last executing test programs: 28m34.015768253s ago: executing program 32 (id=43): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffffc, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) 28m15.594396288s ago: executing program 33 (id=86): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [{0x20, 'stripe'}], 0xa, "e13dbaeb6bc864f83307237a2e6e1cc9cf013e1cdd0b8106851b4391e3dda77aa59d94f0d9d8e1335da953c5716107f803fefa1905f5d7b81b68f4eaeab37a51cf8560a98e02a159e0c0a9f563e6f7162a0a00b891792c620ea7b5bcc173e4b96d158516c5b59dae2af8269e0ac540162e396be16b8c540a23e37dbb08eaff7db5b85f48ecd2bee03aeafe879e2d82c4e39b4161d53738f27254aeebf30909a072cd1585228ed97c8be81fc995145c1434a9"}, 0xc4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x65, 0x0, &(0x7f00000000c0)) 27m24.828647443s ago: executing program 34 (id=188): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 25m37.8593045s ago: executing program 35 (id=465): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x9, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x4000800) 21m11.015568677s ago: executing program 36 (id=1382): fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40003, 0x40, 0x5, 0x100, 0xfffffffffffffffe, 0x40590043, r5}) 20m53.338731484s ago: executing program 37 (id=1402): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) fsopen(0x0, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 17m15.842874706s ago: executing program 9 (id=1770): r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012abd7000ffdbdf25070000002400070073797374656d5f753a6f626a65639993723a61706d5f62696f735f643a73300008000400ac1414bb14000300000001e0528a00000000ffffac1414aa"], 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x40) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000000000)=0xffffffff, 0x13fffffe) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x2, 0x81, 0x5, 0x7, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_address={0x5, 0x6, 0xaa850c25f1c21d18, 0xa0, 0x0, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}}]}, 0x38}}, 0x8000) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) r7 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3e8}, [], {0x14, 0x3f5}}, 0x28}}, 0x0) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/102, 0x66) 17m11.769712056s ago: executing program 9 (id=1778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x1001003e}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000000c0)="f07fdec3", 0x4}], 0x2}, 0x5) 17m8.885083892s ago: executing program 9 (id=1786): r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) sendmsg$tipc(r1, &(0x7f0000001e40)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x30799af3943473a5}, 0x880) 17m6.81062985s ago: executing program 9 (id=1793): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005480)=[{{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}, {{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x800) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xdb, 0x9d, 0x1b, 0x8, 0x12d1, 0xfae2, 0x708b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x4, 0x1a}}]}}]}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8}, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0xe0a}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x0, 0x7f, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x80, 0x4, 0x8}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xb2, 0x40, 0x7, 0xff, 0xe3}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x9, 0x40}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x814}}, {0xe, &(0x7f0000000280)=@string={0xe, 0x3, "8f9fc8f216f7a09a8c5b7c36"}}, {0x27, &(0x7f00000002c0)=@string={0x27, 0x3, "e6c2e9267c9386fbc0da27459078bdb510feba3fe7359c7a76818e8aca4059c24e7cca4b5c"}}, {0x3, &(0x7f0000000300)=@string={0x3, 0x3, "bd"}}, {0x6f, &(0x7f0000000380)=@string={0x6f, 0x3, "9252f508ec50b79db743a78140cfddb066a423e421fd9706b0d9fcd8c7fe37cf1434de148362d4c8dfcd2b066071547282d79bdab5189023073ee9a9d162a05c4f513d6f65a0da45f6d325ee30c00f76822fe407521ba5f2cc318b4c30146a268d70ca1afe0e09cd632e51e6df"}}, {0xef, &(0x7f0000000400)=@string={0xef, 0x3, "c7104482f8b8d9c936b6b63182c9bb0a6509bdccbf9e90e2c1419a0bf77a736a376caad3f4b66800b4f59a41f3f81a3eb46e8534e9f5a2dc5f9b8ecd4f18382f59f60311498979e708d6b12c02b3fa12492ec59d96ca8e8c20a00145f09a1d58225c679c9bcd8debb1031745605a7281cbe585939b0a645b828f86fe8cdae994c7295542fcdc5b1308326764a65f5aa8b877da57c3ede41fbbd97ae9454bb81828d11ce13908e2ad9970e34500442bea2e209fc405803726ddb66dd5238b43085c47a8924282ce06b1e0ca92a5b6c5d84cb1b8046136f6a0c31b364185799826ad82d8177e50080c7af45b7954"}}]}) ioctl$EVIOCRMFF(r2, 0x40085503, 0x0) listen(r0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001800)=ANY=[], 0x78}, 0x1, 0x7}, 0x8000) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGDEBUG(r5, 0x80047441, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xf001, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6e7842237e6fff89cecf1a50f3d2ee3d"}]}}}}}}}}, 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) 16m51.432223096s ago: executing program 38 (id=1793): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005480)=[{{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}, {{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x800) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xdb, 0x9d, 0x1b, 0x8, 0x12d1, 0xfae2, 0x708b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x4, 0x1a}}]}}]}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8}, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0xe0a}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x0, 0x7f, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x80, 0x4, 0x8}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xb2, 0x40, 0x7, 0xff, 0xe3}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x9, 0x40}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x814}}, {0xe, &(0x7f0000000280)=@string={0xe, 0x3, "8f9fc8f216f7a09a8c5b7c36"}}, {0x27, &(0x7f00000002c0)=@string={0x27, 0x3, "e6c2e9267c9386fbc0da27459078bdb510feba3fe7359c7a76818e8aca4059c24e7cca4b5c"}}, {0x3, &(0x7f0000000300)=@string={0x3, 0x3, "bd"}}, {0x6f, &(0x7f0000000380)=@string={0x6f, 0x3, "9252f508ec50b79db743a78140cfddb066a423e421fd9706b0d9fcd8c7fe37cf1434de148362d4c8dfcd2b066071547282d79bdab5189023073ee9a9d162a05c4f513d6f65a0da45f6d325ee30c00f76822fe407521ba5f2cc318b4c30146a268d70ca1afe0e09cd632e51e6df"}}, {0xef, &(0x7f0000000400)=@string={0xef, 0x3, "c7104482f8b8d9c936b6b63182c9bb0a6509bdccbf9e90e2c1419a0bf77a736a376caad3f4b66800b4f59a41f3f81a3eb46e8534e9f5a2dc5f9b8ecd4f18382f59f60311498979e708d6b12c02b3fa12492ec59d96ca8e8c20a00145f09a1d58225c679c9bcd8debb1031745605a7281cbe585939b0a645b828f86fe8cdae994c7295542fcdc5b1308326764a65f5aa8b877da57c3ede41fbbd97ae9454bb81828d11ce13908e2ad9970e34500442bea2e209fc405803726ddb66dd5238b43085c47a8924282ce06b1e0ca92a5b6c5d84cb1b8046136f6a0c31b364185799826ad82d8177e50080c7af45b7954"}}]}) ioctl$EVIOCRMFF(r2, 0x40085503, 0x0) listen(r0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001800)=ANY=[], 0x78}, 0x1, 0x7}, 0x8000) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGDEBUG(r5, 0x80047441, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xf001, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6e7842237e6fff89cecf1a50f3d2ee3d"}]}}}}}}}}, 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) 16m8.72737262s ago: executing program 1 (id=1939): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086203, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3a, 0x6e, 0x3b, 0x10, 0xf11, 0x1101, 0x1ab8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb9, 0x6, 0x2, 0x4a, 0xfa, 0x4f, 0x0, [], [{{0x9, 0x5, 0xc, 0x13, 0x40, 0x19, 0x0, 0xd6}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x20, 0x86, 0x7}}]}}]}}]}}, 0x0) 16m6.31450513s ago: executing program 1 (id=1950): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$xdp(0x2c, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0xb7e, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120150021e604240"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 16m3.608998757s ago: executing program 1 (id=1960): unshare(0x2a060400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x5, &(0x7f0000000100)=""/102400, &(0x7f00000000c0)=0x19000) socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 16m2.43899566s ago: executing program 1 (id=1965): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000240)=ANY=[], 0x8, 0x1e0, &(0x7f00000018c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f00000000c0), 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) futex(&(0x7f000000cffc)=0x1, 0x100, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = userfaultfd(0x80001) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) preadv(r3, &(0x7f0000000680)=[{&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/94, 0x5e}], 0x6, 0x6, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x4, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, 0x0}, 0x44004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e21, @multicast1}}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r4, 0x0, 0x0, 0xc, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) 16m0.248480539s ago: executing program 1 (id=1972): unshare(0x2a060400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r2) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x5, &(0x7f0000000100)=""/102400, &(0x7f00000000c0)=0x19000) socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 15m48.963465766s ago: executing program 1 (id=2003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x48}}, 0x0) 15m45.948310736s ago: executing program 39 (id=2003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x48}}, 0x0) 12m25.021074536s ago: executing program 2 (id=2577): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000002000000000800040001000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 12m23.83953542s ago: executing program 2 (id=2581): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x6, 0x6b7, 0x81, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_DELAY_DIST={0x8, 0x2, "09d553de"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) socket$tipc(0x1e, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x5d0, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x508, 