last executing test programs: 9m20.255960806s ago: executing program 2 (id=621): r0 = socket$nl_rdma(0x10, 0x3, 0x14) read(r0, &(0x7f0000000580)=""/63, 0x3f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x6, 0xa8, @random='8\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(0x0, 0x188) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r8 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000000)) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x6, "be4756527cdb"}}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r8, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}]}) 9m17.815641844s ago: executing program 2 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0xfe8) 9m17.456840296s ago: executing program 2 (id=625): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m16.341137952s ago: executing program 2 (id=626): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffefe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x10001}}, 0xe8) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01020000000000000000010000000900010073797a310000000008000700"], 0xa4}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x10001}) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000480)=0x1000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ptrace$getsig(0x4202, r2, 0x8, &(0x7f0000001080)) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) write$sndseq(r9, &(0x7f00000000c0)=[{0x3, 0xf, 0x2, 0xed, @tick=0x1ff, {0x8}, {0x7, 0x9}, @control={0x3, 0xfffffff9, 0x7fffffff}}, {0x3, 0xa, 0x9, 0xff, @time={0x9, 0x8001}, {0x4d, 0xff}, {0x2, 0xf}, @raw8={"2cd574b4f67d3c5d544d87ce"}}, {0x8, 0x3, 0xd, 0x89, @tick=0x81, {0x9d, 0xfc}, {0x6c, 0x7}, @result={0x2, 0x6}}, {0x5, 0x7, 0x2, 0x80, @tick=0x5, {0x7, 0xa9}, {0x6, 0x1}, @raw8={"9417e9a6107ace5f6bce2a69"}}], 0x70) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9m14.911177607s ago: executing program 2 (id=628): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, 0x0, 0x0, 0x0) semop(r3, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 9m11.097272279s ago: executing program 2 (id=634): r0 = socket$nl_rdma(0x10, 0x3, 0x14) read(r0, &(0x7f0000000580)=""/63, 0x3f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x6, 0xa8, @random='8\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(0x0, 0x188) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r8 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000000)) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x6, "be4756527cdb"}}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r8, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}]}) 8m55.759375189s ago: executing program 32 (id=634): r0 = socket$nl_rdma(0x10, 0x3, 0x14) read(r0, &(0x7f0000000580)=""/63, 0x3f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x6, 0xa8, @random='8\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(0x0, 0x188) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r8 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000000)) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x6, "be4756527cdb"}}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r8, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}]}) 56.156934145s ago: executing program 3 (id=1665): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x10, r4}, 0x10) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x4c, 0x0, 0x24, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x814}, 0x4008080) read$char_usb(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 54.920526345s ago: executing program 3 (id=1668): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7fff0026}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = io_uring_setup(0x60fd, &(0x7f0000000000)={0x0, 0xeec2, 0x2, 0x2, 0x116}) close_range(r4, r4, 0x0) splice(r2, 0x0, r1, 0x0, 0xc, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0, 0x0, 0x0, 0x1f}, 0xb80b) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f0000000180)=0xf) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) sendmsg$sock(r5, &(0x7f0000004100)={0x0, 0x0, 0x0}, 0x0) 54.624853744s ago: executing program 3 (id=1671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) r3 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@nolazytime}, {@inode32}]}, 0x0, 0x9747, &(0x7f000001c440)="$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") ioctl$FITRIM(r3, 0x80405880, &(0x7f0000000440)={0x0, 0x8000000000000001, 0x170}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="1c00e7"], 0x84}}, 0x0) 49.675889732s ago: executing program 3 (id=1678): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, &(0x7f0000000100)}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, r0, 0x4e18e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000180)="7c3352af01eeb0e384bbfe79043858a805fdf6ab5ca64e3125babe0bf17aa94813ec6bdf9c7a860dc88dc3e5", 0x2c}], 0x1, 0x59fd, 0x2, 0x3) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x20d4) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="67727071756f74612c00687d2c1fd849487b35997ff526a1a628628eb8b2825c2a5f550c24fe5f19abe8c5863847f77ea4d3bcb2231397455063b68b0ec97b0ff931c2c5deec45e5b67470f1076d9daefcf960726490f4a1df2ddaa2f37b291ea76c421f7c3cfa8ca4f5aaed06507c78f0392fd7d4f04da668dc2f5e4fc8980e74a1444ea1dfed748caf232baae27f468b04b013df3a3e53bb954b8aa6e1af3299700dd841"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000900)="b44c80630562443108347301af", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) r7 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) 49.183750958s ago: executing program 3 (id=1679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7f7ffffffffffffff0000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (fail_nth: 9) 48.687739424s ago: executing program 3 (id=1680): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7fff0026}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) r3 = io_uring_setup(0x60fd, &(0x7f0000000000)={0x0, 0xeec2, 0x2, 0x2, 0x116}) close_range(r3, r3, 0x0) splice(r1, 0x0, r0, 0x0, 0xc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x6f}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0, 0x0, 0x0, 0x1f}, 0xb80b) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000180)=0xf) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) sendmsg$sock(r4, &(0x7f0000004100)={0x0, 0x0, 0x0}, 0x0) 48.044254924s ago: executing program 33 (id=1680): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7fff0026}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) r3 = io_uring_setup(0x60fd, &(0x7f0000000000)={0x0, 0xeec2, 0x2, 0x2, 0x116}) close_range(r3, r3, 0x0) splice(r1, 0x0, r0, 0x0, 0xc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x6f}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0, 0x0, 0x0, 0x1f}, 0xb80b) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000180)=0xf) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) sendmsg$sock(r4, &(0x7f0000004100)={0x0, 0x0, 0x0}, 0x0) 10.025456579s ago: executing program 0 (id=1807): r0 = getgid() syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f0000000040)={[{@utf8}, {@utf8}, {@gid={'gid', 0x3d, r0}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@time_offset={'time_offset', 0x3d, 0x9}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x4}}]}, 0x1, 0x152b, &(0x7f0000002780)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200fffe3800048034000180090001007866726d000000002400028008000440000000150800024000000004080001400000000c05000300010000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)=0x11) 9.319944362s ago: executing program 0 (id=1813): mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000140)=0x0) prlimit64(r5, 0x0, &(0x7f0000000180)={0x7f, 0x8b}, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0x51, 0xa, 0x2, "3258c5c0d651aa001b0000f4ff4000000000002000e926ba2800"}) sendmsg$inet(r6, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r8, 0x80049370, &(0x7f0000000340)) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) 8.982231702s ago: executing program 0 (id=1815): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000002c0)='(') r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb060018"], &(0x7f0000000040)=""/249, 0x1a, 0xf9, 0xa}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x404c851}, 0x0) epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x32f0, 0xc000, 0x8, 0x1024}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) creat(0x0, 0xd931d3864d39dcca) 7.916478347s ago: executing program 5 (id=1821): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000140)=0x8e, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") pwrite64(0xffffffffffffffff, &(0x7f0000000540)='2', 0x1, 0x8080c61) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x21) r2 = socket(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r3, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x20b) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0xe24, 0x100, @local, 0x2}, {0xa, 0x4e23, 0x7, @empty, 0xffc}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 5.431382906s ago: executing program 5 (id=1829): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) splice(r0, 0x0, r1, 0x0, 0x402000784853bb, 0x700000000000000) mmap$qrtrtun(&(0x7f00001e7000/0x4000)=nil, 0x4000, 0x2000008, 0x20010, r0, 0xffffffffffffff01) 5.339848779s ago: executing program 0 (id=1830): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x2, 0xffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') read$FUSE(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000840)={0x2, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=""/216, 0xd8}, {&(0x7f0000000140)=""/230, 0xe6}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/146, 0x92}, {&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000680)=""/93, 0x5d}, {&(0x7f0000000700)=""/2, 0x2}], &(0x7f0000000800)=[0x0, 0x40, 0x200, 0xb, 0x7], 0x9}, 0x20) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000040)="f5", 0x1) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e1e, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1b) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1, 0xdb9, &(0x7f0000000e00)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x43, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00') syz_clone3(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 4.832404095s ago: executing program 1 (id=1831): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r5 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) r6 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r6, r5}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000008000000050040000000000e03000000000000000100000000000008000000000a0000000000220700000000000000000000000a02000000002e005f00305f00"], 0x0, 0x54, 0x0, 0x0, 0x3}, 0x28) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1], 0x210) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r5, @ANYRES8=r7], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x7, 0x2f, 0x0, &(0x7f0000000180)="24c2af03000000710700005416502a92039f132c9cf081944e164393ad79e87c772306de08213bd0ff31759b88d3ab", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="1400000028000b6394f90509fc60000000000000f5e1d6e2463a872ef64d8a19e372cbc12ed401a757713adb7fc0ee1fd0131257dac93d5b66d31f79db2fb44d0fd866f9bbd2a962070e3ac41c1e72f123c67f1e391fbac8ff54e2ca5e952095bb657411f1d1a0c252f31c488f86ba93d654e4f7c6fe2a20d4a4561e663343827e8dda64bd37d2c1bcab8ebc80af0eb9fab8677a0f401d64615098d122cd14df6fcf0430a3296b7b045195a9ef1d470d1e1cbc18033c945c16413697864f12c5cdf80b6e233652f049be3a6bb6c8513b53e03720e36ee68f2575efceb09b6c86f90e", 0xe2}], 0x1}, 0x40) 2.870505438s ago: executing program 4 (id=1834): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c0007"], 0x5c}}, 0x20084884) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x15, 0x0, 0xfc, 0xb7a}, {0x2c, 0xe, 0x0, 0x3}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000040c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018013000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010500028005000100980000003c0003800c00028005000100890000002c00018010000300fe800000000000ddffffff000000002a14000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c000280050001"], 0xc8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000, 0x4bd}) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 2.437030752s ago: executing program 5 (id=1835): r0 = syz_io_uring_setup(0x1000259a, &(0x7f0000000000)={0x0, 0xe3d1, 0x8000, 0x400, 0x200154}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f00000006c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) preadv(r8, &(0x7f0000000680)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1, 0x300000, 0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)=ANY=[@ANYBLOB="22153f", @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r9, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r9, &(0x7f0000000180)={0x50, 0x0, r10, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x5, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x109881, 0x34) fcntl$lock(r11, 0x24, &(0x7f0000000200)={0x1, 0x0, 0x700, 0x1000000}) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1, 0x4, 0x6) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) futex_waitv(&(0x7f0000001c00)=[{0x7, &(0x7f0000000700)=0x6, 0x2}, {0xd6df, &(0x7f0000001200)=0x7, 0x2}], 0x2, 0x0, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe8}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="186500000f000008000000009b000000186b00000500000000000000f1650000"], &(0x7f0000000200)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x2, 0xdca, 0x2}, 0x10, 0x121b0, r13, 0x0, &(0x7f0000000380)=[r7], 0x0, 0x10, 0x59c}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x9d8, 0x7, 0x1, 0x9, 0x200000000008002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x6, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x8, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x9, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r14 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x398}) io_uring_enter(r14, 0x8ae, 0x6933, 0x17, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r0, 0x2f, 0x0, 0x3, 0x1, 0x0, {0x0, r12}}) socket$nl_route(0x10, 0x3, 0x0) 2.319927636s ago: executing program 4 (id=1836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2.055681764s ago: executing program 1 (id=1837): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = creat(0x0, 0x2b) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4b6, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x103042, 0x41) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc1b, &(0x7f0000000c80)="$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") setrlimit(0x1, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r3, 0x0, 0x0, 0x404043000) pwrite64(r1, &(0x7f0000000180)="95", 0x1, 0x800) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0x4, 0x1000000000000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000040), 0x10) sendmsg$netlink(r4, &(0x7f0000005d80)={&(0x7f0000000000)=@kern={0x1d, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000000)=ANY=[], 0x10}, {&(0x7f0000001f40)=ANY=[], 0x28}], 0x2, 0x0, 0x0, 0x4000804}, 0x4000) 1.924620128s ago: executing program 0 (id=1838): unshare(0x28000600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f00000008c0)=0x47) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x6, 0xc) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) ioctl$XFS_IOC_GOINGDOWN(r2, 0x8004587d, &(0x7f0000000100)=0x6e04) r3 = fsopen(&(0x7f0000000080)='logfs\x00', 0x1) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x10) 1.716133725s ago: executing program 5 (id=1839): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x103042, 0x41) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0), 0x0, 0x404043000) pwrite64(r0, &(0x7f0000000180)="95", 0x1, 0x800) 1.589875539s ago: executing program 1 (id=1840): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x14}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x8000}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 1.473186033s ago: executing program 5 (id=1841): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x20108c0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRES8], 0x1, 0x61f5, &(0x7f00000075c0)="$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") r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0x80000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x108843, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, 0x0, 0x4004050) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0x2000}], 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x60000018}) 1.323865547s ago: executing program 1 (id=1842): mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000140)=0x0) prlimit64(r5, 0x0, &(0x7f0000000180)={0x7f, 0x8b}, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0x51, 0xa, 0x2, "3258c5c0d651aa001b0000f4ff4000000000002000e926ba2800"}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r8, 0x80049370, &(0x7f0000000340)) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) 1.323619557s ago: executing program 4 (id=1843): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e20, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}, 0x1, 0xa000000, 0x0, 0x24000080}, 0x4000011) 1.26210561s ago: executing program 1 (id=1844): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1db1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7c, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r1], 