539a798136a7adbf9908bd69386e6e8536bd20d8cbed7a98c0", 0xb5, 0x8, 0x7}, {&(0x7f0000000640)="ff39ab6845a4d2dcf6a122f49dc75b0e4bdcd5f04af15b89d98b5a9f5961924fbf40f7a9c27ef092dd2cda469db94badda59353b685e492e348790a0f284a1c66f1a93381612b526a74f3559e3a828708fb4907dda715252357b2888608c672776a8609a219aa1906ec87dfe7d864cf64e0bded17ab5d51dd0fdb2436bb672bf7b46da7ecaaa117f2194493e85b76038e0641ee37a9ea042366270098507c89d88e5fdafaa12f51bd6f6aef72b7c", 0xae, 0xfffffffffffff61c, 0x401}], 0x140000) write(r1, &(0x7f0000000340), 0x11000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@delqdisc={0x42c, 0x25, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0xfff3, 0xb}, {0xfff3, 0xb}, {0xfff1, 0x8}}, [@TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x2, 0x6, 0x8000, 0x1, 0x1, 0x3, 0x6}}, {0x10, 0x2, [0x4, 0x5, 0x80, 0x8, 0x401, 0x6]}}, {{0x1c, 0x1, {0x6, 0x9, 0x5, 0x8, 0x2, 0x6, 0x9, 0x7}}, {0x12, 0x2, [0x400, 0x5a, 0x66ec, 0x81, 0x1000, 0xc, 0x1]}}, {{0x1c, 0x1, {0xff, 0x0, 0x6, 0x1f, 0x1, 0x9, 0xe, 0x8}}, {0x14, 0x2, [0x7, 0x5, 0x7, 0x3f2, 0x1, 0x1000, 0xc, 0x7]}}, {{0x1c, 0x1, {0xb, 0x5, 0xff, 0x7f, 0x1, 0x200, 0x6, 0x9}}, {0x16, 0x2, [0x1, 0x7, 0x8, 0xe, 0x3, 0x2, 0xa, 0xfe01, 0xf92c]}}, {{0x1c, 0x1, {0x2, 0x27, 0x5, 0x0, 0x1, 0x3, 0x9, 0x8}}, {0x14, 0x2, [0xfffb, 0x401, 0x7, 0x4, 0x9, 0x10, 0x8001, 0x200]}}, {{0x1c, 0x1, {0xff, 0xc, 0x4a, 0x7f1, 0x0, 0xdab8, 0x4, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x4, 0x8, 0x3, 0x1, 0xa71e, 0x4, 0x3}}, {0xa, 0x2, [0xc, 0x4, 0x4]}}, {{0x1c, 0x1, {0x2, 0x5, 0x3, 0x5, 0x0, 0x18, 0x1, 0x5}}, {0xe, 0x2, [0x0, 0xfffe, 0x2, 0x7, 0x9]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x95, 0x1, 0x4, 0x2, 0x0, 0x2e5, 0x1}}, {0x6, 0x2, [0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}, @TCA_STAB={0x114, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xf3, 0x8, 0xfff, 0x1, 0x0, 0x101, 0x2}}, {0x8, 0x2, [0x9, 0x0]}}, {{0x1c, 0x1, {0x3a, 0xf5, 0x4, 0x3, 0x1, 0x3, 0x20000, 0x2}}, {0x8, 0x2, [0x9, 0x5]}}, {{0x1c, 0x1, {0x7, 0xed, 0x0, 0x9, 0x1, 0x3, 0x9, 0x6}}, {0x10, 0x2, [0xde7a, 0x7ff, 0x8, 0x7, 0xa771, 0x7]}}, {{0x1c, 0x1, {0x6, 0x4, 0x6, 0x10001, 0x0, 0x3, 0x40, 0x8}}, {0x14, 0x2, [0x5, 0x40, 0x3, 0x5, 0xc, 0x8b0, 0x3, 0xc0]}}, {{0x1c, 0x1, {0x5, 0x2, 0x8, 0x22, 0x1, 0x0, 0x800, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0xf, 0x81, 0x7f, 0x10000, 0x2, 0x80, 0x10001, 0x2}}, {0x8, 0x2, [0x200, 0x4]}}, {{0x1c, 0x1, {0x3a, 0x5, 0xff00, 0x6, 0x2, 0x7, 0x8001, 0x2}}, {0x8, 0x2, [0x1, 0x401]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x87c3}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x2, 0xfffffeff, 0x2, 0x4, 0xf, 0x5}}, {0xe, 0x2, [0x6, 0x400, 0x2, 0x5, 0x1ecc]}}, {{0x1c, 0x1, {0x2, 0x0, 0x1, 0x0, 0x0, 0x7, 0xa, 0x7}}, {0x12, 0x2, [0xf, 0x9, 0x206, 0x8001, 0x7ff, 0x7, 0xd]}}, {{0x1c, 0x1, {0x7, 0x9, 0x1400, 0xfffffff7, 0x0, 0x1ff, 0x2, 0x3}}, {0xa, 0x2, [0x4, 0x4, 0x8]}}, {{0x1c, 0x1, {0xce, 0xd, 0x2, 0x2, 0x1, 0x4, 0x10, 0x7}}, {0x12, 0x2, [0x200, 0x12b6, 0x0, 0x3, 0x7, 0x40, 0x2]}}, {{0x1c, 0x1, {0x7f, 0x40, 0x1000, 0x3, 0x0, 0x7, 0x97f, 0xa}}, {0x18, 0x2, [0x8, 0x2, 0x4222, 0x9, 0x33, 0x8, 0x6, 0x7, 0x8, 0x6]}}, {{0x1c, 0x1, {0x7, 0x0, 0x8001, 0x1, 0x0, 0x3, 0x0, 0xa}}, {0x18, 0x2, [0x401, 0x4, 0x6, 0xd, 0x101, 0x2, 0x3, 0x92, 0x4, 0x8001]}}, {{0x1c, 0x1, {0x2, 0x6, 0x11a, 0x5, 0x0, 0xfffeffff, 0x4, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x42c}}, 0x84) syz_usb_connect(0x0, 0x3c, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002c9cb8e102d1510030a3b0102030109022a0001010400030904ce00010e0100040724"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) pipe(&(0x7f0000000200)) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, 0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)={0x12}) (async) kexec_load(0xa254, 0x2, &(0x7f0000000000)=[{&(0x7f0000000580)="e4a9f83f073a3612f2802ffa8537bf6623b3b1ffd1a83acee1d9633bc30edc195af8349fac64eaa7eaeb553fb2444badc82768cc90cb9da782a3a7780a4250f789cf07f5e42572c532cdae761e98f6810f6b1e51b754bb0d9103bd9733555dceebc501ea2a73e9cba37cbb8b5ddfed3393c4e80ef390bfe6a4b219d19c9adaf61c6bbb5564f01297c5e5e86f2727a36342915f1694c154f33f306918539a798136a7adbf9908bd69386e6e8536bd20d8cbed7a98c0", 0xb5, 0x8, 0x7}, {&(0x7f0000000640)="ff39ab6845a4d2dcf6a122f49dc75b0e4bdcd5f04af15b89d98b5a9f5961924fbf40f7a9c27ef092dd2cda469db94badda59353b685e492e348790a0f284a1c66f1a93381612b526a74f3559e3a828708fb4907dda715252357b2888608c672776a8609a219aa1906ec87dfe7d864cf64e0bded17ab5d51dd0fdb2436bb672bf7b46da7ecaaa117f2194493e85b76038e0641ee37a9ea042366270098507c89d88e5fdafaa12f51bd6f6aef72b7c", 0xae, 0xfffffffffffff61c, 0x401}], 0x140000) (async) write(r1, &(0x7f0000000340), 0x11000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@delqdisc={0x42c, 0x25, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0xfff3, 0xb}, {0xfff3, 0xb}, {0xfff1, 0x8}}, [@TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x2, 0x6, 0x8000, 0x1, 0x1, 0x3, 0x6}}, {0x10, 0x2, [0x4, 0x5, 0x80, 0x8, 0x401, 0x6]}}, {{0x1c, 0x1, {0x6, 0x9, 0x5, 0x8, 0x2, 0x6, 0x9, 0x7}}, {0x12, 0x2, [0x400, 0x5a, 0x66ec, 0x81, 0x1000, 0xc, 0x1]}}, {{0x1c, 0x1, {0xff, 0x0, 0x6, 0x1f, 0x1, 0x9, 0xe, 0x8}}, {0x14, 0x2, [0x7, 0x5, 0x7, 0x3f2, 0x1, 0x1000, 0xc, 0x7]}}, {{0x1c, 0x1, {0xb, 0x5, 0xff, 0x7f, 0x1, 0x200, 0x6, 0x9}}, {0x16, 0x2, [0x1, 0x7, 0x8, 0xe, 0x3, 0x2, 0xa, 0xfe01, 0xf92c]}}, {{0x1c, 0x1, {0x2, 0x27, 0x5, 0x0, 0x1, 0x3, 0x9, 0x8}}, {0x14, 0x2, [0xfffb, 0x401, 0x7, 0x4, 0x9, 0x10, 0x8001, 0x200]}}, {{0x1c, 0x1, {0xff, 0xc, 0x4a, 0x7f1, 0x0, 0xdab8, 0x4, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x4, 0x8, 0x3, 0x1, 0xa71e, 0x4, 0x3}}, {0xa, 0x2, [0xc, 0x4, 0x4]}}, {{0x1c, 0x1, {0x2, 0x5, 0x3, 0x5, 0x0, 0x18, 0x1, 0x5}}, {0xe, 0x2, [0x0, 0xfffe, 0x2, 0x7, 0x9]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x95, 0x1, 0x4, 0x2, 0x0, 0x2e5, 0x1}}, {0x6, 0x2, [0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}, @TCA_STAB={0x114, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xf3, 0x8, 0xfff, 0x1, 0x0, 0x101, 0x2}}, {0x8, 0x2, [0x9, 0x0]}}, {{0x1c, 0x1, {0x3a, 0xf5, 0x4, 0x3, 0x1, 0x3, 0x20000, 0x2}}, {0x8, 0x2, [0x9, 0x5]}}, {{0x1c, 0x1, {0x7, 0xed, 0x0, 0x9, 0x1, 0x3, 0x9, 0x6}}, {0x10, 0x2, [0xde7a, 0x7ff, 0x8, 0x7, 0xa771, 0x7]}}, {{0x1c, 0x1, {0x6, 0x4, 0x6, 0x10001, 0x0, 0x3, 0x40, 0x8}}, {0x14, 0x2, [0x5, 0x40, 0x3, 0x5, 0xc, 0x8b0, 0x3, 0xc0]}}, {{0x1c, 0x1, {0x5, 0x2, 0x8, 0x22, 0x1, 0x0, 0x800, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0xf, 0x81, 0x7f, 0x10000, 0x2, 0x80, 0x10001, 0x2}}, {0x8, 0x2, [0x200, 0x4]}}, {{0x1c, 0x1, {0x3a, 0x5, 0xff00, 0x6, 0x2, 0x7, 0x8001, 0x2}}, {0x8, 0x2, [0x1, 0x401]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x87c3}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x2, 0xfffffeff, 0x2, 0x4, 0xf, 0x5}}, {0xe, 0x2, [0x6, 0x400, 0x2, 0x5, 0x1ecc]}}, {{0x1c, 0x1, {0x2, 0x0, 0x1, 0x0, 0x0, 0x7, 0xa, 0x7}}, {0x12, 0x2, [0xf, 0x9, 0x206, 0x8001, 0x7ff, 0x7, 0xd]}}, {{0x1c, 0x1, {0x7, 0x9, 0x1400, 0xfffffff7, 0x0, 0x1ff, 0x2, 0x3}}, {0xa, 0x2, [0x4, 0x4, 0x8]}}, {{0x1c, 0x1, {0xce, 0xd, 0x2, 0x2, 0x1, 0x4, 0x10, 0x7}}, {0x12, 0x2, [0x200, 0x12b6, 0x0, 0x3, 0x7, 0x40, 0x2]}}, {{0x1c, 0x1, {0x7f, 0x40, 0x1000, 0x3, 0x0, 0x7, 0x97f, 0xa}}, {0x18, 0x2, [0x8, 0x2, 0x4222, 0x9, 0x33, 0x8, 0x6, 0x7, 0x8, 0x6]}}, {{0x1c, 0x1, {0x7, 0x0, 0x8001, 0x1, 0x0, 0x3, 0x0, 0xa}}, {0x18, 0x2, [0x401, 0x4, 0x6, 0xd, 0x101, 0x2, 0x3, 0x92, 0x4, 0x8001]}}, {{0x1c, 0x1, {0x2, 0x6, 0x11a, 0x5, 0x0, 0xfffeffff, 0x4, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x42c}}, 0x84) (async) syz_usb_connect(0x0, 0x3c, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002c9cb8e102d1510030a3b0102030109022a0001010400030904ce00010e0100040724"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) (async) 493.798678ms ago: executing program 5 (id=775): r0 = syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x156, &(0x7f0000000240)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") fstatfs(r0, &(0x7f0000000040)=""/32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x1c, 0xff}, {0x50, 0x0, 0x0, 0x10000}, {0x6}]}) 368.260154ms ago: executing program 2 (id=776): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) 110.298815ms ago: executing program 5 (id=777): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x4, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 97.0784ms ago: executing program 2 (id=778): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x74, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x74}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 28.789234ms ago: executing program 1 (id=779): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x80000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x7, 0x1, 0x400, 0x3, {{0xa, 0x4, 0x0, 0x20, 0x28, 0x68, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x43}, {[@timestamp_prespec={0x44, 0x14, 0x13, 0x3, 0x3, [{@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK \x00'}, 0x20) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x3, 0x8}, 0xc) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000580)='.pending_reads\x00', 0x10000, 0x88) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x100, 0x10}, 0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x3, 0x8}, 0xc) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x23, &(0x7f0000000140)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x74c838b2, 0x0, 0x0, 0x0, 0x2f00}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000280)='GPL\x00', 0x0, 0xad, &(0x7f00000002c0)=""/173, 0x40f00, 0x29, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000740)=[r4, r5, r6, r7, r8, r9, r10, r11], &(0x7f0000000780)=[{0x4, 0x2, 0x7, 0xc}, {0x0, 0x1, 0x7, 0x5}, {0x2, 0x4, 0x10, 0x1}, {0x4, 0x4, 0x7, 0x6}, {0x2, 0x1, 0x6, 0x6}, {0x2, 0x4, 0x4, 0x4}, {0x5, 0x5, 0xc, 0x5}, {0x3, 0x1, 0x9, 0xa}, {0x3, 0x1, 0xf, 0x2}, {0x1, 0x1, 0x9, 0xc}], 0x10, 0x66}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000900)={0x0, 0x4}, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', r5}, 0x18) r13 = accept4$unix(r7, &(0x7f00000009c0), &(0x7f0000000a40)=0x6e, 0x80000) r14 = syz_clone3(&(0x7f0000001040)={0x2000000, &(0x7f0000000d40), &(0x7f0000000d80), &(0x7f0000000dc0), {0x40}, &(0x7f0000000e00)=""/240, 0xf0, &(0x7f0000000f00)=""/213, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r7}}, 0x58) read$FUSE(r1, &(0x7f00000010c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000003100)='./file0\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r17 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000031c0), 0x10000) r18 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) statx(r1, &(0x7f0000003200)='./file0\x00', 0x0, 0x7ff, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000003880), 0x10000, 0x0) r22 = syz_open_dev$radio(&(0x7f00000038c0), 0x1, 0x2) read$FUSE(r1, &(0x7f0000003ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r24 = getuid() statx(r7, &(0x7f0000005b00)='./file0\x00', 0x6000, 0x1, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = syz_open_dev$sndpcmc(&(0x7f0000005c40), 0xff, 0x1010c0) sendmmsg$unix(r13, &(0x7f0000007340)=[{{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b00)="51ba5fca6c87564348af96b55c7ce5f36bb6e0a35770c191e7ce654d1962ee834130b05f1639d1ba37d818d632412b9611955e61fb5847b52c4fdd15a9e6294075737dcb34a6fd14387d755abe8aaedb065f67ef4b54773b87521ca2dcf60caf056779af7039b9c93250ecb4e5d1d592a789595aec911f63128038dd888bc79126e86703fdce74b3378cf4be93085f21294752ca431721f305333e24a792ea0436a2981988ff56124cb5c653fe4e20ec5fd1ff51f10e153f700fb82a6dc159a730083e7ecd5ee549dc59b21481409410b7089fb3b9827c57da1898bbcd6a5c", 0xdf}, {&(0x7f0000000c00)="58cef7ebf7de40b6a2ee0783a0d1e7a0d31f9ebd", 0x14}, {&(0x7f0000000c40)="c16f5f12df63598693679d2a3e6000dc8788ab5cfc6b6789723c7757827cbec5fd3cb83b8cbd257dad870390514eb79f6fb7a088839ab5a38004fc8630beb7cca4fb2096fd98ed3af0382081627dd92740ba7c26acc0f7d2c56e3eba507203944d6bd2946db9662991382ec1ff373a7f020f0eee720a982ab14f0bcdbdb313a19e2980eca2e3223e783cef92c83538debd6e3f5d35dac15bc94e30a3ed297b539f7ae6e8d5c42d06e4266e790416c17995004c8861d155", 0xb7}], 0x3, &(0x7f0000003400)=[@cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x18, 0x1, 0x1, [r12, r11]}}, @rights={{0x34, 0x1, 0x1, [r7, r17, r18, r5, r1, r7, r11, r11, r7]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x1c, 0x1, 0x1, [r7, r6, r10]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r19, r20}}}, @rights={{0x24, 0x1, 0x1, [r12, r10, r11, r0, r12]}}], 0xf0, 0x81}}, {{&(0x7f0000003500)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003840)=[{&(0x7f0000003580)="b044e5454a6335e1decaa97d7d59abce32b104ef1642105ca09a90a4a457d3e62acda90ed5e6b1219b7a99fe83378f99a57c1ad3c4d201a14986eecb26987ddf1b83789025b5316da2ac4da4ba2f48a0d6064415caee4afeeedf1bff0f275d70d6cb754a97b17341058f814fd10cae71eb545eaacf3007c7770064a2a51584efa9e65d42cf59b8efe33e530ca0ddd2a50ec5e1ed3a30", 0x96}, {&(0x7f0000003640)="d8ac0b9399ccccd697950256448fe7da0b595a0573e6f0bd5c9ac5b3a4a24339f8c4e67d4816a4174fd348a496af649c8ea52afddb5cc59c9471fa2bbfa023a5274f4d2d3b880b49297efa50d41578eb804dac0d3d4bb91f39bd3b714bc5e89714250e4bbffd5eafbadb6bc52383079d384d41c58c3a86042948fc06c4f9362e672c7bd241", 0x85}, {&(0x7f0000003700)="b61a48ed9522d553b606bc977ba4db5a43d69e07f4c019c95c4ea6269a4a7f0c7a98c6d38764e41681eb1be36a7d7eae3edad592c8705484342471adf14872a56e0a3a70603be64073981300f600390ace61ebecff228019a96b88d62b335e2ed9d05451be650b75ad164517e57d4fe4bcb5385ca44096d12b19963fe8e5e2fe2bb28f8196306657e416ecc82f4ff9844eab8fb527ea0c89c583df750fc11010062bef45f27046aa6f3650f82f7aa57fdd60670357c1b32ceb09064f1be592543a17021933a5f04b16054599f51599718dc8f6e53c8e8ad4ad9786a2", 0xdc}, {&(0x7f0000003800)="f266133a9efa079701bd9b9a5f809893e1855bddcdbfec7d3f0ecfff0c52f90df9c71a889a1a", 0x26}], 0x4, &(0x7f0000003900)=[@rights={{0x2c, 0x1, 0x1, [r10, r1, r6, r12, r12, r21, r22]}}], 0x30, 0x48040}}, {{&(0x7f0000003940)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003a80)=[{&(0x7f00000039c0)="7b24aa5e217d80bcdc81d1173d6bd3dd2b06b3dc37d29d20bdfbb2a8efbf66c4d8da48ac9527535fae9264793ddd95c599d35c4cdbee8d11e2421fd0d4c68888bbe942417d7ecb941f4672e32513259f25c5fa9943412868ef9c0a1554ec2480ac656eb0fb204cbae8470f12dc657d1e238cdc202fc1bb46a5f280f8a9e322c0f35836285232a8f32ac8f72298de65c2ec3006901f3a752468962d079cfa88b697828d2bc6df413d4090c5a319e37525b0e2b5cdff737c24890ce539ccda6917", 0xc0}], 0x1, &(0x7f0000005d40)=[@rights={{0x18, 0x1, 0x1, [r11, r7]}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}, @rights={{0x2c, 0x1, 0x1, [r10, r6, r1, r11, r9, r5, r26]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r4, r5, r6, r4, r6]}}, @rights={{0x18, 0x1, 0x1, [r12, r0]}}], 0xc8, 0x1}}, {{&(0x7f0000005e40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000062c0)=[{&(0x7f0000005ec0)="ce546b751d01c13198c73ae895026ba028c96cb20b6b784d7724874a77aca7eabba8e230f7bac4cd72932aa54362124ab188fa13633414c0268bb189b656d62c348d1dc4635c7f98ec1ff766780bc0e800fc3306a36c522018dabae15a40930a48eff2a1a988d7075cd16aa74eac00c3c8095ad7868b1ed88814fa329b9633a6aa1bf2b7f940655ed15eb8236320a53441f7515244f85df8", 0x98}, {&(0x7f0000005f80)="551933ea940f9a31be877ca0602c1d0209e5e39537a2e0ddbf1a84ee01608743757d8354bdf204f80f67532441d41fd76eaf151db8446df9a12c68fe364fa89dbd7437cff7c2a37b1a6881a880ae72de8d9ddb22d06dbfcfaba8b453a2f80ca0846d17f48138f687bfe17aa312e7756e79a518f5b69f6b4ef32cb5844f5d5fa77b25d693314442ace2d7bb4d2d1b7698046e00b98c2388834c488d5c2e90b8db65e343bb760ada00d4ae2cc251de6bad863ea18da4f5e4d0f9932de10d34daad62d05b98eef4326f0b9c6c889adaa264e948362d3de027ed9e6cafe0e298e7ba9ca626624b6c4ced2c2e", 0xea}, {&(0x7f0000006080)="cad4ca9a88ab29bb345ad3026631b042b0b68a4bda4d3bef8d10815c38164cd007b3e7768d8f6367136c428cd3fa544d920bc160ea7bfafcc720a6edb948aee17e1265fd2752163244d6200c6e11474c285a623b1831ae254a30ed1924", 0x5d}, {&(0x7f0000006100)="f952622215a4cd2d4cec655ee76b61e9942a46e0dfb5ac2ee7a45198b067d35d67a2f50393b827d26522beb41e28b580a92cbb93", 0x34}, {&(0x7f0000006140)="0fc31d17098cf35431ccce19f7030d875a46e18b09fd7b49914aedcdce33be75cf77ac704347b55e179c6c31c9906c5a191f64f98f46ba831885e2ed5ce5c7395bf8605aeefb55", 0x47}, {&(0x7f00000061c0)="6fc243653cfcc1b861e57a7714baffbf62ecdc96ef20e9e5c357e459307c5276c28dfeffb97114d36760516143e3e3e87c5d81f15fd85e48511f375ee6ca9c62a81c02579b353cecc01725c88b3664aac29442b7219aab56050deb15aa02b11ffcb30f0dea3ec20622f82c78d82037f6794401945bf8c14e368e194dd37019aae17ec55cbd65f01d9c82321282d32000e4a87c55ff38dcc77dabecdb87cb8d0797342cc374ec4e0ec5646b1d9e6834e5ab187386e7761ad65d32250843698aa0819b6ba8180b8b7cbdbf43728b29a4da698b8d2f", 0xd4}], 0x6, &(0x7f00000064c0)=[@rights={{0x28, 0x1, 0x1, [r7, r12, 0xffffffffffffffff, 0xffffffffffffffff, r12, r9]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x58, 