0x2e8, 0x2e8, 0x508, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x3d8, 0x3fc, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@recent1={{0x104}, {0x7fff, 0x101, 0x10, 0x0, 'syz1\x00', 0xe, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000]}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@ipv6={@private2, @private2, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0xff], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x62c) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a00204000000007000000001400110076657468305f746f5f6272696467650008000a009df7a214a32bf49afe80000000000000000000e828ca0326"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000061100000000000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) sendmsg$tipc(r0, &(0x7f0000001e40)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x30799af3943473a5}, 0x880) 12m22.964284287s ago: executing program 2 (id=2586): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) sendmsg$tipc(r0, &(0x7f0000001e40)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}, 0x3}}, 0x10, 0x0, 0xfdef, 0x0, 0x0, 0x30799af3943473a5}, 0x880) 12m22.374031553s ago: executing program 2 (id=2589): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='cgroup\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x368}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) write(r0, &(0x7f0000000600)="1cff3e18c43c0b93f4c72311a2d628f453908385a377433259bc52e83e8fc7ada03d12dcddb04e63eb55f6de1ae9ee153be2d28546285d4694c6eaccd534750c6bedb55ec6d4478fa96cb8c5c9a0e029c2c7fd1dccb6f82cbc7a591ded06124d21843fd0300c1f0e20074909ab3c62b235ef97a08d4e676101533ba5ef7cc997706d588e3fff90171de09d934836d16b12b6f96f1fa032b82b592a8e66239758c33afb0bd681d9d5824f6b9f1eca6fababdf79ef0c210eb519442d4e160db982ac2200198d42f48e192c50e239f886e66d99d72b305a182d63", 0xd9) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r2, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) sched_setscheduler(r5, 0x3, &(0x7f0000000180)=0x40000000) 12m21.502136122s ago: executing program 2 (id=2591): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x3, 0xc, 0x2}}, 0x44) r1 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0)) 12m20.662050105s ago: executing program 2 (id=2593): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x14012, &(0x7f0000000580)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRESDEC=0x0], 0x4, 0x339, &(0x7f0000000140)="$eJzs3U9P1EwcB/DvtLtL94EHK2BIPBmUxBMBPGi8QAzxNXgwRIQlIayYKCZKTETPxngzMfHIzbPRt6AX4xvQEwfjSS/EgzUzne5Ol5m2C7iF7PeTuHbb+fObttPO7GYpiKhvXVv4unNpV/4TVQA+gKuAByAAKgDOYDx4sLGZW5DfWhKIc4p9aZY3GrasAXQOLZTvKhgy19G/EUVR9C031c+exELlEWYPNnjAgO6danvQ88gObc62cjtuV38xjrDYwx4eYrjMcIiIqHz6/u/pu8SQHr97HjCpx+En9f6fSI1v9sqL41ho3f+9+H0k5P45pTbJ+d7aZrOxEk/h5NH3klmirSzrORG1d3cN8ZnlDxpDLqMWOxWLV19dazamtlUBzzCnGcnG1OsKkoYormhrwAyACcvcNENW27MNqjZUZRtmHfGPZtVonQB/+I5X9uoWPxWISXwUn8WiCPEaK63xXyUScueoIxV2dJU4/ml3iaqVYZwq1cp2+KdVJWd1DXj/tt3Kumu/BvBlLDayFNE5fg+TOF/W3LkwgvTHCnHrZtytU7lGgYpQswYz12wr0W9rrrHOuuqr1WZjavlu03XSHy3rjE68EDfEBH7gHRaM8b8nU0/C3TNTvVyolPrMyGxPRaV0HMcU1YHvdNUzSbmeuvgV8xy3cQXD9x9trS81m4175S8kXeWA2c8dcTzxiahPR7lG/m+kQSAXqgCc5VTdm6wLf6Iosm6qoBeHoKqaevlNu8lb60tCX/MOV4W8cnZsmncnBjAPQK9JrggHqf1JK9dAu8BC2X/Jo63W2E/IJKoedJCkqtQmHwOFekp935qdnFyP/z/YVYhOoPbRx/jNsoOhMsixg4jnf8Z8ZVpddeRLmDH/ifIKN0qcccyARtTrf8VmcK1inePEwWQhZ851/iJwoaNGD0mNTzuLDXWcOI7fSnb/VYZYwBfc4uf/REREREREREREREREREREREREREQnTbe/Rtj/c4L8hXSNu334hzeIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiA7HeP4v4KsnxtRsz//NelKT4sdPiAmO4vm/foHn/4rtLlpJRDZ/AwAA//9eD1xQ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setpriority(0x1, 0x0, 0x1) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000c00)={0x2014}) poll(&(0x7f0000000140)=[{r4, 0x8}, {r2, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x2c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sync() syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 12m5.350025562s ago: executing program 40 (id=2593): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x14012, &(0x7f0000000580)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRESDEC=0x0], 0x4, 0x339, &(0x7f0000000140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setpriority(0x1, 0x0, 0x1) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000c00)={0x2014}) poll(&(0x7f0000000140)=[{r4, 0x8}, {r2, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x2c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sync() syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 6m13.617609842s ago: executing program 3 (id=3708): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xc}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 6m12.755533978s ago: executing program 3 (id=3711): r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/185) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5421, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 6m7.896232877s ago: executing program 3 (id=3721): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000240)=0xadf) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x6, 0x84, 