0x38}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vbi(&(0x7f000000b380), 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f000000b3c0)={0x40000000, 0x3, "7a779dc84d2d09faa2f3054936aa4476ccf56f92f5f083432dee9d5d0aa80b3a", 0xfffffffffffffff7, 0x3, 0xb, 0x4ba4, 0x6, 0x4, 0x7, 0x9, [0x40, 0xc5, 0x10001, 0x6]}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xc}) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)="b642c951508ca7bf98056c8b0ddb5acfc2c8a406ce88fb9f8c652d1d1b27bf12340cc3cac3eb71eea50f58eba1ed049b564456e867d2cba1ce4326a8678b623768238e35bf0542961e6fc37580f5b6ab8b22392060a00eeb544cb41b5f53de06dac31d32a58817bf927ae1dcbf1e79543dcd95d7b7a4352c899850f73d3bac90db44bf177a92eed2a996a4df23ad27048316", 0x92, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa2002, 0x0) ioctl$SNDCTL_DSP_RESET(r6, 0x4d00, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) shutdown(r3, 0x1) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x401, 0x0, 0x0, {0xb9335154ba695112, 0x0, 0x84}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xf8}, 0x1, 0x0, 0x0, 0x40400d1}, 0x0) connect$can_bcm(r7, &(0x7f0000000140)={0x1d, r8}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) 1.036549527s ago: executing program 4 (id=1845): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x2, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x7f00) 903.768191ms ago: executing program 1 (id=1846): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r5 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) r6 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r6, r5}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000008000000050040000000000e03000000000000000100000000000008000000000a0000000000220700000000000000000000000a02000000002e005f00305f00"], 0x0, 0x54, 0x0, 0x0, 0x3}, 0x28) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1], 0x210) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="bf16000000000000b70700001f0000005070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b0000000000001000f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a49ef23d410f61a6b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeac698890c864d59887a59905f1e07f40b1cd3641f8c192c368590f894cd4e1110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068f4025c0bf1aad90738725837079e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000ffffff010100000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9736bdeab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cfe36bc120e3b39a6e5a796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f7da31cf41ab11e0a494034127dd1c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bce74fa4ffa4d9aaa705989b8e6731e2401b6a560e3296e52d337c56abf112874ec309bae5fa4c81e5c9f42d9383e41d277b10392a96286744f839c3f128f8f92ef992239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7b06000e3b1c39b2e00916de48a4e70f03cc41467f7af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec737555393c61a008280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede0ec83a1c97870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf03b5ed04465746ff8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e827172ea3b774a1467c89fa0f82e8440105051e5510a33dc5a5e143fbfff161c12ca389cbe4c51b3fa00055cc1b66c5fd9c26a54d43fa050645bd6109b113be7664e08add7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79e184f5e93ba5c8c2a4c0443fb652b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb5288aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6640a9dea0b6c91996d65da6c24a8f2a86c8acf720402fb6dbb8be1ed3e2a483935414459f3cdaaf99000000000000000000bf2130d1b32c826563c508d0ad23bc83ba3f3757210afcf2a64783057e177615c068bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd13ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f88be7dbad64d7cfa6396a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783499d4411ccbbeed215b745058e56c70afe8016b3dd359e785b36e6097173cc6b893ecd138289709839af6c95fbed6c33e401ec747820d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964ed0700000062f3d90f0eb634ae331385d502fc7cc33158bc306d8c3bdae8108a2380000000000000008832ec0906aaec43659c79c8adfdeb1fd291c6fc6737b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c81eb7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9edfe6dca9c43907f3a85cf655ccd9d624e8c6f7932c4d719347f39ef006c2df747e27a2d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57776e5fe25cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed0000800b805fbd1b474c9ed0dc19ad6e99b66ee0f8c9d697655ebdf5ef30d1b92bd283df88c1096d4bd3686e18ab07f9b580afbd4bd4d8979686422849b04024f609a7b76e902d35343793d99fe395ae73166187c64a505c1f4bb736fcf1dfde7da6bea1945a14f1c578093e6cfb4702a95fb4f653064244950ae227f2a22678e2ff4699bfcba3b7d5656d9be441d07cc3ba51f5b9e825fbec6aee7f9e1b04cdabf99bd760036f74dec91d341c885e785c8517cc50138be2447fa04b77acd2fd078f1da244051e44b5a881197733ba420c9d6b02fd01fa9369f8d3310be2ff1ad5952e025ce59c2dc8327d26fc4facd5915007d22dfccf67dfb53ae2f72a0812ad121fc7de5aba071b83ebf271a5140c6a0b115bd05d7fff46fe144d9fac4ee0a7a2f7242737fd622dc74ca2d79585d4c821d2294b779eebbaac7d81cdaa5ac", @ANYRESHEX=r5, @ANYRES8=r7], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x7, 0x2f, 0x0, &(0x7f0000000180)="24c2af03000000710700005416502a92039f132c9cf081944e164393ad79e87c772306de08213bd0ff31759b88d3ab", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="1400000028000b6394f90509fc60000000000000f5e1d6e2463a872ef64d8a19e372cbc12ed401a757713adb7fc0ee1fd0131257dac93d5b66d31f79db2fb44d0fd866f9bbd2a962070e3ac41c1e72f123c67f1e391fbac8ff54e2ca5e952095bb657411f1d1a0c252f31c488f86ba93d654e4f7c6fe2a20d4a4561e663343827e8dda64bd37d2c1bcab8ebc80af0eb9fab8677a0f401d64615098d122cd14df6fcf0430a3296b7b045195a9ef1d470d1e1cbc18033c945c16413697864f12c5cdf80b6e233652f049be3a6bb6c8513b53e03720e36ee68f2575efceb09b6c86f90e", 0xe2}], 0x1}, 0x40) 903.245141ms ago: executing program 0 (id=1847): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x4000010, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000004, 0xffffffffffffffff, 0x20) r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000380)={0x20, 0xe, 0xc, "b89b939d2ee58edc0719a623"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="203036000000a7d8"], 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x4, 0x4) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x400110e0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fdatasync(0xffffffffffffffff) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000140)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) splice(r5, 0x0, r6, 0x0, 0x402000784853bb, 0x0) mmap$qrtrtun(&(0x7f00001e7000/0x4000)=nil, 0x4000, 0x2000008, 0x20010, r5, 0xffffffffffffff01) 844.762863ms ago: executing program 4 (id=1848): r0 = memfd_create(&(0x7f0000000700)='\x02\t\x00\x00\x00\x00\x00\x00\x00Fb\xa5|g\xacv\xfa\xf9\xfd\xa7So\x1f\xe2@\xcc\xca\x06\xb3{D\xb1\xd4\xd4\xf1\xb3`\xf0\x1a\xc7\x11\x87\xb3G5\xe1\xd0U\x88f6b\xae9e*7\xd9\xf4\xc4\x1d\xde\x92\x1e\xac\xb8\x83\xa3%RMz\xe6\xc8\xc2F%\xb8\x13\xc1\v\xd5*v5\x8a\xd8\x12\x93\xaaN\xf4\x10\x19Jx\xbc\xc4\xdd\x86M\xcbGyW\xbf>\x19\x88\x19s\xe2{\xdb.\xbc\xf1\'_\xe1\xf3z\xd3\xd9\x89\xa0\xf0\xb2\xbe\xf7\xff\x86\x0e\x13HE\xd5^8\x8d=;\x18\\!\xe2\xe2\x8b\xee\xe9\xcf\x00m k\x06\x94;\xd8m@\xc6|\xc5Pzm\xd7\x0f\x1fu\xfc\xff\xff\xff\f_\xd0\x14\xf0\xaf\xa4\xcf\xbfE\bq\x0f\xbe\xea\xda\xa1\xb09\xfd4\xe9\x8a\xc5sG\x83\x8d\xccO4\xd9\xeb\xff\xdb\n\xb7\x9av>\xe9\xc7ae\x1f\xa6e\x89\x02\xb0ZG\xfd\xe4\x8aJ\xa7\xd5&\xd39\xb7\xa4p\xfd\xe36o\xc1|\xea7\xa3S\x16.r\x1a\xf1c [ 708.152212][T11467] dump_stack_lvl+0x18c/0x250 [ 708.156895][T11467] ? show_regs_print_info+0x20/0x20 [ 708.162089][T11467] ? load_image+0x420/0x420 [ 708.166590][T11467] ? __might_sleep+0xe0/0xe0 [ 708.171183][T11467] ? __lock_acquire+0x7d40/0x7d40 [ 708.176209][T11467] should_fail_ex+0x39d/0x4d0 [ 708.180891][T11467] should_failslab+0x9/0x20 [ 708.185395][T11467] slab_pre_alloc_hook+0x59/0x310 [ 708.190420][T11467] ? __keyctl_dh_compute+0x3ce/0xce0 [ 708.195704][T11467] ? __keyctl_dh_compute+0x3ce/0xce0 [ 708.200991][T11467] __kmem_cache_alloc_node+0x53/0x250 [ 708.206368][T11467] ? __keyctl_dh_compute+0x3ce/0xce0 [ 708.211648][T11467] __kmalloc+0xa4/0x230 [ 708.215807][T11467] __keyctl_dh_compute+0x3ce/0xce0 [ 708.220923][T11467] ? keyctl_get_persistent+0x770/0x770 [ 708.226387][T11467] ? __might_fault+0xaa/0x120 [ 708.231072][T11467] ? __might_fault+0xaa/0x120 [ 708.235743][T11467] ? __might_fault+0xc6/0x120 [ 708.240413][T11467] ? __might_fault+0xaa/0x120 [ 708.245085][T11467] keyctl_dh_compute+0x125/0x180 [ 708.250028][T11467] ? keyctl_dh_compute_kdf+0x220/0x220 [ 708.255484][T11467] ? ksys_write+0x1c4/0x260 [ 708.259988][T11467] ? __lock_acquire+0x7d40/0x7d40 [ 708.265011][T11467] __se_sys_keyctl+0x456/0xb60 [ 708.269792][T11467] ? __x64_sys_keyctl+0xc0/0xc0 [ 708.274642][T11467] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 708.280272][T11467] ? __fget_files+0x28/0x4b0 [ 708.284862][T11467] ? mutex_unlock+0x10/0x10 [ 708.289358][T11467] ? __fget_files+0x43d/0x4b0 [ 708.294040][T11467] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 708.300019][T11467] ? lock_chain_count+0x20/0x20 [ 708.304869][T11467] ? lockdep_hardirqs_on+0x98/0x150 [ 708.310066][T11467] ? __x64_sys_keyctl+0x20/0xc0 [ 708.314911][T11467] do_syscall_64+0x55/0xb0 [ 708.319323][T11467] ? clear_bhb_loop+0x40/0x90 [ 708.323999][T11467] ? clear_bhb_loop+0x40/0x90 [ 708.328675][T11467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.334570][T11467] RIP: 0033:0x7f0f1d99ce59 [ 708.338984][T11467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.358596][T11467] RSP: 002b:00007f0f1e8d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 708.367006][T11467] RAX: ffffffffffffffda RBX: 00007f0f1dc15fa0 RCX: 00007f0f1d99ce59 [ 708.374978][T11467] RDX: 0000200000000040 RSI: 0000200000000200 RDI: 0000000000000017 [ 708.382950][T11467] RBP: 00007f0f1e8d3090 R08: 0000200000000000 R09: 0000000000000000 [ 708.390913][T11467] R10: 000000000000003b R11: 0000000000000246 R12: 0000000000000001 [ 708.398879][T11467] R13: 00007f0f1dc16038 R14: 00007f0f1dc15fa0 R15: 00007ffd99b67ad8 [ 708.406872][T11467] [ 708.411176][T11468] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1450'. [ 708.505468][T11470] loop1: detected capacity change from 0 to 1024 [ 708.635482][T11472] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1454'. [ 708.900898][T11470] hfsplus: xattr search failed [ 709.080254][ T12] hfsplus: b-tree write err: -5, ino 3 [ 709.448392][T11488] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 711.030637][ T27] audit: type=1326 audit(1780291114.761:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.1.1460" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa61499ce59 code=0x0 [ 712.821784][T11510] overlayfs: missing 'workdir' [ 713.314425][T11515] loop4: detected capacity change from 0 to 512 [ 713.381266][T11515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.436763][T11515] ext4 filesystem being mounted at /198/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.474790][ T5909] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 713.620143][T11524] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 713.639506][T11524] EXT4-fs (loop4): Remounting filesystem read-only [ 713.724665][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 713.946506][ T5909] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 714.112320][ T5909] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 714.122684][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.193915][ T5909] usb 1-1: Product: syz [ 714.203913][ T5909] usb 1-1: Manufacturer: syz [ 714.214177][ T5909] usb 1-1: SerialNumber: syz [ 714.230507][ T5909] r8152-cfgselector 1-1: config 0 descriptor?? [ 714.336723][ T7975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.471166][T11519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.490331][T11519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.500950][T11519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.510555][T11519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.521870][T11519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.532632][T11519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.544584][T11519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.553600][T11519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.564519][T11519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.574959][T11519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.594622][ T5909] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 714.632705][ T12] usb 1-1: config 0 descriptor?? [ 714.804163][ T5811] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 714.866923][ T12] usb 1-1: can't set config #0, error -71 [ 714.891514][ T5909] usb 1-1: USB disconnect, device number 13 [ 715.104496][ T5811] usb 5-1: Using ep0 maxpacket: 16 [ 715.281968][ T5811] usb 5-1: unable to get BOS descriptor or descriptor too short [ 715.405116][ T5811] usb 5-1: config index 0 descriptor too short (expected 2805, got 79) [ 715.513478][ T5811] usb 5-1: config 122 has too many interfaces: 186, using maximum allowed: 32 [ 715.530419][ T5811] usb 5-1: config 122 has an invalid descriptor of length 193, skipping remainder of the config [ 715.551213][ T5811] usb 5-1: config 122 has 0 interfaces, different from the descriptor's value: 186 [ 715.584999][ T5811] usb 5-1: string descriptor 0 read error: -22 [ 715.592984][ T5811] usb 5-1: New USB device found, idVendor=066d, idProduct=0a0e, bcdDevice=61.f7 [ 715.609099][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.659725][T11551] loop3: detected capacity change from 0 to 256 [ 715.675687][T11551] exFAT-fs (loop3): bogus data start sector [ 715.681626][T11551] exFAT-fs (loop3): failed to read boot sector [ 715.703994][T11551] exFAT-fs (loop3): failed to recognize exfat type [ 715.984770][T11556] overlayfs: missing 'workdir' [ 716.257320][T10598] usb 5-1: USB disconnect, device number 12 [ 716.352012][T11565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1474'. [ 716.667298][ T27] audit: type=1326 audit(1780291120.401:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.4.1475" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4413d9ce59 code=0x0 [ 718.166573][T11581] FAULT_INJECTION: forcing a failure. [ 718.166573][T11581] name failslab, interval 1, probability 0, space 0, times 0 [ 718.228291][T11581] CPU: 1 PID: 11581 Comm: syz.0.1476 Not tainted syzkaller #0 [ 718.235818][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 718.245883][T11581] Call Trace: [ 718.249156][T11581] [ 718.252084][T11581] dump_stack_lvl+0x18c/0x250 [ 718.256761][T11581] ? show_regs_print_info+0x20/0x20 [ 718.261978][T11581] ? load_image+0x420/0x420 [ 718.266471][T11581] ? __might_sleep+0xe0/0xe0 [ 718.271062][T11581] ? __lock_acquire+0x7d40/0x7d40 [ 718.276100][T11581] should_fail_ex+0x39d/0x4d0 [ 718.280791][T11581] should_failslab+0x9/0x20 [ 718.285320][T11581] slab_pre_alloc_hook+0x59/0x310 [ 718.290358][T11581] ? snd_pcm_oss_change_params_locked+0x176/0x3cf0 [ 718.296861][T11581] __kmem_cache_alloc_node+0x53/0x250 [ 718.302240][T11581] ? snd_pcm_oss_change_params_locked+0x176/0x3cf0 [ 718.308753][T11581] kmalloc_trace+0x2a/0xe0 [ 718.313179][T11581] snd_pcm_oss_change_params_locked+0x176/0x3cf0 [ 718.319525][T11581] ? __mutex_trylock_common+0x159/0x260 [ 718.325063][T11581] ? trace_raw_output_contention_end+0xd0/0xd0 [ 718.331214][T11581] ? rcu_is_watching+0x15/0xb0 [ 718.335976][T11581] ? __mutex_lock+0x315/0xcc0 [ 718.340644][T11581] ? trace_contention_end+0x39/0xe0 [ 718.345846][T11581] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 718.350951][T11581] ? __mutex_lock+0x315/0xcc0 [ 718.355619][T11581] ? snd_pcm_oss_get_active_substream+0x136/0x270 [ 718.362025][T11581] ? mutex_lock_nested+0x20/0x20 [ 718.366963][T11581] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 718.372604][T11581] ? mutex_unlock+0x10/0x10 [ 718.377103][T11581] ? __might_fault+0xaa/0x120 [ 718.381768][T11581] snd_pcm_oss_get_active_substream+0x1dd/0x270 [ 718.388007][T11581] snd_pcm_oss_set_channels+0x1b7/0x4d0 [ 718.393560][T11581] snd_pcm_oss_ioctl+0xad6/0xdc0 [ 718.398516][T11581] ? bpf_lsm_file_ioctl+0x9/0x10 [ 718.403456][T11581] ? snd_pcm_oss_poll+0x8a0/0x8a0 [ 718.408490][T11581] __se_sys_ioctl+0xfd/0x170 [ 718.413070][T11581] do_syscall_64+0x55/0xb0 [ 718.417477][T11581] ? clear_bhb_loop+0x40/0x90 [ 718.422144][T11581] ? clear_bhb_loop+0x40/0x90 [ 718.426817][T11581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 718.432704][T11581] RIP: 0033:0x7f906f99ce59 [ 718.437108][T11581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.456709][T11581] RSP: 002b:00007f907084e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 718.465126][T11581] RAX: ffffffffffffffda RBX: 00007f906fc15fa0 RCX: 00007f906f99ce59 [ 718.473107][T11581] RDX: 0000200000000180 RSI: 00000000c0045006 RDI: 0000000000000003 [ 718.481087][T11581] RBP: 00007f907084e090 R08: 0000000000000000 R09: 0000000000000000 [ 718.489053][T11581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.497019][T11581] R13: 00007f906fc16038 R14: 00007f906fc15fa0 R15: 00007fffbd363b28 [ 718.505007][T11581] [ 719.092912][T11596] overlayfs: missing 'workdir' [ 719.135899][T11600] FAULT_INJECTION: forcing a failure. [ 719.135899][T11600] name failslab, interval 1, probability 0, space 0, times 0 [ 719.149467][T11600] CPU: 