last executing test programs: 13m24.209081756s ago: executing program 0 (id=1): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0xc3, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x800) socket$can_j1939(0x1d, 0x2, 0x7) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000640)='./file0\x00', 0x200008, &(0x7f0000000680)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x1, 0x392, &(0x7f00000006c0)="$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") socket$inet(0x2, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000a80), 0x0, 0x8000) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) readv(r1, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = gettid() tkill(r2, 0x21) 13m23.682297547s ago: executing program 0 (id=6): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m20.331067964s ago: executing program 0 (id=19): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @local]}]}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', r2, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x20, 0x8, 0x100, 0x1}}) r3 = socket(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000001f00)={@private, @empty}, &(0x7f0000001f40)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r5) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x202, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x8d0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, 0x0, 0x6048004) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000980)={'tunl0\x00', 0x0, 0x10, 0x1, 0x9, 0x7f, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0xa3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1}}}}) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000002080)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002040)={&(0x7f0000001d80)={0x34, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6784}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4000}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x401}]}, 0x34}}, 0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r9, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYRES32=r11, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004"], &(0x7f0000000c80)='GPL\x00', 0xa, 0x1000, &(0x7f0000000cc0)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x18, 0x21, &(0x7f00000021c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @exit, @alu={0x4, 0x0, 0x6, 0x0, 0x2, 0x20, 0x8}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e80)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001ec0)=[{0x0, 0x1, 0x4, 0x1}], 0x10, 0xfffffd2b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 13m19.877881543s ago: executing program 0 (id=20): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='.\x00', 0x800714, &(0x7f0000000280)={[{@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x7}}, {@minixdf}]}, 0x1, 0x4da, &(0x7f0000000b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000580)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x2d39, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x6fb8, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", '\x00', "a915950d158d5a6b"}, 0x28) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 13m16.500388099s ago: executing program 0 (id=26): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) 13m1.332126531s ago: executing program 32 (id=26): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) 14.706316811s ago: executing program 4 (id=2291): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x600) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) socket(0x10, 0x803, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff000000009cc7000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r5) getsockname$packet(r5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r7 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder_logs/state\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x31) sendmsg$inet(r4, &(0x7f0000000540)={&(0x7f00000006c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x4}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13.915210241s ago: executing program 5 (id=2293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000500)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@oldalloc}, {@noload}, {@user_xattr}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x200, 0x82) dup(r1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 12.618191017s ago: executing program 5 (id=2295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe269}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000540)={0x28, 0x7, r2, 0x0, &(0x7f0000000580)="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", 0xf00}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x1e700000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x20000002, 0x0, 0x0, 0x400000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r8 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000500)=0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe8c81) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) getpid() 12.060749163s ago: executing program 4 (id=2296): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x1000400, &(0x7f0000000000)=ANY=[], 0x2, 0x679, &(0x7f0000020540)="$eJzs3U1oHOf9B/DvrNay1gZH/sd2/C+BiBjSUlNbsnBa91K3lOJCKCE59FYQtoyF104qK0UJpVXf6LWHnEt68K2nQi+FgiClx/aWq46BQi7pRYXSLTM7u1rb683aWr04/XzMzPPMPPM885vfzsvuGrEB/mddO5/mZopcO//aerm8dX+xvXV/8U6vnuRokkbS7BYp7ibFh8nVdKf8f7myHq543H7eX7nyxkefbn3cXWrWU7V9Y1S/8WzUU+aSTNVlcuyvkxjven+8p1X0j7BM2Lle4uCgHUnSecAPz+y0jHZs19ctcBgU3edmX6e+smeryzwz9fuA7lOx+8x+pm0cdAAAAAAwaTOPrnpuO9tZz4mDCAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeVfXv/1e/+j/TX5ViLkXv9/+ne+1Jjh9gqKNNj7fZZmOvAwEAAAAAAACAvffSdraznhO95U6RRpKXq4VT1fx43sm9LGc1F7KepaxlLatZSDLb7fPvcja9vrS2trowRs9LOz2z0/PSmAG3hqybe7pjBwAAAAAAAIDPkZ/n2s7//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGFQJFPdoppO9eqzaTSTzCSZLrfbSP7eqz/LNg86AAAAANgHz21nO+s50VvuFNVn/jPV5/6ZvJO7WctK1tLOcm5U3wV0P/U3tu4vtrfuL94pp12HUY2Y7ncPw/d8ttqilZtZqdZcyPW8lXZupFH1LJ3txTM8rp99Uo79jdqYkd2oy/LIf1OXe29qjG1mq4wc6WZkoEOZjZOjM/HNTwaXNp5oT1nOQhr9b35O7UHOj9VlkRz/7uNzPjPmcBNUZ+Kl1Jm4NHD2nRmeif90ep2/+Mfff/9W++7tWzfvnd+f02jCjnY6/YN5+JxYHMjEC6PPic9BJgbNV5k43V++lu/kzZzPXF7Palbe7K2fy7ezlLUs1edzOZ8dnamrA/VGXq/K1uMjma5fl6kcGR1TflRFsjwQ08tV3xNZyffyVm5kOa9W/y5lIV/N5VzOlYFX+PQYV32juuSb46bx3JfqSnmAvx59oPuszOvJ+q7802TgrJ+v8n3ygTU7WUqRse6NP8jY98bmF+pKuY9f1OXh8HAmFgYy8XwvA0czLBO/q24r99p3b6/eWnp7zP29UpfldfSrfXsyj6M8X/6vfLGqpQfPjrLt+aFtC1XbqX5b45G20/22z7pSp+v3cI+OdKlqe2Fo22LVdnagbdj7LQAOvWNfPjbd+kfrb60PWr9s3Wq9NvOto187+uJ0jvzlyNeb81OvNF4s/pAP8pOdz/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDTu/fue7eX2u3l1YcqnU7nt49petrKVJ6k15//NMm9936PaIKHM9nKzJNs3DkcMQ+ttJIMafpXp9OZyC42Rpy0E6t0auP2an3G1bTbyj+L/X8pD/CmBOyLi2t33r547933vrLSe0Revnxl/srlVxcv3lxpL8935wccJLAndh76Bx0JAAAAAAAAAAAAMK79+HOCgz5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Nl27XyamymyMH9hvlzeur/YLqdefWfLZpJGkuLHSfFhcjXdKbMDwxWP7mGzmr+/cuWNjz7d+nhnrGbSGtXvScwk2Sgrc0mm6nIXNgbHu77r8Yr+EZYJO9ctm7sLESbgvwEAAP//UEUJlw==") syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x48e, &(0x7f00000018c0)={0x0, 0x2607, 0x0, 0x2, 0x29d}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3200}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x8522}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000028c0)=@gettaction={0x18, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002900), 0x200, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000029c0)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002a00)=[{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002a80)="a92e81d0991808e33c233016", 0xc}], 0x1, &(0x7f0000002ac0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000002b00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002b40)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000002b80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, r5, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000002c00)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000002c80), 0x651, 0x0) recvmmsg(r7, &(0x7f0000002cc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002d00)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002d40), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002d80)='/proc/timer_list\x00', 0x0, 0x0) recvmmsg(r4, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002e40)=""/21, 0x15}, {&(0x7f0000002e80)=""/4096, 0x1000}], 0x2}, 0x15}], 0x1, 0x40000141, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000003e80)=[@text32={0x20, &(0x7f0000003ec0)="260f01c80f01c3b924020000b803000000ba000000000f300f01c5660f38f61f66b8a7008ee02e0f08c4c1f92ee63681345200000000c4c1fdea7d00", 0x3c}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000003f00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 9.556572849s ago: executing program 5 (id=2297): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x16) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000d80)='1\x00', 0x2) socket$netlink(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="0040818293bb09641cc805d086fa0417dada7f19c35c21"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000340)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40002180, 0x0) sendmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0xa9cc7003, &(0x7f0000001e80)=[{&(0x7f0000001ec0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100"], 0xc8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f00000020c0), 0x1fffffffc000, 0x10d900) r4 = socket(0x2d, 0x2, 0x0) bind$xdp(r4, &(0x7f00000000c0)={0x2d, 0x0, 0x0, 0x48}, 0x10) socket(0x2d, 0x2, 0x0) 9.370281064s ago: executing program 4 (id=2300): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x6c) bpf$MAP_CREATE(0x0, 0x0, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000240), &(0x7f0000000340)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r2}, 0x20) 9.103931788s ago: executing program 4 (id=2303): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000800)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f00000009c0), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000a00)={0xfff, 0x0, 0x3, 0x14, 0x4}) r5 = syz_open_dev$dvb_demux(&(0x7f0000000a40), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000a80)={0x1, 0x1, 0x3, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x400, 0x0) 7.882455246s ago: executing program 4 (id=2304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000500)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@oldalloc}, {@noload}, {@user_xattr}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x200, 0x82) dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 7.82917912s ago: executing program 2 (id=2305): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f00000004c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r3, 0x0, 0x0, 0x0) 7.66348055s ago: executing program 3 (id=2306): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x600) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) socket(0x10, 0x803, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff000000009cc7000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r5) getsockname$packet(r5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r7 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder_logs/state\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x31) sendmsg$inet(r4, &(0x7f0000000540)={&(0x7f00000006c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x4}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.42298996s ago: executing program 2 (id=2308): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 6.366738317s ago: executing program 1 (id=2309): recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/146, 0x92}, 0x13f}], 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x9c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaeee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x31c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.27793506s ago: executing program 3 (id=2310): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'veth0_vlan\x00', @random="0135014010ff"}) socket$kcm(0x2, 0xa, 0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x80) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000540), 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0x0, &(0x7f0000000580)) close_range(r2, 0xffffffffffffffff, 0x400000000000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)=""/185, 0xb9}], 0x2}, 0x2}], 0x1, 0x2, 0x0) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x24) accept4(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80, 0x800) 5.683480859s ago: executing program 2 (id=2311): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x1000400, &(0x7f0000000000)=ANY=[], 0x2, 0x679, &(0x7f0000020540)="$eJzs3U1oHOf9B/DvrNay1gZH/sd2/C+BiBjSUlNbsnBa91K3lOJCKCE59FYQtoyF104qK0UJpVXf6LWHnEt68K2nQi+FgiClx/aWq46BQi7pRYXSLTM7u1rb683aWr04/XzMzPPMPPM885vfzsvuGrEB/mddO5/mZopcO//aerm8dX+xvXV/8U6vnuRokkbS7BYp7ibFh8nVdKf8f7myHq543H7eX7nyxkefbn3cXWrWU7V9Y1S/8WzUU+aSTNVlcuyvkxjven+8p1X0j7BM2Lle4uCgHUnSecAPz+y0jHZs19ctcBgU3edmX6e+smeryzwz9fuA7lOx+8x+pm0cdAAAAAAwaTOPrnpuO9tZz4mDCAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeVfXv/1e/+j/TX5ViLkXv9/+ne+1Jjh9gqKNNj7fZZmOvAwEAAAAAAACAvffSdraznhO95U6RRpKXq4VT1fx43sm9LGc1F7KepaxlLatZSDLb7fPvcja9vrS2trowRs9LOz2z0/PSmAG3hqybe7pjBwAAAAAAAIDPkZ/n2s7//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGFQJFPdoppO9eqzaTSTzCSZLrfbSP7eqz/LNg86AAAAANgHz21nO+s50VvuFNVn/jPV5/6ZvJO7WctK1tLOcm5U3wV0P/U3tu4vtrfuL94pp12HUY2Y7ncPw/d8ttqilZtZqdZcyPW8lXZupFH1LJ3txTM8rp99Uo79jdqYkd2oy/LIf1OXe29qjG1mq4wc6WZkoEOZjZOjM/HNTwaXNp5oT1nOQhr9b35O7UHOj9VlkRz/7uNzPjPmcBNUZ+Kl1Jm4NHD2nRmeif90ep2/+Mfff/9W++7tWzfvnd+f02jCjnY6/YN5+JxYHMjEC6PPic9BJgbNV5k43V++lu/kzZzPXF7Palbe7K2fy7ezlLUs1edzOZ8dnamrA/VGXq/K1uMjma5fl6kcGR1TflRFsjwQ08tV3xNZyffyVm5kOa9W/y5lIV/N5VzOlYFX+PQYV32juuSb46bx3JfqSnmAvx59oPuszOvJ+q7802TgrJ+v8n3ygTU7WUqRse6NP8jY98bmF+pKuY9f1OXh8HAmFgYy8XwvA0czLBO/q24r99p3b6/eWnp7zP29UpfldfSrfXsyj6M8X/6vfLGqpQfPjrLt+aFtC1XbqX5b45G20/22z7pSp+v3cI+OdKlqe2Fo22LVdnagbdj7LQAOvWNfPjbd+kfrb60PWr9s3Wq9NvOto187+uJ0jvzlyNeb81OvNF4s/pAP8pOdz/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDTu/fue7eX2u3l1YcqnU7nt49petrKVJ6k15//NMm9936PaIKHM9nKzJNs3DkcMQ+ttJIMafpXp9OZyC42Rpy0E6t0auP2an3G1bTbyj+L/X8pD/CmBOyLi2t33r547933vrLSe0Revnxl/srlVxcv3lxpL8935wccJLAndh76Bx0JAAAAAAAAAAAAMK79+HOCgz5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Nl27XyamymyMH9hvlzeur/YLqdefWfLZpJGkuLHSfFhcjXdKbMDwxWP7mGzmr+/cuWNjz7d+nhnrGbSGtXvScwk2Sgrc0mm6nIXNgbHu77r8Yr+EZYJO9ctm7sLESbgvwEAAP//UEUJlw==") syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x48e, &(0x7f00000018c0)={0x0, 0x2607, 0x0, 0x2, 0x29d}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3200}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x8522}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000028c0)=@gettaction={0x18, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002900), 0x200, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000029c0)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002a00)=[{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002a80)="a92e81d0991808e33c233016", 0xc}], 0x1, &(0x7f0000002ac0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000002b00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002b40)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000002b80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, r5, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000002c00)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000002c80), 0x651, 0x0) recvmmsg(r7, &(0x7f0000002cc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002d00)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002d40), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002d80)='/proc/timer_list\x00', 0x0, 0x0) recvmmsg(r4, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002e40)=""/21, 0x15}, {&(0x7f0000002e80)=""/4096, 0x1000}], 0x2}, 0x15}], 0x1, 0x40000141, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000003e80)=[@text32={0x20, &(0x7f0000003ec0)="260f01c80f01c3b924020000b803000000ba000000000f300f01c5660f38f61f66b8a7008ee02e0f08c4c1f92ee63681345200000000c4c1fdea7d00", 0x3c}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000003f00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 5.639884166s ago: executing program 1 (id=2312): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./pipe\x00', 0x1ff) io_setup(0x6, &(0x7f0000000d80)=0x0) io_submit(r0, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, 0xffffffffffffffff, 0x0, 0x0, 0xfbe, 0x0, 0x1}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0xffff, 0x200000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000340)=""/41) mount(0x0, &(0x7f0000000040)='./pipe\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf250b0000000c000580070001"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000400)={0x1f00, 0x9, 0x8, {0x1, 0x10}, 0x5, 0x5c6}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x1, 0x7d312eb190dc5e7e, 0x1, 0x3}, &(0x7f0000000180)=0x18) mount(&(0x7f00000001c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./pipe/nfs/clnt0/gssd\x00', 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000680)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[], 0x26}}, 0x0) write(r6, &(0x7f0000000300)='\x00\x00\x00\x00', 0x4) 5.142521128s ago: executing program 5 (id=2313): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x16) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="0040818293bb09641cc805d086fa0417dada7f19c35c2111ca986dd9dfb3125357a4789868336e092d5084bbb3b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000340)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40002180, 0x0) sendmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0xa9cc7003, &(0x7f0000001e80)=[{&(0x7f0000001ec0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001f00)={0x1, &(0x7f0000001f40)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f00000020c0), 0x1fffffffc000, 0x10d900) r5 = socket(0x2d, 0x2, 0x0) bind$xdp(r5, &(0x7f00000000c0)={0x2d, 0x0, 0x0, 0x48}, 0x10) socket(0x2d, 0x2, 0x0) 4.216741901s ago: executing program 1 (id=2314): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x6c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000240), &(0x7f0000000340)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r2}, 0x20) 4.215063019s ago: executing program 2 (id=2315): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 3.008895525s ago: executing program 3 (id=2316): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000540), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]}) 2.96504113s ago: executing program 1 (id=2317): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000140)={0xf, {"a2e3ad21e08eeb661b5d520987f70e06d038e7ff7fc6e5539b0d650e8b089b3f393b68090890e0878f0e1ac6e7049b3b43959b649a240d5b67f3988f7ef319520119ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000019c0)={0x3, 