0x40, 0x7fff0000}]}) setitimer(0x1, 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/194) mount$9p_rdma(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x8800, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) 6m6.953228895s ago: executing program 3 (id=3723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c045}, 0xc4) 6m6.13719616s ago: executing program 3 (id=3725): socket$rds(0x15, 0x5, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000001280)={0x6c, 0x202, '\x00', [@ra={0x5, 0x2, 0xb}, @generic={0x7f, 0x1000, "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"}, @ra={0x5, 0x2, 0xfc00}, @ra={0x5, 0x2, 0x4}, @pad1]}, 0x1020) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ftruncate(r2, 0x8) syz_emit_ethernet(0x66, &(0x7f0000003580)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5, '\x00', @dev={0xfe, 0x80, '\x00', 0x2a}, [{0x2, 0x3, "21c1e05659ae3f48e9296b2beda7add700385601f891"}]}}}}}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="f3f682989ae5adae57"], 0x0) r5 = accept4$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14, 0x80800) sendto$packet(r5, &(0x7f0000000440)="84e1f358c57a11b03d12e6da1646222cd3246324893ffb52f152ef27d42598267f91eb8a1150f6012649545a4814ae232979c4115879b6ca8c80da9af3996859299466efbba7629fed35b3b4cbdc38597d52de215b4318149b0bfea8433b2f8b04c31443e605842a6af911137bc8877f8defe65b44ad5bff961c6a3851cda2edb1b2c3a82d2b5a01092aa52199257a83b70404c3e0e83d225c3026ebdf0f18cb65e47ddb9cf7181e33f4ab", 0xab, 0x4000000, &(0x7f0000000240)={0x11, 0x19, r4, 0x1, 0x99, 0x6, @broadcast}, 0x14) 6m3.440782776s ago: executing program 3 (id=3734): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x14012, &(0x7f0000000580)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRESDEC=0x0], 0x4, 0x339, &(0x7f0000000140)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sync() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052cbd70000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x48}}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr=0x64010105}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000840000145007897d4eecaface92b0000000c000000010000000104000000000000000000"], 0x28}, 0x40000c0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0782010000000000540012800b00010065727370616e000044000280060010004e2300000400120006"], 0x7c}}, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5m47.498581612s ago: executing program 41 (id=3734): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x14012, &(0x7f0000000580)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRESDEC=0x0], 0x4, 0x339, &(0x7f0000000140)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sync() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052cbd70000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x48}}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr=0x64010105}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000840000145007897d4eecaface92b0000000c000000010000000104000000000000000000"], 0x28}, 0x40000c0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0782010000000000540012800b00010065727370616e000044000280060010004e2300000400120006"], 0x7c}}, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 4m2.572545237s ago: executing program 8 (id=4083): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001ac0)={0x1, 0x0, [{0x0, 0x73, &(0x7f0000002680)=""/115}]}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x269, &(0x7f0000000200)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) 4m1.299611966s ago: executing program 8 (id=4084): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) prctl$PR_GET_NO_NEW_PRIVS(0x27) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x14ab) 4m0.601499797s ago: executing program 8 (id=4086): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001ac0)={0x1, 0x0, [{0x0, 0x73, &(0x7f0000002680)=""/115}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3m59.796857678s ago: executing program 8 (id=4091): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe3, 0x16, 0x60, 0x40, 0x586, 0x102, 0x140a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x1, 0x5f, 0xb9, 0x4d, 0x0, [], [{{0x9, 0x5, 0x1c277d69f7841ba1, 0x3, 0x400, 0x5, 0x2, 0x8}}]}}]}}]}}, 0x0) mlock2(&(0x7f00005ca000/0x2000)=nil, 0x2000, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=@gettaction={0xb8, 0x32, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x45) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x8001, 0x8, 0x1, 0x4, 0x2000067, 0x9, 0x8, 0x7, 0x80000000, 0x4, 0xfffffffe, 0x2, 0x820, 0x8c, 0x6, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x3fffffff, 0x89, 0x2, 0xf27, 0x20001e58, 0xfffffbfe, 0x4, 0x3f, 0x8, 0x9, 0x2010000, 0xfffffff8]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)=@ax25={{0x3, @null}, [@default, @rose, @remote, @bcast, @null, @rose, @bcast]}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=""/20, 0x14}, 