1 PID: 11600 Comm: syz.1.1480 Not tainted syzkaller #0 [ 719.156962][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 719.167048][T11600] Call Trace: [ 719.170347][T11600] [ 719.173287][T11600] dump_stack_lvl+0x18c/0x250 [ 719.177960][T11600] ? show_regs_print_info+0x20/0x20 [ 719.183150][T11600] ? load_image+0x420/0x420 [ 719.187642][T11600] ? __might_sleep+0xe0/0xe0 [ 719.192226][T11600] ? __lock_acquire+0x7d40/0x7d40 [ 719.197266][T11600] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 719.203236][T11600] should_fail_ex+0x39d/0x4d0 [ 719.207926][T11600] should_failslab+0x9/0x20 [ 719.212432][T11600] slab_pre_alloc_hook+0x59/0x310 [ 719.217456][T11600] ? lockdep_hardirqs_on+0x98/0x150 [ 719.222652][T11600] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 719.228889][T11600] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 719.235127][T11600] __kmem_cache_alloc_node+0x53/0x250 [ 719.240499][T11600] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 719.246737][T11600] __kmalloc+0xa4/0x230 [ 719.250898][T11600] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 719.256972][T11600] genl_family_rcv_msg_doit+0xce/0x310 [ 719.262435][T11600] ? end_current_label_crit_section+0x170/0x170 [ 719.268675][T11600] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 719.274571][T11600] ? apparmor_capable+0x137/0x1a0 [ 719.279594][T11600] ? bpf_lsm_capable+0x9/0x10 [ 719.284266][T11600] ? security_capable+0x89/0xb0 [ 719.289121][T11600] genl_rcv_msg+0x619/0x7a0 [ 719.293625][T11600] ? genl_bind+0x360/0x360 [ 719.298037][T11600] ? nl80211_exit+0x30/0x30 [ 719.302536][T11600] ? nl80211_register_mgmt+0x480/0x480 [ 719.307986][T11600] ? nl80211_pre_doit+0x930/0x930 [ 719.313018][T11600] ? ref_tracker_free+0x690/0x840 [ 719.318047][T11600] netlink_rcv_skb+0x241/0x4d0 [ 719.322805][T11600] ? genl_bind+0x360/0x360 [ 719.327220][T11600] ? netlink_ack+0x1180/0x1180 [ 719.331986][T11600] ? __lock_acquire+0x7d40/0x7d40 [ 719.337020][T11600] ? down_read+0x1ac/0x2e0 [ 719.341434][T11600] genl_rcv+0x28/0x40 [ 719.345411][T11600] netlink_unicast+0x751/0x8d0 [ 719.350179][T11600] netlink_sendmsg+0x8d0/0xbf0 [ 719.354944][T11600] ? netlink_getsockopt+0x590/0x590 [ 719.360138][T11600] ? aa_sock_msg_perm+0x94/0x150 [ 719.365076][T11600] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 719.370356][T11600] ? security_socket_sendmsg+0x80/0xa0 [ 719.375810][T11600] ? netlink_getsockopt+0x590/0x590 [ 719.381011][T11600] ____sys_sendmsg+0x5ba/0x960 [ 719.385780][T11600] ? __asan_memset+0x22/0x40 [ 719.390368][T11600] ? __sys_sendmsg_sock+0x30/0x30 [ 719.395385][T11600] ? __import_iovec+0x5f2/0x850 [ 719.400236][T11600] ? import_iovec+0x73/0xa0 [ 719.404735][T11600] ___sys_sendmsg+0x2a6/0x360 [ 719.409411][T11600] ? get_pid_task+0x20/0x1e0 [ 719.414016][T11600] ? __sys_sendmsg+0x2a0/0x2a0 [ 719.418796][T11600] ? __lock_acquire+0x7d40/0x7d40 [ 719.423838][T11600] __se_sys_sendmsg+0x1c2/0x2b0 [ 719.428701][T11600] ? __x64_sys_sendmsg+0x80/0x80 [ 719.433653][T11600] ? lockdep_hardirqs_on+0x98/0x150 [ 719.438869][T11600] do_syscall_64+0x55/0xb0 [ 719.443284][T11600] ? clear_bhb_loop+0x40/0x90 [ 719.447962][T11600] ? clear_bhb_loop+0x40/0x90 [ 719.452636][T11600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.458527][T11600] RIP: 0033:0x7fa61499ce59 [ 719.462945][T11600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.482552][T11600] RSP: 002b:00007fa6157d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.490970][T11600] RAX: ffffffffffffffda RBX: 00007fa614c15fa0 RCX: 00007fa61499ce59 [ 719.498937][T11600] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 719.506912][T11600] RBP: 00007fa6157d6090 R08: 0000000000000000 R09: 0000000000000000 [ 719.514880][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.522843][T11600] R13: 00007fa614c16038 R14: 00007fa614c15fa0 R15: 00007ffc72c17288 [ 719.530822][T11600] [ 720.229603][T11609] loop3: detected capacity change from 0 to 512 [ 720.618433][T11609] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 720.851680][T11609] EXT4-fs (loop3): orphan cleanup on readonly fs [ 721.114496][T11609] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 721.815862][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 721.886961][T11609] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 721.945056][T11609] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1483: Failed to acquire dquot type 1 [ 721.976622][ T27] audit: type=1326 audit(1780291125.331:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.4.1487" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4413d9ce59 code=0x0 [ 722.061563][T11609] EXT4-fs (loop3): Remounting filesystem read-only [ 722.089098][T11609] EXT4-fs (loop3): 1 truncate cleaned up [ 722.132502][T11609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 722.259315][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.764786][ T27] audit: type=1326 audit(1780291128.501:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11645 comm="syz.0.1492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f906f99ce59 code=0x0 [ 725.932103][T11662] loop3: detected capacity change from 0 to 512 [ 726.019516][T11662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.124365][T11662] ext4 filesystem being mounted at /378/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 726.470761][ T3518] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 726.522587][ T3518] EXT4-fs (loop3): Remounting filesystem read-only [ 726.571012][T11679] tipc: Started in network mode [ 726.595153][T11679] tipc: Node identity e6f4dd1879bd, cluster identity 4711 [ 726.610932][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.621435][T11679] tipc: Enabled bearer , priority 0 [ 727.626906][T11679] tipc: Resetting bearer [ 727.682769][T11684] process 'syz.3.1498' launched './file1/file0' with NULL argv: empty string added [ 727.791918][T11679] tipc: Disabling bearer [ 727.866324][ T9] tipc: Node number set to 2672418072 [ 727.879801][T11691] loop3: detected capacity change from 0 to 2048 [ 727.924134][T11691] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 727.932017][T11691] UDF-fs: Scanning with blocksize 512 failed [ 727.972829][T11691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 728.162904][T11697] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 730.769594][T11717] loop4: detected capacity change from 0 to 2048 [ 730.934376][T11719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.962560][T11719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.970726][T11717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 731.465057][ T5909] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 731.694391][ T5909] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 731.718185][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.746861][ T5909] usb 4-1: Product: syz [ 731.751299][ T5909] usb 4-1: Manufacturer: syz [ 731.768646][ T5832] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 731.804055][T11725] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 731.834911][ T5909] usb 4-1: SerialNumber: syz [ 732.026595][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.056341][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.103952][ T5832] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 732.117073][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.134070][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.161208][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.167447][ T5832] usb 5-1: config 0 descriptor?? [ 732.199851][ T5832] qmi_wwan: probe of 5-1:0.0 failed with error -22 [ 732.663592][T11713] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Out of memory [ 732.733281][T11713] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #15: comm syz.4.1505: mark_inode_dirty error [ 732.758980][ T7428] usb 5-1: USB disconnect, device number 13 [ 733.141960][ T27] audit: type=1326 audit(1780291136.871:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11730 comm="syz.1.1508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa61499ce59 code=0x0 [ 733.898078][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 733.935107][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 733.948893][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 733.967344][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 733.979786][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 734.008787][ T5909] lan78xx: probe of 4-1:1.0 failed with error -71 [ 734.036456][ T5909] usb 4-1: USB disconnect, device number 13 [ 734.089557][ T7975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 735.407231][ T27] audit: type=1326 audit(1780291139.141:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11755 comm="syz.0.1513" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f906f99ce59 code=0x0 [ 735.522367][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 736.108621][T11766] FAULT_INJECTION: forcing a failure. [ 736.108621][T11766] name failslab, interval 1, probability 0, space 0, times 0 [ 736.121522][T11766] CPU: 0 PID: 11766 Comm: syz.1.1514 Not tainted syzkaller #0 [ 736.128982][T11766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 736.139018][T11766] Call Trace: [ 736.142280][T11766] [ 736.145199][T11766] dump_stack_lvl+0x18c/0x250 [ 736.149863][T11766] ? asm_sysvec_call_function_single+0x1a/0x20 [ 736.156017][T11766] ? show_regs_print_info+0x20/0x20 [ 736.161198][T11766] ? load_image+0x420/0x420 [ 736.165692][T11766] should_fail_ex+0x39d/0x4d0 [ 736.170360][T11766] should_failslab+0x9/0x20 [ 736.174853][T11766] slab_pre_alloc_hook+0x59/0x310 [ 736.179867][T11766] ? mark_lock+0x94/0x320 [ 736.184186][T11766] kmem_cache_alloc+0x5a/0x2d0 [ 736.188934][T11766] ? alloc_empty_file+0x9e/0x1d0 [ 736.193858][T11766] alloc_empty_file+0x9e/0x1d0 [ 736.198609][T11766] path_openat+0x113/0x3230 [ 736.203104][T11766] ? verify_lock_unused+0x140/0x140 [ 736.208284][T11766] ? do_filp_open+0x430/0x430 [ 736.212944][T11766] ? __virt_addr_valid+0x18c/0x540 [ 736.218065][T11766] do_filp_open+0x1f5/0x430 [ 736.222570][T11766] ? vfs_tmpfile+0x490/0x490 [ 736.227200][T11766] ? _raw_spin_unlock+0x28/0x40 [ 736.232045][T11766] ? alloc_fd+0x58f/0x630 [ 736.236366][T11766] do_sys_openat2+0x134/0x1d0 [ 736.241030][T11766] ? do_sys_open+0xe0/0xe0 [ 736.245432][T11766] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 736.251395][T11766] ? lock_chain_count+0x20/0x20 [ 736.256241][T11766] __x64_sys_openat+0x139/0x160 [ 736.261080][T11766] do_syscall_64+0x55/0xb0 [ 736.265480][T11766] ? clear_bhb_loop+0x40/0x90 [ 736.270141][T11766] ? clear_bhb_loop+0x40/0x90 [ 736.274821][T11766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.280719][T11766] RIP: 0033:0x7fa61499ce59 [ 736.285123][T11766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.304728][T11766] RSP: 002b:00007fa6157b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 736.313121][T11766] RAX: ffffffffffffffda RBX: 00007fa614c16090 RCX: 00007fa61499ce59 [ 736.321081][T11766] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 736.329040][T11766] RBP: 00007fa6157b5090 R08: 0000000000000000 R09: 0000000000000000 [ 736.336993][T11766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.344945][T11766] R13: 00007fa614c16128 R14: 00007fa614c16090 R15: 00007ffc72c17288 [ 736.352907][T11766] [ 737.220697][T11769] syzkaller0: entered promiscuous mode [ 737.246761][T11769] syzkaller0: entered allmulticast mode [ 738.805200][T11786] netlink: 'syz.0.1521': attribute type 3 has an invalid length. [ 738.818066][T11786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1521'. [ 738.851497][T11787] loop3: detected capacity change from 0 to 512 [ 738.902503][T11789] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.912090][T11789] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.920934][T11789] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.930812][T11789] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.005303][T11787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.005408][T11787] ext4 filesystem being mounted at /385/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.118164][T11798] loop0: detected capacity change from 0 to 128 [ 739.170343][T11798] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 739.519598][ T27] audit: type=1800 audit(1780291143.251:370): pid=11798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1523" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 740.038456][ T79] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 740.089050][ T79] EXT4-fs (loop3): Remounting filesystem read-only [ 740.119613][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.333900][ T788] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 741.429098][T11819] syzkaller0: entered promiscuous mode [ 741.445117][T11819] syzkaller0: entered allmulticast mode [ 741.514092][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 741.520985][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.531850][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 741.571124][ T788] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 741.591812][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.603874][ T788] usb 2-1: Product: syz [ 741.608085][ T788] usb 2-1: Manufacturer: syz [ 741.632371][ T788] usb 2-1: SerialNumber: syz [ 741.668052][T11824] loop3: detected capacity change from 0 to 512 [ 741.699495][T11824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 741.704522][T11826] FAULT_INJECTION: forcing a failure. [ 741.704522][T11826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.731879][T11826] CPU: 0 PID: 11826 Comm: syz.0.1532 Not tainted syzkaller #0 [ 741.739393][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 741.749468][T11826] Call Trace: [ 741.752763][T11826] [ 741.755711][T11826] dump_stack_lvl+0x18c/0x250 [ 741.760421][T11826] ? show_regs_print_info+0x20/0x20 [ 741.765641][T11826] ? load_image+0x420/0x420 [ 741.770171][T11826] ? __might_fault+0xaa/0x120 [ 741.774867][T11826] ? __lock_acquire+0x7d40/0x7d40 [ 741.779916][T11826] should_fail_ex+0x39d/0x4d0 [ 741.784625][T11826] _copy_from_user+0x2f/0xe0 [ 741.789265][T11826] snd_seq_oss_write+0x5ae/0x8f0 [ 741.794245][T11826] ? snd_seq_oss_read+0x470/0x470 [ 741.799301][T11826] ? end_current_label_crit_section+0x149/0x170 [ 741.805574][T11826] odev_write+0x5d/0x80 [ 741.809755][T11826] do_iter_write+0x4ea/0xc30 [ 741.814380][T11826] ? odev_read+0x70/0x70 [ 741.818647][T11826] ? vfs_iter_write+0xa0/0xa0 [ 741.823348][T11826] ? __import_iovec+0x3fa/0x850 [ 741.828221][T11826] ? import_iovec+0x73/0xa0 [ 741.832748][T11826] do_writev+0x27f/0x480 [ 741.837019][T11826] ? do_readv+0x460/0x460 [ 741.841375][T11826] ? __fget_files+0x28/0x4b0 [ 741.846006][T11826] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 741.852007][T11826] ? lock_chain_count+0x20/0x20 [ 741.856880][T11826] ? lockdep_hardirqs_on+0x98/0x150 [ 741.862105][T11826] do_syscall_64+0x55/0xb0 [ 741.866542][T11826] ? clear_bhb_loop+0x40/0x90 [ 741.871241][T11826] ? clear_bhb_loop+0x40/0x90 [ 741.875943][T11826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.881859][T11826] RIP: 0033:0x7f906f99ce59 [ 741.886291][T11826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.905920][T11826] RSP: 002b:00007f907084e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 741.914365][T11826] RAX: ffffffffffffffda RBX: 00007f906fc15fa0 RCX: 00007f906f99ce59 [ 741.922363][T11826] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000003 [ 741.923256][T11804] loop1: detected capacity change from 0 to 1024 [ 741.930333][T11826] RBP: 00007f907084e090 R08: 0000000000000000 R09: 0000000000000000 [ 741.930348][T11826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.930358][T11826] R13: 00007f906fc16038 R14: 00007f906fc15fa0 R15: 00007fffbd363b28 [ 741.930381][T11826] [ 742.021076][T11831] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1533'. [ 742.043157][ T788] usb 2-1: 0:2 : does not exist [ 742.079267][ T788] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 742.156316][T11824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.189068][T11824] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 742.235483][ T788] usb 2-1: USB disconnect, device number 11 [ 742.751111][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.432726][T11856] loop8: detected capacity change from 0 to 7 [ 744.443055][T11856] Dev loop8: unable to read RDB block 7 [ 744.449345][T11856] loop8: unable to read partition table [ 744.455780][T11856] loop8: partition table beyond EOD, truncated [ 744.461970][T11856] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 744.547782][T11858] overlay: ./file0 is not a directory [ 744.671306][T11862] FAULT_INJECTION: forcing a failure. [ 744.671306][T11862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.688810][T11862] CPU: 1 PID: 11862 Comm: syz.1.1542 Not tainted syzkaller #0 [ 744.696312][T11862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 744.706376][T11862] Call Trace: [ 744.709647][T11862] [ 744.712576][T11862] dump_stack_lvl+0x18c/0x250 [ 744.717249][T11862] ? show_regs_print_info+0x20/0x20 [ 744.722437][T11862] ? load_image+0x420/0x420 [ 744.726931][T11862] ? __lock_acquire+0x7d40/0x7d40 [ 744.731943][T11862] ? vscnprintf+0x80/0x80 [ 744.736264][T11862] should_fail_ex+0x39d/0x4d0 [ 744.740936][T11862] _copy_to_user+0x2f/0xa0 [ 744.745338][T11862] readlink_copy+0x70/0xb0 [ 744.749745][T11862] proc_ns_readlink+0x16c/0x2a0 [ 744.754586][T11862] ? proc_ns_get_link+0x240/0x240 [ 744.759600][T11862] ? atime_needs_update+0x7b1/0x980 [ 744.764788][T11862] ? proc_ns_get_link+0x240/0x240 [ 744.769798][T11862] vfs_readlink+0x301/0x350 [ 744.774300][T11862] ? readlink_copy+0xb0/0xb0 [ 744.778881][T11862] ? kmem_cache_free+0xf8/0x270 [ 744.783731][T11862] ? touch_atime+0xee/0x570 [ 744.788226][T11862] ? do_readlinkat+0x235/0x490 [ 744.792985][T11862] do_readlinkat+0x255/0x490 [ 744.797570][T11862] ? cp_new_stat+0x540/0x540 [ 744.802149][T11862] ? lock_chain_count+0x20/0x20 [ 744.806989][T11862] __x64_sys_readlink+0x7f/0x90 [ 744.811829][T11862] do_syscall_64+0x55/0xb0 [ 744.816237][T11862] ? clear_bhb_loop+0x40/0x90 [ 744.820901][T11862] ? clear_bhb_loop+0x40/0x90 [ 744.825568][T11862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 744.831450][T11862] RIP: 0033:0x7fa61499ce59 [ 744.835853][T11862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.855457][T11862] RSP: 002b:00007fa6157d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 744.863878][T11862] RAX: ffffffffffffffda RBX: 00007fa614c15fa0 RCX: 00007fa61499ce59 [ 744.871833][T11862] RDX: 00000000000000d3 RSI: 0000200000000040 RDI: 0000200000000000 [ 744.879786][T11862] RBP: 00007fa6157d6090 R08: 0000000000000000 R09: 0000000000000000 [ 744.887751][T11862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.895710][T11862] R13: 00007fa614c16038 R14: 00007fa614c15fa0 R15: 00007ffc72c17288 [ 744.903675][T11862] [ 746.643027][T11870] loop3: detected capacity change from 0 to 32768 [ 746.750794][T11870] (syz.3.1544,11870,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 746.787525][T11870] (syz.3.1544,11870,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 746.965331][T11870] (syz.3.1544,11870,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 747.745324][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.884839][T11891] input: syz0 as /devices/virtual/input/input7 [ 748.032621][T11870] JBD2: Ignoring recovery information on journal [ 748.124013][T11870] JBD2: journal reset failed [ 748.138202][T11870] (syz.3.1544,11870,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 748.147334][T11870] (syz.3.1544,11870,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 748.364333][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1555'. [ 748.397094][T11901] kvm: kvm [11900]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 748.414452][T11901] kvm: kvm [11900]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 748.875260][T11919] loop3: detected capacity change from 0 to 2048 [ 748.919814][T11919] loop3: p1 < > p3 [ 748.944482][T11919] loop3: p3 start 458752 is beyond EOD, truncated [ 749.056329][ T5144] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.066009][ T5144] Buffer I/O error on dev loop3, logical block 0, async page read [ 749.074106][ T5144] ldm_validate_partition_table(): Disk read failed. [ 749.080735][ T5144] Dev loop3: unable to read RDB block 0 [ 749.091218][ T5144] loop3: unable to read partition table [ 749.101561][ T5144] loop3: partition table beyond EOD, truncated [ 749.123902][T11546] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 749.151071][T11919] loop3: detected capacity change from 0 to 4096 [ 749.312991][T11204] udevd[11204]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 749.334448][T11546] usb 1-1: Using ep0 maxpacket: 8 [ 749.349113][T11546] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 7 [ 749.372382][T11546] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 749.489154][T11546] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 749.498548][T11546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.508679][T11546] usb 1-1: Product: syz [ 749.512874][T11546] usb 1-1: Manufacturer: syz [ 749.517546][T11546] usb 1-1: SerialNumber: syz [ 749.785257][T11546] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 749.814074][T11546] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 749.836244][T11546] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 750.917649][T11546] usb 1-1: USB disconnect, device number 14 [ 750.960342][T11204] udevd[11204]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.659239][T11961] loop1: detected capacity change from 0 to 512 [ 752.022952][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1571'. [ 752.105238][ T27] audit: type=1326 audit(1780291155.541:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.3.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1d99ce59 code=0x0 [ 752.184505][T11961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.277854][T11961] ext4 filesystem being mounted at /403/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.450301][T11980] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 752.492050][T11980] EXT4-fs (loop1): Remounting filesystem read-only [ 752.779566][ T27] audit: type=1326 audit(1780291156.511:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11963 comm="syz.0.1572" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f906f99ce59 code=0x0 [ 752.787240][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.843111][T11953] loop4: detected capacity change from 0 to 32768 [ 752.885806][T11953] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 753.073491][T11953] XFS (loop4): Ending clean mount [ 753.229505][ T7975] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 755.316420][T12024] sctp: [Deprecated]: syz.1.1580 (pid 12024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 755.316420][T12024] Use struct sctp_sack_info instead [ 755.358479][T12023] loop3: detected capacity change from 0 to 4096 [ 755.378407][T12025] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 755.401583][T12023] NILFS (loop3): corrupt root inode [ 755.460711][T12023] netlink: 'syz.3.1581': attribute type 1 has an invalid length. [ 758.090466][T12056] binder: BINDER_SET_CONTEXT_MGR already set [ 758.114181][T12056] binder: 12053:12056 ioctl 4018620d 200000004a80 returned -16 [ 758.135928][T12056] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 758.204362][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1580'. [ 758.235891][T12024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1580'. [ 758.360740][T12044] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 758.692596][T12069] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1594'. [ 758.781267][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1594'. [ 758.797402][T12072] netlink: 'syz.3.1594': attribute type 7 has an invalid length. [ 758.806406][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1594'. [ 761.886443][ T27] audit: type=1326 audit(1780291165.601:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.1.1601" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa61499ce59 code=0x0 [ 761.976402][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'. [ 762.397686][T12116] syzkaller0: entered promiscuous mode [ 762.411108][T12116] syzkaller0: entered allmulticast mode [ 762.439553][T12118] loop4: detected capacity change from 0 to 64 [ 762.804208][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 763.034053][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 763.103082][ T9] usb 4-1: config 0 has no interfaces? [ 763.157872][ T9] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 763.257421][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.395272][ T9] usb 4-1: config 0 descriptor?? [ 763.687406][T11546] usb 4-1: USB disconnect, device number 14 [ 764.952142][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 764.961149][T12141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1616'. [ 765.961076][T12153] syzkaller0: entered promiscuous mode [ 765.966851][T12153] syzkaller0: entered allmulticast mode [ 767.330316][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1621'. [ 767.652129][ T27] audit: type=1800 audit(1780291171.381:374): pid=12159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1621" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 767.652379][T12159] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 767.682282][T12159] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 767.693250][T12159] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 768.752342][T12172] input: syz0 as /devices/virtual/input/input8 [ 771.508043][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 771.539929][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 771.823215][T12204] loop1: detected capacity change from 0 to 512 [ 771.893114][T12204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.915467][T12204] ext4 filesystem being mounted at /416/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.008939][T12209] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 772.071790][T12209] EXT4-fs (loop1): Remounting filesystem read-only [ 772.137301][T12198] loop3: detected capacity change from 0 to 32768 [ 772.190664][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.240287][T12198] [ 772.240287][T12198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.240287][T12198] [ 772.326459][T12198] [ 772.326459][T12198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.326459][T12198] [ 772.441792][T12198] [ 772.441792][T12198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.441792][T12198] [ 772.452697][T12198] [ 772.452697][T12198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.452697][T12198] [ 772.712044][ T112] [ 772.712044][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.712044][ T112] [ 772.781371][T12213] [ 772.781371][T12213] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.781371][T12213] [ 772.804206][T12213] [ 772.804206][T12213] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.804206][T12213] [ 772.820961][T12215] syzkaller0: entered promiscuous mode [ 772.827270][T12215] syzkaller0: entered allmulticast mode [ 772.840338][T12213] [ 772.840338][T12213] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.840338][T12213] [ 772.869397][T12213] [ 772.869397][T12213] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.869397][T12213] [ 772.900407][T12213] [ 772.900407][T12213] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.900407][T12213] [ 772.911185][T12213] [ 772.911185][T12213] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.911185][T12213] [ 772.922690][T12213] [ 772.922690][T12213] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.922690][T12213] [ 772.939280][T12213] [ 772.939280][T12213] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.939280][T12213] [ 772.950156][T12213] [ 772.950156][T12213] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.950156][T12213] [ 772.970226][ T113] [ 772.970226][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 772.970226][ T113] [ 773.027385][T12217] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 773.039693][ T5776] [ 773.039693][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 773.039693][ T5776] [ 773.042853][T12217] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 773.060390][ T5776] [ 773.060390][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 773.060390][ T5776] [ 773.663883][ T788] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 774.343894][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 774.357051][ T788] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 774.385859][ T788] usb 1-1: config 0 has no interface number 0 [ 774.402172][ T788] usb 1-1: config 0 interface 231 altsetting 64 bulk endpoint 0x6 has invalid maxpacket 1023 [ 774.426899][ T788] usb 1-1: config 0 interface 231 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 8 [ 774.466482][ T788] usb 1-1: config 0 interface 231 has no altsetting 0 [ 774.483706][ T788] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 774.505588][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.526251][ T788] usb 1-1: Product: syz [ 774.530459][ T788] usb 1-1: Manufacturer: syz [ 775.014308][ T788] usb 1-1: SerialNumber: syz [ 775.027627][ T788] usb 1-1: config 0 descriptor?? [ 775.033236][T12225] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 775.041879][T12225] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 775.558949][T12223] loop0: detected capacity change from 0 to 64 [ 776.066023][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 776.148445][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 776.552563][ T788] plusb: probe of 1-1:0.231 failed with error -71 [ 776.596374][ T788] usb 1-1: USB disconnect, device number 15 [ 776.658010][T12263] syzkaller0: entered promiscuous mode [ 776.668553][T12263] syzkaller0: entered allmulticast mode [ 776.767786][T12267] loop0: detected capacity change from 0 to 512 [ 776.806036][T12267] EXT4-fs (loop0): 1 truncate cleaned up [ 776.812982][T12267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.884363][T12267] loop0: detected capacity change from 512 to 1 [ 776.905282][T12267] bio_check_eod: 2 callbacks suppressed [ 776.905295][T12267] syz.0.1648: attempt to access beyond end of device [ 776.905295][T12267] loop0: rw=14337, sector=26, nr_sectors = 2 limit=1 [ 776.925304][T12267] Buffer I/O error on dev loop0, logical block 13, lost sync page write [ 776.933628][T12267] EXT4-fs error (device loop0): ext4_handle_dirty_dirblock:440: inode #2: block 13: comm syz.0.1648: IO error syncing itable block [ 776.948437][T12267] syz.0.1648: attempt to access beyond end of device [ 776.948437][T12267] loop0: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 776.961674][T12267] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 776.969977][T12267] EXT4-fs (loop0): I/O error while writing superblock [ 776.976743][T12267] EXT4-fs error (device loop0) in ext4_delete_entry:2800: IO failure [ 776.984991][T12267] syz.0.1648: attempt to access beyond end of device [ 776.984991][T12267] loop0: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 776.998237][T12267] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 777.006544][T12267] EXT4-fs (loop0): I/O error while writing superblock [ 777.406032][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.435510][ T5779] syz-executor: attempt to access beyond end of device [ 777.435510][ T5779] loop0: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 777.472174][ T5779] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 777.496530][ T5779] EXT4-fs (loop0): I/O error while writing superblock [ 777.801614][T12286] loop1: detected capacity change from 0 to 512 [ 778.228586][T12286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.436700][T12286] ext4 filesystem being mounted at /423/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.158956][T12302] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 779.806441][T12302] EXT4-fs (loop1): Remounting filesystem read-only [ 780.085646][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.157131][T12314] syzkaller0: entered promiscuous mode [ 780.189321][T12314] syzkaller0: entered allmulticast mode [ 780.844246][T11546] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 781.035253][T11546] usb 2-1: Using ep0 maxpacket: 32 [ 781.056203][T11546] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 781.092134][T11546] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 781.121304][T11546] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 781.154250][T11546] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 781.173499][T12325] loop3: detected capacity change from 0 to 512 [ 781.190141][T11546] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 781.233230][T11546] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 781.268897][T12325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.318272][T11546] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 781.339930][T12325] ext4 filesystem being mounted at /424/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.351117][T11546] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.380061][T11546] usb 2-1: config 0 descriptor?? [ 781.393740][T12330] loop0: detected capacity change from 0 to 512 [ 781.496195][T12330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.563378][T12333] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 781.564358][T12330] ext4 filesystem being mounted at /407/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.607306][T11546] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 781.608514][T12333] EXT4-fs (loop3): Remounting filesystem read-only [ 781.708556][T12334] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 781.746668][T12334] EXT4-fs (loop0): Remounting filesystem read-only [ 781.855753][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.873427][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.272756][T12351] syzkaller0: entered promiscuous mode [ 783.298766][T12351] syzkaller0: entered allmulticast mode [ 783.883835][ T27] audit: type=1326 audit(1780291187.601:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.1667" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4413d9ce59 code=0x0 [ 788.340937][T12383] loop3: detected capacity change from 0 to 2048 [ 788.656978][T12383] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 788.707042][T12381] capability: warning: `syz.3.1678' uses 32-bit capabilities (legacy support in use) [ 788.717504][T12381] program syz.3.1678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 788.770527][ T27] audit: type=1800 