0x0, &(0x7f0000001880)=""/124, &(0x7f0000001540)=""/47, &(0x7f0000001940)=""/80, 0x2000}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001180)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000001200)=0x10) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000013c0), 0x400000000a882, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f00000014c0)="09000300010000", 0x7) r7 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x40010, r7, 0x745ac000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) getsockopt$inet_mreqn(r7, 0x0, 0x0, &(0x7f0000001580)={@rand_addr, @multicast2, 0x0}, &(0x7f00000015c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001600)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000016c0)={'syztnl0\x00', &(0x7f0000001640)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x5, 0x20, @loopback, @mcast1, 0x0, 0x40, 0xffff, 0x93b}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001800)={&(0x7f00000000c0), 0xc, &(0x7f00000017c0)={&(0x7f0000001a00)={0xac, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x44850}, 0x5) madvise(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) setsockopt(r4, 0x84, 0x7f, &(0x7f0000001240)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001280)={0x1, [0x0]}, &(0x7f00000012c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000001300)={r12, 0x1}, &(0x7f0000001340)=0x8) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r3, 0x84, 0x82, &(0x7f0000001380)={r12, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001400)={'wg2\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000001440)={@local, r13}, 0x14) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)=ANY=[], 0x50}}, 0x4000000) 2.963320477s ago: executing program 2 (id=2318): gettid() timer_create(0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000380)={{r0, r1+10000000}}, &(0x7f00000003c0)) r2 = syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f00000002c0)=0x312) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f0000000440)={[{@noikeep}, {@gqnoenforce}, {@noattr2}, {@dax_always}, {@pqnoenforce}, {@inode64}, {@nogrpid}]}, 0x1, 0x97d2, &(0x7f0000009dc0)="$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") quotactl$Q_QUOTAOFF(0x80000500, &(0x7f0000009c00)=@loop={'/dev/loop', 0x0}, 0xee00, 0x8cffffff00000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x56, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000009c40)={0x0, 0x0, &(0x7f0000009c80)={&(0x7f0000009cc0)={0x2, 0x9, 0xff, 0x7, 0x2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}}, 0x8040) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000009d00)={0x1f, 0x0, @fixed}, 0xe) clock_gettime(0x0, &(0x7f0000009d40)) clock_gettime(0x4, &(0x7f00000004c0)) 2.77356815s ago: executing program 4 (id=2319): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x5) write$dsp(r0, &(0x7f0000000280)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f00000002c0)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000340)="cd", 0x1) r1 = landlock_create_ruleset(&(0x7f0000000380)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) syz_clone3(&(0x7f00000003c0)={0x100a43080, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) 2.519923551s ago: executing program 3 (id=2320): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x600) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) socket(0x10, 0x803, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff000000009cc7000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r5) getsockname$packet(r5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r7 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder_logs/state\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x31) sendmsg$inet(r4, &(0x7f0000000540)={&(0x7f00000006c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x4}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.358893049s ago: executing program 5 (id=2321): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000001280)='syzkaller\x00'}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x2, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) 2.28193464s ago: executing program 3 (id=2322): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/pm_test\x00', 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.487515931s ago: executing program 1 (id=2323): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]}) setrlimit(0x5, &(0x7f0000000540)={0x7, 0x8001}) 914.305073ms ago: executing program 5 (id=2324): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]}) setrlimit(0x5, &(0x7f0000000540)={0x7, 0x8001}) 641.05695ms ago: executing program 2 (id=2325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe269}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000540)={0x28, 0x7, r2, 0x0, &(0x7f0000000580)="4e68a771dcfc28b565084ca9fe86d644a6aa4ef61ad682c2802e13bafd45337873a8df4a6400421abdb58e85fa8ff545ff3526b4c435875cf7762a73e9d37c6455753265c4cbb33aeacf5335662e1c5cbe20ce750d59ca382c47c23ea6b898d8488e4e5be3ecd9b176279bdf024015d5ccca8196440fce4139aac11aab9cd074ed4fcfb4d632acf8944a6a02b105887c3cd1097043402a3f53d54a940c4c0b7ff0654aa22b6a25323277b53901113cb05b3ae51c30a9e617c5c0671c5aaac8eab690d3524408eb3bfa9bf7ded258afa414dad000c33250f7938d21f64a1f5333afd53e7f0233c88aa1ab167246cd2a670ac2410aba4c0ccdea31877d21df2244681ab9362f5f34bf2f238a3d5452b53ab275ed96e869f14fbead2e10656a18c71043a7075d3e7ba56a710977aeef060e7c922f77ed377a43fb7a393eafa498a0a3b90ea200db94ed39a58b171ad41a2b8c210454efd48d5dd2758c3b08fb59225d5df44f0e3cc09fec23fc8e422a183209e2d1b257cf4b2705720d7b32fa0ae4c849c4fcad349201ec5c67a6b57fa96daed1f75e05545b663a338cabe709a861093bf2fbd95953d5561ec0e76292e8707ef5f2a26b56b9ac845091047d7571f0f2a980aab8d62c360d45121198d54314e7445088bf08ada61f9cd35dab455878d4d0c649ef79d456e68b9d2b0530478b31294542a1c464678e00a6aeed9704c9c59bddf3a4c4d9a41b8fe56491ccb5a59c54f3d596cff6ea200b26c8f7fdd423bbd306124b3706c508ca31ded4fa2b96a1d0ac77fa66264883ee138b3acc854d8e1913da3ca2a19a451fc0a880b27d3544fcac868b8c30733d0c47f5325d2968943393e051178af3661f1e8ac1de4000ccac530e2591fe40ce00ddfad475a28cdbe92d36b299ea08dd93f8070a283f0a19eefe893234918a7816d0507a31e4fee3e037bb29b98f45368e69f2da04656681d8b0ff55a3927f1c185d669ffa6b31ffcd51d68f44082fd31f309345924b3ebb7440c4ba871865e1ce5fbdad694a3163b6f827bb6b0141f08a9f846234c1944add41098a1ab9272c3020a97710b038f07ccb70adc6f797df443aa8bf2a475f04aab70e9d8adc9f6483ab3f0e5ab66b3670a737dd810af18517eaf921a7a1e9fe8bd3c9449c2f9a5329c07bfd272ddb6ce04fafabc3f0c8f39960595865348f0fcf24cd2649708ccccd9de288a3f6e54ffd33dce5bf4c5f97c7499c47e898dbde81c97b49436749a0952f84f4daa6504374b4b14ca13768b2d7778beadb841e1e0a611a6e2ddde58317d1a8aca2c8e2c32891fe64c721ca2f032eeb25945c7020e7352690b71762bbc2c971ed3426c3c47627be3c15427ea219a7a091b82d7413d180a8a6da6c0da2e09a628e507714888070edf94c8804c24875143d56d6f9035a15fe7c16d23b757c36868e0b95cacf3cd81a63ddef0f46ec18833b60812f2ee31f37c666737be87049b71d301b3a09845570e5c9c0e9e476944415526e9eb086f866408a272a8d5975953e792075b9c4d5c34319f21625f055c5ac45b25f05b123f0730f2b7fc899474ef05c2efa2bedc3c892ffed8c1bb1322fae3d48933a43d2c9abdcaa6c6bbd8f41991c0c53aee49415b350096f14d273037f20714820f0ebae1873e9ba57c562b2586f28123831e59dbd0fc8220544c0525a29d80cdf70ae1c8b953a5fd776f961484efdf0a4b3c7873e1baa7e81d94c8a502d34f37018844d4f3a56107f7f137b163444085d4008324290e34aa09be8a58ace5a9103860aa3218ad7011a9299f0462255bad93a163fb70b5c08c9de6f108af37117a3803c2ebef55d0c28a353b77da79180fd7fbaae7ccf96479b18038e4a686ed6ae49490ff7fd2fa2b8433442ad5f84d155a8aeb4d241cc18b42cded8c9ff0e6a53face60ddfc401f46469acdd65d7da3dcd022d0b76ba60ac30241077838bb32a4e2fc60526f9f520fc7f0408965a97e03e17bb04bb5cd308455b6b0e93a050adf82aed9b2e2ea5c98d44e712aadfcdd296f9f9672083bdd54b71ebb178cff38e25cff0be72e9c94f0a32648f5510f280a134c94dcd8f5d12621124049e029dc726e2f11cba5654b13b05e4165f67e786724c9d0ee87a308e8f70bfe569a536213bf5b76601f7667627243944752b11eb994856f6a43540605487dbe85a29376a10f60a6f6ce6e17ca93505c44b1b7368dca3f78440074ff25cf43e56fab1ba5527d286089e9dc3927367a92dec17cf7571f36425c8001f2ea2e5872998458872c6aa72acaa47d4295eab36ce35ecadea72c15313dcd0b870c5ec9d62d578dab86fb08e9372be78f7a0cba5e379373c4b7fa53e12a125883c8a40b0593f7035905fc48bb3a72e05a89f9eaf42a09b0bfceb545f1f2a5f8104dee9afab6dd0d018f4c6013a69d8703769c050f1746862a26a524920bd5bab74522d2d5853de4496bdddcf8708744618eb562ac5c5633d8c10784e262d414791d86b3dd62d63f9e6853d3e243d841face4ba9636d7fad8b94f85d198628427bab22c49ebd205f908e68b11004a4a22b7dfea9c60c8293372a69979ec2a14deff1171ea08a78a4274e11178fb39b11f47f384b5919b4b479e55aaf6af16c347dd410db04603952807d61c357cc33811b85841e9e94ef3e32c142aa5e3627ac462004fb3d5f54766d5ee35ad3279ad9332a6016467dbed78a2b40a985b8cd7282a77d9b04c7a66a220d000a4bdf5ab411c7fde7b86518c95902b3b01afd078b948767d1b4f4387303b99d1523ed33c43f56e7bb71583480e9d2b21d187e4da74b06b8a37e48d3792b0d22067601aa27ca7f36635c3b2fbce72ae68d27ae3db7c9b645664be76260125a6fe036c54c30ad4e6bf8de8a5fb4680e07ea45ea7eb596b1ec06c0ef6db790e79404444722bd321fd26abaf0cc4869a3dbfd8ee8fa76c84d903ef3a6365f06a5597b624327ec60a05059839709f10b4b18e2061656a4faeb8a37a1f46c17c73941d1108a67d396f018a4235711570c1402d12d9b213a86630342a4412765df4221e9a12da43f77d971613fee168a03389d5c9ed49c9afe036e4586f299632a0753a1326e94079ab8210f7ac6449dc242444266cbe04c9f401f6f813cbe9ff5c3a9dd7bbf7a49207e3ad3b513bf161a30cfcf52f1f8bbd09e1fbde8c8e6e007e4da9b544365dc2158c116db12bc983026600431895a2eef6f8a3cf6543f89c1e373a2c89a8e9841c3a13a905597212fc7a060d3dbbd5c7d9be866afbb986043b46f1b90e372822c33b7fc1e077697dd350b26101902da0254f1a8f0f8d416b44780d36d162d5b047eaf3c9b49da0e200e293cdd3658a00ae6532dbc59d7a8595e1efa25df5851724694eea421a1f8abc0965b5738cce37fb9b4b76243b6a2e575c613d6d23d4db7850dc94f26d55e9049dac0ac427a94318ef712ebb8923ed915502c0f3ae5901a374ec85f3aa6134984b7be929fa212dbaa942670b319c41b24059b0f9a4dfcd1245fbd03717bf161386e0813a26bc16a2479783309892d74fe8aa2f6edca2ce530b4663ba7a0700b488e5f5422b5e8839ff3c5de827cdea63130abe38b3e6cf5ec5643a20f1d988b74948d9fd0262220a895562fc8c99bdbccdcc44d079ffdb3655659bfe33b8133f5d18799de8abe89e4d73644f180a2a5003c8128bb40cc5939b74ee31fb4bc409bd4a881abcdf7124ae4fb23fea9ec698fef5f02296705ee75df32b81b0d3fb6614863e5a495ee025e4d55dd11d831df40c5dba279f5fe0251236fa72f8c2046c07255fcd048069a47c3006f8686db04eac43c03d32fda3481e87ba9f5a99e89f1f7564366dee07ba56ef0bccb526e4c8b55c748fa733902f44fb77e810a26d91df5333630d4d460d56703ff2bd75a3483220f35b8e2e29bdb86b9674a948d65125a29769388c92f54763b59d40bca775ee9c1cee9294fa1a5af6d8c23203f21ea749777c4d8deac145bd88061ae135c35520f4c1a1946a15b7c4a69eedee4ccaa9b2fb546c3709bd3223f22a5c343650e9126cbffbaac164afbb248008ab1c805046d0b82e9303be476aea222a975a0b43d9d430f440fbab3847551bb1fd8b40aefc33bbf86e4a1d7db8eed507c51f3267cd9475827c122ba5a6b5c54a9b667eb66d5f4a454f853f4fa14677b454067c694df6b2a2b4d844a845f494995a6e92d27a1735b7439c188afa4d4819d03fda7ec1d369bb75026109313115ec3fd2ee2e6acff15ddf2f2b7abb2fa3423f09ba031cb05747d8c596d9eb62ad48967a30e43ce51b04c137192ed7272fa886ea2b53f6a635c23a2017d1cd576ffe7544e2e1d7c6071fb05fa35cb1f21a5e83c6326868332c4c0aa020bd25f49fb52104cca3d65b2b8db836b1bd3b054f21b53e2564d921d8072a8a1503a5de6c215cf8bf46de54980e73e4c0a10da35c5df30e2f8b1e8f949eedf1d922818bdc0ba34ea3442dd6d693264b74f09b33d1a57faa591ce3dcadabc3a4af7319a7229d2af47c5ae16b7d216b0a5f9f09f5dddf64eb7a46c8e913571ad320a42dd341b3786dc3c6f158b39213d976945a75df236fe35d88d29cbda6163afa1ba68c0e2c05364460bd1c2cb8abaaf74667125ea8fa33df3bd8926f513df44162652e187556ab10df62d9b4d7a17d41d6e0e3cb0b08d51684b47a2818b8195590d97671c9812609a0c82d1423d9f47706dd9a1c86d34e0a4f66577d3aafdf949ec49a12bcbc2595859bdb40699217f690ed28a205686936ed9731e949a765ef1d53bfae97f81653d80c325a549a1fd178b9332f18c8d2d75b53cce72d088e3fc779cfd5604001b569028acd1279bf4796ba9796cd417693c438ff786b0d3c0349973a21cfe23a541c183838d4b580d6c375340366c37bdd8ec7915727f2dfba1ac39a0e78ebf54bc1178117b66ad92a8b9e400dd91d83a19d9b225cf48dcf11cdf97627dcbeb08259bc8e952bf023a8b2fa7b83c34b37ae01f5229e98dac750adfc3c5cea1f78ea4c9b22e7aed67d33e2b8dce27c8bd3145ed6257c79bff61587cb758d1569abb", 0xe00}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x1e700000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x20000002, 0x0, 0x0, 0x400000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r9 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f00000004c0)={r9, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000500)=0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe8c81) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040), 0x1910047, &(0x7f0000000340)=ANY=[@ANYRESOCT=r7, @ANYRES8=r7, @ANYBLOB="3c67726f75704f69643d6cd69512636cc692bae35e5b0544cfe75faa9f2ad346787ba3edf08dce9e759dec9483d8fbe579b13be376ed0b79ccb45fc860546578ee6508eb6275"]) getpid() 100.458397ms ago: executing program 3 (id=2326): recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/146, 0x92}, 0x13f}], 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaeee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x31c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 1 (id=2327): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./pipe\x00', 0x1ff) io_setup(0x6, &(0x7f0000000d80)=0x0) io_submit(r0, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, 0xffffffffffffffff, 0x0, 0x0, 0xfbe, 0x0, 0x1}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0xffff, 0x200000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000340)=""/41) mount(0x0, &(0x7f0000000040)='./pipe\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf250b0000000c000580070001"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000400)={0x1f00, 0x9, 0x8, {0x1, 0x10}, 0x5, 0x5c6}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x1, 0x7d312eb190dc5e7e, 0x1, 0x3}, &(0x7f0000000180)=0x18) mount(&(0x7f00000001c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./pipe/nfs/clnt0/gssd\x00', 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000680)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[], 0x26}}, 0x0) write(r6, &(0x7f0000000300)='\x00\x00\x00\x00', 0x4) kernel console output (not intermixed with test programs): 592.971993][T10532] [drm] Initialized udl on minor 1 [ 592.990210][ T5784] usb 6-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 592.991418][ T5784] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.991445][ T5784] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.991479][ T5784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.236549][T10532] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 593.236952][T10532] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 593.241621][ T6408] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 593.242207][T10532] usb 2-1: USB disconnect, device number 29 [ 593.243713][ T6408] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 593.243902][ T6408] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 593.469890][ T5784] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 593.486575][T11798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1574'. [ 593.486578][ T5784] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 593.486608][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1574'. [ 593.486622][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1574'. [ 593.491833][ T5784] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.0004/input/input11 [ 593.695705][T10532] usb 6-1: USB disconnect, device number 31 [ 594.024897][T11808] loop3: detected capacity change from 0 to 2048 [ 594.079819][T11808] loop3: p1 < > p3 [ 594.088699][T11808] loop3: p3 size 134217728 extends beyond EOD, truncated [ 594.267451][T11814] MTRR 1 not used [ 595.963880][ T5784] usb 5-1: USB disconnect, device number 30 [ 595.980760][T11835] loop3: detected capacity change from 0 to 256 [ 596.007092][T11835] vfat: Unknown parameter 'utfÀ£êþIÜ`hëž8' [ 596.363246][T11839] loop3: detected capacity change from 0 to 1024 [ 596.409851][T11839] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 597.003113][T11837] sctp: [Deprecated]: syz.5.1589 (pid 11837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.003113][T11837] Use struct sctp_sack_info instead [ 597.023642][T11839] EXT4-fs error (device loop3): ext4_map_blocks:951: inode #3: block 1: comm syz.3.1588: lblock 1 mapped to illegal pblock 1 (length 1) [ 597.023683][T11839] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 597.023865][T11839] Quota error (device loop3): write_blk: dquota write failed [ 597.023887][T11839] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 597.023919][T11839] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.1588: Failed to acquire dquot type 0 [ 597.023933][T11839] loop3: lost filesystem error report for type 5 error -117 [ 597.024163][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 597.024181][ C1] EXT4-fs (loop3): initial error at time 1792877838: ext4_map_blocks:951: inode 3: block 1 [ 597.024213][ C1] EXT4-fs (loop3): last error at time 1792877838: ext4_acquire_dquot:7120 [ 597.038757][T11839] EXT4-fs error (device loop3): ext4_free_blocks:6717: comm syz.3.1588: Freeing blocks not in datazone - block = 0, count = 4096 [ 597.038776][T11839] loop3: lost filesystem error report for type 5 error -117 [ 597.039539][T11839] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.1588: Invalid inode bitmap blk 0 in block_group 0 [ 597.039557][T11839] loop3: lost filesystem error report for type 5 error -117 [ 597.051677][T11839] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 597.051698][T11839] loop3: lost filesystem error report for type 5 error -117 [ 597.082799][T11839] EXT4-fs (loop3): 1 orphan inode deleted [ 597.083765][T11839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.205847][T10634] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 597.266138][T10634] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 597.266174][T10634] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:20: Failed to release dquot type 0 [ 597.323212][ T5647] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.469447][T11859] MTRR 1 not used [ 600.195244][ T6408] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 600.255913][ T5784] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 600.304867][T11860] loop5: detected capacity change from 0 to 32768 [ 600.334090][T11856] lbmIODone: I/O error in JFS log [ 600.340173][T11856] *** Log Format Error ! *** [ 600.340706][T11856] lmLogInit: exit(-22) [ 600.340743][T11856] lmLogOpen: exit(-22) [ 600.359419][ T6408] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 600.360833][ T6408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.363836][ T6408] usb 4-1: config 0 descriptor?? [ 600.405809][ T5784] usb 2-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 600.408391][ T5784] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.408419][ T5784] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.408452][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.596982][ T6408] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 600.814693][ T6408] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 600.814713][ T6408] [drm] Initialized udl on minor 1 [ 600.849495][ T5784] wacom 0003:056A:033B.0005: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 600.865244][ T5784] wacom 0003:056A:033B.0005: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 600.869446][ T5784] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0005/input/input14 [ 601.073819][ T5784] usb 2-1: USB disconnect, device number 30 [ 601.091777][T11877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1600'. [ 601.091811][T11877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1600'. [ 601.091825][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 601.096862][ T5783] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 601.112608][ T6408] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 601.112935][ T6408] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 601.148820][ T6408] usb 4-1: USB disconnect, device number 18 [ 601.156042][T10532] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 601.443527][T11884] loop2: detected capacity change from 0 to 256 [ 601.455679][T11884] vfat: Unknown parameter 'utfÀ£êþIÜ`hëž8' [ 601.756204][T11888] loop2: detected capacity change from 0 to 1024 [ 602.389153][T11888] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 602.411545][T11888] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #3: block 1: comm syz.2.1602: lblock 1 mapped to illegal pblock 1 (length 1) [ 602.411578][T11888] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 602.412272][T11888] Quota error (device loop2): write_blk: dquota write failed [ 602.412305][T11888] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 602.412369][T11888] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.1602: Failed to acquire dquot type 0 [ 602.412397][T11888] loop2: lost filesystem error report for type 5 error -117 [ 602.412917][T11888] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.1602: Freeing blocks not in datazone - block = 0, count = 4096 [ 602.412936][T11888] loop2: lost filesystem error report for type 5 error -117 [ 602.413730][T11888] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.1602: Invalid inode bitmap blk 0 in block_group 0 [ 602.413757][T11888] loop2: lost filesystem error report for type 5 error -117 [ 602.414026][T11888] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 602.414047][T11888] loop2: lost filesystem error report for type 5 error -117 [ 602.414162][ C0] EXT4-fs (loop2): error count since last fsck: 5 [ 602.414180][ C0] EXT4-fs (loop2): initial error at time 1792877844: ext4_map_blocks:951: inode 3: block 1 [ 602.414214][ C0] EXT4-fs (loop2): last error at time 1792877844: ext4_free_inode:363 [ 602.428711][T11888] EXT4-fs (loop2): 1 orphan inode deleted [ 602.429851][T11888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.545354][ T9169] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 602.557135][ T9169] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 602.557170][ T9169] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:18: Failed to release dquot type 0 [ 602.733036][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.876639][T11895] MTRR 1 not used [ 608.474562][ T26] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 608.643033][ T26] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 608.650047][ T26] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 608.650122][ T26] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 608.669627][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.669723][ T26] usb 4-1: Product: syz [ 608.669920][ T26] usb 4-1: Manufacturer: syz [ 608.669972][ T26] usb 4-1: SerialNumber: syz [ 611.176138][ T26] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 611.176167][ T26] cdc_ncm 4-1:1.0: bind() failure [ 611.221423][ T26] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 611.221463][ T26] cdc_ncm 4-1:1.1: bind() failure [ 611.241724][T11943] sctp: [Deprecated]: syz.4.1619 (pid 11943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.241724][T11943] Use struct sctp_sack_info instead [ 611.406580][ T26] usb 4-1: USB disconnect, device number 19 [ 612.576988][T11939] loop5: detected capacity change from 0 to 32768 [ 612.625545][T11939] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 612.680140][T11939] XFS (loop5): Ending clean mount [ 614.125806][ T26] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 614.145532][T11966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1623'. [ 614.145568][T11966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1623'. [ 614.145606][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 615.188022][ T6079] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 615.424065][T11984] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 615.616272][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 615.775115][ T10] usb 4-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 615.776263][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.776282][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.776305][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.248733][ T10] wacom 0003:056A:033B.0006: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 616.303842][ T10] wacom 0003:056A:033B.0006: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 616.329218][ T10] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0006/input/input17 [ 616.477619][ T31] usb 4-1: USB disconnect, device number 20 [ 616.500297][T11993] fido_id[11993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 617.136187][ T5784] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 617.291680][ T5784] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 617.320349][ T5784] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 617.320454][ T5784] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 617.381462][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.381552][ T5784] usb 3-1: Product: syz [ 617.381598][ T5784] usb 3-1: Manufacturer: syz [ 617.381642][ T5784] usb 3-1: SerialNumber: syz [ 619.539340][T12003] netlink: 'syz.1.1631': attribute type 3 has an invalid length. [ 620.432050][ T5784] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 620.449430][ T5784] cdc_ncm 3-1:1.0: bind() failure [ 620.490540][ T5784] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 620.490568][ T5784] cdc_ncm 3-1:1.1: bind() failure [ 620.524447][ T5784] usb 3-1: USB disconnect, device number 32 [ 620.742392][T12009] loop3: detected capacity change from 0 to 2048 [ 620.783976][T12009] loop3: p1 < > p3 [ 620.793073][T12009] loop3: p3 size 134217728 extends beyond EOD, truncated [ 622.537143][ T5784] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 622.593715][T12016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1635'. [ 622.593750][T12016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1635'. [ 622.593764][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 623.259002][T12034] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 623.296499][T12024] loop1: detected capacity change from 0 to 32768 [ 623.436619][T12024] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 623.526677][T12024] XFS (loop1): Ending clean mount [ 623.923715][T12048] netlink: 'syz.4.1643': attribute type 3 has an invalid length. [ 624.048458][T12052] MTRR 1 not used [ 624.369235][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.369357][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.948484][ T5648] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 625.427853][ T54] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 626.280291][ T54] usb 3-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 626.283695][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.283736][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.472524][T12073] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1650'. [ 627.114274][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 627.125841][ T54] usbhid 3-1:1.0: can't add hid device: -71 [ 627.126073][ T54] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 627.294399][ T5783] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 627.389974][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 627.390194][ T10] usb 5-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 627.423850][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.423873][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 627.490534][ T5783] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 627.735709][ T5783] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 627.735793][ T5783] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 627.783663][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.783754][ T10] usb 5-1: Product: syz [ 627.783800][ T10] usb 5-1: Manufacturer: syz [ 627.783844][ T10] usb 5-1: SerialNumber: syz [ 627.840116][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.840153][ T5783] usb 2-1: Product: syz [ 627.840237][ T5783] usb 2-1: Manufacturer: syz [ 627.840332][ T5783] usb 2-1: SerialNumber: syz [ 628.173911][ T54] usb 3-1: USB disconnect, device number 33 [ 629.124397][ T10] usb 5-1: selecting invalid altsetting 1 [ 629.451761][ T5783] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 629.451790][ T5783] cdc_ncm 2-1:1.0: bind() failure [ 629.501508][ T5783] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 629.501536][ T5783] cdc_ncm 2-1:1.1: bind() failure [ 629.552292][ T5783] usb 2-1: USB disconnect, device number 31 [ 629.578269][T12093] loop2: detected capacity change from 0 to 1024 [ 629.599761][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 629.724388][T12093] tc_dump_action: action bad kind [ 629.725557][T11429] udevd[11429]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.695666][T12096] sctp: [Deprecated]: syz.3.1654 (pid 12096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 630.695666][T12096] Use struct sctp_sack_info instead [ 630.759572][ T54] usb 5-1: USB disconnect, device number 33 [ 631.632773][T12114] MTRR 1 not used [ 632.143642][T12118] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 632.652402][T12134] loop4: detected capacity change from 0 to 1024 [ 632.711336][T12137] netlink: 'syz.1.1666': attribute type 1 has an invalid length. [ 632.759589][T12137] 8021q: adding VLAN 0 to HW filter on device bond4 [ 632.762229][T12134] tc_dump_action: action bad kind [ 632.794188][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 632.915078][T12137] bond3: (slave veth0_to_bond): Releasing backup interface [ 632.955482][T12137] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 632.996156][ T10] usb 3-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 633.566393][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.566437][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.935434][T12149] sctp: [Deprecated]: syz.1.1669 (pid 12149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.935434][T12149] Use struct sctp_sack_info instead [ 633.937771][T12151] netlink: 'syz.5.1670': attribute type 3 has an invalid length. [ 634.226114][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 634.674641][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 634.674811][ T31] usb 4-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 634.679086][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.679176][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.734922][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 634.735283][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 635.022035][ T10] usb 3-1: USB disconnect, device number 34 [ 635.044303][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.044327][ T31] usb 4-1: Product: syz [ 635.044340][ T31] usb 4-1: Manufacturer: syz [ 635.044354][ T31] usb 4-1: SerialNumber: syz [ 635.209965][ T31] usb 4-1: selecting invalid altsetting 1 [ 635.418740][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 635.508138][T12166] MTRR 1 not used [ 635.515574][T11429] udevd[11429]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.879524][T12168] loop1: detected capacity change from 0 to 32768 [ 635.911606][T12168] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 635.961281][T12168] XFS (loop1): Ending clean mount [ 636.011270][T12186] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 636.022034][T12186] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 636.156451][ T5648] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 636.206436][T12188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1667'. [ 636.206464][T12188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1667'. [ 636.206475][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 636.339952][T12192] loop1: detected capacity change from 0 to 1024 [ 636.376876][T12192] tc_dump_action: action bad kind [ 637.850427][ T31] usb 4-1: USB disconnect, device number 22 [ 637.967021][T12204] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1683'. [ 638.684369][ T54] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 638.812950][T12225] loop4: detected capacity change from 0 to 2048 [ 638.837094][T12225] loop4: p1 < > p3 [ 638.849577][ T54] usb 6-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 638.850507][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.850548][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.851809][T12225] loop4: p3 size 134217728 extends beyond EOD, truncated [ 639.533396][ T54] usbhid 6-1:1.0: can't add hid device: -71 [ 639.533491][ T54] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 639.559364][ T54] usb 6-1: USB disconnect, device number 32 [ 639.620745][T12233] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 639.621362][T12233] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 639.624224][ T5783] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 639.774859][ T5783] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 639.777293][ T5783] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 639.777314][ T5783] usb 3-1: config 0 has no interface number 0 [ 639.777350][ T5783] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 639.777375][ T5783] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 639.777415][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.782199][ T5783] usb 3-1: config 0 descriptor?? [ 639.783338][T12231] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 639.871452][ T5783] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 640.027997][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 640.028020][ T5783] usb 3-1: USB disconnect, device number 35 [ 640.051588][T12227] loop4: detected capacity change from 0 to 32768 [ 640.082421][T12227] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 640.181223][T12227] XFS (loop4): Ending clean mount [ 640.381218][T12247] loop5: detected capacity change from 0 to 1024 [ 640.488057][T12247] tc_dump_action: action bad kind [ 640.552446][T12246] afs: Unknown parameter 'measureetap' [ 642.148956][ T5642] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 642.544599][ T54] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 642.724617][T12258] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1695'. [ 642.724658][T12258] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1695'. [ 642.724673][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1695'. [ 643.026372][ T5784] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 643.156718][ T5784] usb 3-1: device descriptor read/64, error -71 [ 643.316164][T12264] vivid-000: kernel_thread() failed [ 643.334781][T12273] loop4: detected capacity change from 0 to 2048 [ 643.394411][ T5784] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 643.396920][T12273] loop4: p1 < > p3 [ 643.419649][T12273] loop4: p3 size 134217728 extends beyond EOD, truncated [ 643.460542][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1697'. [ 643.528559][ T5784] usb 3-1: device descriptor read/64, error -71 [ 643.636509][ T5784] usb usb3-port1: attempt power cycle [ 643.984779][ T5784] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 644.004760][ T5784] usb 3-1: device descriptor read/8, error -71 [ 644.244178][ T5784] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 644.267302][ T5784] usb 3-1: device descriptor read/8, error -71 [ 644.324216][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 644.375546][ T5784] usb usb3-port1: unable to enumerate USB device [ 644.477077][ T10] usb 6-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 644.478094][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.478134][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.653456][T12296] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 644.662763][T12296] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 644.761083][T12299] loop3: detected capacity change from 0 to 1024 [ 644.820013][T12299] tc_dump_action: action bad kind [ 645.666519][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 645.666613][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 645.672684][ T10] usb 6-1: USB disconnect, device number 34 [ 645.860668][T12303] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 645.961960][T12303] 8021q: adding VLAN 0 to HW filter on device bond5 [ 645.982165][T12306] bond4: (slave veth0_to_bond): Releasing backup interface [ 646.029426][T12306] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 646.236709][ T26] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 646.386845][ T26] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 646.397430][ T26] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 646.397446][ T26] usb 3-1: config 0 has no interface number 0 [ 646.397469][ T26] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 646.397485][ T26] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 646.397510][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.451078][ T26] usb 3-1: config 0 descriptor?? [ 646.461865][T12309] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 646.480385][ T26] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 646.544447][ T54] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 647.266745][T12319] loop1: detected capacity change from 0 to 2048 [ 647.285373][ T26] usb 3-1: USB disconnect, device number 40 [ 647.285520][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 647.329127][ T54] usb 5-1: unable to get BOS descriptor or descriptor too short [ 647.329168][ T54] usb 5-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 647.331397][ T54] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.331418][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 