0x40010102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010426bd70000004000000000000", @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32, @ANYBLOB="140012800c0001006d6163767461704b0b90a4939fcfc153e7d9968da3457bd17a72a978ec99fb7e470aacd55ec2808213f662ffc36de30f8783d5e348bbcca045df8e22c7d1bce9c3b59dd50326f97a49d13888042f5ed075ff09ac8f9d87fc761bc9cbd400bb0362d3d640b24ded2985fc270044c1e00aaba60eec7cb2b7584033c69493e9661ec56a7fae617203a1f8b025c4236e4c1dbf130e9f024b4ec13a97d0a39788f7f6a912a42851a4f5ee234db595ecbeb7b44ad7e98a4aecb3d83bce5c1e4e92a04fa1c130b1d02a75f0d0bcb793262d4a50d274fab1073e8816d04884d0777e8e"], 0x44}, 0x1, 0x0, 0x0, 0x240008d4}, 0x800c054) 3m56.128437104s ago: executing program 8 (id=4103): unshare(0x10000800) socket$rxrpc(0x21, 0x2, 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x8000, 0xaa}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0xbb, @mcast2, 0xfffffffc}, 0x40) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@pptp={0x18, 0x2, {0x0, @empty}}, {&(0x7f0000000100)=""/173, 0xad}, &(0x7f0000000080), 0x8}, 0xa0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x3, 0x1}, 0x20) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) 3m55.26803625s ago: executing program 8 (id=4105): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x14012, &(0x7f0000000580)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRESDEC=0x0], 0x4, 0x339, &(0x7f0000000140)="$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") sync() r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x10, 0xfffffffc, 0x8}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 3m40.068331345s ago: executing program 42 (id=4105): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x14012, &(0x7f0000000580)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRESDEC=0x0], 0x4, 0x339, &(0x7f0000000140)="$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") sync() r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x10, 0xfffffffc, 0x8}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m8.904977638s ago: executing program 5 (id=4542): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$cachefiles(0xffffff9c, &(0x7f00000000c0), 0x54880, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_team\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x401}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x18}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_SKBPRIO={0x8}, @IPSET_ATTR_IFACE={0x14, 0x17, 'erspan0\x00'}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x804}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2, 0x6b8, &(0x7f0000002400)="$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") socket$tipc(0x1e, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6c733d63703933362c63726561746f723d762ae76f2c6e6f626172726965722c756d61736b3d303030303030303030303030303030303030303030302c00907b99c243555fdaa0fa82f76c7040e292995ad97add6fa99378b851e65fe4d778ac499b31b2675243e5ea2f1840cdf32686d7a44ea9a49acf89647d4da2267bfe88c9df34b3c06356bb7ea2c23196a9e84f73ae08b1725a8c11a363e846e9b1e32cf9d3b5ba96f7ee318325e2bf96a15d2cf49576e5cdd0d5f841afcffab8699de74d466901f310d66e8706ba6ccddf"], 0x1, 0x6b3, &(0x7f0000000780)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBiNVIFjUjsrEqChNSAEMohQhFcerUSp7HipJXjorRCZAMUJE6cUA8cilA49IQQQionRDkjIXHhlHskbhxyAIzmz9pre+PYieN1289Hmp03+96895tf5s/ubKwJ8Jl1/vXs76fI+RMXbpXL9+72Fu7d7V0flJNMJGkl7XqWopsUHyfnUk/5fPlm013xsHFevf9R0X7/w1691G6mqn1rs/U2GNmynxxYWdiXZKou/mcLHbZG91dNVT+XVvt7TMVK3GXCjg8SB+O2vEF/tXLUobHW1o9bYM+6XV83N5hMDqa+upafA9KcHR59Zhi/Tc9N/d2LAwAAAJ6Wkd/lhz3zIA9yK4d2JxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4dCjqZwYWzdQalKdSDJ7/3xl6pn5nzOE+ofeuVLPvPjPuQAAAAAAAAADgiRx7kAe5lUOD5eWi+s3/pWrhcPX6ubydm5nLYk7mVmazlKUsZibJ5FBHnVuzS0uLMxvX/GXKNZeXl283a54euebptXH11wc66n8abGgEAAAAAAAAAJ9ZP8r51d//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLyiSffWsmg4PypNptZMcSNIpplaad8Ya7A7487gDAAAAgKev28wPFf+rC8tF9Z3/SPW9/0Dezo0sZT5LWchcLlf3Aupv/a2/93sL9+72rpfTxo6/8a9txVH1mPrew+iRp6sWL6yscT7fzvdyIlO5mMXM5/uZzVLmMpVvVaXZFJls7l5M3rvbzSDWjfGeW7N0cX1sx4bKZXxHq0i6uZL5KraTudQZhN5q2h0dGu2PnWTdiHfK7BSvNbaYo8vNvNyiXzTzvWGy2vL9KxmZbnJfZuPZ4bxvzP0295P1I82ktXIP6vDqKOXi+pEeK+cHm3mZ658+3Zxv81ba2kz0f14uDfa+I5vnPPnyP/5y8WrrxrWrV26e2Du70WNav0/0hjLx4pYysVBmov8EmTjwJPHvnE6Tjfosur2z5UvVuocyn+/kzVzOXM5kOjM5m+l8LafTy+mhvL6weV6rY621vWPt+JeaQnlN+tnQtWnXTDysoszrs0N5HT7TTVZ1w++sZum5LWSp6GR0lv45MpT2F5pCOcaPh64447c+EzNDmXh+80z8+r/LSW4u3Li2eHX2rS2O93IzLw/b99aem3+zIxu0fc3mlvvLc+U/VurLxvDeUdY9P6hbl69O84tLu+lsTV0n1fFc1z3qSC17OnJnVE913YsjR+lVdUeH6tZ8ysmbWVj5FNLY9YMUgC04+MrBTvd+92/dD7o/6V7tXjjwzYmzE1/sZP9f23/a97vWb1tfL17JB/lhDo07UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS4+c6712YXFuYW92AhrR3u8M7IqkEq6nc6I9ocyx7IxiejMLHZHvX71I9resjqnXHE3M1D49ndQtq7MNZERlRdWHmnm7RW4klybY884A54Gk4tXX/r1M133v3K/PXZN+bemLtx+uyZ1870vjpz+9SV+YW56fq1adwec7DAjlr9GDDuSAAAAAAAAAAAAICt2o0/bxgxbNEfw7YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn0znX8/+forMTJ+cLpfv3e0tlNOgvNqynaSVpPhBUnycnEs9ZXKou+Jh47x6/6Nfvfz+h73VvtqD9q116/3h38vL29yKfjNlKsm+Zv5oE1vq79JQf/1tBlYrVrawTNjxQeJg3P4fAAD//+/HBYc=") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1m7.112675074s ago: executing program 5 (id=4545): keyctl$update(0x2, 0x0, &(0x7f0000000040)="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", 