0x4008100}}, {{0x0, 0x0, &(0x7f0000006640)=[{&(0x7f0000006540)="307cefd43b0e7e2395c14e95029c227e03ce43194bb3643ff3ff760f0bed5ef08a2a6e5bccb492502611060facdc78e45e7ad244a4799bf58c9a98d9995a367036aa0ff44e264f3535eb0cc114cdacbd162c1b2138f44bfd1520cf342c591297adf3019ef8bb485e53dbd3e85a360cb8674c480a0a7ee730d55d99c8f81fa7be71b36fb5b21eb4cc80e7464ba840c59d1abaf0f76aa037508f92e503bdb39c573d56bb6ad7e31f60c023f63c8ba031fcff51366320e35eec8f91", 0xba}, {&(0x7f0000006600)="591f56847687e0df08", 0x9}], 0x2, 0x0, 0x0, 0x24000800}}, {{0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f0000006680)="7697498656e6bbea42f6dd50e17bf8b1708af273eef5a052b4228e6e41387f568cc343269a19531ff4f1e2ad5655d0cdfb793c1bb9dd9cd44fe0e86382c8013b1aa43bf2e8635cdafc2f9d084608c4b9c86e3953702a5bb1428b53d543c84c4fe573f3ec42cc99cd443d2a", 0x6b}, {&(0x7f0000006700)="1847035d25d79814a8840a126f45af6a33181e686a42062d851c5f7e3b5897da169a77c8ec3784f448d399b419c4c0477fc2fe9e672a1257a664bd5156f62028e9e1f45a4dd7050ae58177d567e22af6d50376618b4c3c9bbe5e68f07f10b774a7693a7364c8197102485af23e9ce966f380c0079fb8e0a069d9c7cfe150fb6a2a7997285777cdce0ba5933cec4cfca7e800de6a128dc66bcd222eb0e8f363856c4a0cf833b52f6ef2", 0xa9}, {&(0x7f00000067c0)="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", 0xff}, {&(0x7f00000068c0)="2bb315fe300fb5e65286ac4802d1d69941222dc894c764b6b29fc04c21b59601e0e577c69aa4bf97cd267420be8e1b517a72eb6c210b76ee3204961ee5b25046c62dd80c04139456b523ae242c7f9364a0a5771e0a86b747160dbb4cbe44150f498b5e97e6096473691cb13dcf215ba3206b81039e8e703f73b52794055c42cf46c50e1999a3a6536a", 0x89}, {&(0x7f0000006980)}, {&(0x7f00000069c0)="10f7819195844ada4403f026c1fd96cac495a2615203bdfa8c113cc4fb5d622af478a95cb9e29fa58bbbb6fa4aa200b1d3f865784a297a7a7b867f161169b5e2c14e724f029125a624b22385b7aa62beac41640bb76dbbd3742d6afec50778c9fa89210c34e260372680040cb7947c2b1902d6cc9e30d37750ef11c1ee789236", 0x80}, {&(0x7f0000006a40)="1d4f7194d7ce5854cf073b406ec00035a3eed0338045561c79881c0305926c0b5f0eeef11b8c66d8cc075caada18f96273cad734993d5a0027c5cfcda6b4cc3377e40438c8c4c4a76a1624e2a156d1454202f720075a0811f80cc2ddc60ff77e03b84d24b7346312525f79181c0195ce93733a08696d7e3ee50c890920b03cdc32d72799720e174cf7007006222dd6a50224dadd6b47ac9b8ddb69cca7d6cda0c52790dd0cc31e5a1a04a9a92dc6a980cfae0e6835bfde00da6e29f07f75a5f75ae0fe9481df00b7d3768a32a4a0981c886089", 0xd3}], 0x7, &(0x7f0000006c80)=[@rights={{0x30, 0x1, 0x1, [r12, r5, r11, 0xffffffffffffffff, r1, r11, r4, r12]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r10, r5, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, r0, r5]}}], 0xa8, 0x400c1}}, {{&(0x7f0000006d40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000007180)=[{&(0x7f0000006dc0)="19c258dea7f56e459e5d0cbb845bd73211ed946a9673803ab47eb1f79c71145ccabeda4fe7dd14e837ebbcef2831c6712380046bc3d24ec30cab9225825568e84c1f7edcf0622c37ab30f45075e0cf98e925044d4e322a836d3d7fa8a875", 0x5e}, {&(0x7f0000006e40)="ca6cbfc63bb411f484a5e8eba15fe556730a439c222ab20dab64a9032dbff3935d77efc6b71e01f992bf4511b32fdfe897f2f3c0046cf78826a862c3fb970c389ed48b02c4f178c0575121b3f061b365f25a645406d7892d7c653604d6042ef47cbfd27cb8137172b36ba736afdd22da1424f0ec5ecae076d2a435e93f245d2c5d7c63b8b1adbe638e6c3a76fd63ce00cc21bc53a58530a43bcb88776f1a782aae56bb7c171cedde0a4ba22dd672517a1cc7ea4bb2547c33907998225d27df8ebbc8ac63f9e64b11e817ee519c98d92b97658e1b1a54f9ed70b480b4cf9cdc95", 0xe0}, {&(0x7f0000006f40)="3c081551bb2db2ec2e944d75aa29e68ed36f66e485cfe828b488332f11024206e21cc59dbe76a6ec26e65a131ee9eb1cfba26e8c398df6b3ff389860555c96381a42244f8ceb17ac569eba9b5c5f054dbd667d4591d69f83646c", 0x5a}, {&(0x7f0000006fc0)="92c5b89c40d31b06f15b6841c3d60535281d4a31fa1fd27755d831226ac3d73d9796fbfc718e3813927ba1cf356bccda1facd4902bade8372ab3e2121a3a13e9d85c7f002b0451e24cdae9d2aad5c180e467dadde6488a9509bbdd8418f99f46a3d3b544db40dcefb68d7e08edb9337a51e9a9c3361c1485101390818ba80fac707f04a8f746c7ea", 0x88}, {&(0x7f0000007080)="b0c8f4082fd971a48d842ca140fb70038f3123d3c415ee36f6fd4cfceda78fcfcc26bf09c4908304d33c16ec1c17046ce6f7f2663703088d8341b40442918b6c838cba441ca56cd8796357791c6f6d425e3a4325d1f839d2f9108ba577f67d1ee5c6aabbe15ac7590a680530fa1e109901be8706badb3bf5b0e99e2876852715633404b7598ddf13eac7c44158859904dd4758b6d0a1e8e385e50c13561c3dc4d282501a4b47db331d26239be3773c7ece8e29fe", 0xb4}, {&(0x7f0000007140)="728cae2ca77af670c59542f923aadb", 0xf}], 0x6, &(0x7f00000072c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r10]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r10, r0, r6, r12]}}, @cred={{0x1c}}], 0x60, 0x20008810}}], 0x7, 0x40001) 4.072603ms ago: executing program 2 (id=780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000440)={0x2, {{0x2, 0x1002, @rand_addr=0x64010102}}, 0x1, 0x2, [{{0x2, 0x4e02, @multicast2}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x190) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 0s ago: executing program 3 (id=781): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') exit(0xffff) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r3, &(0x7f0000000540)=[{&(0x7f00000000c0)="d67275", 0x3}], 0x1) ftruncate(r2, 0xc17a) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ T5902] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 226.871319][ T5902] usb 5-1: device descriptor read/8, error -71 [ 226.923791][ T7012] Set syz1 is full, maxelem 65536 reached [ 227.300850][ T7037] Cannot find add_set index 65532 as target [ 228.491427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 228.706941][ T5902] usb usb5-port1: unable to enumerate USB device [ 228.758585][ T7040] loop1: detected capacity change from 0 to 1024 [ 228.851480][ T7040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 228.933383][ T7040] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.947012][ T7044] netlink: 48 bytes leftover after parsing attributes in process `syz.4.284'. [ 228.995539][ T7046] netlink: 68 bytes leftover after parsing attributes in process `syz.3.285'. [ 229.043305][ T7040] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.282: Freeing blocks not in datazone - block = 0, count = 16 [ 229.056644][ T7046] netlink: 48 bytes leftover after parsing attributes in process `syz.3.285'. [ 229.172807][ T7020] Set syz1 is full, maxelem 65536 reached [ 229.227549][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 229.465135][ T7057] loop4: detected capacity change from 0 to 1024 [ 229.585467][ T7057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.827185][ T7068] loop2: detected capacity change from 0 to 128 [ 229.874035][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.382865][ T7072] Cannot find add_set index 65532 as target [ 231.051358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 231.460946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 231.526997][ T7068] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.574413][ T7068] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 231.867425][ T7077] loop3: detected capacity change from 0 to 4096 [ 231.930313][ T7077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.980938][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 231.980957][ T30] audit: type=1800 audit(1773985145.744:63): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.295" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 232.045907][ T7084] loop5: detected capacity change from 0 to 1024 [ 232.060873][ T6128] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 232.123477][ T7084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 232.187775][ T5851] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.192543][ T6128] usb 5-1: device descriptor read/64, error -71 [ 232.238435][ T7084] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.278209][ T7084] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.298: Freeing blocks not in datazone - block = 0, count = 16 [ 232.369495][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.452946][ T6128] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 232.539898][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 232.631581][ T6128] usb 5-1: device descriptor read/64, error -71 [ 232.679535][ T7093] loop5: detected capacity change from 0 to 1024 [ 232.702251][ T7093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 232.714751][ T7093] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.741402][ T6128] usb usb5-port1: attempt power cycle [ 233.092269][ T6128] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 233.111547][ T6128] usb 5-1: device descriptor read/8, error -71 [ 233.164178][ T7104] loop3: detected capacity change from 0 to 1024 [ 233.219440][ T7104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.257679][ T30] audit: type=1800 audit(1773985147.004:64): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.304" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 233.351953][ T6128] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 233.371347][ T6128] usb 5-1: device descriptor read/8, error -71 [ 233.397049][ T7104] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.304: Allocating blocks 497-513 which overlap fs metadata [ 233.483843][ T6128] usb usb5-port1: unable to enumerate USB device [ 233.503055][ T6187] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:12: bg 0: block 112: padding at end of block bitmap is not set [ 233.503933][ T6187] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16390 with max blocks 2 with error 28 [ 233.503974][ T6187] EXT4-fs (loop5): This should not happen!! Data will be lost [ 233.503974][ T6187] [ 233.503989][ T6187] EXT4-fs (loop5): Total free blocks count 0 [ 233.504003][ T6187] EXT4-fs (loop5): Free/Dirty block details [ 233.504017][ T6187] EXT4-fs (loop5): free_blocks=0 [ 233.504032][ T6187] EXT4-fs (loop5): dirty_blocks=16 [ 233.504045][ T6187] EXT4-fs (loop5): Block reservation details [ 233.504057][ T6187] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 233.572739][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 233.586350][ T7103] EXT4-fs (loop3): pa ffff8880749eb9f8: logic 48, phys. 177, len 21 [ 233.592876][ T7103] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 233.762748][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.191992][ T7114] Cannot find add_set index 65532 as target [ 236.034733][ T7122] loop5: detected capacity change from 0 to 512 [ 236.079391][ T7122] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.309: inode has both inline data and extents flags [ 236.142762][ T7122] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 236.145381][ T7122] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.309: couldn't read orphan inode 15 (err -117) [ 236.154723][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 236.154749][ C0] EXT4-fs (loop5): initial error at time 1773985149: ext4_orphan_get:1391: inode 15 [ 236.154784][ C0] EXT4-fs (loop5): last error at time 1773985149: ext4_orphan_get:1391: inode 15 [ 236.198230][ T7122] loop5: lost filesystem error report for type 5 error -117 [ 236.215021][ T7122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.225629][ T7128] loop3: detected capacity change from 0 to 1024 [ 236.279756][ T7128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 236.310706][ T7128] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.344986][ T7126] loop4: detected capacity change from 0 to 4096 [ 236.421970][ T7126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.490427][ T168] EXT4-fs error (device loop3): ext4_map_blocks:821: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 1) [ 236.519400][ T168] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 236.606531][ T168] EXT4-fs (loop3): This should not happen!! Data will be lost [ 236.606531][ T168] [ 236.664581][ T30] audit: type=1800 audit(1773985150.434:65): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.310" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 236.705052][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 236.731518][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.806395][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.203683][ T7152] netlink: 80 bytes leftover after parsing attributes in process `syz.3.313'. [ 237.239607][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'. [ 237.276246][ T6129] hid-generic 0080:0005:FFFFFFFE.0004: unknown main item tag 0x0 [ 237.290990][ T6129] hid-generic 0080:0005:FFFFFFFE.0004: unknown main item tag 0x0 [ 237.291088][ T29] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 237.329794][ T6129] hid-generic 0080:0005:FFFFFFFE.0004: hidraw0: HID v0.03 Device [syz0] on syz1 [ 237.438184][ T7157] fido_id[7157]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 237.470810][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 237.494841][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.519548][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.546185][ T29] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.550919][ T6129] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 237.563392][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.573387][ T29] usb 6-1: Product: syz [ 237.577851][ T29] usb 6-1: Manufacturer: syz [ 237.585462][ T29] usb 6-1: SerialNumber: syz [ 237.629409][ T29] usb 6-1: 0:2 : does not exist [ 237.742023][ T6129] usb 3-1: Using ep0 maxpacket: 16 [ 237.764206][ T6129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.783707][ T6129] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 237.822100][ T6129] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 237.826560][ T7148] Set syz1 is full, maxelem 65536 reached [ 237.847596][ T29] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 238.011036][ T6129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.507053][ T7164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.521891][ T6129] usb 3-1: config 0 descriptor?? [ 238.618310][ T29] usb 6-1: USB disconnect, device number 10 [ 238.816313][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.907951][ T7171] loop5: detected capacity change from 0 to 512 [ 238.997837][ T7171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.015004][ T7171] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.095871][ T30] audit: type=1804 audit(1773985152.854:66): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.326" name="/newroot/40/file0/file1" dev="loop5" ino=15 res=1 errno=0 [ 239.168899][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.184849][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 239.268009][ T7179] vlan2: entered promiscuous mode [ 239.313898][ T7181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.330'. [ 239.534584][ T7190] loop5: detected capacity change from 0 to 1024 [ 239.583664][ T7190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 239.595942][ T7190] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.650934][ T168] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 239.672190][ T168] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 117 [ 239.689936][ T168] EXT4-fs (loop5): This should not happen!! Data will be lost [ 239.689936][ T168] [ 239.728302][ T7197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.758897][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 239.956292][ T7202] syzkaller0: entered promiscuous mode [ 239.974699][ T7202] syzkaller0: entered allmulticast mode [ 240.486022][ T7211] Cannot find add_set index 65532 as target [ 241.241022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 241.781933][ T29] usb 3-1: USB disconnect, device number 5 [ 242.028467][ T7216] loop2: detected capacity change from 0 to 1024 [ 242.082882][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.346'. [ 242.121253][ T7216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 242.154733][ T7220] vlan2: entered promiscuous mode [ 242.179215][ T7216] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.298458][ T7216] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.343: Freeing blocks not in datazone - block = 0, count = 16 [ 242.329638][ T7219] loop1: detected capacity change from 0 to 8192 [ 242.386079][ T7224] loop4: detected capacity change from 0 to 1024 [ 242.430172][ T7219] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.454967][ T7224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 242.485011][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 242.562949][ T7224] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.642888][ T7229] team_slave_0: entered promiscuous mode [ 242.648744][ T7229] team_slave_1: entered promiscuous mode [ 242.679508][ T7229] vlan2: entered promiscuous mode [ 242.695847][ T7229] team0: entered promiscuous mode [ 242.784856][ T144] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 242.813747][ T144] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 