647.380492][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.380515][ T54] usb 5-1: Product: syz [ 647.380530][ T54] usb 5-1: Manufacturer: syz [ 647.380543][ T54] usb 5-1: SerialNumber: syz [ 647.386330][T12319] loop1: p1 < > p3 [ 647.420523][ T54] usb 5-1: selecting invalid altsetting 1 [ 647.420759][T12319] loop1: p3 size 134217728 extends beyond EOD, truncated [ 647.506358][ T54] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 647.572607][T11518] udevd[11518]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.736744][T12323] afs: Unknown parameter 'measureetap' [ 647.753070][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1713'. [ 648.066311][T12318] loop5: detected capacity change from 0 to 32768 [ 648.066926][T12318] xfs: Deprecated parameter 'noikeep' [ 648.066937][T12318] XFS: noikeep mount option is deprecated. [ 648.066951][T12318] xfs: Deprecated parameter 'noattr2' [ 648.066959][T12318] XFS: noattr2 mount option is deprecated. [ 648.098894][T12318] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 648.108212][T12318] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 648.149561][T12318] XFS (loop5): Ending clean mount [ 648.165213][T12318] XFS (loop5): Quotacheck needed: Please wait. [ 648.238500][T12318] XFS (loop5): Quotacheck: Done. [ 648.300647][ T6079] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 648.438013][T12343] loop2: detected capacity change from 0 to 1024 [ 648.481160][T12343] tc_dump_action: action bad kind [ 648.617105][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1710'. [ 648.617130][T12341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1710'. [ 648.617140][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1710'. [ 649.470223][T12346] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 649.474230][T12346] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 649.984238][ T54] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 650.144702][ T54] usb 2-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 650.145827][ T54] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.145866][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.489839][ T5783] usb 5-1: USB disconnect, device number 34 [ 650.785804][ T54] usbhid 2-1:1.0: can't add hid device: -71 [ 650.785896][ T54] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 650.836702][ T54] usb 2-1: USB disconnect, device number 32 [ 652.654830][T12384] loop1: detected capacity change from 0 to 2048 [ 652.698715][T12384] loop1: p1 < > p3 [ 652.705473][T12384] loop1: p3 size 134217728 extends beyond EOD, truncated [ 652.833902][T12376] loop4: detected capacity change from 0 to 32768 [ 652.900867][T12375] lbmIODone: I/O error in JFS log [ 652.900880][T12375] *** Log Format Error ! *** [ 652.901275][T12375] lmLogInit: exit(-22) [ 652.901311][T12375] lmLogOpen: exit(-22) [ 652.975198][ T31] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 653.089063][T12388] loop1: detected capacity change from 0 to 1024 [ 653.125578][ T31] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 653.129123][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 653.129138][ T31] usb 4-1: config 0 has no interface number 0 [ 653.129162][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 653.129179][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 653.129204][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.140320][ T31] usb 4-1: config 0 descriptor?? [ 653.142446][T12386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 653.217799][T12388] tc_dump_action: action bad kind [ 653.223521][ T31] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 653.427639][ T5783] usb 4-1: USB disconnect, device number 23 [ 653.427800][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 654.504931][T12391] afs: Unknown parameter 'measureetap' [ 654.547799][T12396] vivid-002: ================= START STATUS ================= [ 654.547812][T12396] vivid-002: FM Deviation: 75000 [ 654.547829][T12396] vivid-002: ================== END STATUS ================== [ 654.554810][T12396] loop1: detected capacity change from 0 to 512 [ 654.588494][T12396] loop1: detected capacity change from 0 to 512 [ 655.773411][T12407] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 655.781218][T12407] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 658.356011][T12428] loop4: detected capacity change from 0 to 2048 [ 658.400247][T12428] loop4: p1 < > p3 [ 658.411685][T12428] loop4: p3 size 134217728 extends beyond EOD, truncated [ 658.535538][T12418] loop2: detected capacity change from 0 to 32768 [ 658.552159][T12418] xfs: Deprecated parameter 'noikeep' [ 658.552175][T12418] XFS: noikeep mount option is deprecated. [ 658.552193][T12418] xfs: Deprecated parameter 'noattr2' [ 658.552203][T12418] XFS: noattr2 mount option is deprecated. [ 658.637759][T12418] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 658.644070][T12418] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 658.790844][T12418] XFS (loop2): Ending clean mount [ 658.812981][T12439] loop4: detected capacity change from 0 to 1024 [ 658.842832][T12418] XFS (loop2): Quotacheck needed: Please wait. [ 658.994400][T12439] tc_dump_action: action bad kind [ 659.041611][T12418] XFS (loop2): Quotacheck: Done. [ 660.071496][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 660.140891][ T5640] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 662.304933][T12449] loop5: detected capacity change from 0 to 32768 [ 662.349228][T12449] lbmIODone: I/O error in JFS log [ 662.349238][T12449] *** Log Format Error ! *** [ 662.349487][T12449] lmLogInit: exit(-22) [ 662.349511][T12449] lmLogOpen: exit(-22) [ 664.224777][T12479] loop2: detected capacity change from 0 to 2048 [ 664.287998][T12479] loop2: p1 < > p3 [ 664.298523][T12479] loop2: p3 size 134217728 extends beyond EOD, truncated [ 664.463584][T12468] loop3: detected capacity change from 0 to 32768 [ 664.647028][T12468] JBD2: Ignoring recovery information on journal [ 664.648054][T12468] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 664.648068][T12468] JBD2: bad block at offset 32 [ 664.689131][T12468] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 664.913697][T12486] loop5: detected capacity change from 0 to 1024 [ 665.045912][T12486] tc_dump_action: action bad kind [ 666.213276][ T5647] ocfs2: Unmounting device (7,3) on (node local) [ 667.351526][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1756'. [ 668.307050][T12493] loop5: detected capacity change from 0 to 32768 [ 668.364035][ T5784] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 668.437083][T12493] xfs: Deprecated parameter 'noikeep' [ 668.437094][T12493] XFS: noikeep mount option is deprecated. [ 668.437106][T12493] xfs: Deprecated parameter 'noattr2' [ 668.437114][T12493] XFS: noattr2 mount option is deprecated. [ 668.485795][T12506] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 668.495781][T12506] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 668.496856][T12493] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 668.500914][T12493] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 668.535661][ T5784] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 668.536921][ T5784] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 668.536943][ T5784] usb 2-1: config 0 has no interface number 0 [ 668.536988][ T5784] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 668.537013][ T5784] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 668.537050][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.595744][ T5784] usb 2-1: config 0 descriptor?? [ 668.596621][T12502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 668.633391][ T5784] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 668.645956][T12493] XFS (loop5): Ending clean mount [ 668.681052][T12493] XFS (loop5): Quotacheck needed: Please wait. [ 668.807026][T12493] XFS (loop5): Quotacheck: Done. [ 668.857999][ T5784] usb 2-1: USB disconnect, device number 33 [ 668.858115][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 670.175868][ T6079] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 670.438245][T12529] afs: Unknown parameter 'measureetap' [ 671.812593][T12545] netlink: 'syz.5.1768': attribute type 1 has an invalid length. [ 671.936842][T12545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 672.255070][T12554] netlink: 'syz.5.1769': attribute type 3 has an invalid length. [ 676.199156][T12567] loop3: detected capacity change from 0 to 32768 [ 677.476888][T12567] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 677.488293][T12567] (syz.3.1763,12567,1):ocfs2_initialize_super:2248 ERROR: status = -12 [ 677.488802][T12567] (syz.3.1763,12567,1):ocfs2_fill_super:1186 ERROR: status = -12 [ 677.750118][T12591] netlink: 'syz.3.1779': attribute type 1 has an invalid length. [ 677.821047][T12591] 8021q: adding VLAN 0 to HW filter on device bond3 [ 677.882522][T12593] bond1: (slave veth0_to_bond): Releasing backup interface [ 678.811672][T12598] netlink: 'syz.1.1781': attribute type 3 has an invalid length. [ 679.420768][T12611] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1783'. [ 680.372736][T12611] ip_tables: iptables: counters copy to user failed while replacing table [ 680.446602][T12611] xt_CT: No such helper "syz1" [ 680.461536][T12611] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 682.334206][ T5783] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 682.487632][ T5783] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 682.488904][ T5783] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 682.488927][ T5783] usb 3-1: config 0 has no interface number 0 [ 682.488963][ T5783] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 682.488988][ T5783] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 682.489025][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.502651][ T5783] usb 3-1: config 0 descriptor?? [ 682.506850][T12629] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 682.560696][ T5783] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 682.680000][T12626] loop4: detected capacity change from 0 to 32768 [ 682.709971][T12626] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 683.990098][T12633] loop1: detected capacity change from 0 to 32768 [ 684.014670][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 684.014704][ T31] usb 3-1: USB disconnect, device number 41 [ 684.069408][T12633] JBD2: Ignoring recovery information on journal [ 684.072485][T12626] XFS (loop4): Ending clean mount [ 684.093515][T12633] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 684.093547][T12633] JBD2: bad block at offset 32 [ 684.124032][T12633] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 684.338496][T12662] netlink: 'syz.5.1794': attribute type 3 has an invalid length. [ 684.407431][ T5648] ocfs2: Unmounting device (7,1) on (node local) [ 684.518325][ T5642] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 684.973002][T12654] afs: Unknown parameter 'measureetap' [ 686.586892][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.586946][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.654241][ T195] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 686.807538][ T195] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 686.807575][ T195] usb 2-1: no configurations [ 686.807586][ T195] usb 2-1: can't read configurations, error -22 [ 686.920874][T12677] netlink: 'syz.3.1793': attribute type 1 has an invalid length. [ 686.934155][ T195] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 686.969600][T12677] 8021q: adding VLAN 0 to HW filter on device bond4 [ 687.086832][ T195] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 687.086927][ T195] usb 2-1: no configurations [ 687.086944][ T195] usb 2-1: can't read configurations, error -22 [ 687.087383][ T195] usb usb2-port1: attempt power cycle [ 688.091132][ T195] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 688.106342][ T195] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 688.106404][ T195] usb 2-1: no configurations [ 688.106417][ T195] usb 2-1: can't read configurations, error -22 [ 688.244533][ T195] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 688.265436][ T195] usb 2-1: device descriptor read/8, error -71 [ 689.458334][ T195] usb usb2-port1: unable to enumerate USB device [ 689.533214][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1804'. [ 689.685490][T12698] netlink: 'syz.3.1807': attribute type 3 has an invalid length. [ 694.034310][ T5784] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 694.179187][T12734] loop4: detected capacity change from 0 to 32768 [ 694.195116][ T5784] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 694.195152][ T5784] usb 3-1: no configurations [ 694.195163][ T5784] usb 3-1: can't read configurations, error -22 [ 694.234959][T12734] JBD2: Ignoring recovery information on journal [ 694.238166][T12734] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 694.238186][T12734] JBD2: bad block at offset 32 [ 694.251851][T12734] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 694.334137][ T5784] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 694.351493][T12740] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1813'. [ 694.384285][ T31] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 694.440446][ T5642] ocfs2: Unmounting device (7,4) on (node local) [ 695.669867][ T31] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 695.676330][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 695.676390][ T31] usb 4-1: config 0 has no interface number 0 [ 695.676473][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 695.676528][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 695.676616][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.727517][ T5784] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 695.727552][ T5784] usb 3-1: no configurations [ 695.727563][ T5784] usb 3-1: can't read configurations, error -22 [ 695.727949][ T5784] usb usb3-port1: attempt power cycle [ 695.741085][ T31] usb 4-1: config 0 descriptor?? [ 695.743090][T12736] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 695.792042][ T31] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 695.976175][ T54] usb 4-1: USB disconnect, device number 24 [ 695.976280][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 696.074141][ T5784] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 696.096219][ T5784] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 696.096254][ T5784] usb 3-1: no configurations [ 696.096265][ T5784] usb 3-1: can't read configurations, error -22 [ 696.150478][T12751] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 696.151185][T12751] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 696.211020][T12752] vivid-008: ================= START STATUS ================= [ 696.211035][T12752] vivid-008: FM Deviation: 75000 [ 696.211057][T12752] vivid-008: ================== END STATUS ================== [ 696.235508][ T5784] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 696.256088][ T5784] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 696.256121][ T5784] usb 3-1: no configurations [ 696.256133][ T5784] usb 3-1: can't read configurations, error -22 [ 696.256334][ T5784] usb usb3-port1: unable to enumerate USB device [ 696.295790][T12752] loop4: detected capacity change from 0 to 512 [ 696.347251][T12752] loop4: detected capacity change from 0 to 512 [ 696.540307][T12736] afs: Unknown parameter 'measureetap' [ 696.692683][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'. [ 697.422332][T12767] ip_tables: iptables: counters copy to user failed while replacing table [ 698.762727][T12775] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1826'. [ 700.122966][T12775] ip_tables: iptables: counters copy to user failed while replacing table [ 700.206061][T12782] netlink: 'syz.4.1826': attribute type 1 has an invalid length. [ 700.222023][T12775] xt_CT: No such helper "syz1" [ 700.380226][T12776] loop5: detected capacity change from 0 to 32768 [ 700.428811][T12776] JBD2: Ignoring recovery information on journal [ 700.437032][T12776] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 700.437052][T12776] JBD2: bad block at offset 32 [ 700.459554][T12776] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 700.552892][ T6079] ocfs2: Unmounting device (7,5) on (node local) [ 700.894968][ T54] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 700.946024][T12799] loop1: detected capacity change from 0 to 2048 [ 700.988770][T12799] loop1: p1 < > p3 [ 700.992952][T12799] loop1: p3 size 134217728 extends beyond EOD, truncated [ 701.055116][ T54] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 701.055149][ T54] usb 6-1: no configurations [ 701.055160][ T54] usb 6-1: can't read configurations, error -22 [ 701.184178][ T54] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 702.495669][ T54] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 702.495715][ T54] usb 6-1: no configurations [ 702.495726][ T54] usb 6-1: can't read configurations, error -22 [ 702.496090][ T54] usb usb6-port1: attempt power cycle [ 702.753026][T12788] loop4: detected capacity change from 0 to 32768 [ 702.789280][T12788] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 702.844222][ T54] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 702.867281][ T54] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 702.867317][ T54] usb 6-1: no configurations [ 702.867329][ T54] usb 6-1: can't read configurations, error -22 [ 702.876716][T12788] XFS (loop4): Ending clean mount [ 702.994267][ T54] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 703.015512][ T54] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 703.015548][ T54] usb 6-1: no configurations [ 703.015559][ T54] usb 6-1: can't read configurations, error -22 [ 703.015760][ T54] usb usb6-port1: unable to enumerate USB device [ 703.171574][T12819] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 703.172176][T12819] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 703.312075][ T5642] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 703.358634][T12807] loop1: detected capacity change from 0 to 32768 [ 703.359682][T12807] xfs: Deprecated parameter 'noikeep' [ 703.359701][T12807] XFS: noikeep mount option is deprecated. [ 703.359720][T12807] xfs: Deprecated parameter 'noattr2' [ 703.359734][T12807] XFS: noattr2 mount option is deprecated. [ 703.414558][T12807] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 703.457723][T12807] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 703.503898][T12807] XFS (loop1): Ending clean mount [ 703.549597][T12807] XFS (loop1): Quotacheck needed: Please wait. [ 703.631152][T12807] XFS (loop1): Quotacheck: Done. [ 703.688834][ T5648] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 704.180369][T12841] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1842'. [ 705.520059][T12841] ip_tables: iptables: counters copy to user failed while replacing table [ 705.555673][T12846] vivid-008: ================= START STATUS ================= [ 705.555690][T12846] vivid-008: FM Deviation: 75000 [ 705.555714][T12846] vivid-008: ================== END STATUS ================== [ 705.604289][T12849] netlink: 'syz.2.1842': attribute type 1 has an invalid length. [ 705.633178][T12846] loop4: detected capacity change from 0 to 512 [ 705.738564][T12841] xt_CT: No such helper "syz1" [ 708.603874][T12875] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 708.615177][T12875] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 710.084192][ T195] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 710.152575][T12882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1851'. [ 710.152640][T12882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1851'. [ 710.152655][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1851'. [ 710.188183][T12884] loop5: detected capacity change from 0 to 512 [ 710.189162][T12884] EXT4-fs: Ignoring removed oldalloc option [ 710.213951][T12884] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.1855: corrupted in-inode xattr: e_value size too large [ 710.213989][T12884] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 710.214101][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 710.214118][ C1] EXT4-fs (loop5): initial error at time 1792877952: ext4_iget_extra_inode:6027: inode 15 [ 710.214144][ C1] EXT4-fs (loop5): last error at time 1792877952: ext4_iget_extra_inode:6027: inode 15 [ 710.267553][T12884] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1855: couldn't read orphan inode 15 (err -117) [ 710.267583][T12884] loop5: lost filesystem error report for type 5 error -117 [ 710.269441][T12884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.170521][ T6079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.369638][T12888] loop1: detected capacity change from 0 to 32768 [ 712.139479][T12888] JBD2: Ignoring recovery information on journal [ 712.259962][T12888] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 712.259996][T12888] JBD2: bad block at offset 32 [ 712.468945][T12888] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 712.776712][T12900] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1857'. [ 712.828017][ T5648] ocfs2: Unmounting device (7,1) on (node local) [ 714.796641][T12910] ip_tables: iptables: counters copy to user failed while replacing table [ 716.080140][T12910] xt_CT: No such helper "syz1" [ 718.980824][T12941] ip_tables: iptables: counters copy to user failed while replacing table [ 721.018693][T12944] loop2: detected capacity change from 0 to 512 [ 721.019714][T12944] EXT4-fs: Ignoring removed oldalloc option [ 721.039943][T12944] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.1868: corrupted in-inode xattr: e_value size too large [ 721.039974][T12944] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 721.040368][T12944] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1868: couldn't read orphan inode 15 (err -117) [ 721.040396][T12944] loop2: lost filesystem error report for type 5 error -117 [ 721.054952][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 721.054971][ C1] EXT4-fs (loop2): initial error at time 1792877962: ext4_iget_extra_inode:6027: inode 15 [ 721.054999][ C1] EXT4-fs (loop2): last error at time 1792877962: ext4_orphan_get:1409 [ 721.087114][T12944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.950081][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.479331][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 722.718494][ T10] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 722.747264][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 722.747302][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 722.802301][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.802392][ T10] usb 2-1: Product: syz [ 722.802438][ T10] usb 2-1: Manufacturer: syz [ 722.802523][ T10] usb 2-1: SerialNumber: syz [ 725.078576][T12967] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1874'. [ 725.131694][ T10] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 725.131737][ T10] cdc_ncm 2-1:1.0: bind() failure [ 725.164703][ T195] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 725.171134][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 725.171174][ T10] cdc_ncm 2-1:1.1: bind() failure [ 725.208244][ T10] usb 2-1: USB disconnect, device number 38 [ 725.264381][ T5784] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 726.510994][ T195] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 726.546148][T12967] ip_tables: iptables: counters copy to user failed while replacing table [ 726.608790][T12969] netlink: 'syz.3.1874': attribute type 1 has an invalid length. [ 726.642200][ T195] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 726.642255][ T195] usb 5-1: can't read configurations, error -71 [ 726.694429][ T5784] usb 3-1: device descriptor read/all, error -71 [ 726.740808][T12967] xt_CT: No such helper "syz1" [ 726.927361][T12984] loop2: detected capacity change from 0 to 512 [ 726.928307][T12984] EXT4-fs: Ignoring removed oldalloc option [ 726.959618][T12984] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.1881: corrupted in-inode xattr: e_value size too large [ 726.959648][T12984] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 726.960450][T12984] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1881: couldn't read orphan inode 15 (err -117) [ 726.960534][T12984] loop2: lost filesystem error report for type 5 error -117 [ 726.964138][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 726.964182][ C1] EXT4-fs (loop2): initial error at time 1792877968: ext4_iget_extra_inode:6027: inode 15 [ 726.964250][ C1] EXT4-fs (loop2): last error at time 1792877968: ext4_orphan_get:1409 [ 726.998998][T12984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.922742][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.457969][ T195] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 729.604190][ T195] usb 4-1: Using ep0 maxpacket: 8 [ 729.604949][ T195] usb 4-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 729.605979][ T195] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 729.606001][ T195] usb 4-1: config 0 has no interface number 0 [ 729.606035][ T195] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 729.606056][ T195] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 729.606086][ T195] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 729.606110][ T195] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 729.606147][ T195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.609397][ T195] usb 4-1: config 0 descriptor?? [ 729.708836][ T195] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 730.361241][ T54] usb 4-1: USB disconnect, device number 25 [ 730.361332][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 730.370627][T12996] ldusb 4-1:0.55: Couldn't submit interrupt_out_urb -19 [ 730.573474][ T54] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 733.042233][T13041] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1894'. [ 733.281619][T13050] loop5: detected capacity change from 0 to 512 [ 733.302146][T13050] EXT4-fs (loop5): Test dummy encryption mode enabled [ 733.302724][T13050] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 735.596377][T13060] netlink: 'syz.4.1898': attribute type 1 has an invalid length. [ 735.624401][T13060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 736.188600][T13074] loop5: detected capacity change from 0 to 512 [ 736.189276][T13074] EXT4-fs: Ignoring removed oldalloc option [ 736.215705][ T5783] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 736.229951][T13074] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.1903: corrupted in-inode xattr: e_value size too large [ 736.229980][T13074] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 736.231824][T13074] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1903: couldn't read orphan inode 15 (err -117) [ 736.231850][T13074] loop5: lost filesystem error report for type 5 error -117 [ 736.233624][T13074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.458078][T13078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1900'. [ 736.458112][T13078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1900'. [ 736.458128][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 737.149464][ T6079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.408164][T13068] loop4: detected capacity change from 0 to 32768 [ 738.132385][T13068] lbmIODone: I/O error in JFS log [ 738.132429][T13068] *** Log Format Error ! *** [ 738.132803][T13068] lmLogInit: exit(-22) [ 738.132839][T13068] lmLogOpen: exit(-22) [ 738.275168][T13095] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1907'. [ 738.424875][T13095] ip_tables: iptables: counters copy to user failed while replacing table [ 738.514850][T13095] xt_CT: No such helper "syz1" [ 738.532834][T13095] netlink: 'syz.1.1907': attribute type 1 has an invalid length. [ 738.693719][T13095] 8021q: adding VLAN 0 to HW filter on device bond6 [ 738.730865][T13099] bond6: (slave gretap1): making interface the new active one [ 738.731640][T13099] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 744.447696][T13137] netlink: 'syz.4.1920': attribute type 3 has an invalid length. [ 744.796436][T13143] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1921'. [ 745.298995][T13149] ip_tables: iptables: counters copy to user failed while replacing table [ 745.461581][T13145] netlink: 'syz.5.1921': attribute type 1 has an invalid length. [ 745.482658][T13156] loop2: detected capacity change from 0 to 512 [ 745.483814][T13156] EXT4-fs: Ignoring removed oldalloc option [ 746.660872][T13143] xt_CT: No such helper "syz1" [ 746.672675][T13156] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.1916: corrupted in-inode xattr: e_value size too large [ 746.672705][T13156] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 746.673163][T13156] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1916: couldn't read orphan inode 15 (err -117) [ 746.673191][T13156] loop2: lost filesystem error report for type 5 error -117 [ 746.687462][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 746.687486][ C1] EXT4-fs (loop2): initial error at time 1792877988: ext4_iget_extra_inode:6027: inode 15 [ 746.687513][ C1] EXT4-fs (loop2): last error at time 1792877988: ext4_orphan_get:1409 [ 746.688821][T13156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.264630][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.264689][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.433118][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.454142][T13168] loop5: detected capacity change from 0 to 32768 [ 751.695074][T13168] lbmIODone: I/O error in JFS log [ 751.695093][T13168] *** Log Format Error ! *** [ 751.695497][T13168] lmLogInit: exit(-22) [ 751.695536][T13168] lmLogOpen: exit(-22) [ 752.404550][T10532] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 752.598698][T13198] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1924'. [ 752.613627][T13198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1924'. [ 752.613829][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'. [ 753.308095][T13211] loop5: detected capacity change from 0 to 1024 [ 753.474497][ T26] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 753.602913][T13211] tc_dump_action: action bad kind [ 753.648914][ T26] usb 4-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 753.701175][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.701272][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.999209][ T26] wacom 0003:056A:033B.0007: unknown main item tag 0x0 [ 754.999242][ T26] wacom 0003:056A:033B.0007: unknown main item tag 0x0 [ 754.999288][ T26] wacom 0003:056A:033B.0007: unknown main item tag 0x0 [ 754.999312][ T26] wacom 0003:056A:033B.0007: unknown main item tag 0x0 [ 754.999335][ T26] wacom 0003:056A:033B.0007: unknown main item tag 0x0 [ 754.999358][ T26] wacom 0003:056A:033B.0007: unknown main item tag 0x0 [ 754.999380][ T26] wacom 0003:056A:033B.0007: unknown main item tag 0x0 [ 754.999424][ T26] wacom 0003:056A:033B.0007: unbalanced collection at end of report description [ 755.008746][ T26] wacom 0003:056A:033B.0007: parse failed [ 755.008866][ T26] wacom 0003:056A:033B.0007: probe with driver wacom failed with error -22 [ 755.075652][T13221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1936'. [ 755.075738][T13221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1936'. [ 755.075767][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'. [ 755.120921][ T26] usb 4-1: USB disconnect, device number 26 [ 755.146225][ T5784] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 755.166409][T13227] loop4: detected capacity change from 0 to 512 [ 755.167469][T13227] EXT4-fs: Ignoring removed oldalloc option [ 755.189260][T13227] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.1939: corrupted in-inode xattr: e_value size too large [ 755.189288][T13227] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 755.194090][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 755.194108][ C1] EXT4-fs (loop4): initial error at time 1792877997: ext4_iget_extra_inode:6027: inode 15 [ 755.194142][ C1] EXT4-fs (loop4): last error at time 1792877997: ext4_iget_extra_inode:6027: inode 15 [ 755.225311][T13227] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1939: couldn't read orphan inode 15 (err -117) [ 755.225338][T13227] loop4: lost filesystem error report for type 5 error -117 [ 755.233892][T13227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 755.246119][T13227] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.1939: corrupted in-inode xattr: e_value size too large [ 755.388788][T13232] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 755.389351][T13232] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 756.103051][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.876002][T13258] netlink: 'syz.1.1946': attribute type 3 has an invalid length. [ 756.944594][T13260] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1947'. [ 757.733820][ T31] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 757.765370][T13260] ip_tables: iptables: counters copy to user failed while replacing table [ 757.821724][T13263] netlink: 'syz.4.1947': attribute type 1 has an invalid length. [ 757.841366][T13260] xt_CT: No such helper "syz1" [ 757.911455][ T31] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 757.933134][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 757.933353][ T31] usb 4-1: config 0 has no interface number 0 [ 757.933877][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 757.942285][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 757.942391][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.031758][ T31] usb 4-1: config 0 descriptor?? [ 758.086343][T13266] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 758.185200][ T31] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 758.360144][ T31] usb 4-1: USB disconnect, device number 27 [ 758.360227][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 758.644134][ T5783] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 758.734372][T13247] loop5: detected capacity change from 0 to 32768 [ 758.791923][T13247] lbmIODone: I/O error in JFS log [ 758.791937][T13247] *** Log Format Error ! *** [ 758.792315][T13247] lmLogInit: exit(-22) [ 758.792350][T13247] lmLogOpen: exit(-22) [ 758.794206][ T5783] usb 3-1: device descriptor read/64, error -71 [ 758.835436][T13283] loop4: detected capacity change from 0 to 1024 [ 758.837523][T13284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1949'. [ 758.837557][T13284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1949'. [ 758.837571][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1949'. [ 758.911579][T13283] tc_dump_action: action bad kind [ 758.913386][T13281] afs: Unknown parameter 'measureetap' [ 760.444430][ T26] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 760.474007][T13294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1955'. [ 760.474178][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1955'. [ 760.474194][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'. [ 760.961826][ T31] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 761.136148][ T31] usb 6-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 761.144653][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.145796][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.806322][T13318] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 761.812469][T13318] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 761.879172][T13322] netlink: 'syz.4.1962': attribute type 3 has an invalid length. [ 761.883436][ T31] wacom 0003:056A:033B.0008: unknown main item tag 0x0 [ 761.883464][ T31] wacom 0003:056A:033B.0008: unknown main item tag 0x0 [ 761.883487][ T31] wacom 0003:056A:033B.0008: unknown main item tag 0x0 [ 761.883510][ T31] wacom 0003:056A:033B.0008: unknown main item tag 0x0 [ 761.883532][ T31] wacom 0003:056A:033B.0008: unknown main item tag 0x0 [ 761.883554][ T31] wacom 0003:056A:033B.0008: unknown main item tag 0x0 [ 761.883576][ T31] wacom 0003:056A:033B.0008: unknown main item tag 0x0 [ 761.883598][ T31] wacom 0003:056A:033B.0008: unbalanced collection at end of report description [ 762.004184][ T31] wacom 0003:056A:033B.0008: parse failed [ 762.004283][ T31] wacom 0003:056A:033B.0008: probe with driver wacom failed with error -22 [ 762.774500][ T31] usb 6-1: USB disconnect, device number 39 [ 762.884891][T13335] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1964'. [ 763.153603][T13335] ip_tables: iptables: counters copy to user failed while replacing table [ 763.250439][T13344] loop4: detected capacity change from 0 to 1024 [ 763.318619][T13345] netlink: 'syz.2.1964': attribute type 1 has an invalid length. [ 763.372976][T13346] tc_dump_action: action bad kind [ 763.524808][T13339] loop1: detected capacity change from 0 to 32768 [ 763.572009][T13337] lbmIODone: I/O error in JFS log [ 763.572023][T13337] *** Log Format Error ! *** [ 763.572430][T13337] lmLogInit: exit(-22) [ 763.572465][T13337] lmLogOpen: exit(-22) [ 763.711581][T13351] netlink: 'syz.3.1968': attribute type 1 has an invalid length. [ 763.713688][T13335] xt_CT: No such helper "syz1" [ 763.941233][T13351] 8021q: adding VLAN 0 to HW filter on device bond5 [ 764.315664][ T31] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 