0x13c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x7, 0x7fffffff, {{0xd, 0x4, 0x0, 0x38, 0x34, 0x68, 0x0, 0xfa, 0xa, 0x0, @remote, @multicast2, {[@cipso={0x86, 0x9, 0x3, [{0x1, 0x3, '2'}]}, @end, @cipso={0x86, 0x6}, @generic={0x83, 0x3, "05"}, @timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0x3, [{@private=0xa010102, 0x3}]}]}}}}}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = socket$igmp(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0xe8, 0x340, 0xe8, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'team0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x4, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xd, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a80)=ANY=[@ANYBLOB="043e06120180000010"], 0x9) syz_emit_ethernet(0x56, &(0x7f0000000900)=ANY=[@ANYBLOB="0f1ce32013ee425859e7a0cd4893aaaaaaaaaaaabbbbbbbbbbbb000d040000e00e030000aeb975ebcebd4f0abdb40ffdde092bf80c60822eb80f8db31be146b08cae0cb38c5fee271ee10fc1be2aa68630a5735217f5"], 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$KVM_CAP_HYPERV_SEND_IPI(r2, 0x4068aea3, &(0x7f0000000240)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) unlink(&(0x7f0000000280)='./file1\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000f80)=ANY=[@ANYBLOB="9feb010018000000000000003800000038000000040400000b00000002000000010000000b00000000000012050000000b000000000000010000000047007207090000000000004c0300000000612e0000000000c36cc8e8c108b909f44b5fc2"], &(0x7f0000000280)=""/120, 0x54, 0x78, 0x1, 0x982}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$user(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="4f05208c9020b68c76f5889b4d86e2295478654d2d8da2ddb358bbad2a128cc7385d", 0x22, 0xfffffffffffffff9) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = socket$inet(0x2, 0x3, 0x30) sendmsg$sock(r7, &(0x7f0000002340)={&(0x7f0000001000)=@llc={0x1a, 0x309, 0x9, 0x0, 0x80, 0x6}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000001080)="41a126d779213a52778e50b89c934be9aa4e9e0eac0ec7cf5e316ba50f98471b90653e396cf5280cd86d7a3d7f084f69fdd87b1fc185b3edac0a7122fd0b8f8dd26babf8aa68b5203fecb14cab9d28b2261b6aa01e588ddb7af14c54e47ee44e2f2c2f1b13299576a5dbbefbd01cbfc3ac6735c6c7c0f388bb54bb5c9031cd82b58634be4262068f2b6bb95a23006c6e32b11e347c971e4df27ed05d6b1e0b748718d6778a2dd1c15184f1c21a737d035e125a", 0xb3}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="30f1add966beb65ba07d366959a3ac8f1b0f890c46a23f4cfcd7441211ceaecfc283c5e53c3095e3be0a16b2bbdff7f0acccf892dafe8c087906e44240211e8ff2adcb18240510a2fd2ee8c2b5aa26f8dd86816f0e016fc0fd39f69d5e0898513168df0d843281fcf216d78aa5d8e58a3c15972b", 0x74}, {&(0x7f00000021c0)="93366cddbf4dd1f784b6e3ca11b502a0eaf25f095dff0b4292193c2e2b8ddb00a71117455f69e937893fdc3cd58cf4a768a6b8ea688d41f102cb2b212344ccb24731e42852fd2c1cc4f65466f0425ead0a64b067b656d3ede9cede05e3a2ee69035abec14ccfd6dc2a4691edd9e1cf778d250402fa72759373e1a6a3941342daa1390a61d316c34246b9bee2520393edd52ea8", 0x93}], 0x4, &(0x7f0000000a00)}, 0x24008081) 1m4.849875704s ago: executing program 5 (id=4548): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x140, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8040640a, 0x0) (fail_nth: 2) 1m3.33175353s ago: executing program 5 (id=4553): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002) 1m1.987204262s ago: executing program 5 (id=4558): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x6, 0x4, 0x7, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0000000600"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x58, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000d00)={&(0x7f0000000800)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x36}, @remote}}}], 0x20}, 0x20000004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0xe, 0x0, &(0x7f0000001800)="348b0d151f82060088a849c48906", 0x0, 0x109, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m1.243494613s ago: executing program 5 (id=4560): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrlimit(0xe, 0x0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000000), 0x1004) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000180)={0x2, 0x5}, 0x8) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_disconnect(0xffffffffffffffff) 45.714550803s ago: executing program 43 (id=4560): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrlimit(0xe, 0x0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000000), 0x1004) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000180)={0x2, 0x5}, 0x8) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_disconnect(0xffffffffffffffff) 11.031630487s ago: executing program 4 (id=4687): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/85}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x3, 0x98, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x0, 0xff}}}}}]}}]}}, 0x0) 10.012849316s ago: executing program 6 (id=4690): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 8.681857905s ago: executing program 7 (id=4692): syz_emit_ethernet(0xfef3, &(0x7f0000000500)=ANY=[], 0x0) prlimit64(0x0, 0x9, &(0x7f0000000100)={0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.124890889s