audit(1780291192.411:376): pid=12381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1678" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 788.824350][T12385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.883977][ T5776] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 788.896133][T12385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.926381][ T5776] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 789.086695][ T9489] syz_tun (unregistering): left allmulticast mode [ 789.093374][ T9489] syz_tun (unregistering): left promiscuous mode [ 789.102905][ T9489] bridge0: port 3(syz_tun) entered disabled state [ 789.525913][ C0] usblp0: nonzero read bulk status received: -71 [ 789.526296][ T788] usb 2-1: USB disconnect, device number 12 [ 790.903924][ T788] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 791.106076][ T788] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 791.115889][T12409] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 791.127730][T12409] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 791.137093][T12409] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 791.150159][T12409] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 791.157507][ T788] usb 5-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 791.166864][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.176524][T12409] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 791.184335][T12409] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 791.194089][ T788] usb 5-1: config 0 descriptor?? [ 791.753295][T12397] netlink: 'syz.4.1683': attribute type 1 has an invalid length. [ 791.802915][T12397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.836951][T12397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.822815][T12430] random: crng reseeded on system resumption [ 792.990603][ T788] usb 5-1: USB disconnect, device number 14 [ 793.015323][T12407] chnl_net:caif_netlink_parms(): no params data found [ 793.253980][ T5089] Bluetooth: hci1: command tx timeout [ 793.451741][T12407] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.510927][T12407] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.539518][T12407] bridge_slave_0: entered allmulticast mode [ 793.565277][T12407] bridge_slave_0: entered promiscuous mode [ 793.592478][T12407] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.631462][T12407] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.644839][T12407] bridge_slave_1: entered allmulticast mode [ 793.652482][T12407] bridge_slave_1: entered promiscuous mode [ 793.749200][T12391] usblp0: removed [ 793.761682][ T12] hsr_slave_0: left promiscuous mode [ 793.779784][ T12] hsr_slave_1: left promiscuous mode [ 793.838245][T12458] loop4: detected capacity change from 0 to 4096 [ 793.845127][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.862370][T12458] EXT4-fs: Ignoring removed nobh option [ 793.871972][T12458] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a04ec018, mo2=0003] [ 793.880684][T12458] System zones: 0-5 [ 793.886579][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.901910][ T12] bridge_slave_1: left allmulticast mode [ 793.909337][T12466] loop0: detected capacity change from 0 to 128 [ 793.914255][ T12] bridge_slave_1: left promiscuous mode [ 793.928130][T12458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.964195][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.045440][T12466] FAULT_INJECTION: forcing a failure. [ 794.045440][T12466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.065680][ T12] bridge_slave_0: left allmulticast mode [ 794.071367][ T12] bridge_slave_0: left promiscuous mode [ 794.113720][T12466] CPU: 0 PID: 12466 Comm: syz.0.1691 Not tainted syzkaller #0 [ 794.117123][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.121223][T12466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.121237][T12466] Call Trace: [ 794.121245][T12466] [ 794.121252][T12466] dump_stack_lvl+0x18c/0x250 [ 794.149232][T12466] ? show_regs_print_info+0x20/0x20 [ 794.154455][T12466] ? load_image+0x420/0x420 [ 794.158980][T12466] ? __lock_acquire+0x7d40/0x7d40 [ 794.164025][T12466] ? __kasan_slab_alloc+0x6c/0x80 [ 794.169071][T12466] should_fail_ex+0x39d/0x4d0 [ 794.173770][T12466] strncpy_from_user+0x36/0x2d0 [ 794.178650][T12466] getname_flags+0xf6/0x500 [ 794.183180][T12466] __x64_sys_linkat+0xbc/0xf0 [ 794.187883][T12466] do_syscall_64+0x55/0xb0 [ 794.192321][T12466] ? clear_bhb_loop+0x40/0x90 [ 794.197021][T12466] ? clear_bhb_loop+0x40/0x90 [ 794.201735][T12466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.207666][T12466] RIP: 0033:0x7f906f99ce59 [ 794.212098][T12466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.231727][T12466] RSP: 002b:00007f907084e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 794.240164][T12466] RAX: ffffffffffffffda RBX: 00007f906fc15fa0 RCX: 00007f906f99ce59 [ 794.248151][T12466] RDX: ffffffffffffff9c RSI: 0000200000000180 RDI: ffffffffffffff9c [ 794.256142][T12466] RBP: 00007f907084e090 R08: 0000000000000400 R09: 0000000000000000 [ 794.264126][T12466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.272109][T12466] R13: 00007f906fc16038 R14: 00007f906fc15fa0 R15: 00007fffbd363b28 [ 794.280109][T12466] [ 794.432478][T12469] loop1: detected capacity change from 0 to 2048 [ 794.459494][ T5779] sysv_free_block: flc_count > flc_size [ 794.520793][ T5779] sysv_free_block: flc_count > flc_size [ 794.530742][ T5779] sysv_free_block: flc_count > flc_size [ 794.544731][ T5779] sysv_free_block: flc_count > flc_size [ 794.552263][ T5779] sysv_free_block: flc_count > flc_size [ 794.558751][ T5779] sysv_free_block: flc_count > flc_size [ 794.564641][ T5779] sysv_free_block: flc_count > flc_size [ 794.570740][ T5779] sysv_free_block: flc_count > flc_size [ 794.578663][ T7975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.589881][ T5779] sysv_free_block: flc_count > flc_size [ 794.595858][ T5779] sysv_free_block: flc_count > flc_size [ 794.602994][ T5779] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 794.633725][T12469] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.643198][T10598] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 795.032064][T12479] loop1: detected capacity change from 0 to 4096 [ 795.052247][T12479] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 795.091517][T12479] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 795.367830][ T5089] Bluetooth: hci1: command tx timeout [ 795.547019][T12479] QAT: failed to copy from user cfg_data. [ 795.642786][T12479] Bluetooth: MGMT ver 1.22 [ 797.404183][ T5089] Bluetooth: hci1: command tx timeout [ 798.042315][T12503] loop1: detected capacity change from 0 to 1764 [ 798.099733][T11204] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 798.139798][T12503] loop1: detected capacity change from 0 to 128 [ 798.163318][T11204] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 798.174912][T11204] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 798.185037][T11204] Buffer I/O error on dev loop1, logical block 0, async page read [ 798.244087][T12503] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 798.273942][T12503] hpfs: filesystem error: improperly stopped [ 798.279992][T12503] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 798.308992][T12503] hpfs: You really don't want any checks? You are crazy... [ 798.329072][T12503] hpfs: Code page index out of array [ 798.339312][T12503] hpfs: code page support is disabled [ 798.366234][T12503] hpfs: filesystem error: map_dirent: not a directory [ 798.384057][T12503] [ 798.386514][T12503] hpfs: hpfs_map_4sectors(): unaligned read [ 798.392493][T12503] hpfs: filesystem error: unable to find root dir [ 798.606427][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.724094][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.483947][ T5089] Bluetooth: hci1: command tx timeout [ 800.040919][ T12] bond0 (unregistering): Released all slaves [ 800.331283][T12407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.389739][T12407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.532224][T12527] loop4: detected capacity change from 0 to 512 [ 800.549107][T12407] team0: Port device team_slave_0 added [ 800.586223][T12530] loop1: detected capacity change from 0 to 512 [ 800.599454][T12407] team0: Port device team_slave_1 added [ 800.655236][T12527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.743336][T12530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.778447][T12534] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2683603839 (5367207678 ns) > initial count (1062063548 ns). Using initial count to start timer. [ 800.794083][T12527] ext4 filesystem being mounted at /257/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.815280][T12407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.822263][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.824022][T12530] ext4 filesystem being mounted at /438/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.935556][T12407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.955979][T12526] IPv6: sit2: Disabled Multicast RS [ 800.961728][T12526] sit2: entered allmulticast mode [ 801.043467][T12407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.091500][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.124112][T12407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.250968][T12530] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 801.270381][T12407] hsr_slave_0: entered promiscuous mode [ 801.291773][T12530] EXT4-fs (loop1): Remounting filesystem read-only [ 801.302205][T12407] hsr_slave_1: entered promiscuous mode [ 801.429791][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.477318][T11503] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 801.538394][T11503] EXT4-fs (loop4): Remounting filesystem read-only [ 801.606237][T12553] loop0: detected capacity change from 0 to 2048 [ 801.663186][T12553] EXT4-fs: Ignoring removed nobh option [ 801.748219][T12553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.790147][ T7975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.816053][T12553] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 801.933280][ T27] audit: type=1800 audit(1780291205.661:377): pid=12553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1711" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 801.971093][T12553] fs-verity: sha512 using implementation "sha512-avx2" [ 802.351001][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.381792][T12567] loop4: detected capacity change from 0 to 2048 [ 802.396882][T12407] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 802.421360][T12567] EXT4-fs: Ignoring removed nobh option [ 802.476553][T12407] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 802.528792][T12407] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 802.570277][T12407] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 802.658350][T12567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.723208][T12567] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.815088][ T27] audit: type=1800 audit(1780291206.541:378): pid=12567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1714" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 802.847409][T12567] FAULT_INJECTION: forcing a failure. [ 802.847409][T12567] name failslab, interval 1, probability 0, space 0, times 0 [ 802.904523][T12567] CPU: 0 PID: 12567 Comm: syz.4.1714 Not tainted syzkaller #0 [ 802.912040][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 802.922107][T12567] Call Trace: [ 802.925398][T12567] [ 802.928335][T12567] dump_stack_lvl+0x18c/0x250 [ 802.933033][T12567] ? show_regs_print_info+0x20/0x20 [ 802.938240][T12567] ? load_image+0x420/0x420 [ 802.942770][T12567] ? __might_sleep+0xe0/0xe0 [ 802.947382][T12567] ? __lock_acquire+0x7d40/0x7d40 [ 802.952429][T12567] should_fail_ex+0x39d/0x4d0 [ 802.957130][T12567] should_failslab+0x9/0x20 [ 802.961649][T12567] slab_pre_alloc_hook+0x59/0x310 [ 802.966693][T12567] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 802.972424][T12567] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 802.978160][T12567] __kmem_cache_alloc_node+0x53/0x250 [ 802.983550][T12567] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 802.989279][T12567] __kmalloc+0xa4/0x230 [ 802.993453][T12567] tomoyo_realpath_from_path+0xe3/0x5d0 [ 802.999030][T12567] tomoyo_path_number_perm+0x248/0x620 [ 803.004501][T12567] ? tomoyo_path_number_perm+0x217/0x620 [ 803.010142][T12567] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 803.015613][T12567] ? ksys_write+0x1c4/0x260 [ 803.020164][T12567] ? __fget_files+0x28/0x4b0 [ 803.024769][T12567] ? __fget_files+0x28/0x4b0 [ 803.029383][T12567] security_file_ioctl+0x70/0xa0 [ 803.034338][T12567] __se_sys_ioctl+0x48/0x170 [ 803.038943][T12567] do_syscall_64+0x55/0xb0 [ 803.043369][T12567] ? clear_bhb_loop+0x40/0x90 [ 803.048062][T12567] ? clear_bhb_loop+0x40/0x90 [ 803.052758][T12567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.058672][T12567] RIP: 0033:0x7f4413d9ce59 [ 803.063104][T12567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.082719][T12567] RSP: 002b:00007f4414c5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.091157][T12567] RAX: ffffffffffffffda RBX: 00007f4414015fa0 RCX: 00007f4413d9ce59 [ 803.099139][T12567] RDX: 0000200000000200 RSI: 0000000040806685 RDI: 0000000000000004 [ 803.107134][T12567] RBP: 00007f4414c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 803.115113][T12567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.123099][T12567] R13: 00007f4414016038 R14: 00007f4414015fa0 R15: 00007fff3c7162a8 [ 803.131099][T12567] [ 803.202380][T12407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.257669][T12407] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.302882][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.310106][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.345315][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.353468][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.612019][T12567] ERROR: Out of memory at tomoyo_realpath_from_path. [ 803.659429][T12567] fs-verity (loop4, inode 13): Error -4 building Merkle tree [ 803.791031][ T7975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.182352][T12592] FAULT_INJECTION: forcing a failure. [ 804.182352][T12592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.214414][T12407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.264909][T12592] CPU: 0 PID: 12592 Comm: syz.0.1715 Not tainted syzkaller #0 [ 804.272425][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 804.282489][T12592] Call Trace: [ 804.285778][T12592] [ 804.288716][T12592] dump_stack_lvl+0x18c/0x250 [ 804.293410][T12592] ? show_regs_print_info+0x20/0x20 [ 804.298621][T12592] ? load_image+0x420/0x420 [ 804.303137][T12592] ? __might_fault+0xaa/0x120 [ 804.307824][T12592] ? __lock_acquire+0x7d40/0x7d40 [ 804.312868][T12592] should_fail_ex+0x39d/0x4d0 [ 804.317565][T12592] _copy_from_user+0x2f/0xe0 [ 804.322180][T12592] csum_and_copy_from_iter+0x1f3/0x14a0 [ 804.327748][T12592] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 804.333392][T12592] ? __kmem_cache_alloc_node+0x13a/0x250 [ 804.339051][T12592] ? __alloc_skb+0x138/0x2c0 [ 804.343653][T12592] ? rcu_is_watching+0x15/0xb0 [ 804.348433][T12592] ip_generic_getfrag+0x163/0x2f0 [ 804.353476][T12592] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 804.358348][T12592] ? skb_put+0x11b/0x210 [ 804.362605][T12592] __ip_append_data+0x2e80/0x3b80 [ 804.367667][T12592] ? raw_send_hdrinc+0x1170/0x1170 [ 804.372801][T12592] ? ip_setup_cork+0x860/0x860 [ 804.377577][T12592] ? ip_setup_cork+0x530/0x860 [ 804.382357][T12592] ip_append_data+0x10d/0x180 [ 804.387049][T12592] ? raw_send_hdrinc+0x1170/0x1170 [ 804.392197][T12592] raw_sendmsg+0x15c1/0x1c00 [ 804.396826][T12592] ? compat_raw_ioctl+0x70/0x70 [ 804.401718][T12592] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 804.408149][T12592] ? sock_rps_record_flow+0x19/0x3f0 [ 804.413455][T12592] ? inet_sendmsg+0x7c/0x2f0 [ 804.418056][T12592] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 804.423355][T12592] ? security_socket_sendmsg+0x80/0xa0 [ 804.428840][T12592] __sys_sendto+0x4a9/0x6b0 [ 804.433359][T12592] ? __ia32_sys_getpeername+0x90/0x90 [ 804.438755][T12592] ? __fget_files+0x43d/0x4b0 [ 804.443457][T12592] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 804.449461][T12592] ? lock_chain_count+0x20/0x20 [ 804.454331][T12592] __x64_sys_sendto+0xde/0xf0 [ 804.459023][T12592] do_syscall_64+0x55/0xb0 [ 804.463469][T12592] ? clear_bhb_loop+0x40/0x90 [ 804.468158][T12592] ? clear_bhb_loop+0x40/0x90 [ 804.472860][T12592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.478767][T12592] RIP: 0033:0x7f906f99ce59 [ 804.483192][T12592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.502815][T12592] RSP: 002b:00007f907084e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 804.511247][T12592] RAX: ffffffffffffffda RBX: 00007f906fc15fa0 RCX: 00007f906f99ce59 [ 804.519228][T12592] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 0000000000000003 [ 804.527209][T12592] RBP: 00007f907084e090 R08: 0000200000000100 R09: 0000000000000010 [ 804.535190][T12592] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 804.543169][T12592] R13: 00007f906fc16038 R14: 00007f906fc15fa0 R15: 00007fffbd363b28 [ 804.551165][T12592] [ 805.179915][T12607] loop1: detected capacity change