28 [ 242.857145][ T144] EXT4-fs (loop4): This should not happen!! Data will be lost [ 242.857145][ T144] [ 242.883895][ T144] EXT4-fs (loop4): Total free blocks count 0 [ 242.900676][ T144] EXT4-fs (loop4): Free/Dirty block details [ 242.907631][ T144] EXT4-fs (loop4): free_blocks=0 [ 242.913954][ T144] EXT4-fs (loop4): dirty_blocks=16 [ 242.919225][ T144] EXT4-fs (loop4): Block reservation details [ 242.947540][ T144] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 242.974077][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 243.919443][ T7240] Cannot find add_set index 65532 as target [ 244.821501][ T7236] loop2: detected capacity change from 0 to 512 [ 244.843113][ T7236] EXT4-fs: Ignoring removed oldalloc option [ 244.929619][ T7236] EXT4-fs (loop2): 1 truncate cleaned up [ 244.973615][ T7236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.114006][ T5922] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 245.174727][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.272374][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 245.288423][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.311977][ T5922] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.336492][ T5922] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 245.359525][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.396435][ T5922] usb 2-1: config 0 descriptor?? [ 245.431340][ T7253] loop4: detected capacity change from 0 to 1024 [ 245.460511][ T7254] loop2: detected capacity change from 0 to 512 [ 245.483831][ T7253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.560093][ T7254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.610093][ T30] audit: type=1800 audit(1773985159.374:67): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.358" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 245.685935][ T30] audit: type=1800 audit(1773985159.454:68): pid=7254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.356" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 245.774666][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.864415][ T7260] loop5: detected capacity change from 0 to 4096 [ 246.063393][ T7260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.147015][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.684822][ T30] audit: type=1800 audit(1773985160.454:69): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.359" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 246.845283][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.327754][ T7278] loop5: detected capacity change from 0 to 1024 [ 247.418710][ T7278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 247.506883][ T7278] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.700890][ T168] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 247.752299][ T168] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 28 [ 247.792589][ T168] EXT4-fs (loop5): This should not happen!! Data will be lost [ 247.792589][ T168] [ 247.837124][ T168] EXT4-fs (loop5): Total free blocks count 0 [ 247.858851][ T168] EXT4-fs (loop5): Free/Dirty block details [ 247.943933][ T29] usb 2-1: USB disconnect, device number 12 [ 248.505492][ T7296] loop1: detected capacity change from 0 to 2048 [ 248.575242][ T7296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.744865][ T7296] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 248.842612][ T168] EXT4-fs (loop5): free_blocks=0 [ 248.849660][ T168] EXT4-fs (loop5): dirty_blocks=16 [ 248.855097][ T168] EXT4-fs (loop5): Block reservation details [ 248.861168][ T168] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 248.888306][ T7296] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 248.932640][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 248.989712][ T7296] EXT4-fs (loop1): This should not happen!! Data will be lost [ 248.989712][ T7296] [ 249.081830][ T7296] EXT4-fs (loop1): Total free blocks count 0 [ 249.119137][ T7296] EXT4-fs (loop1): Free/Dirty block details [ 249.147310][ T7296] EXT4-fs (loop1): free_blocks=66060288 [ 249.179644][ T7296] EXT4-fs (loop1): dirty_blocks=48 [ 249.206356][ T7296] EXT4-fs (loop1): Block reservation details [ 249.237385][ T7296] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 249.301127][ T7315] loop5: detected capacity change from 0 to 512 [ 249.349015][ T7315] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.366: inode has both inline data and extents flags [ 249.429872][ T7315] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 249.430258][ T7315] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.366: couldn't read orphan inode 15 (err -117) [ 249.440066][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 249.440100][ C1] EXT4-fs (loop5): initial error at time 1773985163: ext4_orphan_get:1391: inode 15 [ 249.440134][ C1] EXT4-fs (loop5): last error at time 1773985163: ext4_orphan_get:1391: inode 15 [ 249.727192][ T7315] loop5: lost filesystem error report for type 5 error -117 [ 249.735695][ T7315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.834337][ T7322] loop2: detected capacity change from 0 to 1024 [ 251.524753][ T7322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 251.579328][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.596200][ T7322] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.703317][ T7322] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.376: Freeing blocks not in datazone - block = 0, count = 16 [ 251.727577][ T144] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 251.971251][ T144] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 252.045136][ T144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 28 [ 252.101494][ T144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 252.101494][ T144] [ 252.128029][ T144] EXT4-fs (loop2): Total free blocks count 0 [ 252.152743][ T144] EXT4-fs (loop2): Free/Dirty block details [ 252.171496][ T144] EXT4-fs (loop2): free_blocks=0 [ 252.185230][ T144] EXT4-fs (loop2): dirty_blocks=16 [ 252.194055][ T7342] loop5: detected capacity change from 0 to 512 [ 252.200465][ T144] EXT4-fs (loop2): Block reservation details [ 252.215411][ T7342] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.228051][ T144] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 252.268707][ T7342] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.382: bad orphan inode 131083 [ 252.284004][ T7342] loop5: lost filesystem error report for type 5 error -117 [ 252.288672][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 252.320834][ T5922] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 252.344410][ T7342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.540692][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 252.561455][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.569713][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.627542][ T5922] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 252.681521][ T5922] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 252.723270][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.776940][ T5922] usb 2-1: config 0 descriptor?? [ 252.877971][ T7351] team_slave_0: entered promiscuous mode [ 252.883911][ T7351] team_slave_1: entered promiscuous mode [ 252.906040][ T7351] vlan2: entered promiscuous mode [ 252.920773][ T7351] team0: entered promiscuous mode [ 253.665041][ T7368] loop3: detected capacity change from 0 to 1024 [ 253.781334][ T7368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 253.875135][ T7368] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.486176][ T30] audit: type=1800 audit(1773985168.254:70): pid=7368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.391" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 254.645478][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 254.825848][ T7382] loop3: detected capacity change from 0 to 512 [ 254.844563][ T7382] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 254.892942][ T7382] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.395: bad orphan inode 131083 [ 254.924961][ T7382] loop3: lost filesystem error report for type 5 error -117 [ 254.929989][ T7382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.118186][ T7387] netlink: 68 bytes leftover after parsing attributes in process `syz.5.397'. [ 255.143019][ T5902] usb 2-1: USB disconnect, device number 13 [ 255.149364][ T7387] netlink: 48 bytes leftover after parsing attributes in process `syz.5.397'. [ 255.216709][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.401794][ T7391] loop1: detected capacity change from 0 to 512 [ 255.468885][ T7391] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.400: inode has both inline data and extents flags [ 255.561623][ T7391] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.562054][ T7391] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.400: couldn't read orphan inode 15 (err -117) [ 255.571417][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 255.571443][ C0] EXT4-fs (loop1): initial error at time 1773985169: ext4_orphan_get:1391: inode 15 [ 255.571486][ C0] EXT4-fs (loop1): last error at time 1773985169: ext4_orphan_get:1391: inode 15 [ 255.693069][ T7391] loop1: lost filesystem error report for type 5 error -117 [ 255.695255][ T7391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.803333][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.814638][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.228098][ T7406] loop3: detected capacity change from 0 to 1024 [ 256.365678][ T7406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 256.460745][ T7406] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.900327][ T30] audit: type=1800 audit(1773985170.664:71): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.405" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 257.055855][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 257.398496][ T7427] loop3: detected capacity change from 0 to 512 [ 257.439779][ T7427] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 257.530286][ T7427] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.410: bad orphan inode 131083 [ 257.649395][ T7427] loop3: lost filesystem error report for type 5 error -117 [ 257.672052][ T7427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.766242][ T30] audit: type=1800 audit(1773985171.534:72): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.410" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 257.862245][ T7430] bond_slave_0: entered promiscuous mode [ 257.869520][ T7430] bond_slave_1: entered promiscuous mode [ 257.893498][ T7417] Set syz1 is full, maxelem 65536 reached [ 257.914594][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.933274][ T7430] vlan2: entered promiscuous mode [ 257.960835][ T7430] bond0: entered promiscuous mode [ 258.184363][ T7433] bond_slave_0: entered promiscuous mode [ 258.190207][ T7433] bond_slave_1: entered promiscuous mode [ 258.218395][ T7433] vlan2: entered promiscuous mode [ 258.225397][ T7433] bond0: entered promiscuous mode [ 260.034284][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.290999][ T7461] loop1: detected capacity change from 0 to 512 [ 260.348179][ T7461] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 260.394863][ T7461] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.423: bad orphan inode 131083 [ 260.449624][ T7461] loop1: lost filesystem error report for type 5 error -117 [ 260.469481][ T7461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.607573][ T30] audit: type=1800 audit(1773985174.374:73): pid=7461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.423" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 260.755823][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.954244][ T7473] loop2: detected capacity change from 0 to 2048 [ 261.062222][ T7473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.194534][ T7473] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 261.306255][ T7473] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 261.385006][ T7473] EXT4-fs (loop2): This should not happen!! Data will be lost [ 261.385006][ T7473] [ 261.434237][ T7473] EXT4-fs (loop2): Total free blocks count 0 [ 261.462754][ T7473] EXT4-fs (loop2): Free/Dirty block details [ 261.507213][ T7473] EXT4-fs (loop2): free_blocks=66060288 [ 261.542608][ T7473] EXT4-fs (loop2): dirty_blocks=48 [ 261.571357][ T7473] EXT4-fs (loop2): Block reservation details [ 261.590007][ T7473] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 261.625407][ T7484] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 261.971370][ T7485] loop3: detected capacity change from 0 to 8192 [ 262.041530][ T7485] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.524569][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 263.009555][ T6829] Bluetooth: hci5: command 0x0406 tx timeout [ 263.075997][ T7501] vlan2: entered promiscuous mode [ 263.287539][ T7503] bond_slave_0: entered promiscuous mode [ 263.293407][ T7503] bond_slave_1: entered promiscuous mode [ 263.345444][ T7503] vlan2: entered promiscuous mode [ 263.365984][ T7503] bond0: entered promiscuous mode [ 263.616020][ T7508] loop5: detected capacity change from 0 to 512 [ 263.629508][ T7509] loop4: detected capacity change from 0 to 1024 [ 263.646960][ T7508] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 263.699149][ T7508] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.437: bad orphan inode 131083 [ 263.715608][ T7509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.773253][ T7508] loop5: lost filesystem error report for type 5 error -117 [ 263.781885][ T7508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.867255][ T30] audit: type=1800 audit(1773985177.634:74): pid=7509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.438" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 263.980242][ T30] audit: type=1800 audit(1773985177.744:75): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.437" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 264.072984][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.224943][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.572034][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 265.740698][ T5921] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 265.915127][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 265.945718][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.982888][ T5921] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.047911][ T5921] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.087020][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.125326][ T5921] usb 6-1: Product: syz [ 266.145372][ T5921] usb 6-1: Manufacturer: syz [ 266.164395][ T5921] usb 6-1: SerialNumber: syz [ 266.204839][ T7547] loop3: detected capacity change from 0 to 512 [ 266.238824][ T5921] usb 6-1: 0:2 : does not exist [ 266.257291][ T7547] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 266.319409][ T7547] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.452: bad orphan inode 131083 [ 266.393171][ T7547] loop3: lost filesystem error report for type 5 error -117 [ 266.422014][ T7547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.455157][ T7545] loop2: detected capacity change from 0 to 8192 [ 266.469670][ T5921] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 266.529384][ T7545] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 266.573845][ T30] audit: type=1800 audit(1773985180.344:76): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.452" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 266.623951][ T7551] bond_slave_0: entered promiscuous mode [ 266.629882][ T7551] bond_slave_1: entered promiscuous mode [ 266.666883][ T7551] vlan2: entered promiscuous mode [ 266.694331][ T7551] bond0: entered promiscuous mode [ 266.704647][ T5921] usb 6-1: USB disconnect, device number 11 [ 266.771610][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.957868][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.241087][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 267.308558][ T7559] vlan2: entered promiscuous mode [ 267.340957][ T7559] dummy0: entered promiscuous mode [ 267.362308][ T7566] loop1: detected capacity change from 0 to 512 [ 267.415090][ T7566] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.459: inode has both inline data and extents flags [ 267.436770][ T7566] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.437162][ T7566] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.459: couldn't read orphan inode 15 (err -117) [ 267.446507][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 267.446537][ C1] EXT4-fs (loop1): initial error at time 1773985181: ext4_orphan_get:1391: inode 15 [ 267.446575][ C1] EXT4-fs (loop1): last error at time 1773985181: ext4_orphan_get:1391: inode 15 [ 267.548151][ T7566] loop1: lost filesystem error report for type 5 error -117 [ 267.553301][ T7566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.581696][ T7570] netlink: 48 bytes leftover after parsing attributes in process `syz.2.460'. [ 268.114427][ T7580] loop4: detected capacity change from 0 to 8192 [ 268.149758][ T7580] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 268.358901][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.655500][ T7596] netlink: 48 bytes leftover after parsing attributes in process `syz.3.472'. [ 268.681625][ T7598] loop1: detected capacity change from 0 to 1024 [ 268.701472][ T5921] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 268.739066][ T7594] loop5: detected capacity change from 0 to 8192 [ 268.739257][ T7598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.789584][ T7594] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 268.872466][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 268.888257][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.904178][ T5921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.921120][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.942763][ T5921] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.963618][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.985732][ T5921] usb 3-1: Product: syz [ 269.008657][ T5921] usb 3-1: Manufacturer: syz [ 269.025321][ T5921] usb 3-1: SerialNumber: syz [ 269.071720][ T5921] usb 3-1: 0:2 : does not exist [ 269.278938][ T5921] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 269.303872][ T7617] bond_slave_0: entered promiscuous mode [ 269.309708][ T7617] bond_slave_1: entered promiscuous mode [ 269.317675][ T7617] vlan2: entered promiscuous mode [ 269.323198][ T7617] bond0: entered promiscuous mode [ 269.411277][ T5921] usb 3-1: USB disconnect, device number 6 [ 269.501570][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.570025][ T7621] loop3: detected capacity change from 0 to 512 [ 269.585419][ T7621] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.480: inode has both inline data and extents flags [ 269.599122][ T7621] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 269.599449][ T7621] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.480: couldn't read orphan inode 15 (err -117) [ 269.608812][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 269.608890][ C0] EXT4-fs (loop3): initial error at time 1773985183: ext4_orphan_get:1391: inode 15 [ 269.608950][ C0] EXT4-fs (loop3): last error at time 1773985183: ext4_orphan_get:1391: inode 15 [ 269.652200][ T7621] loop3: lost filesystem error report for type 5 error -117 [ 269.660917][ T7621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.755077][ T7635] loop4: detected capacity change from 0 to 4096 [ 270.882485][ T7635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.900015][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.991485][ T7638] loop5: detected capacity change from 0 to 1024 [ 271.013313][ T7634] loop2: detected capacity change from 0 to 8192 [ 271.028719][ T30] audit: type=1800 audit(1773985184.794:77): pid=7635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.484" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 271.029683][ T7634] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.143798][ T7638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 271.235117][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.264688][ T7638] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.339941][ T7644] vlan2: entered promiscuous mode [ 271.485713][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 271.733457][ T7653] loop5: detected capacity change from 0 to 512 [ 271.787880][ T7653] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.490: inode has both inline data and extents flags [ 271.814062][ T7648] loop4: detected capacity change from 0 to 8192 [ 271.832090][ T7653] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 271.840566][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 271.856324][ C0] EXT4-fs (loop5): initial error at time 1773985185: ext4_orphan_get:1391: inode 15 [ 271.865833][ C0] EXT4-fs (loop5): last error at time 1773985185: ext4_orphan_get:1391: inode 15 [ 271.882495][ T7653] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.490: couldn't read orphan inode 15 (err -117) [ 271.894342][ T7653] loop5: lost filesystem error report for type 5 error -117 [ 271.897475][ T7648] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.951802][ T7658] loop3: detected capacity change from 0 to 1024 [ 271.963636][ T7653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.009260][ T7658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.202240][ T30] audit: type=1800 audit(1773985185.974:78): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.491" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 272.545400][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.202699][ T7683] loop2: detected capacity change from 0 to 2048 [ 273.247427][ T7683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.351780][ T7683] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 273.378936][ T7683] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 273.428723][ T7683] EXT4-fs (loop2): This should not happen!! Data will be lost [ 273.428723][ T7683] [ 273.464952][ T7683] EXT4-fs (loop2): Total free blocks count 0 [ 273.514817][ T7683] EXT4-fs (loop2): Free/Dirty block details [ 273.528216][ T7683] EXT4-fs (loop2): free_blocks=66060288 [ 273.535448][ T7683] EXT4-fs (loop2): dirty_blocks=48 [ 273.541550][ T7683] EXT4-fs (loop2): Block reservation details [ 273.553443][ T7683] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 273.671631][ T7693] loop4: detected capacity change from 0 to 512 [ 273.695966][ T144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 273.738112][ T7693] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 273.777306][ T7693] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.499: bad orphan inode 131083 [ 273.805875][ T7693] loop4: lost filesystem error report for type 5 error -117 [ 273.831265][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 273.845337][ C0] EXT4-fs (loop4): initial error at time 1773985187: ext4_orphan_get:1417 [ 273.853995][ C0] EXT4-fs (loop4): last error at time 1773985187: ext4_orphan_get:1417 [ 273.867846][ T7693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.909434][ T30] audit: type=1800 audit(1773985187.674:79): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.499" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 274.062848][ T7696] vlan2: entered promiscuous mode [ 274.071453][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.109193][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.133421][ T7698] loop2: detected capacity change from 0 to 1024 [ 274.178903][ T7698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 274.204955][ T7698] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.345257][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 274.996715][ T7719] loop4: detected capacity change from 0 to 8192 [ 275.031167][ T7719] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.032922][ T7721] syzkaller0: entered promiscuous mode [ 275.108110][ T7721] syzkaller0: entered allmulticast mode [ 275.482832][ T7726] team_slave_0: entered promiscuous mode [ 275.488784][ T7726] team_slave_1: entered promiscuous mode [ 275.513080][ T7726] vlan2: entered promiscuous mode [ 275.532351][ T7726] team0: entered promiscuous mode [ 275.702020][ T7729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.721334][ T7733] loop2: detected capacity change from 0 to 512 [ 275.777539][ T7733] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 275.820931][ T7733] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.512: bad orphan inode 131083 [ 275.831631][ T7733] loop2: lost filesystem error report for type 5 error -117 [ 275.835841][ T7733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.936663][ T30] audit: type=1800 audit(1773985189.704:80): pid=7733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.512" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 276.028481][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.927199][ T7742] vlan2: entered promiscuous mode [ 277.955971][ T7744] loop2: detected capacity change from 0 to 1024 [ 278.009537][ T7744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 278.040997][ T7744] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.237231][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 279.047672][ T7758] loop1: detected capacity change from 0 to 4096 [ 279.140210][ T7758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.166051][ T7763] loop5: detected capacity change from 0 to 1024 [ 279.287530][ T7763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.360634][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 279.376304][ T30] audit: type=1800 audit(1773985193.144:81): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.520" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 279.492530][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.533946][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 279.579198][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.609438][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.633273][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.637320][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.663849][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.683928][ T9] usb 3-1: Product: syz [ 279.695017][ T9] usb 3-1: Manufacturer: syz [ 279.706340][ T9] usb 3-1: SerialNumber: syz [ 279.889110][ T9] usb 3-1: 0:2 : does not exist [ 280.023102][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 280.123157][ T7772] loop5: detected capacity change from 0 to 512 [ 280.152274][ T9] usb 3-1: USB disconnect, device number 7 [ 280.158193][ T7770] syzkaller0: entered promiscuous mode [ 280.172123][ T7772] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 280.194539][ T7770] syzkaller0: entered allmulticast mode [ 280.234554][ T7772] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.525: bad orphan inode 131083 [ 280.289826][ T7772] loop5: lost filesystem error report for type 5 error -117 [ 280.342342][ T7772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.379293][ T30] audit: type=1800 audit(1773985194.144:82): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.525" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 280.455712][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.518080][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.740129][ T7787] loop1: detected capacity change from 0 to 1024 [ 280.740134][ T7786] vlan2: entered promiscuous mode [ 280.807104][ T7787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 280.821708][ T7787] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.057677][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 281.239344][ T7803] loop2: detected capacity change from 0 to 1024 [ 281.309209][ T7803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.506589][ T7813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.548238][ T7809] loop5: detected capacity change from 0 to 8192 [ 281.564498][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.608231][ T7809] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 282.073268][ T7819] loop5: detected capacity change from 0 to 512 [ 282.132227][ T7819] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 282.170820][ T7816] loop2: detected capacity change from 0 to 8192 [ 282.220157][ T7819] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.539: bad orphan inode 131083 [ 282.231273][ T7816] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 282.242368][ T7819] loop5: lost filesystem error report for type 5 error -117 [ 282.287328][ T7819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.334485][ T30] audit: type=1800 audit(1773985196.094:83): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.539" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 282.397478][ T7824] loop3: detected capacity change from 0 to 1024 [ 282.485227][ T7826] vlan2: entered promiscuous mode [ 282.527662][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.563426][ T7824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 282.619004][ T7824] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.083215][ T136] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 283.108877][ T136] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 28 [ 283.688833][ T136] EXT4-fs (loop3): This should not happen!! Data will be lost [ 283.688833][ T136] [ 283.698685][ T136] EXT4-fs (loop3): Total free blocks count 0 [ 283.704901][ T136] EXT4-fs (loop3): Free/Dirty block details [ 283.711091][ T136] EXT4-fs (loop3): free_blocks=0 [ 283.716102][ T136] EXT4-fs (loop3): dirty_blocks=16 [ 283.721403][ T136] EXT4-fs (loop3): Block reservation details [ 283.727458][ T136] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 283.768694][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 284.102500][ T7844] loop2: detected capacity change from 0 to 1024 [ 284.178549][ T7843] vlan2: entered promiscuous mode [ 284.187210][ T7844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.361243][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.942404][ T7857] loop2: detected capacity change from 0 to 512 [ 284.950459][ T7857] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 284.973097][ T7857] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.552: bad orphan inode 131083 [ 285.000094][ T7857] loop2: lost filesystem error report for type 5 error -117 [ 285.000587][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 285.014540][ C0] EXT4-fs (loop2): initial error at time 1773985198: ext4_orphan_get:1417 [ 285.023150][ C0] EXT4-fs (loop2): last error at time 1773985198: ext4_orphan_get:1417 [ 285.058147][ T7857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.094634][ T7862] loop4: detected capacity change from 0 to 1024 [ 285.131443][ T30] audit: type=1800 audit(1773985198.904:84): pid=7857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.552" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 285.162417][ T7862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 285.176274][ T7862] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.303557][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.371964][ T71] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 285.398836][ T71] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 28 [ 285.415245][ T7868] netlink: 80 bytes leftover after parsing attributes in process `syz.5.555'. [ 285.428044][ T71] EXT4-fs (loop4): This should not happen!! Data will be lost [ 285.428044][ T71] [ 285.450711][ T71] EXT4-fs (loop4): Total free blocks count 0 [ 285.459495][ T7868] netlink: 24 bytes leftover after parsing attributes in process `syz.5.555'. [ 285.486322][ T71] EXT4-fs (loop4): Free/Dirty block details [ 285.512258][ T71] EXT4-fs (loop4): free_blocks=0 [ 285.534461][ T71] EXT4-fs (loop4): dirty_blocks=16 [ 285.572876][ T71] EXT4-fs (loop4): Block reservation details [ 285.609136][ T71] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 285.638909][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 287.635962][ T7895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.027307][ T7866] Set syz1 is full, maxelem 65536 reached [ 288.106381][ T7899] loop4: detected capacity change from 0 to 512 [ 288.140773][ T7899] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 288.181607][ T7902] loop3: detected capacity change from 0 to 1024 [ 288.202013][ T7899] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.566: bad orphan inode 131083 [ 288.247977][ T7899] loop4: lost filesystem error report for type 5 error -117 [ 288.250565][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 288.264834][ C0] EXT4-fs (loop4): initial error at time 1773985202: ext4_orphan_get:1417 [ 288.273493][ C0] EXT4-fs (loop4): last error at time 1773985202: ext4_orphan_get:1417 [ 288.298505][ T7902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 288.324063][ T7902] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.336106][ T7899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.400226][ T30] audit: type=1800 audit(1773985202.154:85): pid=7899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.566" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 288.427246][ T6148] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 112: padding at end of block bitmap is not set [ 288.479252][ T6148] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 