ago: executing program 6 (id=4693): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x204410, &(0x7f00000000c0), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8000, 0xa, 0x80000001, 0x42, 0x8}) 7.879264664s ago: executing program 4 (id=4694): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000"], 0x0}, 0x0) 7.620744285s ago: executing program 0 (id=4695): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250c000000", @ANYRES32=r1, @ANYBLOB="0a0006000802110000000000040028005000508014000881040001000400010004000100040002"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4040) 6.797559184s ago: executing program 7 (id=4696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = dup(r1) fadvise64(r1, 0x9, 0x6, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.65681371s ago: executing program 0 (id=4697): getpid() syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000001180)=ANY=[], 0xfd, 0x198, &(0x7f0000000280)="$eJzskr9O21AUxr9rO3ZapVErdcqSDJHaDm0cp626NWM6dGNjwUpMiHCA2JFIogxGCGVgQIw8QV4DiReAAbGwZc4QMSOje++xMeERuL/hfjp/7rnnHHsnHIQWgMfVtI0mBDqKuGEMBoAyk76lJvWc9Jb0TAquKe8f+Y9JS+F4YlJOBZ+kQ3NN3wsqAB6ELxxPdl3f94Lw75GGpSh1R5e2AMRxHAMaOgBPRyHJWU3bOoBBmgOUDOCzGCJOc/gg3PgCoDbsH9TC8eR7r+92va635+iN3/ZP2/7l1LZ7vmfLk2WeoFHA9RsAK08OtyDiOQAn5HqPl7Cktf9pnL3DJpLaZrLDIsM6WmasRBku074sJN8L2GgCvK3DiGW8VVHFgBipBQadjDpfiUn9ybfyIvCjve93ZmBgybU5jLRGfYFcajhZo/EnwgdZakYlq6QtKdac7AVpee2XMSJ+npL1NeINjtzhMKjzRkduDohp5PsgFvCo8zGiacXC+KsX2vPyOVfaq90qFAqFQqFQKBQKxVvjKQAA///nTHgr") openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x149042, 0xac) 6.276397036s ago: executing program 6 (id=4698): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000100), 0x0}, 0x20) 5.608622914s ago: executing program 0 (id=4699): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) 5.436925584s ago: executing program 7 (id=4700): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00', 0x6}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) 5.145026736s ago: executing program 6 (id=4701): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000004c0), 0x4) 5.11711162s ago: executing program 4 (id=4702): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 4.581140937s ago: executing program 7 (id=4703): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x23, 0x1, 0x7fffffffeffe) sendmsg(0xffffffffffffffff, 0x0, 0x44004) syz_usb_connect(0x3, 0x791, &(0x7f0000003d00)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x8010) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) 4.580887279s ago: executing program 0 (id=4704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0xd, 0x4, 0x1, 0x0, 0x7, 0x6, 0xa, 0x3, 0x6, 0x3, 0x1c, 0x7, 0x0, 0x401, 0x9, 0xa, 0x4, 0xb, 0x9, '\x00', 0x6, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.207653993s ago: executing program 6 (id=4705): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x483, &(0x7f0000000580)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 4.138856748s ago: executing program 9 (id=4598): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008202, &(0x7f0000000200), 0x1, 0x55b, &(0x7f0000001040)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) rmdir(&(0x7f00000001c0)='./file0/../file0\x00') 3.520617956s ago: executing program 4 (id=4706): r0 = userfaultfd(0x80001) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x4, 0x272, &(0x7f0000001f40)="$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") socket$inet6(0xa, 0x6, 0x1ffe00) mkdirat(0xffffffffffffff9c, &(0x7f0000006f40)='./file0\x00', 0x0) setregid(0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) 3.406213248s ago: executing program 0 (id=4707): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x28, r2, 0xacf5e67dd0b583a1, 0xffffffff, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfff, 0x55}}}}}, 0x28}}, 0x4c044) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) 2.557945469s ago: executing program 6 (id=4708): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x280, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0xa, "ff0500aa"}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) 1.839845466s ago: executing program 0 (id=4709): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5a, {[@main=@item_4={0x3, 0x0, 0x9, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, "ca49"}, 0x0}) 1.596294752s ago: executing program 7 (id=4710): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) write(r1, &(0x7f00000001c0)="93dbe2", 0x3) 1.556673821s ago: executing program 9 (id=4711): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000"], 0x0}, 0x0) 1.364096664s ago: executing program 4 (id=4712): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00', 0x6}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) 320.214379ms ago: executing program 4 (id=4713): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x200000cc, &(0x7f0000000380)=ANY=[], 0xfe, 0x152b, &(0x7f0000003e00)="$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") chdir(&(0x7f0000004340)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) open(&(0x7f00000000c0)='./file0\x00', 0x108202, 0x78e22799f4a46f86) 