764.486973][T13364] loop3: detected capacity change from 0 to 32768 [ 764.487865][T13364] xfs: Deprecated parameter 'noikeep' [ 764.487881][T13364] XFS: noikeep mount option is deprecated. [ 764.487898][T13364] xfs: Deprecated parameter 'noattr2' [ 764.487910][T13364] XFS: noattr2 mount option is deprecated. [ 764.542949][T13364] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 764.544129][ T31] usb 6-1: device descriptor read/64, error -71 [ 764.560444][T13364] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 764.601694][T13364] XFS (loop3): Ending clean mount [ 764.626294][T13364] XFS (loop3): Quotacheck needed: Please wait. [ 764.680981][T13366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1972'. [ 764.681017][T13366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1972'. [ 764.681032][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1972'. [ 764.737822][T13364] XFS (loop3): Quotacheck: Done. [ 764.745491][T10532] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 764.779170][ T5647] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 764.794138][ T31] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 764.924799][ T31] usb 6-1: device descriptor read/64, error -71 [ 765.045476][ T31] usb usb6-port1: attempt power cycle [ 765.618777][T13390] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 765.619353][T13390] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 766.044534][ T31] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 766.078173][ T31] usb 6-1: device descriptor read/8, error -71 [ 766.324256][ T6408] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 766.342605][ T31] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 766.380857][ T31] usb 6-1: device descriptor read/8, error -71 [ 766.497232][T13403] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1980'. [ 766.579655][ T31] usb usb6-port1: unable to enumerate USB device [ 766.655766][T13408] loop3: detected capacity change from 0 to 1024 [ 766.655910][ T6408] usb 2-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 766.657124][T13409] netlink: 'syz.2.1981': attribute type 1 has an invalid length. [ 766.657625][ T6408] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.657667][ T6408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.682634][T13409] bond2: (slave veth0_to_bond): Releasing backup interface [ 766.737851][T13403] ip_tables: iptables: counters copy to user failed while replacing table [ 766.790225][T13408] tc_dump_action: action bad kind [ 766.823421][T13404] netlink: 'syz.4.1980': attribute type 1 has an invalid length. [ 766.974767][T13403] xt_CT: No such helper "syz1" [ 767.040981][T13415] syz.2.1984 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 767.041024][T13415] CPU: 0 UID: 0 PID: 13415 Comm: syz.2.1984 Not tainted syzkaller #0 PREEMPT(full) [ 767.041046][T13415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 767.041058][T13415] Call Trace: [ 767.041065][T13415] [ 767.041074][T13415] dump_stack_lvl+0xe8/0x150 [ 767.041115][T13415] dump_header+0xd3/0x4b0 [ 767.041145][T13415] oom_kill_process+0x3ab/0x9e0 [ 767.041178][T13415] out_of_memory+0xfb1/0x13b0 [ 767.041202][T13415] ? try_charge_memcg+0xc0d/0x15e0 [ 767.041235][T13415] ? __pfx_out_of_memory+0x10/0x10 [ 767.041258][T13415] ? do_raw_spin_unlock+0xf5/0x200 [ 767.041289][T13415] try_charge_memcg+0xcc3/0x15e0 [ 767.041327][T13415] ? __pfx_try_charge_memcg+0x10/0x10 [ 767.041344][T13415] ? ipmr_net_init+0x1f1/0x6b0 [ 767.041381][T13415] ? percpu_ref_tryget+0x15/0x180 [ 767.041414][T13415] ? __obj_cgroup_charge+0x36/0x2d0 [ 767.041446][T13415] __obj_cgroup_charge+0x20a/0x2d0 [ 767.041472][T13415] ? __obj_cgroup_charge+0x36/0x2d0 [ 767.041506][T13415] __memcg_slab_post_alloc_hook+0x772/0xdb0 [ 767.041554][T13415] __kmalloc_cache_noprof+0x361/0x600 [ 767.041579][T13415] ? __kmalloc_cache_noprof+0x148/0x600 [ 767.041601][T13415] ? mr_table_alloc+0x65/0x310 [ 767.041618][T13415] ? mr_table_alloc+0x65/0x310 [ 767.041642][T13415] ? __pfx_ipmr_new_table_set+0x10/0x10 [ 767.041670][T13415] mr_table_alloc+0x65/0x310 [ 767.041688][T13415] ? __pfx_ipmr_expire_process+0x10/0x10 [ 767.041718][T13415] ipmr_net_init+0x382/0x6b0 [ 767.041746][T13415] ? __register_sysctl_table+0x1278/0x1370 [ 767.041770][T13415] ? __pfx_ipmr_net_init+0x10/0x10 [ 767.041808][T13415] ? mptcp_net_init+0x3aa/0x520 [ 767.041834][T13415] ops_init+0x35d/0x5d0 [ 767.041874][T13415] setup_net+0x118/0x350 [ 767.041903][T13415] ? __pfx_setup_net+0x10/0x10 [ 767.041931][T13415] ? down_read_killable+0x1b6/0x3b0 [ 767.041957][T13415] ? __ns_common_init+0x384/0x590 [ 767.041982][T13415] copy_net_ns+0x536/0x770 [ 767.042022][T13415] create_new_namespaces+0x3f0/0x6b0 [ 767.042055][T13415] ? security_capable+0x7e/0x2c0 [ 767.042092][T13415] unshare_nsproxy_namespaces+0x144/0x190 [ 767.042125][T13415] ksys_unshare+0x532/0x890 [ 767.042158][T13415] ? __pfx_ksys_unshare+0x10/0x10 [ 767.042189][T13415] ? rcu_is_watching+0x16/0xb0 [ 767.042232][T13415] __x64_sys_unshare+0x38/0x50 [ 767.042249][T13415] do_syscall_64+0x166/0x520 [ 767.042269][T13415] ? trace_irq_disable+0x3b/0x140 [ 767.042296][T13415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.042317][T13415] ? clear_bhb_loop+0x70/0xc0 [ 767.042341][T13415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.042361][T13415] RIP: 0033:0x7f0d11b9f559 [ 767.042379][T13415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.042396][T13415] RSP: 002b:00007f0d12a65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 767.042417][T13415] RAX: ffffffffffffffda RBX: 00007f0d11e25fa0 RCX: 00007f0d11b9f559 [ 767.042431][T13415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 767.042443][T13415] RBP: 00007f0d11c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 767.042456][T13415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.042468][T13415] R13: 00007f0d11e26038 R14: 00007f0d11e25fa0 R15: 00007ffcb97ed2e8 [ 767.042500][T13415] [ 767.045095][T13415] memory: usage 88kB, limit 96kB, failcnt 117 [ 767.045147][T13415] memory+swap: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 767.045182][T13415] kmem: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 767.045211][T13415] Memory cgroup stats for /syz2/test: [ 767.045492][T13415] cache 0 [ 767.045514][T13415] rss 0 [ 767.045530][T13415] rss_huge 0 [ 767.045547][T13415] shmem 0 [ 767.045565][T13415] mapped_file 0 [ 767.045582][T13415] dirty 0 [ 767.045600][T13415] writeback 0 [ 767.045618][T13415] workingset_refault_anon 0 [ 767.045641][T13415] workingset_refault_file 0 [ 767.045671][T13415] swap 0 [ 767.045693][T13415] swapcached 0 [ 767.045711][T13415] pgpgin 0 [ 767.045727][T13415] pgpgout 0 [ 767.045739][T13415] pgfault 4 [ 767.045757][T13415] pgmajfault 0 [ 767.045775][T13415] inactive_anon 0 [ 767.045819][T13415] active_anon 0 [ 767.045837][T13415] inactive_file 0 [ 767.045855][T13415] active_file 0 [ 767.045873][T13415] unevictable 0 [ 767.045884][T13415] hierarchical_memory_limit 98304 [ 767.045908][T13415] hierarchical_memsw_limit 9223372036854771712 [ 767.045927][T13415] total_cache 0 [ 767.045945][T13415] total_rss 0 [ 767.045957][T13415] total_rss_huge 0 [ 767.045974][T13415] total_shmem 0 [ 767.045991][T13415] total_mapped_file 0 [ 767.046017][T13415] total_dirty 0 [ 767.046035][T13415] total_writeback 0 [ 767.046052][T13415] total_workingset_refault_anon 0 [ 767.046070][T13415] total_workingset_refault_file 0 [ 767.046088][T13415] total_swap 0 [ 767.046130][T13415] total_swapcached 0 [ 767.046141][T13415] total_pgpgin 0 [ 767.046158][T13415] total_pgpgout 0 [ 767.046175][T13415] total_pgfault 4 [ 767.046193][T13415] total_pgmajfault 0 [ 767.046209][T13415] total_inactive_anon 0 [ 767.046226][T13415] total_active_anon 0 [ 767.046244][T13415] total_inactive_file 0 [ 767.046262][T13415] total_active_file 0 [ 767.046280][T13415] total_unevictable 0 [ 767.046297][T13415] anon_cost 0 [ 767.046313][T13415] file_cost 0 [ 767.046331][T13415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1984,pid=13414,uid=0 [ 767.046627][T13415] Memory cgroup out of memory: Killed process 13414 (syz.2.1984) total-vm:102280kB, anon-rss:1448kB, file-rss:22804kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 767.850931][ T6408] wacom 0003:056A:033B.0009: unknown main item tag 0x0 [ 767.850961][ T6408] wacom 0003:056A:033B.0009: unknown main item tag 0x0 [ 767.850985][ T6408] wacom 0003:056A:033B.0009: unknown main item tag 0x0 [ 767.851009][ T6408] wacom 0003:056A:033B.0009: unknown main item tag 0x0 [ 767.851033][ T6408] wacom 0003:056A:033B.0009: unknown main item tag 0x0 [ 767.851056][ T6408] wacom 0003:056A:033B.0009: unknown main item tag 0x0 [ 767.851079][ T6408] wacom 0003:056A:033B.0009: unknown main item tag 0x0 [ 767.851101][ T6408] wacom 0003:056A:033B.0009: unbalanced collection at end of report description [ 767.851750][ T6408] wacom 0003:056A:033B.0009: parse failed [ 767.852275][ T6408] wacom 0003:056A:033B.0009: probe with driver wacom failed with error -22 [ 768.028892][ T6408] usb 2-1: USB disconnect, device number 40 [ 768.862459][T13428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1987'. [ 768.862498][T13428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1987'. [ 768.862513][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 769.021176][T13418] loop5: detected capacity change from 0 to 32768 [ 769.039305][T13418] lbmIODone: I/O error in JFS log [ 769.039320][T13418] *** Log Format Error ! *** [ 769.052745][T13418] lmLogInit: exit(-22) [ 769.052795][T13418] lmLogOpen: exit(-22) [ 769.152500][T13440] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 769.153106][T13440] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 769.160907][T13443] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 769.175010][T13443] bond5: (slave veth0_to_bond): Releasing backup interface [ 769.904701][ T6408] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 770.202402][T13452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1995'. [ 770.202437][T13452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1995'. [ 770.202452][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 770.237483][T13455] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1996'. [ 770.285378][T13456] loop2: detected capacity change from 0 to 1024 [ 770.335757][T13456] tc_dump_action: action bad kind [ 771.335043][ T5783] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 771.413780][T13481] netlink: 'syz.5.2004': attribute type 1 has an invalid length. [ 772.054782][ T5783] usb 4-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 772.057194][ T5783] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.057237][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.803264][ T5783] wacom 0003:056A:033B.000A: unknown main item tag 0x0 [ 773.803298][ T5783] wacom 0003:056A:033B.000A: unknown main item tag 0x0 [ 773.803322][ T5783] wacom 0003:056A:033B.000A: unknown main item tag 0x0 [ 773.803345][ T5783] wacom 0003:056A:033B.000A: unbalanced collection at end of report description [ 773.803972][ T5783] wacom 0003:056A:033B.000A: parse failed [ 774.135210][ T6408] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 774.397963][ T6408] usb 5-1: unable to get BOS descriptor or descriptor too short [ 774.399768][ T6408] usb 5-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 774.499304][ T5783] wacom 0003:056A:033B.000A: probe with driver wacom failed with error -22 [ 774.513797][ T5783] usb 4-1: USB disconnect, device number 29 [ 774.627379][ T6408] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.627401][ T6408] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 774.656497][ T6408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.656519][ T6408] usb 5-1: Product: syz [ 774.656532][ T6408] usb 5-1: Manufacturer: syz [ 774.656546][ T6408] usb 5-1: SerialNumber: syz [ 774.832499][T13495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2009'. [ 774.832525][T13495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2009'. [ 774.832534][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2009'. [ 775.214352][ T6408] usb 5-1: can't set config #1, error -71 [ 775.411453][ T6408] usb 5-1: USB disconnect, device number 41 [ 776.478808][T13510] loop2: detected capacity change from 0 to 1024 [ 776.580036][T13510] tc_dump_action: action bad kind [ 776.590860][T13505] rxe_eth0 speed is unknown, defaulting to 1000 [ 777.110782][T13517] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 777.124801][T13517] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 777.551181][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2016'. [ 777.650375][T13524] netlink: 'syz.1.2018': attribute type 3 has an invalid length. [ 780.376905][T13546] loop1: detected capacity change from 0 to 512 [ 780.377595][T13546] EXT4-fs: Ignoring removed oldalloc option [ 780.603867][T13546] EXT4-fs error (device loop1): ext4_iget_extra_inode:6027: inode #15: comm syz.1.2023: corrupted in-inode xattr: e_value size too large [ 780.603902][T13546] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 780.613774][T13546] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2023: couldn't read orphan inode 15 (err -117) [ 780.613845][T13546] loop1: lost filesystem error report for type 5 error -117 [ 780.614156][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 780.614207][ C0] EXT4-fs (loop1): initial error at time 1792878022: ext4_iget_extra_inode:6027: inode 15 [ 780.614276][ C0] EXT4-fs (loop1): last error at time 1792878022: ext4_orphan_get:1409 [ 780.619977][T13546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.306492][ T5648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.580068][T13560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2029'. [ 781.582563][T13557] loop2: detected capacity change from 0 to 1024 [ 781.680961][T13557] tc_dump_action: action bad kind [ 781.924442][ T6408] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 782.765450][ T6408] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 782.795141][ T6408] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.795202][ T6408] usb 2-1: config 0 has no interfaces? [ 782.807498][ T6408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.859892][ T6408] usb 2-1: config 0 descriptor?? [ 783.203775][T13554] loop3: detected capacity change from 0 to 32768 [ 783.404680][T13554] lbmIODone: I/O error in JFS log [ 783.404694][T13554] *** Log Format Error ! *** [ 783.405081][T13554] lmLogInit: exit(-22) [ 783.405116][T13554] lmLogOpen: exit(-22) [ 784.828874][T13573] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 784.830087][T13573] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 784.859248][ T5761] usb 2-1: USB disconnect, device number 42 [ 785.884135][ C1] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 787.007130][ T5783] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 787.220828][ T5783] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 787.235849][ T5783] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 787.235876][ T5783] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 787.269186][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.269209][ T5783] usb 5-1: Product: syz [ 787.269223][ T5783] usb 5-1: Manufacturer: syz [ 787.269237][ T5783] usb 5-1: SerialNumber: syz [ 787.338612][T13589] loop5: detected capacity change from 0 to 512 [ 787.339836][T13589] EXT4-fs: Ignoring removed oldalloc option [ 787.362216][T13589] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.2037: corrupted in-inode xattr: e_value size too large [ 787.362246][T13589] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 787.364175][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 787.364232][ C0] EXT4-fs (loop5): initial error at time 1792878029: ext4_iget_extra_inode:6027: inode 15 [ 787.364304][ C0] EXT4-fs (loop5): last error at time 1792878029: ext4_iget_extra_inode:6027: inode 15 [ 787.365412][T13589] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2037: couldn't read orphan inode 15 (err -117) [ 787.365476][T13589] loop5: lost filesystem error report for type 5 error -117 [ 787.373598][T13589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.633376][ T5783] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 787.633409][ T5783] cdc_ncm 5-1:1.0: bind() failure [ 788.290529][ T5783] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 788.290571][ T5783] cdc_ncm 5-1:1.1: bind() failure [ 788.310500][ T5783] usb 5-1: USB disconnect, device number 42 [ 788.373545][ T6079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.630344][T13599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2040'. [ 790.440921][T13613] netlink: 380 bytes leftover after parsing attributes in process `syz.4.2046'. [ 790.499451][T13615] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 790.500008][T13615] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 790.764892][T13622] rxe_eth0 speed is unknown, defaulting to 1000 [ 792.645999][T13628] loop4: detected capacity change from 0 to 512 [ 792.647005][T13628] EXT4-fs: Ignoring removed oldalloc option [ 792.682149][T13628] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.2049: corrupted in-inode xattr: e_value size too large [ 792.682179][T13628] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 792.683195][T13628] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2049: couldn't read orphan inode 15 (err -117) [ 792.683224][T13628] loop4: lost filesystem error report for type 5 error -117 [ 792.697644][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 792.697662][ C1] EXT4-fs (loop4): initial error at time 1792878034: ext4_iget_extra_inode:6027: inode 15 [ 792.697689][ C1] EXT4-fs (loop4): last error at time 1792878034: ext4_orphan_get:1409 [ 792.701919][T13628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.926861][T13620] loop1: detected capacity change from 0 to 32768 [ 793.158619][T13620] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 793.597591][T13620] XFS (loop1): AIL initialisation failed: error -12 [ 793.607553][T13620] XFS (loop1): log mount failed [ 793.653410][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.782045][T13643] loop3: detected capacity change from 0 to 2048 [ 793.820457][T13643] loop3: p1 < > p3 [ 793.842822][T13643] loop3: p3 size 134217728 extends beyond EOD, truncated [ 794.178181][T13654] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2054'. [ 794.219477][T13654] ip_tables: iptables: counters copy to user failed while replacing table [ 794.301419][T13658] netlink: 'syz.4.2054': attribute type 1 has an invalid length. [ 794.361729][T13654] xt_CT: No such helper "syz1" [ 794.432380][T13658] 8021q: adding VLAN 0 to HW filter on device bond4 [ 795.196775][T13648] loop5: detected capacity change from 0 to 32768 [ 795.410407][T13648] lbmIODone: I/O error in JFS log [ 795.410684][T13648] *** Log Format Error ! *** [ 795.434205][T13648] lmLogInit: exit(-22) [ 795.435449][T13648] lmLogOpen: exit(-22) [ 796.614591][ T5761] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 796.790075][ T5761] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 796.812189][ T5761] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 796.812228][ T5761] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 796.885175][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.885295][ T5761] usb 5-1: Product: syz [ 796.885310][ T5761] usb 5-1: Manufacturer: syz [ 796.885361][ T5761] usb 5-1: SerialNumber: syz [ 797.640564][T13674] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21 [ 797.706823][T13674] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 798.774170][ C1] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 799.743205][ T5761] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 799.743249][ T5761] cdc_ncm 5-1:1.0: bind() failure [ 799.771334][ T5761] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 799.771375][ T5761] cdc_ncm 5-1:1.1: bind() failure [ 799.793222][ T5761] usb 5-1: USB disconnect, device number 43 [ 799.860896][T13683] loop2: detected capacity change from 0 to 512 [ 799.861872][T13683] EXT4-fs: Ignoring removed oldalloc option [ 799.879595][T13683] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.2062: corrupted in-inode xattr: e_value size too large [ 799.879622][T13683] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 799.880022][T13683] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2062: couldn't read orphan inode 15 (err -117) [ 799.880051][T13683] loop2: lost filesystem error report for type 5 error -117 [ 799.894185][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 799.894203][ C1] EXT4-fs (loop2): initial error at time 1792878041: ext4_iget_extra_inode:6027: inode 15 [ 799.894230][ C1] EXT4-fs (loop2): last error at time 1792878041: ext4_orphan_get:1409 [ 799.896149][T13683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.200993][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.959191][T13698] loop4: detected capacity change from 0 to 32768 [ 802.033376][T13698] JBD2: Ignoring recovery information on journal [ 802.072514][T13698] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 802.072621][T13698] JBD2: bad block at offset 32 [ 802.145775][T13698] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 802.634734][T13690] loop3: detected capacity change from 0 to 32768 [ 802.669211][T13690] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 802.753866][T13723] loop5: detected capacity change from 0 to 512 [ 802.761203][T13723] EXT4-fs (loop5): Test dummy encryption mode enabled [ 802.761252][T13690] XFS (loop3): Ending clean mount [ 802.761866][T13723] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 803.025834][ T5642] ocfs2: Unmounting device (7,4) on (node local) [ 805.021332][ T5647] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 805.497869][T13742] loop3: detected capacity change from 0 to 512 [ 805.530629][T13742] EXT4-fs (loop3): Test dummy encryption mode enabled [ 805.530842][T13742] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 805.798614][T13746] loop5: detected capacity change from 0 to 512 [ 805.799584][T13746] EXT4-fs: Ignoring removed oldalloc option [ 805.814288][T10532] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 807.413705][T13746] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.2077: corrupted in-inode xattr: e_value size too large [ 807.413741][T13746] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 807.414059][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 807.414077][ C0] EXT4-fs (loop5): initial error at time 1792878049: ext4_iget_extra_inode:6027: inode 15 [ 807.414104][ C0] EXT4-fs (loop5): last error at time 1792878049: ext4_iget_extra_inode:6027: inode 15 [ 807.864551][T13746] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2077: couldn't read orphan inode 15 (err -117) [ 807.864593][T13746] loop5: lost filesystem error report for type 5 error -117 [ 808.207313][T13746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.266132][T10532] usb 3-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 808.267722][T10532] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.267767][T10532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.671884][T10532] usbhid 3-1:1.0: can't add hid device: -71 [ 808.671986][T10532] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 808.689895][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.689959][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.717328][T10532] usb 3-1: USB disconnect, device number 51 [ 808.864124][ T5761] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 808.913889][ T6079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.024628][ T5761] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 809.025527][ T5761] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.025551][ T5761] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 809.025573][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.027398][ T5761] usb 4-1: config 0 descriptor?? [ 810.525928][T13769] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2084'. [ 810.667640][T13773] vivid-008: ================= START STATUS ================= [ 810.667656][T13773] vivid-008: FM Deviation: 75000 [ 810.667673][T13773] vivid-008: ================== END STATUS ================== [ 810.750782][T13773] loop4: detected capacity change from 0 to 512 [ 810.832842][T13773] loop4: detected capacity change from 0 to 512 [ 812.063207][T13767] loop1: detected capacity change from 0 to 32768 [ 812.093128][T13767] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 812.149592][T13791] loop4: detected capacity change from 0 to 512 [ 812.170992][T13767] XFS (loop1): Ending clean mount [ 812.179882][T13791] EXT4-fs (loop4): Test dummy encryption mode enabled [ 812.180080][T13791] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 814.196288][T13801] loop2: detected capacity change from 0 to 512 [ 814.197290][T13801] EXT4-fs: Ignoring removed oldalloc option [ 814.277719][ T5648] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 814.291372][T13801] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.2091: corrupted in-inode xattr: e_value size too large [ 814.291402][T13801] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 814.291801][T13801] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2091: couldn't read orphan inode 15 (err -117) [ 814.291829][T13801] loop2: lost filesystem error report for type 5 error -117 [ 814.306111][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 814.306130][ C1] EXT4-fs (loop2): initial error at time 1792878056: ext4_iget_extra_inode:6027: inode 15 [ 814.306161][ C1] EXT4-fs (loop2): last error at time 1792878056: ext4_orphan_get:1409 [ 814.309409][T13801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.572452][T10532] usb 4-1: USB disconnect, device number 30 [ 815.335154][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.858094][T13818] loop3: detected capacity change from 0 to 2048 [ 817.275608][T13818] loop3: p1 < > p3 [ 817.470101][T13818] loop3: p3 size 134217728 extends beyond EOD, truncated [ 819.110404][T13832] vivid-008: ================= START STATUS ================= [ 819.110466][T13832] vivid-008: FM Deviation: 75000 [ 819.110627][T13832] vivid-008: ================== END STATUS ================== [ 819.199726][T13832] loop4: detected capacity change from 0 to 512 [ 819.285121][T13832] loop4: detected capacity change from 0 to 512 [ 820.531430][T13824] loop5: detected capacity change from 0 to 32768 [ 820.622789][T13824] JBD2: Ignoring recovery information on journal [ 820.637414][T13824] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 820.637434][T13824] JBD2: bad block at offset 32 [ 820.669343][T13824] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 820.962047][T13848] loop2: detected capacity change from 0 to 512 [ 820.963883][T13848] EXT4-fs: Ignoring removed oldalloc option [ 821.152991][T13848] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.2104: corrupted in-inode xattr: e_value size too large [ 821.153058][T13848] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 821.154197][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 821.154216][ C0] EXT4-fs (loop2): initial error at time 1792878063: ext4_iget_extra_inode:6027: inode 15 [ 821.154246][ C0] EXT4-fs (loop2): last error at time 1792878063: ext4_iget_extra_inode:6027: inode 15 [ 821.154837][T13848] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2104: couldn't read orphan inode 15 (err -117) [ 821.154891][T13848] loop2: lost filesystem error report for type 5 error -117 [ 821.258129][T13848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.972548][ T6079] ocfs2: Unmounting device (7,5) on (node local) [ 822.291903][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.602037][T13873] loop4: detected capacity change from 0 to 512 [ 825.264605][T13889] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2118'. [ 826.117448][T13895] loop2: detected capacity change from 0 to 512 [ 826.118709][T13895] EXT4-fs: Ignoring removed oldalloc option [ 826.137832][T13895] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.2119: corrupted in-inode xattr: e_value size too large [ 826.137861][T13895] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 826.139835][T13895] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2119: couldn't read orphan inode 15 (err -117) [ 826.139863][T13895] loop2: lost filesystem error report for type 5 error -117 [ 826.141665][T13895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.110634][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.571464][ T195] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 828.593930][T13905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2122'. [ 828.593966][T13905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2122'. [ 828.593980][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 830.864391][ T195] usb 4-1: device descriptor read/64, error -71 [ 832.307879][ T195] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 832.474620][ T195] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 832.486504][ T195] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.486563][ T195] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 832.486671][ T195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.536310][ T195] usb 4-1: config 0 descriptor?? [ 832.852743][T13966] loop4: detected capacity change from 0 to 1024 [ 832.879931][T13959] loop5: detected capacity change from 0 to 32768 [ 832.914766][T13959] JBD2: Ignoring recovery information on journal [ 832.932672][T13959] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 832.932691][T13959] JBD2: bad block at offset 32 [ 832.953959][T13959] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 832.995628][T13966] tc_dump_action: action bad kind [ 833.212039][ T6079] ocfs2: Unmounting device (7,5) on (node local) [ 836.510965][T13997] loop2: detected capacity change from 0 to 512 [ 836.532247][T10532] usb 4-1: USB disconnect, device number 32 [ 837.423355][T14003] rxe_eth0 speed is unknown, defaulting to 1000 [ 837.833499][T14005] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2157'. [ 837.833536][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2157'. [ 837.833549][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2157'. [ 837.854216][ T195] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 837.854638][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 838.000542][T14021] loop1: detected capacity change from 0 to 512 [ 838.006560][T14021] EXT4-fs (loop1): Test dummy encryption mode enabled [ 838.018986][T14021] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 840.568186][ T6408] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 840.739539][ T6408] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 840.742801][ T6408] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.742823][ T6408] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 840.742856][ T6408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.990563][ T6408] usb 4-1: config 0 descriptor?? [ 841.690088][ T5784] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 841.894671][ T5784] usb 5-1: device descriptor read/64, error -71 [ 842.145308][T14075] workqueue: Failed to create a rescuer kthread for wq "dm-cache": -EINTR [ 842.151872][T14075] device-mapper: table: 248:3: cache: could not create workqueue for metadata object (-ENOMEM) [ 842.151895][T14075] device-mapper: ioctl: error adding target to table [ 842.228341][T14068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2178'. [ 842.228375][T14068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2178'. [ 842.228389][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2178'. [ 842.758541][ T6408] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 842.907303][ T6408] usb 6-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 842.942018][ T6408] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.942600][ T6408] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.535151][ T6408] wacom 0003:056A:033B.000B: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 843.558991][ T6408] wacom 0003:056A:033B.000B: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 843.592892][ T6408] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.000B/input/input20 [ 843.793274][T10532] usb 4-1: USB disconnect, device number 33 [ 844.456661][ T6408] usb 6-1: USB disconnect, device number 45 [ 844.594708][T14112] fido_id[14112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 844.798002][T14126] vivid-002: ================= START STATUS ================= [ 844.798721][T14126] vivid-002: FM Deviation: 75000 [ 844.798877][T14126] vivid-002: ================== END STATUS ================== [ 844.955764][T14129] loop1: detected capacity change from 0 to 512 [ 845.043513][T14126] loop1: detected capacity change from 0 to 512 [ 845.899221][T14131] loop3: detected capacity change from 0 to 32768 [ 846.103275][T14131] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 846.126692][T14133] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2195'. [ 846.126728][T14133] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2195'. [ 846.126741][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2195'. [ 846.694268][ T5783] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 846.776091][T14131] XFS (loop3): Ending clean mount [ 846.804096][ T31] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 846.886106][ T5647] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 847.079289][ T5783] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 847.143625][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.143650][ T5783] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 847.143686][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.419673][ T5783] usb 5-1: config 0 descriptor?? [ 847.996549][T14173] loop2: detected capacity change from 0 to 2048 [ 848.068813][T14173] loop2: p1 < > p3 [ 848.071656][T14173] loop2: p3 size 134217728 extends beyond EOD, truncated [ 848.107473][ T5008] loop2: p1 < > p3 [ 848.111342][ T5008] loop2: p3 size 134217728 extends beyond EOD, truncated [ 848.197510][ T5784] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 848.331006][T14188] vivid-004: ================= START STATUS ================= [ 848.331097][T14188] vivid-004: FM Deviation: 75000 [ 848.331174][T14188] vivid-004: ================== END STATUS ================== [ 848.404710][T14188] loop2: detected capacity change from 0 to 512 [ 849.810166][ T5784] usb 6-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 850.254300][ T5784] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.254348][ T5784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.116951][T13229] udevd[13229]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 852.128318][T13112] udevd[13112]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 852.193610][ T9] usb 5-1: USB disconnect, device number 46 [ 852.249995][ T5784] usb 6-1: can't set config #1, error -71 [ 852.253031][ T5784] usb 6-1: USB disconnect, device number 47 [ 852.467536][T14199] loop2: detected capacity change from 0 to 1024 [ 852.536639][T14199] tc_dump_action: action bad kind [ 854.122760][T14221] loop1: detected capacity change from 0 to 2048 [ 854.131131][T14209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2214'. [ 854.131166][T14209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2214'. [ 854.131181][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 854.165122][T14221] loop1: p1 < > p3 [ 854.165404][ T5784] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 854.178125][T14221] loop1: p3 size 134217728 extends beyond EOD, truncated [ 854.301098][T14233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2222'. [ 854.334077][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 854.554260][ T6408] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 854.604721][ T9] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 854.605683][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.605705][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 854.605739][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.608223][ T9] usb 6-1: config 0 descriptor?? [ 855.244757][ T6408] usb 3-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 855.245818][ T6408] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.245858][ T6408] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.367969][T14249] loop1: detected capacity change from 0 to 1024 [ 855.581466][T14249] tc_dump_action: action bad kind [ 856.602758][ T6408] wacom 0003:056A:033B.000C: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 856.619518][ T6408] wacom 0003:056A:033B.000C: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 856.621935][ T6408] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.000C/input/input23 [ 856.640719][ T5784] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 856.676958][T14255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2229'. [ 856.677280][T14255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2229'. [ 856.677316][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 856.789404][ T6408] usb 3-1: USB disconnect, device number 52 [ 856.891415][T14265] fido_id[14265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 857.031956][T14275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2235'. [ 857.074380][T14276] loop4: detected capacity change from 0 to 2048 [ 857.147124][T14276] loop4: p1 < > p3 [ 857.150008][T14276] loop4: p3 size 134217728 extends beyond EOD, truncated [ 857.506480][ T6408] usb 6-1: USB disconnect, device number 48 [ 857.804627][T14282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2237'. [ 857.805025][T14282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2237'. [ 858.112331][T14293] loop5: detected capacity change from 0 to 1024 [ 858.503047][T14293] tc_dump_action: action bad kind [ 859.520640][T14310] __nla_validate_parse: 2 callbacks suppressed [ 859.520659][T14310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2246'. [ 860.612699][T14321] loop5: detected capacity change from 0 to 512 [ 860.642183][T14321] EXT4-fs (loop5): Test dummy encryption mode enabled [ 860.655122][T14321] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 860.834359][ T54] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 860.887145][T14318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2248'. [ 860.887200][T14318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2248'. [ 860.887214][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2248'. [ 863.344268][ T6408] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 863.494640][ T6408] usb 5-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 863.496062][ T6408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.496122][ T6408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.289607][ T6408] usbhid 5-1:1.0: can't add hid device: -71 [ 864.289705][ T6408] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 864.294710][ T6408] usb 5-1: USB disconnect, device number 48 [ 864.816769][T14347] loop4: detected capacity change from 0 to 1024 [ 864.919425][T14347] tc_dump_action: action bad kind [ 866.124329][ T6408] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 866.432307][ T6408] usb 3-1: device descriptor read/64, error -71 [ 866.887605][T14367] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2260'. [ 867.032796][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2261'. [ 867.034099][ T6408] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 867.097507][T14371] loop4: detected capacity change from 0 to 512 [ 867.098487][T14371] EXT4-fs: Ignoring removed oldalloc option [ 867.116877][T14371] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.2263: corrupted in-inode xattr: e_value size too large [ 867.116923][T14371] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 867.117425][T14371] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2263: couldn't read orphan inode 15 (err -117) [ 867.117499][T14371] loop4: lost filesystem error report for type 5 error -117 [ 867.121972][T14371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.135894][T14371] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.2263: corrupted in-inode xattr: e_value size too large [ 867.381617][ T6408] usb 3-1: device descriptor read/64, error -71 [ 867.942507][ T6408] usb usb3-port1: attempt power cycle [ 868.064115][T10532] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 868.159963][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.256852][T14376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2264'. [ 868.256887][T14376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2264'. [ 868.256901][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 868.294806][T10532] usb 2-1: device descriptor read/all, error -71 [ 868.994198][ T195] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 869.188169][ T195] usb 5-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 869.191623][ T195] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.191666][ T195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.326147][T14406] loop3: detected capacity change from 0 to 1024 [ 869.441768][T14387] loop5: detected capacity change from 0 to 32768 [ 869.502388][T14378] lbmIODone: I/O error in JFS log [ 869.502402][T14378] *** Log Format Error ! *** [ 869.502791][T14378] lmLogInit: exit(-22) [ 869.502826][T14378] lmLogOpen: exit(-22) [ 869.558036][T14406] tc_dump_action: action bad kind [ 870.236163][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.236234][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.267449][ T195] wacom 0003:056A:033B.000D: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 870.305848][ T195] wacom 0003:056A:033B.000D: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 870.313417][ T195] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.000D/input/input26 [ 870.580390][ T195] usb 5-1: USB disconnect, device number 49 [ 870.699084][T14416] fido_id[14416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 872.799005][T14442] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2275'. [ 872.827890][T14444] loop4: detected capacity change from 0 to 512 [ 872.834290][T14444] EXT4-fs (loop4): Test dummy encryption mode enabled [ 872.842387][T14444] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 872.924765][ T31] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 873.186910][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2277'. [ 873.187120][T14436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2277'. [ 873.187155][T14436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2277'. [ 874.274059][ T5783] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 874.438036][T14458] loop5: detected capacity change from 0 to 1024 [ 874.451711][T14458] tc_dump_action: action bad kind [ 875.168105][ T5783] usb 4-1: unable to get BOS descriptor or descriptor too short [ 875.168152][ T5783] usb 4-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 875.170249][ T5783] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.170270][ T5783] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 875.177071][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.177094][ T5783] usb 4-1: Product: syz [ 875.177108][ T5783] usb 4-1: Manufacturer: syz [ 875.177122][ T5783] usb 4-1: SerialNumber: syz [ 876.282591][ T5783] usb 4-1: can't set config #1, error -71 [ 876.286122][ T5783] usb 4-1: USB disconnect, device number 35 [ 876.530731][T14473] loop4: detected capacity change from 0 to 512 [ 876.908010][T10532] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 877.101456][T10532] usb 2-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 877.406780][T14492] loop3: detected capacity change from 0 to 512 [ 877.429003][T14492] EXT4-fs (loop3): Test dummy encryption mode enabled [ 877.429826][T14492] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 877.461302][T10532] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.461349][T10532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.629740][T14494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2291'. [ 877.674316][T14496] loop5: detected capacity change from 0 to 512 [ 877.675510][T14496] EXT4-fs: Ignoring removed oldalloc option [ 877.840198][T14496] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.2293: corrupted in-inode xattr: e_value size too large [ 877.840228][T14496] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 877.842062][T14496] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2293: couldn't read orphan inode 15 (err -117) [ 877.842091][T14496] loop5: lost filesystem error report for type 5 error -117 [ 877.844999][T14496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.848467][T14496] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.2293: corrupted in-inode xattr: e_value size too large [ 879.347758][ T6079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.386733][T10532] wacom 0003:056A:033B.000E: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 879.454698][T10532] wacom 0003:056A:033B.000E: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 879.460196][T10532] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.000E/input/input29 [ 879.581586][T10532] usb 2-1: USB disconnect, device number 46 [ 879.654053][ T6408] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 879.766298][T14508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2294'. [ 879.766334][T14508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2294'. [ 879.766348][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'. [ 879.767187][T14512] loop4: detected capacity change from 0 to 1024 [ 879.898627][T14510] fido_id[14510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 879.937215][T14512] tc_dump_action: action bad kind [ 883.872063][T14550] loop4: detected capacity change from 0 to 512 [ 883.877884][T14550] EXT4-fs: Ignoring removed oldalloc option [ 883.963079][T14550] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.2304: corrupted in-inode xattr: e_value size too large [ 883.963109][T14550] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 883.977608][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 883.977626][ C0] EXT4-fs (loop4): initial error at time 1792878125: ext4_iget_extra_inode:6027: inode 15 [ 883.977658][ C0] EXT4-fs (loop4): last error at time 1792878125: ext4_iget_extra_inode:6027: inode 15 [ 883.980099][T14550] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2304: couldn't read orphan inode 15 (err -117) [ 883.980119][T14550] loop4: lost filesystem error report for type 5 error -117 [ 884.976753][T14550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.008063][T14559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2306'. [ 885.130766][T14549] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.2304: corrupted in-inode xattr: e_value size too large [ 885.724824][ T6408] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 885.779141][T14570] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2297'. [ 885.779177][T14570] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2297'. [ 885.779190][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2297'. [ 885.813966][ T195] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 885.881717][ T6408] usb 4-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 885.892359][ T6408] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.892464][ T6408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.133859][T14582] loop2: detected capacity change from 0 to 1024 [ 886.198713][T14582] tc_dump_action: action bad kind [ 886.421225][ T6408] wacom 0003:056A:033B.000F: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 886.424564][ T6408] wacom 0003:056A:033B.000F: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 886.432216][ T6408] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.000F/input/input32 [ 887.199641][ T6408] usb 4-1: USB disconnect, device number 36 [ 887.457115][T14590] fido_id[14590]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 887.953471][ T195] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 888.187006][ T195] usb 6-1: device descriptor read/64, error -71 [ 888.504118][ T195] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 888.748740][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.062101][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2320'. [ 889.118689][T14605] loop2: detected capacity change from 0 to 32768 [ 889.120096][T14605] xfs: Deprecated parameter 'noikeep' [ 889.120112][T14605] XFS: noikeep mount option is deprecated. [ 889.120130][T14605] xfs: Deprecated parameter 'noattr2' [ 889.120141][T14605] XFS: noattr2 mount option is deprecated. [ 889.183451][T14605] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 889.194905][T14605] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 889.456340][T14605] XFS (loop2): Ending clean mount [ 889.723892][T14605] XFS (loop2): Quotacheck needed: Please wait. [ 890.278305][T14632] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 890.363005][T14631] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 890.570537][T14605] XFS (loop2): Quotacheck: Done. [ 890.749208][T14631] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 890.749233][T14631] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 890.749432][T14631] overlayfs: d_ino too big (447, ino=9223372036854778287, xinobits=3) [ 890.749636][T14631] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 890.749823][T14631] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 890.750080][T14631] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 890.750288][T14631] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 890.750483][T14631] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 890.750684][T14631] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 890.750947][T14631] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 891.451692][ T5640] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 892.318460][T14654] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 892.318761][T14654] ================================================================== [ 892.318773][T14654] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xae/0x480 [ 892.318869][T14654] Read of size 4 at addr 0000000000000174 by task syz.5.2324/14654 [ 892.318880][T14654] [ 892.318887][T14654] CPU: 1 UID: 0 PID: 14654 Comm: syz.5.2324 Not tainted syzkaller #0 PREEMPT(full) [ 892.318907][T14654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 892.318916][T14654] Call Trace: [ 892.318921][T14654] [ 892.318927][T14654] dump_stack_lvl+0xe8/0x150 [ 892.318950][T14654] ? dm_kcopyd_client_destroy+0xae/0x480 [ 892.318965][T14654] kasan_report+0x117/0x150 [ 892.318988][T14654] ? dm_kcopyd_client_destroy+0xae/0x480 [ 892.319006][T14654] kasan_check_range+0x264/0x2c0 [ 892.319026][T14654] dm_kcopyd_client_destroy+0xae/0x480 [ 892.319043][T14654] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 892.319057][T14654] ? kasan_quarantine_put+0xbb/0x1f0 [ 892.319073][T14654] ? lockdep_hardirqs_on+0x7b/0x110 [ 892.319090][T14654] ? kfree+0x1c5/0x650 [ 892.319102][T14654] ? __destroy+0x139/0x2f0 [ 892.319137][T14654] ? vfree+0x426/0x490 [ 892.319155][T14654] __destroy+0x172/0x2f0 [ 892.319169][T14654] cache_ctr+0x1674/0x2bf0 [ 892.319191][T14654] ? __pfx_cache_ctr+0x10/0x10 [ 892.319205][T14654] ? skip_spaces+0x8a/0xa0 [ 892.319273][T14654] dm_table_add_target+0x58d/0xc70 [ 892.319313][T14654] table_load+0x325/0x8a0 [ 892.319327][T14654] ? __pfx_table_load+0x10/0x10 [ 892.319341][T14654] ? __might_fault+0xaf/0x130 [ 892.319358][T14654] dm_ctl_ioctl+0x9ec/0xe10 [ 892.319381][T14654] ? __pfx_table_load+0x10/0x10 [ 892.319393][T14654] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 892.319426][T14654] ? __fget_files+0x2a/0x420 [ 892.319444][T14654] ? bpf_lsm_file_ioctl+0x9/0x20 [ 892.319468][T14654] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 892.319488][T14654] __se_sys_ioctl+0xfc/0x170 [ 892.319533][T14654] do_syscall_64+0x166/0x520 [ 892.319547][T14654] ? trace_irq_disable+0x3b/0x140 [ 892.319566][T14654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.319580][T14654] ? clear_bhb_loop+0x70/0xc0 [ 892.319595][T14654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.319608][T14654] RIP: 0033:0x7fc8dd39f559 [ 892.319620][T14654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.319632][T14654] RSP: 002b:00007fc8de1d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.319645][T14654] RAX: ffffffffffffffda RBX: 00007fc8dd626180 RCX: 00007fc8dd39f559 [ 892.319655][T14654] RDX: 0000200000000200 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 892.319664][T14654] RBP: 00007fc8dd436b20 R08: 0000000000000000 R09: 0000000000000000 [ 892.319672][T14654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.319680][T14654] R13: 00007fc8dd626218 R14: 00007fc8dd626180 R15: 00007ffc55738c58 [ 892.319695][T14654] [ 892.319700][T14654] ================================================================== [ 892.319717][T14654] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 892.626264][T14654] CPU: 1 UID: 0 PID: 14654 Comm: syz.5.2324 Not tainted syzkaller #0 PREEMPT(full) [ 892.635645][T14654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 892.645695][T14654] Call Trace: [ 892.648966][T14654] [ 892.651903][T14654] vpanic+0x26f/0x710 [ 892.655882][T14654] panic+0xc5/0xd0 [ 892.659596][T14654] ? __pfx_panic+0x10/0x10 [ 892.664017][T14654] ? dm_kcopyd_client_destroy+0xae/0x480 [ 892.669664][T14654] ? rcu_is_watching+0x16/0xb0 [ 892.674426][T14654] ? dm_kcopyd_client_destroy+0xae/0x480 [ 892.680053][T14654] check_panic_on_warn+0x89/0xb0 [ 892.684987][T14654] ? dm_kcopyd_client_destroy+0xae/0x480 [ 892.690612][T14654] end_report+0x73/0x170 [ 892.694865][T14654] ? dm_kcopyd_client_destroy+0xae/0x480 [ 892.700485][T14654] kasan_report+0x128/0x150 [ 892.704999][T14654] ? dm_kcopyd_client_destroy+0xae/0x480 [ 892.710625][T14654] kasan_check_range+0x264/0x2c0 [ 892.715559][T14654] dm_kcopyd_client_destroy+0xae/0x480 [ 892.721013][T14654] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 892.727086][T14654] ? kasan_quarantine_put+0xbb/0x1f0 [ 892.732379][T14654] ? lockdep_hardirqs_on+0x7b/0x110 [ 892.737567][T14654] ? kfree+0x1c5/0x650 [ 892.741639][T14654] ? __destroy+0x139/0x2f0 [ 892.746046][T14654] ? vfree+0x426/0x490 [ 892.750119][T14654] __destroy+0x172/0x2f0 [ 892.754367][T14654] cache_ctr+0x1674/0x2bf0 [ 892.758780][T14654] ? __pfx_cache_ctr+0x10/0x10 [ 892.763538][T14654] ? skip_spaces+0x8a/0xa0 [ 892.767989][T14654] dm_table_add_target+0x58d/0xc70 [ 892.773114][T14654] table_load+0x325/0x8a0 [ 892.777443][T14654] ? __pfx_table_load+0x10/0x10 [ 892.782306][T14654] ? __might_fault+0xaf/0x130 [ 892.787006][T14654] dm_ctl_ioctl+0x9ec/0xe10 [ 892.791513][T14654] ? __pfx_table_load+0x10/0x10 [ 892.796348][T14654] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 892.801378][T14654] ? __fget_files+0x2a/0x420 [ 892.805978][T14654] ? bpf_lsm_file_ioctl+0x9/0x20 [ 892.810950][T14654] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 892.816006][T14654] __se_sys_ioctl+0xfc/0x170 [ 892.820595][T14654] do_syscall_64+0x166/0x520 [ 892.825177][T14654] ? trace_irq_disable+0x3b/0x140 [ 892.830197][T14654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.836279][T14654] ? clear_bhb_loop+0x70/0xc0 [ 892.840960][T14654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.846866][T14654] RIP: 0033:0x7fc8dd39f559 [ 892.851270][T14654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.870868][T14654] RSP: 002b:00007fc8de1d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.879270][T14654] RAX: ffffffffffffffda RBX: 00007fc8dd626180 RCX: 00007fc8dd39f559 [ 892.887231][T14654] RDX: 0000200000000200 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 892.895207][T14654] RBP: 00007fc8dd436b20 R08: 0000000000000000 R09: 0000000000000000 [ 892.903168][T14654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.911128][T14654] R13: 00007fc8dd626218 R14: 00007fc8dd626180 R15: 00007ffc55738c58 [ 892.919111][T14654] [ 892.922736][T14654] Kernel Offset: disabled [ 892.927068][T14654] Rebooting in 86400 seconds..