28 [ 288.496536][ T6148] EXT4-fs (loop3): This should not happen!! Data will be lost [ 288.496536][ T6148] [ 288.516315][ T6148] EXT4-fs (loop3): Total free blocks count 0 [ 288.533919][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.556493][ T6148] EXT4-fs (loop3): Free/Dirty block details [ 288.601133][ T6148] EXT4-fs (loop3): free_blocks=0 [ 288.622826][ T6148] EXT4-fs (loop3): dirty_blocks=16 [ 288.657527][ T6148] EXT4-fs (loop3): Block reservation details [ 288.684358][ T6148] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 288.716044][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 291.578005][ T7945] netlink: 68 bytes leftover after parsing attributes in process `syz.5.582'. [ 291.763522][ T7940] netlink: 80 bytes leftover after parsing attributes in process `syz.2.579'. [ 291.795630][ T7949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.119678][ T7956] vlan2: entered promiscuous mode [ 292.128738][ T7955] loop5: detected capacity change from 0 to 1024 [ 292.222784][ T7955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 292.289994][ T7955] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.480186][ T49] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 292.552475][ T49] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 28 [ 292.600377][ T49] EXT4-fs (loop5): This should not happen!! Data will be lost [ 292.600377][ T49] [ 292.627599][ T49] EXT4-fs (loop5): Total free blocks count 0 [ 292.635595][ T49] EXT4-fs (loop5): Free/Dirty block details [ 292.643149][ T49] EXT4-fs (loop5): free_blocks=0 [ 292.648384][ T49] EXT4-fs (loop5): dirty_blocks=16 [ 292.654104][ T49] EXT4-fs (loop5): Block reservation details [ 292.669806][ T49] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 292.693385][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 292.693923][ T7971] loop3: detected capacity change from 0 to 1024 [ 292.819613][ T7971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 292.912224][ T7971] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.004811][ T7971] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.588: Freeing blocks not in datazone - block = 0, count = 16 [ 293.157028][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 294.739206][ T8002] netlink: 80 bytes leftover after parsing attributes in process `syz.1.596'. [ 295.612353][ T8000] Set syz1 is full, maxelem 65536 reached [ 295.909889][ T8010] loop5: detected capacity change from 0 to 1024 [ 295.978983][ T8010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 296.079411][ T8010] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.173402][ T8019] loop2: detected capacity change from 0 to 1024 [ 296.265674][ T8019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 296.341007][ T6148] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 112: padding at end of block bitmap is not set [ 296.381062][ T8019] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.428043][ T6148] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 28 [ 296.464889][ T8019] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.601: Freeing blocks not in datazone - block = 0, count = 16 [ 296.481656][ T6148] EXT4-fs (loop5): This should not happen!! Data will be lost [ 296.481656][ T6148] [ 296.510123][ T6148] EXT4-fs (loop5): Total free blocks count 0 [ 296.539883][ T6148] EXT4-fs (loop5): Free/Dirty block details [ 296.562032][ T6148] EXT4-fs (loop5): free_blocks=0 [ 296.580714][ T6148] EXT4-fs (loop5): dirty_blocks=16 [ 296.600760][ T6148] EXT4-fs (loop5): Block reservation details [ 296.624474][ T6148] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 296.648828][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 296.671399][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 296.902548][ T8027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.440274][ T8031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.850238][ T8034] vlan2: entered promiscuous mode [ 299.038992][ T8043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.572905][ T8049] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 300.706760][ T8064] loop1: detected capacity change from 0 to 2048 [ 301.208976][ T8064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.230739][ T8070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.285579][ T8064] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 301.345454][ T8064] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 301.383391][ T8074] loop3: detected capacity change from 0 to 4096 [ 301.427515][ T8074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.441711][ T8064] EXT4-fs (loop1): This should not happen!! Data will be lost [ 301.441711][ T8064] [ 301.452044][ T8064] EXT4-fs (loop1): Total free blocks count 0 [ 301.458114][ T8064] EXT4-fs (loop1): Free/Dirty block details [ 301.470878][ T8064] EXT4-fs (loop1): free_blocks=66060288 [ 301.476727][ T8064] EXT4-fs (loop1): dirty_blocks=48 [ 301.483134][ T8064] EXT4-fs (loop1): Block reservation details [ 301.489297][ T8064] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 301.551672][ T30] audit: type=1800 audit(1773985215.314:86): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.617" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 301.672795][ T144] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 301.723895][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.140718][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 302.177109][ T8090] loop4: detected capacity change from 0 to 2048 [ 302.271497][ T8090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.320704][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 302.333481][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 302.359285][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 302.382072][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.390239][ T9] usb 4-1: Product: syz [ 302.394722][ T9] usb 4-1: Manufacturer: syz [ 302.399400][ T9] usb 4-1: SerialNumber: syz [ 302.430884][ T30] audit: type=1800 audit(1773985216.204:87): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.622" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 302.460690][ T6129] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 302.725047][ T6129] usb 2-1: Using ep0 maxpacket: 16 [ 302.792581][ T8101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.071058][ T8072] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 303.106704][ T6129] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.166753][ T6129] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.197647][ T6129] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.208953][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.219716][ T6129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.258129][ T6129] usb 2-1: Product: syz [ 303.278435][ T6129] usb 2-1: Manufacturer: syz [ 303.290287][ T6129] usb 2-1: SerialNumber: syz [ 303.328111][ T9] usb 4-1: selecting invalid altsetting 1 [ 303.369168][ T6129] usb 2-1: 0:2 : does not exist [ 303.554488][ T6129] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 303.557928][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.630'. [ 303.621864][ T8105] vlan2: entered promiscuous mode [ 303.679721][ T9] usb 4-1: cannot request logical cluster ID: 0 (err: -71) [ 303.695531][ T6129] usb 2-1: USB disconnect, device number 14 [ 303.703680][ T9] usb 4-1: invalid MIXER UNIT descriptor 6 [ 303.719891][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 303.758737][ T8107] loop4: detected capacity change from 0 to 2048 [ 303.767908][ T9] usb 4-1: selecting invalid altsetting 1 [ 303.811484][ T9] usb 4-1: cannot request logical cluster ID: 0 (err: -71) [ 303.836864][ T9] usb 4-1: invalid MIXER UNIT descriptor 6 [ 303.866857][ T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 303.904336][ T9] usb 4-1: selecting invalid altsetting 1 [ 303.910416][ T8107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.924299][ T9] usb 4-1: cannot request logical cluster ID: 0 (err: -71) [ 303.956492][ T9] usb 4-1: invalid MIXER UNIT descriptor 6 [ 303.995323][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.161401][ T8106] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 304.279759][ T9] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 304.429319][ T9] usb 4-1: USB disconnect, device number 5 [ 304.489884][ T8118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.853416][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.032400][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.063158][ T8103] loop2: detected capacity change from 0 to 40427 [ 305.092113][ T8103] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 305.136161][ T8103] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 305.177576][ T8103] F2FS-fs (loop2): invalid crc value [ 305.507237][ T8103] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 305.549408][ T8103] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 305.575813][ T8103] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 306.985083][ T8111] loop3: detected capacity change from 0 to 40427 [ 307.168609][ T8136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.538997][ T8111] F2FS-fs (loop3): Unable to read 1th superblock [ 307.608599][ T8111] F2FS-fs (loop3): invalid crc value [ 307.631697][ T8111] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 307.808621][ T8127] Set syz1 is full, maxelem 65536 reached [ 308.308932][ T8143] loop2: detected capacity change from 0 to 1024 [ 308.404578][ T8143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 308.506384][ T8143] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.563991][ T5902] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 308.777578][ T6188] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 112: padding at end of block bitmap is not set [ 308.798347][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 308.823170][ T5902] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 308.851919][ T6188] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 28 [ 308.868507][ T8156] loop3: detected capacity change from 0 to 2048 [ 308.882587][ T5902] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 308.926255][ T6188] EXT4-fs (loop2): This should not happen!! Data will be lost [ 308.926255][ T6188] [ 308.936303][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.952337][ T8158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.994415][ T6188] EXT4-fs (loop2): Total free blocks count 0 [ 309.000767][ T5902] usb 5-1: Product: syz [ 309.009572][ T5902] usb 5-1: Manufacturer: syz [ 309.018559][ T6188] EXT4-fs (loop2): Free/Dirty block details [ 309.037525][ T5902] usb 5-1: SerialNumber: syz [ 309.060435][ T6188] EXT4-fs (loop2): free_blocks=0 [ 309.092463][ T6188] EXT4-fs (loop2): dirty_blocks=16 [ 309.097936][ T6188] EXT4-fs (loop2): Block reservation details [ 309.105195][ T6188] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 309.126032][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 309.154053][ T8156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.240672][ T8155] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 309.496572][ T8162] loop5: detected capacity change from 0 to 4096 [ 309.585408][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.599817][ T5902] usb 5-1: selecting invalid altsetting 1 [ 309.608047][ T8162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.648468][ T5902] usb 5-1: cannot request logical cluster ID: 0 (err: -71) [ 309.696623][ T5902] usb 5-1: invalid MIXER UNIT descriptor 6 [ 309.750868][ T5902] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 309.826199][ T30] audit: type=1800 audit(1773985223.594:88): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.646" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 309.911594][ T5902] usb 5-1: selecting invalid altsetting 1 [ 309.937039][ T5902] usb 5-1: cannot request logical cluster ID: 0 (err: -71) [ 309.986834][ T5902] usb 5-1: invalid MIXER UNIT descriptor 6 [ 310.019081][ T5902] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 310.054176][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.128297][ T5902] usb 5-1: selecting invalid altsetting 1 [ 310.169458][ T5902] usb 5-1: cannot request logical cluster ID: 0 (err: -71) [ 310.199839][ T5902] usb 5-1: invalid MIXER UNIT descriptor 6 [ 310.359529][ T8172] loop5: detected capacity change from 0 to 2048 [ 310.486426][ T8172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.501958][ T5902] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 310.514895][ T5902] usb 5-1: USB disconnect, device number 14 [ 310.640336][ T8170] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 310.734110][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.862243][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.929432][ T8182] loop4: detected capacity change from 0 to 2048 [ 310.971318][ T8184] loop2: detected capacity change from 0 to 2048 [ 311.064060][ T8182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.137504][ T8184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.186178][ T8181] loop3: detected capacity change from 0 to 8192 [ 311.239333][ T8184] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 311.291591][ T8181] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.307735][ T8184] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 311.347658][ T8184] EXT4-fs (loop2): This should not happen!! Data will be lost [ 311.347658][ T8184] [ 311.389002][ T8184] EXT4-fs (loop2): Total free blocks count 0 [ 311.395451][ T6129] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 311.419618][ T8184] EXT4-fs (loop2): Free/Dirty block details [ 311.442090][ T8184] EXT4-fs (loop2): free_blocks=66060288 [ 311.457753][ T8184] EXT4-fs (loop2): dirty_blocks=48 [ 311.462271][ T8182] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 311.479716][ T8184] EXT4-fs (loop2): Block reservation details [ 311.498173][ T8184] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 311.558531][ T8182] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 311.574619][ T6129] usb 6-1: Using ep0 maxpacket: 16 [ 311.610921][ T6129] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.627276][ T8184] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 311.662711][ T8182] EXT4-fs (loop4): This should not happen!! Data will be lost [ 311.662711][ T8182] [ 311.682800][ T6129] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.689595][ T8182] EXT4-fs (loop4): Total free blocks count 0 [ 311.753832][ T6129] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 311.754779][ T8182] EXT4-fs (loop4): Free/Dirty block details [ 311.797730][ T6129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.845737][ T8182] EXT4-fs (loop4): free_blocks=66060288 [ 311.890158][ T8182] EXT4-fs (loop4): dirty_blocks=48 [ 311.915689][ T6129] usb 6-1: config 0 descriptor?? [ 311.927780][ T8182] EXT4-fs (loop4): Block reservation details [ 311.959069][ T6129] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 311.985867][ T8182] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 312.031042][ T6017] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 312.132344][ T8182] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 312.212010][ T6017] usb 4-1: Using ep0 maxpacket: 16 [ 312.232605][ T6017] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.268403][ T6017] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.279150][ T8199] loop2: detected capacity change from 0 to 8192 [ 312.304725][ T6017] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.321254][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.331656][ T8199] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.347993][ T6017] usb 4-1: Product: syz [ 312.366667][ T6017] usb 4-1: Manufacturer: syz [ 312.383933][ T6017] usb 4-1: SerialNumber: syz [ 312.436300][ T6017] usb 4-1: 0:2 : does not exist [ 312.657027][ T6017] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 312.832563][ T6017] usb 4-1: USB disconnect, device number 6 [ 312.968273][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.051068][ T5923] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 313.201759][ T8202] loop1: detected capacity change from 0 to 40427 [ 313.221951][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 313.224447][ T8202] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 313.243755][ T8202] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 313.251913][ T5923] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 313.283085][ T5923] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 313.310230][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.319020][ T8202] F2FS-fs (loop1): invalid crc value [ 313.334594][ T5923] usb 3-1: Product: syz [ 313.354527][ T5923] usb 3-1: Manufacturer: syz [ 313.376285][ T5923] usb 3-1: SerialNumber: syz [ 313.579456][ T8223] netlink: 80 bytes leftover after parsing attributes in process `syz.4.662'. [ 313.610205][ T8202] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 313.627279][ T8223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.662'. [ 313.663378][ T5923] usb 3-1: selecting invalid altsetting 1 [ 313.679672][ T8202] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 313.699235][ T6188] Bluetooth: hci4: Frame reassembly failed (-84) [ 313.712640][ T8202] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 313.943577][ T5923] usb 3-1: cannot request logical cluster ID: 0 (err: -32) [ 313.960661][ T5923] usb 3-1: invalid MIXER UNIT descriptor 6 [ 313.977067][ T5923] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 313.989696][ T5923] usb 3-1: selecting invalid altsetting 1 [ 313.998993][ T5923] usb 3-1: cannot request logical cluster ID: 0 (err: -71) [ 314.007649][ T5923] usb 3-1: invalid MIXER UNIT descriptor 6 [ 314.015607][ T5923] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 314.036754][ T5923] usb 3-1: selecting invalid altsetting 1 [ 314.044225][ T5923] usb 3-1: cannot request logical cluster ID: 0 (err: -71) [ 314.055489][ T5923] usb 3-1: invalid MIXER UNIT descriptor 6 [ 314.901440][ T5923] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 314.926563][ T6129] usb 6-1: USB disconnect, device number 12 [ 314.939648][ T5923] usb 3-1: USB disconnect, device number 8 [ 315.057584][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.415092][ T8241] FAULT_INJECTION: forcing a failure. [ 315.415092][ T8241] name failslab, interval 1, probability 0, space 0, times 1 [ 315.450377][ T8241] CPU: 1 UID: 0 PID: 8241 Comm: syz.5.668 Not tainted syzkaller #0 PREEMPT(full) [ 315.450407][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.450429][ T8241] Call Trace: [ 315.450441][ T8241] [ 315.450451][ T8241] dump_stack_lvl+0xe8/0x150 [ 315.450489][ T8241] should_fail_ex+0x412/0x560 [ 315.450519][ T8241] should_failslab+0xa8/0x100 [ 315.450543][ T8241] ? do_getname+0x2e/0x250 [ 315.450569][ T8241] kmem_cache_alloc_noprof+0x87/0x650 [ 315.450609][ T8241] do_getname+0x2e/0x250 [ 315.450633][ T8241] ? __se_sys_mkdirat+0x18/0x150 [ 315.450659][ T8241] __se_sys_mkdirat+0x24/0x150 [ 315.450684][ T8241] do_syscall_64+0x14d/0xf80 [ 315.450709][ T8241] ? trace_irq_disable+0x3b/0x150 [ 315.450735][ T8241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.450756][ T8241] ? clear_bhb_loop+0x40/0x90 [ 315.450782][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.450803][ T8241] RIP: 0033:0x7fbbf919b607 [ 315.450828][ T8241] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.450853][ T8241] RSP: 002b:00007fbbfa0eee58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 315.450875][ T8241] RAX: ffffffffffffffda RBX: 00007fbbfa0eeee0 RCX: 00007fbbf919b607 [ 315.450890][ T8241] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c [ 315.450904][ T8241] RBP: 0000200000000040 R08: 00002000000000c0 R09: 0000000000000000 [ 315.450918][ T8241] R10: 0000200000000040 R11: 0000000000000246 R12: 0000200000000080 [ 315.450931][ T8241] R13: 00007fbbfa0eeea0 R14: 0000000000000000 R15: 0000000000000000 [ 315.450962][ T8241] [ 315.653381][ T8242] netlink: 80 bytes leftover after parsing attributes in process `syz.2.667'. [ 315.664682][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.667'. [ 315.696321][ T8244] loop1: detected capacity change from 0 to 1024 [ 315.719531][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 315.798631][ T8244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 315.849031][ T8244] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.058155][ T8254] loop5: detected capacity change from 0 to 64 [ 316.139152][ T136] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 316.203347][ T136] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 28 [ 316.236260][ T136] EXT4-fs (loop1): This should not happen!! Data will be lost [ 316.236260][ T136] [ 316.262658][ T136] EXT4-fs (loop1): Total free blocks count 0 [ 316.269265][ T8216] Set syz1 is full, maxelem 65536 reached [ 316.276390][ T136] EXT4-fs (loop1): Free/Dirty block details [ 316.297078][ T136] EXT4-fs (loop1): free_blocks=0 [ 316.311257][ T136] EXT4-fs (loop1): dirty_blocks=16 [ 316.323842][ T136] EXT4-fs (loop1): Block reservation details [ 316.346300][ T136] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 316.378295][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 316.691706][ T8238] Set syz1 is full, maxelem 65536 reached [ 316.760603][ T6017] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 316.935908][ T6017] usb 2-1: Using ep0 maxpacket: 8 [ 316.969215][ T6017] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 317.002823][ T6017] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 317.045061][ T6017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.097857][ T6017] usb 2-1: Product: syz [ 317.106853][ T6017] usb 2-1: Manufacturer: syz [ 317.123360][ T6017] usb 2-1: SerialNumber: syz [ 317.135303][ T8256] loop3: detected capacity change from 0 to 40427 [ 317.163908][ T8256] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 317.201545][ T8256] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 317.213794][ T8268] loop4: detected capacity change from 0 to 4096 [ 317.225901][ T8256] F2FS-fs (loop3): invalid crc value [ 317.238105][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.238229][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.285909][ T8268] ntfs3(loop4): ino=3, Correct links count -> 2. [ 317.308176][ T8268] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 317.331262][ T5921] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 317.419286][ T8268] ntfs3(loop4): Failed to load $MFT (-22). [ 317.473029][ T8256] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 317.500633][ T5921] usb 6-1: Using ep0 maxpacket: 8 [ 317.509838][ T8256] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 317.517912][ T8256] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 317.525044][ T5921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 317.552936][ T5921] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 317.564291][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.573545][ T5921] usb 6-1: Product: syz [ 317.770702][ T5921] usb 6-1: Manufacturer: syz [ 317.778581][ T6017] usb 2-1: selecting invalid altsetting 1 [ 317.785892][ T5921] usb 6-1: SerialNumber: syz [ 317.794262][ T6017] usb 2-1: cannot request logical cluster ID: 0 (err: -71) [ 317.810871][ T6017] usb 2-1: invalid MIXER UNIT descriptor 6 [ 317.818747][ T6017] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 317.841620][ T6017] usb 2-1: selecting invalid altsetting 1 [ 317.857755][ T6017] usb 2-1: cannot request logical cluster ID: 0 (err: -71) [ 317.906919][ T6017] usb 2-1: invalid MIXER UNIT descriptor 6 [ 318.450010][ T6017] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 318.577879][ T5921] usb 6-1: selecting invalid altsetting 1 [ 318.599989][ T6017] usb 2-1: selecting invalid altsetting 1 [ 318.662844][ T5921] usb 6-1: cannot request logical cluster ID: 0 (err: -32) [ 318.680731][ T5921] usb 6-1: invalid MIXER UNIT descriptor 6 [ 318.690340][ T5921] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 318.702532][ T6017] usb 2-1: cannot request logical cluster ID: 0 (err: -71) [ 318.720592][ T6017] usb 2-1: invalid MIXER UNIT descriptor 6 [ 318.736357][ T5921] usb 6-1: selecting invalid altsetting 1 [ 318.873072][ T6017] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 318.890051][ T5921] usb 6-1: cannot request logical cluster ID: 0 (err: -71) [ 318.915004][ T5921] usb 6-1: invalid MIXER UNIT descriptor 6 [ 318.925571][ T6017] usb 2-1: USB disconnect, device number 15 [ 318.937188][ T5921] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 318.996736][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.032685][ T5921] usb 6-1: selecting invalid altsetting 1 [ 319.049796][ T5921] usb 6-1: cannot request logical cluster ID: 0 (err: -71) [ 319.071577][ T5921] usb 6-1: invalid MIXER UNIT descriptor 6 [ 319.264915][ T5921] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 319.327547][ T5921] usb 6-1: USB disconnect, device number 13 [ 319.418043][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.446064][ T8276] loop4: detected capacity change from 0 to 40427 [ 319.497891][ T8276] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 319.507895][ T8290] loop5: detected capacity change from 0 to 1024 [ 319.536185][ T8276] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 319.593942][ T8276] F2FS-fs (loop4): invalid crc value [ 319.630083][ T8290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 319.745958][ T8290] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.854286][ T8297] loop3: detected capacity change from 0 to 2048 [ 319.932105][ T8297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.961557][ T8276] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 320.022014][ T8045] EXT4-fs error (device loop5): ext4_map_blocks:821: inode #15: comm kworker/u8:14: lblock 0 mapped to illegal pblock 0 (length 1) [ 320.074282][ T8276] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 320.116285][ T8045] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 320.130764][ T8276] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 320.160620][ T8045] EXT4-fs (loop5): This should not happen!! Data will be lost [ 320.160620][ T8045] [ 320.190312][ T8297] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 320.225023][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 320.435811][ T8297] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 320.449890][ T8297] EXT4-fs (loop3): This should not happen!! Data will be lost [ 320.449890][ T8297] [ 320.692401][ T8297] EXT4-fs (loop3): Total free blocks count 0 [ 321.260771][ T8297] EXT4-fs (loop3): Free/Dirty block details [ 321.318281][ T8297] EXT4-fs (loop3): free_blocks=66060288 [ 321.347554][ T8297] EXT4-fs (loop3): dirty_blocks=48 [ 321.380485][ T8297] EXT4-fs (loop3): Block reservation details [ 321.404908][ T8297] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 321.862792][ T8313] Cannot find add_set index 65532 as target [ 322.205807][ T8317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.605400][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 322.969808][ T8319] loop4: detected capacity change from 0 to 4096 [ 322.989973][ T8324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.049226][ T8319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.170844][ T5921] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 323.269689][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.341671][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 323.367321][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.413988][ T5921] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 323.462934][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.516508][ T5921] usb 6-1: config 0 descriptor?? [ 323.588671][ T5921] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 324.278373][ T8333] loop4: detected capacity change from 0 to 32768 [ 326.007416][ T8333] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.691 (8333) [ 326.039715][ T5922] usb 6-1: USB disconnect, device number 14 [ 326.254375][ T8341] loop5: detected capacity change from 0 to 2048 [ 326.321730][ T8341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.349384][ T8341] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 326.368165][ T8341] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 326.381606][ T8341] EXT4-fs (loop5): This should not happen!! Data will be lost [ 326.381606][ T8341] [ 326.394088][ T8341] EXT4-fs (loop5): Total free blocks count 0 [ 326.403520][ T8341] EXT4-fs (loop5): Free/Dirty block details [ 326.413025][ T8341] EXT4-fs (loop5): free_blocks=66060288 [ 326.454279][ T8341] EXT4-fs (loop5): dirty_blocks=48 [ 326.471838][ T8333] BTRFS info (device loop4 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 326.496505][ T8341] EXT4-fs (loop5): Block reservation details [ 326.531040][ T8341] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 326.553180][ T8333] BTRFS info (device loop4 state S): using crc32c checksum algorithm [ 326.602031][ T8333] BTRFS error (device loop4 state S): ignoremetacsums must be used with ro mount option [ 326.675821][ T8341] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 326.712729][ T8333] BTRFS error (device loop4 state S): open_ctree failed: -22 [ 327.052378][ T8349] loop1: detected capacity change from 0 to 256 [ 327.100246][ T8349] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 327.214940][ T8349] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 327.520628][ T5902] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 327.719205][ T8364] loop5: detected capacity change from 0 to 4096 [ 327.752439][ T5902] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 327.781979][ T5902] usb 2-1: config 0 has no interface number 0 [ 327.815507][ T8364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.841641][ T5902] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 327.893278][ T5902] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 327.937099][ T5902] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 327.991362][ T5902] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 327.998178][ T6158] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.026785][ T5902] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 328.076321][ T5902] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 328.117479][ T5902] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 328.152890][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.169041][ T8373] loop2: detected capacity change from 0 to 1024 [ 328.185150][ T5902] usb 2-1: config 0 descriptor?? [ 328.211362][ T8349] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 328.226259][ T8349] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 328.253403][ T8373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.286747][ T5902] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 328.382367][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.542843][ T8358] loop3: detected capacity change from 0 to 40427 [ 328.574423][ T8358] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 328.618296][ T8358] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 329.634207][ T8381] loop2: detected capacity change from 0 to 131072 [ 329.649606][ T8381] F2FS-fs (loop2): Test dummy encryption mode enabled [ 329.658823][ T8358] F2FS-fs (loop3): invalid crc value [ 329.671054][ T8381] F2FS-fs (loop2): invalid crc value [ 329.769250][ T8381] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 329.787021][ T8381] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 329.830459][ T8349] ldusb 2-1:0.55: Write buffer overflow, 1 bytes dropped [ 329.869688][ T8389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.903681][ T8381] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 329.939771][ T6017] usb 2-1: USB disconnect, device number 16 [ 330.018744][ T6017] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 330.136510][ T8358] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 330.192705][ T8358] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 330.236507][ T8358] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 330.460114][ T8393] loop4: detected capacity change from 0 to 4096 [ 330.605479][ T8400] FAULT_INJECTION: forcing a failure. [ 330.605479][ T8400] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 330.708362][ T8400] CPU: 1 UID: 0 PID: 8400 Comm: syz.2.707 Not tainted syzkaller #0 PREEMPT(full) [ 330.708390][ T8400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 330.708403][ T8400] Call Trace: [ 330.708411][ T8400] [ 330.708419][ T8400] dump_stack_lvl+0xe8/0x150 [ 330.708455][ T8400] should_fail_ex+0x412/0x560 [ 330.708480][ T8400] _copy_from_user+0x2d/0xb0 [ 330.708506][ T8400] ___sys_sendmsg+0x1c6/0x360 [ 330.708539][ T8400] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.708602][ T8400] ? __fget_files+0x2a/0x420 [ 330.708630][ T8400] ? __fget_files+0x3a0/0x420 [ 330.708668][ T8400] __x64_sys_sendmsg+0x1bd/0x2a0 [ 330.708700][ T8400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.708737][ T8400] ? rcu_is_watching+0x15/0xb0 [ 330.708779][ T8400] do_syscall_64+0x14d/0xf80 [ 330.708805][ T8400] ? trace_irq_disable+0x3b/0x150 [ 330.708829][ T8400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.708850][ T8400] ? clear_bhb_loop+0x40/0x90 [ 330.708874][ T8400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.708895][ T8400] RIP: 0033:0x7f388239c799 [ 330.708913][ T8400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.708930][ T8400] RSP: 002b:00007f3883316028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.708952][ T8400] RAX: ffffffffffffffda RBX: 00007f3882615fa0 RCX: 00007f388239c799 [ 330.708966][ T8400] RDX: 0000000000040000 RSI: 0000200000002240 RDI: 0000000000000004 [ 330.708979][ T8400] RBP: 00007f3883316090 R08: 0000000000000000 R09: 0000000000000000 [ 330.708992][ T8400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.709004][ T8400] R13: 00007f3882616038 R14: 00007f3882615fa0 R15: 00007ffd3d1dc9b8 [ 330.709036][ T8400] [ 330.989671][ T8396] Cannot find add_set index 65532 as target [ 332.154052][ T8412] FAULT_INJECTION: forcing a failure. [ 332.154052][ T8412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.185618][ T8412] CPU: 1 UID: 0 PID: 8412 Comm: syz.1.712 Not tainted syzkaller #0 PREEMPT(full) [ 332.185648][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.185661][ T8412] Call Trace: [ 332.185669][ T8412] [ 332.185678][ T8412] dump_stack_lvl+0xe8/0x150 [ 332.185717][ T8412] should_fail_ex+0x412/0x560 [ 332.185737][ T8412] _copy_from_user+0x2d/0xb0 [ 332.185756][ T8412] __sys_bpf+0x229/0x950 [ 332.185778][ T8412] ? __pfx___sys_bpf+0x10/0x10 [ 332.185807][ T8412] ? ksys_write+0x242/0x270 [ 332.185824][ T8412] ? __pfx_ksys_write+0x10/0x10 [ 332.185844][ T8412] __x64_sys_bpf+0x7c/0x90 [ 332.185861][ T8412] do_syscall_64+0x14d/0xf80 [ 332.185880][ T8412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.185895][ T8412] ? clear_bhb_loop+0x40/0x90 [ 332.185913][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.185928][ T8412] RIP: 0033:0x7fcf0799c799 [ 332.185942][ T8412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.185954][ T8412] RSP: 002b:00007fcf088d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.185969][ T8412] RAX: ffffffffffffffda RBX: 00007fcf07c16180 RCX: 00007fcf0799c799 [ 332.185980][ T8412] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 332.185989][ T8412] RBP: 00007fcf088d9090 R08: 0000000000000000 R09: 0000000000000000 [ 332.185998][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.186006][ T8412] R13: 00007fcf07c16218 R14: 00007fcf07c16180 R15: 00007ffd1da37298 [ 332.186031][ T8412] [ 332.631047][ T8410] loop2: detected capacity change from 0 to 4096 [ 332.688220][ T8410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.927073][ T30] audit: type=1800 audit(1773985246.694:89): pid=8410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.713" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 333.162430][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.534146][ T8432] FAULT_INJECTION: forcing a failure. [ 333.534146][ T8432] name failslab, interval 1, probability 0, space 0, times 0 [ 333.547018][ T8432] CPU: 1 UID: 0 PID: 8432 Comm: syz.4.718 Not tainted syzkaller #0 PREEMPT(full) [ 333.547046][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 333.547058][ T8432] Call Trace: [ 333.547066][ T8432] [ 333.547075][ T8432] dump_stack_lvl+0xe8/0x150 [ 333.547113][ T8432] should_fail_ex+0x412/0x560 [ 333.547140][ T8432] should_failslab+0xa8/0x100 [ 333.547166][ T8432] __kmalloc_cache_noprof+0x88/0x660 [ 333.547189][ T8432] ? __se_sys_memfd_create+0x21d/0x410 [ 333.547224][ T8432] __se_sys_memfd_create+0x21d/0x410 [ 333.547257][ T8432] do_syscall_64+0x14d/0xf80 [ 333.547283][ T8432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.547305][ T8432] ? clear_bhb_loop+0x40/0x90 [ 333.547331][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.547352][ T8432] RIP: 0033:0x7fc69bb9c799 [ 333.547371][ T8432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.547389][ T8432] RSP: 002b:00007fc69ca09028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 333.547411][ T8432] RAX: ffffffffffffffda RBX: 00007fc69be16180 RCX: 00007fc69bb9c799 [ 333.547426][ T8432] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000800 [ 333.547439][ T8432] RBP: 00007fc69ca09090 R08: 0000000000000000 R09: 0000000000000000 [ 333.547451][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.547463][ T8432] R13: 00007fc69be16218 R14: 00007fc69be16180 R15: 00007ffd7bb39b18 [ 333.547496][ T8432] [ 334.453349][ T8437] can: request_module (can-proto-0) failed. [ 334.546821][ T8446] FAULT_INJECTION: forcing a failure. [ 334.546821][ T8446] name failslab, interval 1, probability 0, space 0, times 0 [ 334.560107][ T8446] CPU: 1 UID: 0 PID: 8446 Comm: syz.1.720 Not tainted syzkaller #0 PREEMPT(full) [ 334.560135][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 334.560149][ T8446] Call Trace: [ 334.560157][ T8446] [ 334.560166][ T8446] dump_stack_lvl+0xe8/0x150 [ 334.560205][ T8446] should_fail_ex+0x412/0x560 [ 334.560233][ T8446] should_failslab+0xa8/0x100 [ 334.560256][ T8446] ? vm_area_dup+0x2b/0x680 [ 334.560278][ T8446] kmem_cache_alloc_noprof+0x87/0x650 [ 334.560320][ T8446] vm_area_dup+0x2b/0x680 [ 334.560346][ T8446] __split_vma+0x1dc/0xa40 [ 334.560379][ T8446] ? mas_next_slot+0xc3b/0xd10 [ 334.560408][ T8446] ? __pfx___split_vma+0x10/0x10 [ 334.560447][ T8446] ? mas_find+0xb0e/0xd30 [ 334.560478][ T8446] vms_gather_munmap_vmas+0x4fa/0x1370 [ 334.560526][ T8446] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 334.560562][ T8446] ? mas_find+0xa7d/0xd30 [ 334.560591][ T8446] mmap_region+0x85b/0x2240 [ 334.560626][ T8446] ? finish_task_switch+0x41f/0xbe0 [ 334.560656][ T8446] ? lockdep_hardirqs_on+0x7a/0x110 [ 334.560682][ T8446] ? finish_task_switch+0x41f/0xbe0 [ 334.560717][ T8446] ? __pfx_mmap_region+0x10/0x10 [ 334.560744][ T8446] ? trace_sched_exit_tp+0x3a/0x150 [ 334.560774][ T8446] ? __schedule+0x167b/0x5590 [ 334.560797][ T8446] ? rcu_is_watching+0x15/0xb0 [ 334.560921][ T8446] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 334.560954][ T8446] ? __lock_acquire+0x6b5/0x2cf0 [ 334.560990][ T8446] ? aa_file_perm+0x192/0x15e0 [ 334.561015][ T8446] ? mm_get_unmapped_area_vmflags+0xd9/0x110 [ 334.561045][ T8446] ? cap_mmap_addr+0xaf/0x100 [ 334.561073][ T8446] ? bpf_lsm_mmap_addr+0x9/0x50 [ 334.561094][ T8446] ? security_mmap_addr+0x71/0x240 [ 334.561123][ T8446] ? shmem_mapping+0xd/0x50 [ 334.561147][ T8446] ? memfd_check_seals_mmap+0x165/0x200 [ 334.561180][ T8446] do_mmap+0xc39/0x10c0 [ 334.561220][ T8446] ? __pfx_do_mmap+0x10/0x10 [ 334.561245][ T8446] ? down_write_killable+0x180/0x240 [ 334.561278][ T8446] ? __pfx_down_write_killable+0x10/0x10 [ 334.561308][ T8446] ? apparmor_mmap_file+0x2da/0x3e0 [ 334.561341][ T8446] vm_mmap_pgoff+0x2c9/0x4f0 [ 334.561376][ T8446] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 334.561405][ T8446] ? __fget_files+0x2a/0x420 [ 334.561438][ T8446] ? __fget_files+0x3a0/0x420 [ 334.561465][ T8446] ? __fget_files+0x2a/0x420 [ 334.561498][ T8446] ksys_mmap_pgoff+0x51e/0x760 [ 334.561534][ T8446] do_syscall_64+0x14d/0xf80 [ 334.561560][ T8446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.561582][ T8446] ? clear_bhb_loop+0x40/0x90 [ 334.561608][ T8446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.561629][ T8446] RIP: 0033:0x7fcf0799c799 [ 334.561648][ T8446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.561666][ T8446] RSP: 002b:00007fcf088d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 334.561689][ T8446] RAX: ffffffffffffffda RBX: 00007fcf07c16180 RCX: 00007fcf0799c799 [ 334.561704][ T8446] RDX: 000000000000000a RSI: 0000000000002000 RDI: 0000200000000000 [ 334.561717][ T8446] RBP: 00007fcf088d9090 R08: 0000000000000006 R09: 0000000004000000 [ 334.561730][ T8446] R10: 000000000004d091 R11: 0000000000000246 R12: 0000000000000001 [ 334.561743][ T8446] R13: 00007fcf07c16218 R14: 00007fcf07c16180 R15: 00007ffd1da37298 [ 334.561776][ T8446] [ 335.659493][ T8460] FAULT_INJECTION: forcing a failure. [ 335.659493][ T8460] name failslab, interval 1, probability 0, space 0, times 0 [ 336.414660][ T8460] CPU: 1 UID: 0 PID: 8460 Comm: syz.4.725 Not tainted syzkaller #0 PREEMPT(full) [ 336.414688][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.414710][ T8460] Call Trace: [ 336.414717][ T8460] [ 336.414727][ T8460] dump_stack_lvl+0xe8/0x150 [ 336.414763][ T8460] should_fail_ex+0x412/0x560 [ 336.414791][ T8460] should_failslab+0xa8/0x100 [ 336.414814][ T8460] ? create_new_namespaces+0x33/0x6a0 [ 336.414846][ T8460] kmem_cache_alloc_noprof+0x87/0x650 [ 336.414885][ T8460] create_new_namespaces+0x33/0x6a0 [ 336.414919][ T8460] ? bpf_lsm_capable+0x9/0x20 [ 336.414940][ T8460] ? security_capable+0x7e/0x2c0 [ 336.414977][ T8460] unshare_nsproxy_namespaces+0x11a/0x160 [ 336.415019][ T8460] ksys_unshare+0x521/0x980 [ 336.415052][ T8460] ? __pfx_ksys_unshare+0x10/0x10 [ 336.415076][ T8460] ? __pfx_ksys_write+0x10/0x10 [ 336.415107][ T8460] __x64_sys_unshare+0x38/0x50 [ 336.415130][ T8460] do_syscall_64+0x14d/0xf80 [ 336.415155][ T8460] ? trace_irq_disable+0x3b/0x150 [ 336.415180][ T8460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.415201][ T8460] ? clear_bhb_loop+0x40/0x90 [ 336.415222][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.415239][ T8460] RIP: 0033:0x7fc69bb9c799 [ 336.415257][ T8460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.415274][ T8460] RSP: 002b:00007fc69ca4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 336.415307][ T8460] RAX: ffffffffffffffda RBX: 00007fc69be15fa0 RCX: 00007fc69bb9c799 [ 336.415322][ T8460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 336.415334][ T8460] RBP: 00007fc69ca4b090 R08: 0000000000000000 R09: 0000000000000000 [ 336.415347][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.415359][ T8460] R13: 00007fc69be16038 R14: 00007fc69be15fa0 R15: 00007ffd7bb39b18 [ 336.415392][ T8460] [ 336.651775][ T8434] loop3: detected capacity change from 0 to 32768 [ 336.659280][ T8434] btrfs: Deprecated parameter 'usebackuproot' [ 336.666230][ T8434] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 336.688780][ T8434] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.709 (8434) [ 336.801562][ T8434] BTRFS info (device loop3 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 336.860868][ T8434] BTRFS info (device loop3 state S): using blake2b checksum algorithm [ 336.860957][ T30] audit: type=1326 audit(1773985250.584:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.2.727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f388239c799 code=0x0 [ 336.896682][ T8434] BTRFS warning (device loop3 state ES): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 337.080115][ T8434] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 337.200265][ T8434] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 337.211965][ T6017] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 337.241076][ T8434] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 337.242870][ T8434] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 337.280252][ T8434] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 337.298281][ T8474] netlink: 'syz.4.729': attribute type 1 has an invalid length. [ 337.352230][ T8434] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 337.352335][ T8434] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 337.381349][ T6017] usb 3-1: Using ep0 maxpacket: 8 [ 337.413930][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 337.450314][ T6017] usb 3-1: unable to get BOS descriptor or descriptor too short [ 337.452548][ T8434] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 337.474463][ T6017] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.494238][ T8434] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 337.545069][ T8434] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 337.545230][ T8434] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 337.617493][ T8434] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 337.667178][ T8434] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 337.670676][ T8434] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 337.768582][ T8434] BTRFS error (device loop3 state ES): open_ctree failed: -12 [ 338.270256][ T8468] loop1: detected capacity change from 0 to 32768 [ 338.450237][ T8468] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 338.463875][ T6017] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 338.478218][ T6017] usb 3-1: config 1 interface 0 has no altsetting 0 [ 338.489758][ T6017] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 338.499376][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.654054][ T8474] loop4: detected capacity change from 0 to 131072 [ 338.662711][ T6017] usb 3-1: Product: syz [ 338.667186][ T6017] usb 3-1: Manufacturer: syz [ 338.672137][ T6017] usb 3-1: SerialNumber: syz [ 338.801992][ T8474] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 338.815197][ T8474] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 338.818501][ T8468] XFS (loop1): Ending clean mount [ 338.904070][ T8474] F2FS-fs (loop4): recover xattr in inode (7), error(0) [ 338.911600][ T8474] F2FS-fs (loop4): set inode (7) has corrupted xattr [ 339.159655][ T8468] XFS (loop1): Quotacheck needed: Please wait. [ 339.450101][ T8468] XFS (loop1): Quotacheck: Done. [ 339.590015][ T8505] vivid-001: ================= START STATUS ================= [ 339.599841][ T8505] vivid-001: Radio HW Seek Mode: Bounded [ 339.608259][ T8505] vivid-001: Radio Programmable HW Seek: false [ 339.623935][ T8505] vivid-001: RDS Rx I/O Mode: Block I/O [ 339.652478][ T5845] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 339.661838][ T8505] vivid-001: Generate RBDS Instead of RDS: false [ 339.668540][ T8505] vivid-001: RDS Reception: true [ 339.682995][ T8505] vivid-001: RDS Program Type: 0 inactive [ 339.693695][ T8505] vivid-001: RDS PS Name: inactive [ 339.719616][ T8505] vivid-001: RDS Radio Text: inactive [ 339.736111][ T8505] vivid-001: RDS Traffic Announcement: false inactive [ 339.747578][ T8505] vivid-001: RDS Traffic Program: false inactive [ 339.778633][ T8505] vivid-001: RDS Music: false inactive [ 339.789288][ T8505] vivid-001: ================== END STATUS ================== [ 340.189819][ T6017] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 340.238132][ T6017] usb 3-1: USB disconnect, device number 9 [ 340.363592][ T8510] loop1: detected capacity change from 0 to 1024 [ 341.493180][ T8510] hfsplus: b-tree write err: -5, ino 2 [ 341.589560][ T8510] hfsplus: b-tree write err: -5, ino 26 [ 341.740711][ T6017] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 341.910777][ T6017] usb 4-1: device descriptor read/64, error -71 [ 342.366508][ T6017] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 342.511938][ T6017] usb 4-1: device descriptor read/64, error -71 [ 342.642443][ T6017] usb usb4-port1: attempt power cycle [ 342.713219][ T8547] loop4: detected capacity change from 0 to 8192 [ 342.764223][ T5856] loop4: p1 p2 p3 p4 [ 342.777440][ T5856] loop4: partition table partially beyond EOD, truncated [ 342.793790][ T5856] loop4: p1 size 3523149824 extends beyond EOD, truncated [ 342.827332][ T5856] loop4: p2 start 4278190080 is beyond EOD, truncated [ 342.856888][ T5856] loop4: p3 start 150994944 is beyond EOD, truncated [ 342.873338][ T5856] loop4: p4 start 1048578 is beyond EOD, truncated [ 342.927299][ T12] hfsplus: b-tree write err: -5, ino 25 [ 342.929239][ T8547] loop4: p1 p2 p3 p4 [ 342.946476][ T12] hfsplus: b-tree write err: -5, ino 4 [ 342.960817][ T8547] loop4: partition table partially beyond EOD, truncated [ 342.960997][ T12] hfsplus: b-tree write err: -5, ino 2 [ 342.982391][ T8547] loop4: p1 size 3523149824 extends beyond EOD, truncated [ 343.010621][ T12] hfsplus: b-tree write err: -5, ino 26 [ 343.010698][ T6017] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 343.065297][ T12] hfsplus: b-tree write err: -5, ino 27 [ 343.074270][ T8547] loop4: p2 start 4278190080 is beyond EOD, truncated [ 343.091773][ T6017] usb 4-1: device descriptor read/8, error -71 [ 343.099052][ T8547] loop4: p3 start 150994944 is beyond EOD, truncated [ 343.118336][ T8555] FAULT_INJECTION: forcing a failure. [ 343.118336][ T8555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.131677][ T8547] loop4: p4 start 1048578 is beyond EOD, truncated [ 343.139861][ T8555] CPU: 0 UID: 0 PID: 8555 Comm: syz.2.749 Not tainted syzkaller #0 PREEMPT(full) [ 343.139885][ T8555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 343.139898][ T8555] Call Trace: [ 343.139905][ T8555] [ 343.139912][ T8555] dump_stack_lvl+0xe8/0x150 [ 343.139944][ T8555] should_fail_ex+0x412/0x560 [ 343.139966][ T8555] _copy_from_user+0x2d/0xb0 [ 343.139988][ T8555] __sys_bpf+0x229/0x950 [ 343.140012][ T8555] ? __pfx___sys_bpf+0x10/0x10 [ 343.140048][ T8555] ? ksys_write+0x242/0x270 [ 343.140067][ T8555] ? __pfx_ksys_write+0x10/0x10 [ 