from 0 to 4096 [ 805.200233][T12607] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 805.243203][T12407] veth0_vlan: entered promiscuous mode [ 805.279162][T12407] veth1_vlan: entered promiscuous mode [ 805.384760][T12407] veth0_macvtap: entered promiscuous mode [ 805.450237][T12407] veth1_macvtap: entered promiscuous mode [ 805.491554][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.495603][T12617] loop4: detected capacity change from 0 to 512 [ 805.508754][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.527281][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.538380][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.548642][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.559917][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.562991][T12617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.571378][T12407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.600985][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.612032][T12617] ext4 filesystem being mounted at /261/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.630821][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.648836][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.660224][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.671217][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.682921][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.695228][T12407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.695433][T12617] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 805.703899][T10598] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 805.747319][T12407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.768996][T12407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.771262][T12617] EXT4-fs (loop4): Remounting filesystem read-only [ 805.790230][T12407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.799093][T12407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.870363][ T7975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.928513][T10218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.944298][T10218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.976878][T10598] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 806.013834][T10598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.035019][T10598] usb 2-1: Product: syz [ 806.039241][T10598] usb 2-1: Manufacturer: syz [ 806.053578][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.068011][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.077778][T10598] usb 2-1: SerialNumber: syz [ 806.115780][T10598] usb 2-1: config 0 descriptor?? [ 806.137099][T10598] hub 2-1:0.0: bad descriptor, ignoring hub [ 806.143064][T10598] hub: probe of 2-1:0.0 failed with error -5 [ 806.143731][T12633] loop0: detected capacity change from 0 to 512 [ 806.278853][T12633] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1722: inode has both inline data and extents flags [ 806.309318][T12633] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1722: couldn't read orphan inode 15 (err -117) [ 806.326612][T12633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.373914][T10598] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 806.388140][T12639] syzkaller0: entered promiscuous mode [ 806.403873][T12639] syzkaller0: entered allmulticast mode [ 806.475935][T10598] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 806.515895][T10598] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 806.531887][T10598] usb 2-1: media controller created [ 806.564423][T12642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.586209][T10598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 806.596645][T12642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.748708][T12647] i2c i2c-1: Invalid block size returned: 175 [ 806.750645][T10598] DVB: Unable to find symbol dib7000p_attach() [ 806.784350][T10598] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 806.814219][ T7428] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 806.926356][T10598] rc_core: IR keymap rc-dib0700-rc5 not found [ 806.940499][T10598] Registered IR keymap rc-empty [ 806.946376][T10598] dvb-usb: could not initialize remote control. [ 806.960425][T10598] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 806.977503][T10598] usb 2-1: USB disconnect, device number 14 [ 806.984293][ T7428] usb 5-1: device descriptor read/64, error -71 [ 807.055317][T10598] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 807.263877][ T7428] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 807.381790][T12642] loop4: detected capacity change from 0 to 32768 [ 807.392056][T12642] (syz.4.1723,12642,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 807.411761][T12642] (syz.4.1723,12642,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 807.423884][ T7428] usb 5-1: device descriptor read/64, error -71 [ 807.501886][T12642] JBD2: Ignoring recovery information on journal [ 807.554057][ T7428] usb usb5-port1: attempt power cycle [ 807.633863][T12642] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 807.727618][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.839426][T12667] loop7: detected capacity change from 0 to 7 [ 807.876998][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.886251][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 807.918813][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.928073][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 807.937761][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 807.946930][T12674] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1724'. [ 807.956196][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.965384][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 807.977136][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.984109][ T7428] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 807.986337][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.008671][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.017917][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.030967][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.040238][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.056371][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.065620][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.080241][T12667] ldm_validate_partition_table(): Disk read failed. [ 808.100186][T12672] loop1: detected capacity change from 0 to 512 [ 808.116388][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.125636][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.142984][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.152306][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.161566][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.181864][T12667] Dev loop7: unable to read RDB block 0 [ 808.216319][T12672] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 808.237841][ T7428] usb 5-1: device descriptor read/8, error -71 [ 808.252301][T12667] loop7: unable to read partition table [ 808.260215][T12667] loop7: partition table beyond EOD, truncated [ 808.285863][T12667] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 808.341486][T12672] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 808.368049][T12672] EXT4-fs (loop1): orphan cleanup on readonly fs [ 808.393265][T12672] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.1724: Allocating blocks 41-42 which overlap fs metadata [ 808.481607][T12672] EXT4-fs (loop1): Remounting filesystem read-only [ 808.498097][T12672] Quota error (device loop1): write_blk: dquota write failed [ 808.537690][T12672] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 808.570573][T12672] EXT4-fs (loop1): 1 truncate cleaned up [ 808.585680][T12672] EXT4-fs (loop1): pa ffff888057970910: logic 1, phys. 41, len 23 [ 808.610073][T12672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 808.863510][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.935937][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.699194][ T7975] ocfs2: Unmounting device (7,4) on (node local) [ 810.157591][T12704] loop1: detected capacity change from 0 to 128 [ 810.649498][T12716] loop1: detected capacity change from 0 to 512 [ 810.710457][T12716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.795132][T12716] ext4 filesystem being mounted at /445/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.931714][T12716] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 810.958791][T12716] EXT4-fs (loop1): Remounting filesystem read-only [ 811.137155][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.151149][T12723] loop4: detected capacity change from 0 to 512 [ 811.239103][T12723] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 811.502286][T12728] loop4: detected capacity change from 0 to 8 [ 811.534860][T12728] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 811.564868][T12732] netlink: 'syz.1.1730': attribute type 9 has an invalid length. [ 811.772997][T12739] loop1: detected capacity change from 0 to 512 [ 811.834226][T12739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.854356][T12739] ext4 filesystem being mounted at /447/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.059950][T12746] loop4: detected capacity change from 0 to 512 [ 812.146148][T12746] tipc: Started in network mode [ 812.163875][T12746] tipc: Node identity ac1414aa, cluster identity 4711 [ 812.171449][T12746] tipc: Enabling of bearer rejected, failed to enable media [ 812.224645][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.326718][T12737] loop0: detected capacity change from 0 to 32768 [ 812.472503][T12754] loop4: detected capacity change from 0 to 2048 [ 812.511138][T12754] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 812.511901][T12752] loop1: detected capacity change from 0 to 8192 [ 812.551223][ T27] audit: type=1800 audit(1780291216.281:379): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1736" name="bus" dev="loop1" ino=1048604 res=0 errno=0 [ 812.713880][T10598] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 812.724771][T12762] loop4: detected capacity change from 0 to 512 [ 812.772572][T12762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.811501][T12762] ext4 filesystem being mounted at /269/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.866018][T12762] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 812.886342][T12762] EXT4-fs (loop4): Remounting filesystem read-only [ 812.906667][T10598] usb 1-1: unable to get BOS descriptor or descriptor too short [ 812.921545][T10598] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.922504][ T7975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.932007][T10598] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 812.957390][T10598] usb 1-1: string descriptor 0 read error: -22 [ 812.965090][T10598] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 812.974589][T10598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.083001][T12769] FAULT_INJECTION: forcing a failure. [ 813.083001][T12769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.146576][T12769] CPU: 0 PID: 12769 Comm: syz.4.1740 Not tainted syzkaller #0 [ 813.154093][T12769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 813.164168][T12769] Call Trace: [ 813.167460][T12769] [ 813.170403][T12769] dump_stack_lvl+0x18c/0x250 [ 813.175106][T12769] ? show_regs_print_info+0x20/0x20 [ 813.180330][T12769] ? load_image+0x420/0x420 [ 813.184851][T12769] ? __lock_acquire+0x7d40/0x7d40 [ 813.185041][T10598] usb 1-1: selecting invalid altsetting 1 [ 813.189879][T12769] ? snprintf+0xe9/0x140 [ 813.199860][T12769] should_fail_ex+0x39d/0x4d0 [ 813.204563][T12769] _copy_to_user+0x2f/0xa0 [ 813.205651][T10598] usb 1-1: unit 6 not found! [ 813.208988][T12769] simple_read_from_buffer+0xe7/0x150 [ 813.218946][T12769] proc_fail_nth_read+0x1e8/0x260 [ 813.223993][T12769] ? proc_fault_inject_write+0x360/0x360 [ 813.229645][T12769] ? fsnotify_perm+0x271/0x5e0 [ 813.234408][T12769] ? proc_fault_inject_write+0x360/0x360 [ 813.240061][T12769] vfs_read+0x28b/0x970 [ 813.244248][T12769] ? kernel_read+0x1e0/0x1e0 [ 813.248870][T12769] ? __fget_files+0x28/0x4b0 [ 813.253478][T12769] ? __fget_files+0x28/0x4b0 [ 813.258086][T12769] ? __fget_files+0x43d/0x4b0 [ 813.262791][T12769] ? __fdget_pos+0x2a3/0x330 [ 813.267384][T12769] ? ksys_read+0x75/0x260 [ 813.271706][T12769] ksys_read+0x150/0x260 [ 813.275957][T12769] ? vfs_write+0x990/0x990 [ 813.280365][T12769] ? lockdep_hardirqs_on+0x98/0x150 [ 813.285568][T12769] do_syscall_64+0x55/0xb0 [ 813.289981][T12769] ? clear_bhb_loop+0x40/0x90 [ 813.294658][T12769] ? clear_bhb_loop+0x40/0x90 [ 813.299340][T12769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 813.305250][T12769] RIP: 0033:0x7f4413d5d68e [ 813.309678][T12769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 813.329298][T12769] RSP: 002b:00007f4414c5afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 813.337716][T12769] RAX: ffffffffffffffda RBX: 00007f4414c5b6c0 RCX: 00007f4413d5d68e [ 813.345691][T12769] RDX: 000000000000000f RSI: 00007f4414c5b0a0 RDI: 0000000000000005 [ 813.353649][T12769] RBP: 00007f4414c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 813.361633][T12769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.369605][T12769] R13: 00007f4414016038 R14: 00007f4414015fa0 R15: 00007fff3c7162a8 [ 813.377580][T12769] [ 813.380764][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.761699][T12781] FAULT_INJECTION: forcing a failure. [ 813.761699][T12781] name failslab, interval 1, probability 0, space 0, times 0 [ 813.781810][T12781] CPU: 0 PID: 12781 Comm: syz.4.1743 Not tainted syzkaller #0 [ 813.789318][T12781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 813.799400][T12781] Call Trace: [ 813.802687][T12781] [ 813.805625][T12781] dump_stack_lvl+0x18c/0x250 [ 813.810322][T12781] ? show_regs_print_info+0x20/0x20 [ 813.815531][T12781] ? load_image+0x420/0x420 [ 813.820043][T12781] ? verify_lock_unused+0x140/0x140 [ 813.825261][T12781] should_fail_ex+0x39d/0x4d0 [ 813.829959][T12781] should_failslab+0x9/0x20 [ 813.834482][T12781] slab_pre_alloc_hook+0x59/0x310 [ 813.839528][T12781] kmem_cache_alloc+0x5a/0x2d0 [ 813.844309][T12781] ? skb_clone+0x1eb/0x370 [ 813.848742][T12781] skb_clone+0x1eb/0x370 [ 813.852998][T12781] __netlink_deliver_tap+0x41c/0x830 [ 813.858310][T12781] ? netlink_deliver_tap+0x2e/0x1b0 [ 813.863518][T12781] netlink_deliver_tap+0x19c/0x1b0 [ 813.868640][T12781] netlink_unicast+0x72c/0x8d0 [ 813.873424][T12781] netlink_sendmsg+0x8d0/0xbf0 [ 813.878222][T12781] ? netlink_getsockopt+0x590/0x590 [ 813.883435][T12781] ? aa_sock_msg_perm+0x94/0x150 [ 813.888396][T12781] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 813.893695][T12781] ? security_socket_sendmsg+0x80/0xa0 [ 813.899161][T12781] ? netlink_getsockopt+0x590/0x590 [ 813.904372][T12781] ____sys_sendmsg+0x5ba/0x960 [ 813.909154][T12781] ? __asan_memset+0x22/0x40 [ 813.913756][T12781] ? __sys_sendmsg_sock+0x30/0x30 [ 813.918801][T12781] ? __import_iovec+0x5f2/0x850 [ 813.923668][T12781] ? import_iovec+0x73/0xa0 [ 813.928187][T12781] ___sys_sendmsg+0x2a6/0x360 [ 813.932879][T12781] ? get_pid_task+0x20/0x1e0 [ 813.937492][T12781] ? __sys_sendmsg+0x2a0/0x2a0 [ 813.942285][T12781] ? __lock_acquire+0x7d40/0x7d40 [ 813.947358][T12781] __se_sys_sendmsg+0x1c2/0x2b0 [ 813.952229][T12781] ? __x64_sys_sendmsg+0x80/0x80 [ 813.957197][T12781] ? lockdep_hardirqs_on+0x98/0x150 [ 813.962414][T12781] do_syscall_64+0x55/0xb0 [ 813.966846][T12781] ? clear_bhb_loop+0x40/0x90 [ 813.971536][T12781] ? clear_bhb_loop+0x40/0x90 [ 813.976235][T12781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 813.982145][T12781] RIP: 0033:0x7f4413d9ce59 [ 813.986570][T12781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.006190][T12781] RSP: 002b:00007f4414c5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 814.014616][T12781] RAX: ffffffffffffffda RBX: 00007f4414015fa0 RCX: 00007f4413d9ce59 [ 814.022595][T12781] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000003 [ 814.030575][T12781] RBP: 00007f4414c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 814.038553][T12781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.046532][T12781] R13: 00007f4414016038 R14: 00007f4414015fa0 R15: 00007fff3c7162a8 [ 814.054588][T12781] [ 814.057751][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.261489][T12786] loop4: detected capacity change from 0 to 512 [ 814.323158][T12786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.341550][T12786] ext4 filesystem being mounted at /274/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.576606][ T7975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.625393][T12804] loop4: detected capacity change from 0 to 512 [ 815.742515][T12804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.827000][T12804] ext4 filesystem being mounted at /277/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 815.953234][T12809] syzkaller0: entered promiscuous mode [ 815.962037][T10598] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 815.965384][T12804] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 815.994711][T12809] syzkaller0: entered allmulticast mode [ 816.043145][T12804] EXT4-fs (loop4): Remounting filesystem read-only [ 816.119938][ T7975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.225184][ T5909] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 816.566863][ T5909] usb 2-1: config 0 has an invalid interface number: 193 but max is 0 [ 816.666823][ T5909] usb 2-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 816.677778][ T5909] usb 2-1: config 0 has no interface number 0 [ 816.684083][ T5909] usb 2-1: too many endpoints for config 0 interface 193 altsetting 5: 244, using maximum allowed: 30 [ 816.701625][ T5909] usb 2-1: config 0 interface 193 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 244 [ 816.710654][T11204] udevd[11204]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 816.715094][ T5909] usb 2-1: config 0 interface 193 has no altsetting 0 [ 816.742067][ T5909] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 816.742510][T10598] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 816.751292][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.766573][ T5909] usb 2-1: Product: syz [ 816.770824][ T5909] usb 2-1: Manufacturer: syz [ 816.775640][ T5909] usb 2-1: SerialNumber: syz [ 816.818936][ T5909] usb 2-1: config 0 descriptor?? [ 816.854808][T10598] usb 1-1: USB disconnect, device number 16 [ 817.012510][T12831] loop0: detected capacity change from 0 to 512 [ 817.061661][T12831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.066735][T12833] loop5: detected capacity change from 0 to 1024 [ 817.108300][T12831] ext4 filesystem being mounted at /429/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.173895][ T5763] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 817.236597][ T27] audit: type=1800 audit(1780291220.971:380): pid=12833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1754" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 817.280453][T12811] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1749'. [ 817.349841][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.406133][ T5763] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 817.433962][ T5763] usb 5-1: config 220 has no interface number 2 [ 817.452866][ T5763] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 817.488427][ T5763] usb 5-1: config 220 interface 0 has no altsetting 0 [ 817.497178][ T5763] usb 5-1: config 220 interface 76 has no altsetting 0 [ 817.508699][ T5763] usb 5-1: config 220 interface 1 has no altsetting 0 [ 817.520625][ T5763] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 817.539881][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.550190][T12844] binder: 12843:12844 ioctl ae01 33 returned -22 [ 817.556771][ T5763] usb 5-1: Product: syz [ 817.561816][ T5763] usb 5-1: Manufacturer: syz [ 817.577514][ T5763] usb 5-1: SerialNumber: syz [ 817.635204][ T5909] redrat3 2-1:0.193: Couldn't find all endpoints [ 817.714277][ T5909] usb 2-1: USB disconnect, device number 15 [ 817.851992][T12853] loop0: detected capacity change from 0 to 512 [ 817.875514][ T5763] usb 5-1: selecting invalid altsetting 0 [ 817.909978][ T5763] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 817.910503][T12853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.916568][ T5763] usb 5-1: No valid video chain found. [ 817.924221][ T5763] usb 5-1: selecting invalid altsetting 0 [ 817.937781][T12853] ext4 filesystem being mounted at /432/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.945676][ T5763] usbtest: probe of 5-1:220.1 failed with error -22 [ 817.964519][ T5763] usb 5-1: USB disconnect, device number 19 [ 818.005311][T12853] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 818.020721][T12853] EXT4-fs (loop0): Remounting filesystem read-only [ 818.062376][T12858] syzkaller0: entered promiscuous mode [ 818.083889][T12858] syzkaller0: entered allmulticast mode [ 818.103355][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.291338][T12865] FAULT_INJECTION: forcing a failure. [ 818.291338][T12865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.309631][T12865] CPU: 1 PID: 12865 Comm: syz.1.1762 Not tainted syzkaller #0 [ 818.317142][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 818.327220][T12865] Call Trace: [ 818.330517][T12865] [ 818.333462][T12865] dump_stack_lvl+0x18c/0x250 [ 818.338175][T12865] ? show_regs_print_info+0x20/0x20 [ 818.343401][T12865] ? load_image+0x420/0x420 [ 818.347926][T12865] ? __lock_acquire+0x7d40/0x7d40 [ 818.352965][T12865] ? __virt_addr_valid+0x18c/0x540 [ 818.358087][T12865] should_fail_ex+0x39d/0x4d0 [ 818.362783][T12865] _copy_from_user+0x2f/0xe0 [ 818.367380][T12865] snd_seq_event_dup+0x495/0x770 [ 818.372330][T12865] snd_seq_client_enqueue_event+0x2d7/0x4a0 [ 818.378231][T12865] ? snd_seq_kernel_client_enqueue+0x360/0x360 [ 818.384391][T12865] ? __might_fault+0xaa/0x120 [ 818.389063][T12865] ? __might_fault+0xc6/0x120 [ 818.393755][T12865] ? __might_fault+0xaa/0x120 [ 818.398472][T12865] snd_seq_write+0x5d7/0x820 [ 818.403063][T12865] ? aa_path_link+0xf70/0xf70 [ 818.407745][T12865] ? snd_seq_read+0x670/0x670 [ 818.412419][T12865] ? common_file_perm+0x198/0x1f0 [ 818.417447][T12865] ? fsnotify_perm+0x5d/0x5e0 [ 818.422124][T12865] ? security_file_permission+0x79/0xa0 [ 818.427663][T12865] ? snd_seq_read+0x670/0x670 [ 818.432336][T12865] vfs_write+0x296/0x990 [ 818.436585][T12865] ? file_end_write+0x250/0x250 [ 818.441433][T12865] ? __fget_files+0x28/0x4b0 [ 818.446021][T12865] ? __fget_files+0x28/0x4b0 [ 818.450608][T12865] ? __fget_files+0x43d/0x4b0 [ 818.455288][T12865] ? __fdget_pos+0x1d8/0x330 [ 818.459878][T12865] ? ksys_write+0x75/0x260 [ 818.464301][T12865] ksys_write+0x150/0x260 [ 818.468650][T12865] ? __ia32_sys_read+0x90/0x90 [ 818.473422][T12865] ? lockdep_hardirqs_on+0x98/0x150 [ 818.478638][T12865] do_syscall_64+0x55/0xb0 [ 818.483063][T12865] ? clear_bhb_loop+0x40/0x90 [ 818.487749][T12865] ? clear_bhb_loop+0x40/0x90 [ 818.492427][T12865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.498320][T12865] RIP: 0033:0x7fa61499ce59 [ 818.502735][T12865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.522343][T12865] RSP: 002b:00007fa6157d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 818.530759][T12865] RAX: ffffffffffffffda RBX: 00007fa614c15fa0 RCX: 00007fa61499ce59 [ 818.538727][T12865] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000004 [ 818.546694][T12865] RBP: 00007fa6157d6090 R08: 0000000000000000 R09: 0000000000000000 [ 818.554659][T12865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.562631][T12865] R13: 00007fa614c16038 R14: 00007fa614c15fa0 R15: 00007ffc72c17288 [ 818.570612][T12865] [ 818.610658][T12867] loop5: detected capacity change from 0 to 512 [ 818.697314][T12867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.725116][T12867] ext4 filesystem being mounted at /7/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.945348][T12878] loop1: detected capacity change from 0 to 512 [ 818.960563][T12878] EXT4-fs: Ignoring removed mblk_io_submit option [ 818.973062][T12878] EXT4-fs: Mount option(s) incompatible with ext3 [ 819.041893][T12407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.249379][T12882] syzkaller0: entered promiscuous mode [ 819.261462][T12882] syzkaller0: entered allmulticast mode [ 819.348898][T12886] loop5: detected capacity change from 0 to 512 [ 819.476543][T12886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.529492][T12886] ext4 filesystem being mounted at /8/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.561989][T12890] netlink: 'syz.0.1770': attribute type 4 has an invalid length. [ 819.584094][T12890] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1770'. [ 819.616357][T12886] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 819.639089][T12886] EXT4-fs (loop5): Remounting filesystem read-only [ 819.698732][T12407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.906953][ T5909] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 820.149760][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 820.167072][ T5909] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 820.188450][ T5909] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 820.214213][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 820.237296][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 820.263979][ T5909] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 820.301927][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 820.334087][ T5909] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 820.357677][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.379726][ T5909] usb 1-1: config 0 descriptor?? [ 820.401217][T12909] loop1: detected capacity change from 0 to 512 [ 820.472988][T12909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.554963][T12915] loop5: detected capacity change from 0 to 512 [ 820.562995][T12909] ext4 filesystem being mounted at /455/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 820.603477][T12915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.605701][T12908] loop4: detected capacity change from 0 to 4096 [ 820.647247][ T5909] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 820.647312][T12915] ext4 filesystem being mounted at /11/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 820.684021][ T5909] usb 1-1: USB disconnect, device number 17 [ 820.699642][ T5909] usblp0: removed [ 820.794059][T12915] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 820.819253][T12915] EXT4-fs (loop5): Remounting filesystem read-only [ 820.846140][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.904475][T12407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.171352][T12925] loop1: detected capacity change from 0 to 512 [ 821.206582][T12925] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 821.234453][ T5909] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 821.252801][T12929] binder: BINDER_SET_CONTEXT_MGR already set [ 821.264935][T12929] binder: 12928:12929 ioctl 4018620d 200000004a80 returned -16 [ 821.437138][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 821.448323][ T5909] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 821.459044][ T5909] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 821.471958][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 821.484425][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 821.496578][ T5909] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 821.506671][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 821.520110][ T5909] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 821.529469][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.543613][ T5909] usb 1-1: config 0 descriptor?? [ 821.623990][ T5763] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 821.626040][T12939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.645843][T12939] ext4 filesystem being mounted at /16/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.743372][T12407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.782342][ T5909] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 821.804048][ T5763] usb 2-1: Using ep0 maxpacket: 16 [ 821.822022][ T5763] usb 2-1: unable to get BOS descriptor set [ 821.836433][ T5763] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32 [ 821.851858][ T5763] usb 2-1: config 1 interface 0 has no altsetting 0 [ 821.871904][ T5763] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 821.891324][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.915058][ T5763] usb 2-1: Product: syz [ 821.919894][ T5763] usb 2-1: Manufacturer: Ў [ 821.930571][T12944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.930978][ T5763] usb 2-1: SerialNumber: syz [ 821.954198][T12944] ext4 filesystem being mounted at /17/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.995860][T12944] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 821.999969][ T9] usb 1-1: USB disconnect, device number 18 [ 822.029717][T12944] EXT4-fs (loop5): Remounting filesystem read-only [ 822.072702][T12932] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 822.085312][ T9] usblp0: removed [ 822.166162][T12407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.514025][T10598] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 822.703838][T10598] usb 5-1: Using ep0 maxpacket: 16 [ 822.717533][T10598] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 822.740098][T10598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.764467][T10598] usb 5-1: Product: syz [ 822.779225][T10598] usb 5-1: Manufacturer: syz [ 822.790914][T10598] usb 5-1: SerialNumber: syz [ 822.807967][T10598] usb 5-1: config 0 descriptor?? [ 822.822125][T12958] set_capacity_and_notify: 2 callbacks suppressed [ 822.822141][T12958] loop5: detected capacity change from 0 to 32768 [ 822.832090][T10598] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 822.882224][T12958] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 822.912901][T10598] usb 5-1: Detected FT232B [ 822.974731][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 823.086304][T12958] XFS (loop5): Ending clean mount [ 823.098485][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.111011][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.114627][T12958] XFS (loop5): Quotacheck needed: Please wait. [ 823.174185][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 823.188601][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 823.208613][ T9] usb 1-1: config 0 has no interface number 0 [ 823.222319][ T9] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 823.233135][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 823.246313][ T9] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 823.257060][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.265977][ T9] usb 1-1: Product: syz [ 823.270242][ T9] usb 1-1: Manufacturer: syz [ 823.274961][ T9] usb 1-1: SerialNumber: syz [ 823.289719][ T9] usb 1-1: config 0 descriptor?? [ 823.313598][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.345596][T12958] XFS (loop5): Quotacheck: Done. [ 823.362820][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.522503][ T9] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 823.546949][ T9] cx231xx 1-1:0.1: Failed to read PCB config [ 823.555057][ T9] cx231xx: probe of 1-1:0.1 failed with error -71 [ 823.580434][ T9] usb 1-1: USB disconnect, device number 19 [ 823.630765][T12407] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 824.125735][T12925] syz.1.1783 (12925) used greatest stack depth: 19760 bytes left [ 824.134296][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 824.182750][ T5763] usb 2-1: USB disconnect, device number 16 [ 824.334138][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 824.344899][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 824.355243][ T9] usb 1-1: config 0 has no interface number 0 [ 824.362646][ T9] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 824.374032][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 824.383275][ T9] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 824.394813][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.406330][ T9] usb 1-1: Product: syz [ 824.412840][ T9] usb 1-1: Manufacturer: syz [ 824.419942][ T9] usb 1-1: SerialNumber: syz [ 824.441500][ T9] usb 1-1: config 0 descriptor?? [ 824.464115][T13005] loop1: detected capacity change from 0 to 2048 [ 824.515721][T13009] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 824.668575][ T9] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 824.706362][ T9] cx231xx 1-1:0.1: bad scenario!!!!! [ 824.706362][ T9] config_info=0 [ 824.724767][ T9] cx231xx 1-1:0.1: Failed to read PCB config [ 824.913643][ T5814] usb 1-1: USB disconnect, device number 20 [ 825.017831][T13022] loop5: detected capacity change from 0 to 512 [ 825.091197][T13022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.111270][T13022] ext4 filesystem being mounted at /20/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.219895][T13029] loop1: detected capacity change from 0 to 512 [ 825.285089][T13022] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 825.311056][T10598] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 825.322633][T13029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.378859][T10598] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 825.421346][T13022] EXT4-fs (loop5): Remounting filesystem read-only [ 825.431144][T13029] ext4 filesystem being mounted at /461/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.454303][T10598] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 825.518357][T13029] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 825.533945][T10598] usb 5-1: USB disconnect, device number 20 [ 825.570165][T10598] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 825.585876][T13029] EXT4-fs (loop1): Remounting filesystem read-only [ 825.594107][T10598] ftdi_sio 5-1:0.0: device disconnected [ 825.607043][T12407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.798017][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.873259][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1802'. [ 825.964555][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 826.228233][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 826.312139][ T27] audit: type=1400 audit(1780291229.941:381): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13053 comm="syz.1.1803" [ 826.376759][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 826.516794][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 826.640414][T11546] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 826.731611][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 