343.140091][ T8555] __x64_sys_bpf+0x7c/0x90 [ 343.140113][ T8555] do_syscall_64+0x14d/0xf80 [ 343.140135][ T8555] ? trace_irq_disable+0x3b/0x150 [ 343.140158][ T8555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.140175][ T8555] ? clear_bhb_loop+0x40/0x90 [ 343.140196][ T8555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.140214][ T8555] RIP: 0033:0x7f388239c799 [ 343.140231][ T8555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.140248][ T8555] RSP: 002b:00007f3883316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.140269][ T8555] RAX: ffffffffffffffda RBX: 00007f3882615fa0 RCX: 00007f388239c799 [ 343.140282][ T8555] RDX: 0000000000000040 RSI: 0000200000000400 RDI: 0000000000000009 [ 343.140294][ T8555] RBP: 00007f3883316090 R08: 0000000000000000 R09: 0000000000000000 [ 343.140307][ T8555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.140318][ T8555] R13: 00007f3882616038 R14: 00007f3882615fa0 R15: 00007ffd3d1dc9b8 [ 343.140349][ T8555] [ 343.460727][ T6017] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 343.481315][ T6017] usb 4-1: device descriptor read/8, error -71 [ 343.536268][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 343.593406][ T6017] usb usb4-port1: unable to enumerate USB device [ 343.600203][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 343.775106][ T8548] loop5: detected capacity change from 0 to 32768 [ 343.799216][ T8565] warning: `syz.1.751' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 343.870835][ T8548] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 343.955208][ T8548] XFS (loop5): Ending clean mount [ 344.126114][ T8545] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.744'. [ 344.185780][ T8582] FAULT_INJECTION: forcing a failure. [ 344.185780][ T8582] name failslab, interval 1, probability 0, space 0, times 0 [ 344.198681][ T8582] CPU: 0 UID: 0 PID: 8582 Comm: syz.2.755 Not tainted syzkaller #0 PREEMPT(full) [ 344.198709][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.198722][ T8582] Call Trace: [ 344.198730][ T8582] [ 344.198738][ T8582] dump_stack_lvl+0xe8/0x150 [ 344.198774][ T8582] should_fail_ex+0x412/0x560 [ 344.198802][ T8582] should_failslab+0xa8/0x100 [ 344.198828][ T8582] __kmalloc_noprof+0xe8/0x760 [ 344.198849][ T8582] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 344.198876][ T8582] tomoyo_realpath_from_path+0xe3/0x5d0 [ 344.198905][ T8582] ? tomoyo_path_number_perm+0x219/0x630 [ 344.198934][ T8582] tomoyo_path_number_perm+0x246/0x630 [ 344.198966][ T8582] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 344.198996][ T8582] ? __lock_acquire+0x6b5/0x2cf0 [ 344.199038][ T8582] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 344.199088][ T8582] ? __fget_files+0x2a/0x420 [ 344.199127][ T8582] ? __fget_files+0x2a/0x420 [ 344.199154][ T8582] ? __fget_files+0x3a0/0x420 [ 344.199181][ T8582] ? __fget_files+0x2a/0x420 [ 344.199214][ T8582] security_file_ioctl+0xc3/0x2a0 [ 344.199243][ T8582] __se_sys_ioctl+0x47/0x170 [ 344.199270][ T8582] do_syscall_64+0x14d/0xf80 [ 344.199299][ T8582] ? trace_irq_disable+0x3b/0x150 [ 344.199325][ T8582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.199347][ T8582] ? clear_bhb_loop+0x40/0x90 [ 344.199373][ T8582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.199394][ T8582] RIP: 0033:0x7f388239c799 [ 344.199414][ T8582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.199432][ T8582] RSP: 002b:00007f3883316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.199463][ T8582] RAX: ffffffffffffffda RBX: 00007f3882615fa0 RCX: 00007f388239c799 [ 344.199478][ T8582] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 344.199490][ T8582] RBP: 00007f3883316090 R08: 0000000000000000 R09: 0000000000000000 [ 344.199503][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.199515][ T8582] R13: 00007f3882616038 R14: 00007f3882615fa0 R15: 00007ffd3d1dc9b8 [ 344.199550][ T8582] [ 344.199569][ T8582] ERROR: Out of memory at tomoyo_realpath_from_path. [ 344.473466][ T8586] FAULT_INJECTION: forcing a failure. [ 344.473466][ T8586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.487891][ T8586] CPU: 0 UID: 0 PID: 8586 Comm: syz.4.756 Not tainted syzkaller #0 PREEMPT(full) [ 344.487920][ T8586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.487933][ T8586] Call Trace: [ 344.487941][ T8586] [ 344.487950][ T8586] dump_stack_lvl+0xe8/0x150 [ 344.487987][ T8586] should_fail_ex+0x412/0x560 [ 344.488014][ T8586] _copy_from_user+0x2d/0xb0 [ 344.488040][ T8586] ucma_write+0x15d/0x2f0 [ 344.488075][ T8586] ? __pfx_ucma_write+0x10/0x10 [ 344.488105][ T8586] ? security_file_permission+0x75/0x260 [ 344.488133][ T8586] ? rw_verify_area+0x255/0x4d0 [ 344.488154][ T8586] ? __pfx_ucma_write+0x10/0x10 [ 344.488186][ T8586] vfs_write+0x29a/0xb90 [ 344.488215][ T8586] ? __pfx_vfs_write+0x10/0x10 [ 344.488238][ T8586] ? __fget_files+0x2a/0x420 [ 344.488268][ T8586] ? __fget_files+0x2a/0x420 [ 344.488295][ T8586] ? __fget_files+0x3a0/0x420 [ 344.488321][ T8586] ? __fget_files+0x2a/0x420 [ 344.488358][ T8586] ksys_write+0x150/0x270 [ 344.488381][ T8586] ? __pfx_ksys_write+0x10/0x10 [ 344.488414][ T8586] do_syscall_64+0x14d/0xf80 [ 344.488448][ T8586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.488469][ T8586] ? clear_bhb_loop+0x40/0x90 [ 344.488494][ T8586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.488515][ T8586] RIP: 0033:0x7fc69bb9c799 [ 344.488534][ T8586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.488550][ T8586] RSP: 002b:00007fc69ca4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 344.488572][ T8586] RAX: ffffffffffffffda RBX: 00007fc69be15fa0 RCX: 00007fc69bb9c799 [ 344.488587][ T8586] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 344.488599][ T8586] RBP: 00007fc69ca4b090 R08: 0000000000000000 R09: 0000000000000000 [ 344.488611][ T8586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.488623][ T8586] R13: 00007fc69be16038 R14: 00007fc69be15fa0 R15: 00007ffd7bb39b18 [ 344.488655][ T8586] [ 344.572295][ T6158] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 345.393186][ T5922] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 345.749434][ T8604] xt_hashlimit: size too large, truncated to 1048576 [ 345.788260][ T8601] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 345.861626][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 345.873942][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.906140][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.924858][ T5922] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 345.937242][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.982807][ T5922] usb 3-1: Product: syz [ 346.006236][ T5922] usb 3-1: Manufacturer: syz [ 346.037925][ T5922] usb 3-1: SerialNumber: syz [ 346.086086][ T5922] usb 3-1: 0:2 : does not exist [ 346.257770][ T8613] loop5: detected capacity change from 0 to 4096 [ 346.289939][ T5922] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 346.299338][ T8613] nilfs2: Unknown parameter 'defcontext' [ 346.494209][ T5922] usb 3-1: USB disconnect, device number 10 [ 346.589462][ T8613] netlink: 'syz.5.766': attribute type 7 has an invalid length. [ 346.611891][ T8613] netlink: 'syz.5.766': attribute type 8 has an invalid length. [ 346.685535][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.733020][ T8625] loop3: detected capacity change from 0 to 256 [ 346.845580][ T8625] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x8978cc48, utbl_chksum : 0xe619d30d) [ 347.041722][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 347.110093][ T8631] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 347.139450][ T8632] loop2: detected capacity change from 0 to 2048 [ 347.227820][ T8632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.328785][ T8630] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 347.374925][ T8638] loop3: detected capacity change from 0 to 2048 [ 347.430057][ T8638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.461483][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.478162][ T8644] loop5: detected capacity change from 0 to 64 [ 347.503854][ T30] audit: type=1800 audit(1773985261.264:91): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.773" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 347.570401][ T8638] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 347.781391][ T6017] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 347.908443][ T168] ------------[ cut here ]------------ [ 347.914793][ T168] kernel BUG at fs/ext4/inode.c:2806! [ 347.935876][ T168] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 347.942219][ T168] CPU: 0 UID: 0 PID: 168 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 347.951712][ T168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.961807][ T168] Workqueue: writeback wb_workfn (flush-7:3) [ 347.967855][ T168] RIP: 0010:ext4_do_writepages+0x46dd/0x46e0 [ 347.973891][ T168] Code: c6 c0 3e e4 8b e8 53 c4 a1 fe 90 0f 0b e8 2b 57 40 ff 4c 89 f7 48 c7 c6 a0 43 e4 8b e8 3c c4 a1 fe 90 0f 0b e8 14 57 40 ff 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 [ 347.993625][ T168] RSP: 0018:ffffc90002e46d60 EFLAGS: 00010293 [ 347.999744][ T168] RAX: ffffffff82865c0c RBX: 0000004210000000 RCX: ffff888020745b80 [ 348.007859][ T168] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 348.015875][ T168] RBP: ffffc90002e47170 R08: ffff888059789ca7 R09: 1ffff1100b2f1394 [ 348.023892][ T168] R10: dffffc0000000000 R11: ffffed100b2f1395 R12: dffffc0000000000 [ 348.031902][ T168] R13: 0000000000000001 R14: 0000004000000000 R15: 1ffff1100c3decc5 [ 348.039917][ T168] FS: 0000000000000000(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 348.043111][ T6017] usb 5-1: Using ep0 maxpacket: 16 [ 348.048875][ T168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.048894][ T168] CR2: 00007f388244eddd CR3: 000000008aafe000 CR4: 00000000003526f0 [ 348.048913][ T168] Call Trace: [ 348.048923][ T168] [ 348.048944][ T168] ? unwind_next_frame+0xa5/0x23c0 [ 348.080079][ T168] ? unwind_next_frame+0xa5/0x23c0 [ 348.085219][ T168] ? look_up_lock_class+0x57/0x110 [ 348.090382][ T168] ? __pfx_ext4_do_writepages+0x10/0x10 [ 348.095947][ T168] ? __lock_acquire+0x6b5/0x2cf0 [ 348.101094][ T168] ? unwind_next_frame+0xa5/0x23c0 [ 348.106249][ T168] ? ret_from_fork_asm+0x1a/0x30 [ 348.111205][ T168] ? ret_from_fork_asm+0x1a/0x30 [ 348.116228][ T168] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 348.122404][ T168] ? arch_stack_walk+0x11b/0x150 [ 348.127372][ T168] ext4_writepages+0x241/0x3b0 [ 348.132165][ T168] ? __pfx_ext4_writepages+0x10/0x10 [ 348.137568][ T168] ? do_raw_spin_unlock+0xf5/0x210 [ 348.142715][ T168] ? __pfx_ext4_writepages+0x10/0x10 [ 348.148027][ T168] do_writepages+0x32e/0x550 [ 348.152649][ T168] ? reacquire_held_locks+0x104/0x190 [ 348.158045][ T168] ? writeback_sb_inodes+0x477/0x1a20 [ 348.163506][ T168] __writeback_single_inode+0x133/0x11a0 [ 348.169190][ T168] ? do_raw_spin_unlock+0xf5/0x210 [ 348.174429][ T168] writeback_sb_inodes+0x992/0x1a20 [ 348.179674][ T168] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 348.185337][ T168] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.190398][ T168] ? rcu_is_watching+0x15/0xb0 [ 348.195270][ T168] wb_writeback+0x456/0xb70 [ 348.199805][ T168] ? queue_io+0x1d1/0x4a0 [ 348.204171][ T168] ? __pfx_wb_writeback+0x10/0x10 [ 348.209225][ T168] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.214364][ T168] wb_workfn+0x414/0xf50 [ 348.218629][ T168] ? look_up_lock_class+0x57/0x110 [ 348.223772][ T168] ? __pfx_wb_workfn+0x10/0x10 [ 348.228741][ T168] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.233807][ T168] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 348.239229][ T168] ? process_one_work+0x8bb/0x1780 [ 348.244389][ T168] process_one_work+0x9ab/0x1780 [ 348.249395][ T168] ? __pfx_process_one_work+0x10/0x10 [ 348.254977][ T168] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.260219][ T168] worker_thread+0xba8/0x11e0 [ 348.265102][ T168] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 348.270936][ T168] ? __kthread_parkme+0x7a/0x1f0 [ 348.275899][ T168] ? __kthread_parkme+0x19c/0x1f0 [ 348.280944][ T168] kthread+0x388/0x470 [ 348.285035][ T168] ? __pfx_worker_thread+0x10/0x10 [ 348.290517][ T168] ? __pfx_kthread+0x10/0x10 [ 348.295136][ T168] ret_from_fork+0x51e/0xb90 [ 348.299757][ T168] ? __pfx_ret_from_fork+0x10/0x10 [ 348.304973][ T168] ? __switch_to+0xc7d/0x1450 [ 348.309711][ T168] ? __pfx_kthread+0x10/0x10 [ 348.314329][ T168] ret_from_fork_asm+0x1a/0x30 [ 348.319296][ T168] [ 348.322331][ T168] Modules linked in: [ 348.330799][ T168] ---[ end trace 0000000000000000 ]--- [ 348.370865][ T168] RIP: 0010:ext4_do_writepages+0x46dd/0x46e0 [ 348.376969][ T168] Code: c6 c0 3e e4 8b e8 53 c4 a1 fe 90 0f 0b e8 2b 57 40 ff 4c 89 f7 48 c7 c6 a0 43 e4 8b e8 3c c4 a1 fe 90 0f 0b e8 14 57 40 ff 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 [ 348.400148][ T8658] FAULT_INJECTION: forcing a failure. [ 348.400148][ T8658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.416134][ T8658] CPU: 0 UID: 0 PID: 8658 Comm: syz.2.780 Tainted: G D syzkaller #0 PREEMPT(full) [ 348.416167][ T8658] Tainted: [D]=DIE [ 348.416174][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.416185][ T8658] Call Trace: [ 348.416193][ T8658] [ 348.416201][ T8658] dump_stack_lvl+0xe8/0x150 [ 348.416234][ T8658] should_fail_ex+0x412/0x560 [ 348.416258][ T8658] _copy_to_user+0x31/0xb0 [ 348.416281][ T8658] simple_read_from_buffer+0xe1/0x170 [ 348.416311][ T8658] proc_fail_nth_read+0x1bb/0x230 [ 348.416340][ T8658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.416367][ T8658] ? rw_verify_area+0x2a6/0x4d0 [ 348.416385][ T8658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.416412][ T8658] vfs_read+0x20c/0xa70 [ 348.416429][ T8658] ? fdget_pos+0x246/0x320 [ 348.416458][ T8658] ? __pfx___mutex_lock+0x10/0x10 [ 348.416484][ T8658] ? __pfx_vfs_read+0x10/0x10 [ 348.416506][ T8658] ? __fget_files+0x3a0/0x420 [ 348.416532][ T8658] ? __fget_files+0x2a/0x420 [ 348.416563][ T8658] ksys_read+0x150/0x270 [ 348.416587][ T8658] ? __pfx_ksys_read+0x10/0x10 [ 348.416606][ T8658] ? rcu_is_watching+0x15/0xb0 [ 348.416629][ T8658] do_syscall_64+0x14d/0xf80 [ 348.416653][ T8658] ? trace_irq_disable+0x3b/0x150 [ 348.416677][ T8658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.416698][ T8658] ? clear_bhb_loop+0x40/0x90 [ 348.416721][ T8658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.416741][ T8658] RIP: 0033:0x7f388235cfce [ 348.416757][ T8658] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.416775][ T8658] RSP: 002b:00007f38832f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.416796][ T8658] RAX: ffffffffffffffda RBX: 00007f38832f56c0 RCX: 00007f388235cfce [ 348.416811][ T8658] RDX: 000000000000000f RSI: 00007f38832f50a0 RDI: 0000000000000005 [ 348.416824][ T8658] RBP: 00007f38832f5090 R08: 0000000000000000 R09: 0000000000000000 [ 348.416836][ T8658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.416847][ T8658] R13: 00007f3882616128 R14: 00007f3882616090 R15: 00007ffd3d1dc9b8 [ 348.416871][ T8658] [ 348.417316][ T168] RSP: 0018:ffffc90002e46d60 EFLAGS: 00010293 [ 348.542524][ T6017] usb 5-1: unable to get BOS descriptor or descriptor too short [ 348.544919][ T168] [ 348.554458][ T6017] usb 5-1: config 1 has an invalid interface number: 206 but max is 0 [ 348.595331][ T168] RAX: ffffffff82865c0c RBX: 0000004210000000 RCX: ffff888020745b80 [ 348.654162][ T6017] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.686469][ T6017] usb 5-1: config 1 has no interface number 0 [ 348.687398][ T168] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 348.701127][ T168] RBP: ffffc90002e47170 R08: ffff888059789ca7 R09: 1ffff1100b2f1394 [ 348.709637][ T6017] usb 5-1: config 1 interface 206 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.717670][ T6017] usb 5-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 348.724602][ T168] R10: dffffc0000000000 R11: ffffed100b2f1395 R12: dffffc0000000000 [ 348.736386][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.749900][ T6017] usb 5-1: Product: syz [ 348.750116][ T168] R13: 0000000000000001 R14: 0000004000000000 R15: 1ffff1100c3decc5 [ 348.755166][ T6017] usb 5-1: Manufacturer: syz [ 348.767898][ T6017] usb 5-1: SerialNumber: syz [ 348.779698][ T168] FS: 0000000000000000(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 348.789244][ T168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.796151][ T168] CR2: 00007f38825e92f8 CR3: 000000007e788000 CR4: 00000000003526f0 [ 348.807949][ T168] Kernel panic - not syncing: Fatal exception [ 348.814688][ T168] Kernel Offset: disabled [ 348.819044][ T168] Rebooting in 86400 seconds..