826.807634][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.840008][ T9] usb 1-1: Product: syz [ 826.849886][ T9] usb 1-1: Manufacturer: syz [ 826.867844][ T9] usb 1-1: SerialNumber: syz [ 826.894830][ T9] usb 1-1: config 0 descriptor?? [ 826.906627][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'. [ 826.994635][T11546] usb 2-1: Using ep0 maxpacket: 32 [ 827.001780][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1806'. [ 827.030399][T11546] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 827.051600][T11546] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.080716][T11546] usb 2-1: config 0 descriptor?? [ 827.151387][ T9] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 827.299919][T11546] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 827.324026][T11546] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 827.356509][ T5814] usb 1-1: USB disconnect, device number 21 [ 827.360348][T11546] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 827.391663][T11546] usb 2-1: media controller created [ 827.432596][T11546] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 827.845001][T11546] az6027: usb out operation failed. (-71) [ 827.851808][T11546] az6027: usb out operation failed. (-71) [ 827.857712][T11546] stb0899_attach: Driver disabled by Kconfig [ 827.863712][T11546] az6027: no front-end attached [ 827.863712][T11546] [ 827.888226][T11546] az6027: usb out operation failed. (-71) [ 827.914192][T11546] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 827.934615][T11546] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 827.970864][T11546] dvb-usb: schedule remote query interval to 400 msecs. [ 827.983842][T11546] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 828.026683][T11546] usb 2-1: USB disconnect, device number 17 [ 828.064760][T13086] loop0: detected capacity change from 0 to 256 [ 828.112816][T13086] exfat: Deprecated parameter 'utf8' [ 828.158566][T13086] exfat: Deprecated parameter 'utf8' [ 828.173877][T13086] exfat: Deprecated parameter 'namecase' [ 828.179617][T13086] exfat: Deprecated parameter 'namecase' [ 828.235035][T11546] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 828.254439][T13086] exfat: Deprecated parameter 'namecase' [ 828.328204][T13086] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 828.346312][T13091] loop4: detected capacity change from 0 to 128 [ 828.473972][ T27] audit: type=1800 audit(1780291232.201:382): pid=13086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1807" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 828.513115][T13098] loop1: detected capacity change from 0 to 512 [ 828.596395][T13098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.626729][T13102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1812'. [ 828.696225][T13098] ext4 filesystem being mounted at /463/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.867081][T13107] loop5: detected capacity change from 0 to 512 [ 828.921711][T13098] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 829.007769][T13107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.033041][T13098] EXT4-fs (loop1): Remounting filesystem read-only [ 829.037562][T13107] ext4 filesystem being mounted at /24/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 829.149386][T13107] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 829.151077][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.181613][T13107] EXT4-fs (loop5): Remounting filesystem read-only [ 829.239993][T12407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.317161][T13131] loop1: detected capacity change from 0 to 512 [ 829.357905][ T5909] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 829.509209][T13136] netlink: 'syz.5.1817': attribute type 2 has an invalid length. [ 829.574861][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1817'. [ 829.592584][T13138] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1817'. [ 829.649192][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.676304][ T5909] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 829.703922][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.795968][ T5909] usb 1-1: config 0 descriptor?? [ 830.053923][ T5909] usbhid 1-1:0.0: can't add hid device: -71 [ 830.059981][ T5909] usbhid: probe of 1-1:0.0 failed with error -71 [ 830.107544][ T5909] usb 1-1: USB disconnect, device number 22 [ 830.173326][T13154] loop5: detected capacity change from 0 to 512 [ 830.200141][T13154] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 830.288111][T13163] loop4: detected capacity change from 0 to 256 [ 830.293821][T13154] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.1821: iget: bad i_size value: 38620345925642 [ 830.334147][ T23] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 830.375243][T13154] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1821: couldn't read orphan inode 15 (err -117) [ 830.389887][T13154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.567693][T13161] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 830.697328][ T23] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 830.801302][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.839107][ T5909] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 831.027594][ T23] usb 2-1: config 0 has no interface number 0 [ 831.039723][ T23] usb 2-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 216 [ 831.050093][ T23] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 831.068860][ T23] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 831.101106][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.146630][ T23] usb 2-1: config 0 descriptor?? [ 831.152505][T13151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 831.254008][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 831.292568][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.322326][ T23] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 831.338778][ T5909] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 831.390285][T11546] usb 2-1: USB disconnect, device number 18 [ 831.390316][T11503] usb 2-1: Failed to submit usb control message: -71 [ 831.413142][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.442446][T11503] usb 2-1: unable to send the bmi data to the device: -71 [ 831.461488][ T5909] usb 1-1: config 0 descriptor?? [ 831.476926][T11503] usb 2-1: unable to get target info from device [ 831.483323][T11503] usb 2-1: could not get target info (-71) [ 831.521585][ T5909] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 831.544287][T11503] usb 2-1: could not probe fw (-71) [ 831.578015][ T5909] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 831.915784][T13184] loop4: detected capacity change from 0 to 512 [ 832.001090][ T5832] usb 1-1: USB disconnect, device number 23 [ 832.014876][ T5832] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 832.078392][T13184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.157472][T13184] ext4 filesystem being mounted at /299/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 832.261267][T13184] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 832.299362][T13184] EXT4-fs (loop4): Remounting filesystem read-only [ 832.411203][ T7975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.533509][T12407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.623055][T13208] loop4: detected capacity change from 0 to 1024 [ 834.206582][T13213] mmap: syz.5.1829 (13213) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 834.539666][T13214] loop0: detected capacity change from 0 to 4096 [ 834.627949][T13214] NILFS (loop0): invalid segment: Checksum error in segment payload [ 834.677951][T13214] NILFS (loop0): trying rollback from an earlier position [ 834.744178][T13214] NILFS (loop0): recovery complete [ 834.854021][T13232] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 835.264215][T13236] loop5: detected capacity change from 0 to 7 [ 835.292459][T13236] Dev loop5: unable to read RDB block 7 [ 835.358799][T13236] loop5: AHDI p1 p2 p3 [ 835.374525][T13236] loop5: partition table partially beyond EOD, truncated [ 835.431785][T13236] loop5: p1 size 1986618213 extends beyond EOD, truncated [ 835.479090][T13236] loop5: p2 start 1702059890 is beyond EOD, truncated [ 835.550719][T11204] udevd[11204]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 835.662076][T13238] fuse: Unknown parameter '"?0x0000000000000007' [ 835.952123][T13244] loop1: detected capacity change from 0 to 512 [ 835.999674][T13244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.064378][T13244] ext4 filesystem being mounted at /469/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 836.255417][T13244] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 836.276798][T13244] EXT4-fs (loop1): Remounting filesystem read-only [ 836.333970][T13254] loop5: detected capacity change from 0 to 512 [ 836.373575][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.391751][T13254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.406377][T13254] ext4 filesystem being mounted at /29/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 836.429696][T13254] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 836.448333][T13254] EXT4-fs (loop5): Remounting filesystem read-only [ 836.618434][T12407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.812228][T13266] netlink: 'syz.1.1844': attribute type 4 has an invalid length. [ 837.657586][T13264] loop5: detected capacity change from 0 to 32768 [ 837.769828][T13281] loop4: detected capacity change from 0 to 512 [ 837.809529][T13282] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 837.809529][T13282] [ 837.821409][T13264] [U] iscard,iocharset=cp855,errors=remount-ro,integrity,nodiscard,discard=0x0000000000000008,errors=continue [ 837.833490][T13264] [U] Ȓa]&\cvSu8eq>^Op_ƃap]a. [ 837.840612][T13264] [U] [ 837.843287][T13264] [U] [ 837.846675][T13264] [U] [ 837.849358][T13264] [U] [ 837.852031][T13264] [U] [ 837.854712][T13264] [U] [ 837.857508][T13264] [U] [ 837.860211][T13264] [U] [ 837.862880][T13264] [U] [ 837.865550][T13264] [U] [ 837.868310][T13264] [U] [ 837.870980][T13264] [U] [ 837.873665][T13264] [U] [ 837.876351][T13264] [U] [ 837.925142][T13282] [U] [ 838.086569][T13281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.207057][T13281] ext4 filesystem being mounted at /308/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.377982][ T112] ------------[ cut here ]------------ [ 838.384259][ T112] WARNING: CPU: 0 PID: 112 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0 [ 838.393155][ T112] Modules linked in: [ 838.397153][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 838.404401][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 838.414565][ T112] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 838.419614][ T112] Code: e8 4d ba db fe e9 5a ff ff ff e8 53 7b 83 fe eb 05 e8 4c 7b 83 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 7b 83 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 838.439303][ T112] RSP: 0018:ffffc900015c7648 EFLAGS: 00010293 [ 838.445762][ T112] RAX: ffffffff8303b0b8 RBX: ffff88802c81b010 RCX: ffff8880193dda00 [ 838.454219][ T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 838.462376][ T112] RBP: 0000000000020056 R08: ffffea0000b206c7 R09: 1ffffd40001640d8 [ 838.470756][ T112] R10: dffffc0000000000 R11: fffff940001640d9 R12: ffff88802c81b018 [ 838.479132][ T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 838.487789][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 838.497079][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 838.503686][ T112] CR2: 00007fec05945000 CR3: 0000000063ee9000 CR4: 00000000003506f0 [ 838.512044][ T112] Call Trace: [ 838.515657][ T112] [ 838.518617][ T112] ? lock_page+0x2a0/0x2a0 [ 838.523065][ T112] dbJoin+0x238/0x300 [ 838.525599][T13281] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 838.527508][ T112] dbFreeBits+0x4e1/0xda0 [ 838.546175][ T112] dbFree+0x332/0x650 [ 838.550185][ T112] txFreeMap+0x9e6/0xde0 [ 838.554996][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 838.560340][ T112] xtTruncate+0xd27/0x2ec0 [ 838.564901][ T112] ? xtInitRoot+0x170/0x170 [ 838.569457][ T112] ? __lock_acquire+0x7d40/0x7d40 [ 838.574572][ T112] ? do_raw_spin_lock+0x11f/0x2c0 [ 838.579656][ T112] ? __asan_memset+0x22/0x40 [ 838.584305][ T112] ? __dquot_initialize+0x217/0xcd0 [ 838.589537][ T112] jfs_free_zero_link+0x35c/0x4c0 [ 838.594663][ T112] ? inode_wait_for_writeback+0x1e3/0x230 [ 838.599810][T13271] raw_sendmsg: syz.0.1847 forgot to set AF_INET. Fix it! [ 838.600742][ T112] ? jfs_write_failed+0x190/0x190 [ 838.612086][T13281] EXT4-fs (loop4): Remounting filesystem read-only [ 838.612569][ T112] ? sb_clear_inode_writeback+0x360/0x360 [ 838.624897][ T112] ? do_raw_spin_lock+0x11f/0x2c0 [ 838.629972][ T112] ? bit_waitqueue+0x30/0x30 [ 838.634635][ T112] jfs_evict_inode+0x35d/0x440 [ 838.639447][ T112] ? evict+0x4c4/0x8d0 [ 838.643569][ T112] ? jfs_write_inode+0x220/0x220 [ 838.648628][ T112] evict+0x4ca/0x8d0 [ 838.652562][ T112] ? proc_nr_inodes+0x230/0x230 [ 838.657968][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 838.663329][ T112] ? _raw_spin_unlock+0x28/0x40 [ 838.668286][ T112] ? iput+0x706/0x920 [ 838.672300][ T112] jfs_lazycommit+0x429/0xa70 [ 838.677071][ T112] ? txFreelock+0x5a0/0x5a0 [ 838.681602][ T112] ? do_task_dead+0xd0/0xd0 [ 838.686337][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 838.691310][ T112] kthread+0x2fa/0x390 [ 838.695488][ T112] ? txFreelock+0x5a0/0x5a0 [ 838.700019][ T112] ? kthread_blkcg+0xd0/0xd0 [ 838.704803][ T112] ret_from_fork+0x48/0x80 [ 838.709282][ T112] ? kthread_blkcg+0xd0/0xd0 [ 838.713967][ T112] ret_from_fork_asm+0x11/0x20 [ 838.718771][ T112] [ 838.721802][ T112] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 838.729111][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 838.736313][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 838.746369][ T112] Call Trace: [ 838.749645][ T112] [ 838.752571][ T112] dump_stack_lvl+0x18c/0x250 [ 838.757261][ T112] ? show_regs_print_info+0x20/0x20 [ 838.762460][ T112] ? load_image+0x420/0x420 [ 838.766968][ T112] panic+0x2dc/0x730 [ 838.770868][ T112] ? bpf_jit_dump+0xd0/0xd0 [ 838.775379][ T112] ? ret_from_fork_asm+0x11/0x20 [ 838.780319][ T112] __warn+0x2e0/0x470 [ 838.784299][ T112] ? dbAdjTree+0x448/0x4d0 [ 838.788711][ T112] ? dbAdjTree+0x448/0x4d0 [ 838.793118][ T112] report_bug+0x2be/0x4f0 [ 838.797443][ T112] ? dbAdjTree+0x448/0x4d0 [ 838.801854][ T112] ? dbAdjTree+0x448/0x4d0 [ 838.806265][ T112] ? dbAdjTree+0x44a/0x4d0 [ 838.810672][ T112] handle_bug+0xcf/0x120 [ 838.814910][ T112] exc_invalid_op+0x1a/0x50 [ 838.819409][ T112] asm_exc_invalid_op+0x1a/0x20 [ 838.824261][ T112] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 838.829278][ T112] Code: e8 4d ba db fe e9 5a ff ff ff e8 53 7b 83 fe eb 05 e8 4c 7b 83 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 7b 83 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 838.848878][ T112] RSP: 0018:ffffc900015c7648 EFLAGS: 00010293 [ 838.854938][ T112] RAX: ffffffff8303b0b8 RBX: ffff88802c81b010 RCX: ffff8880193dda00 [ 838.862904][ T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 838.870871][ T112] RBP: 0000000000020056 R08: ffffea0000b206c7 R09: 1ffffd40001640d8 [ 838.878836][ T112] R10: dffffc0000000000 R11: fffff940001640d9 R12: ffff88802c81b018 [ 838.886802][ T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 838.894773][ T112] ? dbAdjTree+0x448/0x4d0 [ 838.899191][ T112] ? dbAdjTree+0x448/0x4d0 [ 838.903597][ T112] ? lock_page+0x2a0/0x2a0 [ 838.908010][ T112] dbJoin+0x238/0x300 [ 838.911987][ T112] dbFreeBits+0x4e1/0xda0 [ 838.916318][ T112] dbFree+0x332/0x650 [ 838.920300][ T112] txFreeMap+0x9e6/0xde0 [ 838.924542][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 838.929743][ T112] xtTruncate+0xd27/0x2ec0 [ 838.934174][ T112] ? xtInitRoot+0x170/0x170 [ 838.938697][ T112] ? __lock_acquire+0x7d40/0x7d40 [ 838.943714][ T112] ? do_raw_spin_lock+0x11f/0x2c0 [ 838.948744][ T112] ? __asan_memset+0x22/0x40 [ 838.953335][ T112] ? __dquot_initialize+0x217/0xcd0 [ 838.958538][ T112] jfs_free_zero_link+0x35c/0x4c0 [ 838.963566][ T112] ? inode_wait_for_writeback+0x1e3/0x230 [ 838.969286][ T112] ? jfs_write_failed+0x190/0x190 [ 838.974331][ T112] ? sb_clear_inode_writeback+0x360/0x360 [ 838.980044][ T112] ? do_raw_spin_lock+0x11f/0x2c0 [ 838.985070][ T112] ? bit_waitqueue+0x30/0x30 [ 838.989669][ T112] jfs_evict_inode+0x35d/0x440 [ 838.994429][ T112] ? evict+0x4c4/0x8d0 [ 838.998528][ T112] ? jfs_write_inode+0x220/0x220 [ 839.003462][ T112] evict+0x4ca/0x8d0 [ 839.007358][ T112] ? proc_nr_inodes+0x230/0x230 [ 839.012206][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 839.017409][ T112] ? _raw_spin_unlock+0x28/0x40 [ 839.022256][ T112] ? iput+0x706/0x920 [ 839.026246][ T112] jfs_lazycommit+0x429/0xa70 [ 839.030943][ T112] ? txFreelock+0x5a0/0x5a0 [ 839.035456][ T112] ? do_task_dead+0xd0/0xd0 [ 839.039964][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 839.044921][ T112] kthread+0x2fa/0x390 [ 839.049001][ T112] ? txFreelock+0x5a0/0x5a0 [ 839.053501][ T112] ? kthread_blkcg+0xd0/0xd0 [ 839.058089][ T112] ret_from_fork+0x48/0x80 [ 839.062510][ T112] ? kthread_blkcg+0xd0/0xd0 [ 839.067112][ T112] ret_from_fork_asm+0x11/0x20 [ 839.071901][ T112] [ 839.075280][ T112] Kernel Offset: disabled [ 839.079700][ T112] Rebooting in 86400 seconds..