0s ago: executing program 7 (id=4714): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000004c0), 0x4) kernel console output (not intermixed with test programs): 09358][T21717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1832.737464][T21699] EXT4-fs error (device loop5) in do_split:2027: Corrupt filesystem [ 1832.930586][ T5833] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 1833.028358][T21719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4378'. [ 1833.121765][ T5833] usb 8-1: Using ep0 maxpacket: 16 [ 1833.147759][ T5833] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1833.156579][ T5833] usb 8-1: config 0 has no interface number 0 [ 1833.180220][ T5833] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1833.190000][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.198298][ T5833] usb 8-1: Product: syz [ 1833.203350][ T5833] usb 8-1: Manufacturer: syz [ 1833.208162][ T5833] usb 8-1: SerialNumber: syz [ 1833.229170][ T5833] usb 8-1: config 0 descriptor?? [ 1833.274564][ T5833] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1833.299501][T10830] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1833.483146][T10830] usb 7-1: Using ep0 maxpacket: 16 [ 1833.552627][T10830] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1833.562273][T10830] usb 7-1: config 0 has no interface number 0 [ 1833.628453][T10830] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1833.638236][T10830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.646496][T10830] usb 7-1: Product: syz [ 1833.651241][T10830] usb 7-1: Manufacturer: syz [ 1833.656053][T10830] usb 7-1: SerialNumber: syz [ 1833.768036][T10830] usb 7-1: config 0 descriptor?? [ 1833.857722][T10830] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1834.093959][T21726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4381'. [ 1834.121539][T21726] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1834.290940][T21716] loop7: detected capacity change from 0 to 128 [ 1834.456802][T19907] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1834.464844][ T24] usb 6-1: USB disconnect, device number 30 [ 1834.506394][ T5833] gspca_spca1528: reg_w err -110 [ 1834.550760][ T5833] spca1528 8-1:0.1: probe with driver spca1528 failed with error -110 [ 1834.572166][T21716] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1834.642524][T19573] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1834.751541][T21716] ext4 filesystem being mounted at /345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1834.830204][T19907] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1834.842305][T19907] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1834.854570][T19907] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1834.866489][T19907] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1834.882755][T19907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.967483][T10830] gspca_spca1528: reg_w err -110 [ 1834.988761][T21726] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1835.053802][T10830] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 1835.323506][T21736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1835.881895][T19907] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1835.916158][T19907] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input45 [ 1836.210886][T21743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4384'. [ 1836.236123][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1836.244809][T19907] usb 1-1: USB disconnect, device number 112 [ 1836.419530][T21745] FAULT_INJECTION: forcing a failure. [ 1836.419530][T21745] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.433711][T21745] CPU: 1 UID: 0 PID: 21745 Comm: syz.5.4384 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 1836.433900][T21745] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1836.433978][T21745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1836.434070][T21745] Call Trace: [ 1836.434124][T21745] [ 1836.434178][T21745] __dump_stack+0x26/0x30 [ 1836.434362][T21745] dump_stack_lvl+0x14c/0x1c0 [ 1836.434539][T21745] dump_stack+0x1e/0x25 [ 1836.434696][T21745] should_fail_ex+0x7e2/0x8c0 [ 1836.434890][T21745] should_failslab+0x158/0x200 [ 1836.435034][T21745] kmem_cache_alloc_node_noprof+0x152/0x1780 [ 1836.435206][T21745] ? stack_depot_save_flags+0x35/0x790 [ 1836.435370][T21745] ? __alloc_skb+0x799/0x1030 [ 1836.435554][T21745] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1836.435765][T21745] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1836.435956][T21745] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1836.436175][T21745] __alloc_skb+0x799/0x1030 [ 1836.436391][T21745] ? __alloc_skb+0x3b2/0x1030 [ 1836.436575][T21745] ? netlink_autobind+0x3b0/0x430 [ 1836.436743][T21745] netlink_alloc_large_skb+0xa5/0x290 [ 1836.436953][T21745] netlink_sendmsg+0xae9/0x1250 [ 1836.437120][T21745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1836.437243][T21745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1836.437399][T21745] ____sys_sendmsg+0xfe7/0x1080 [ 1836.437594][T21745] ___sys_sendmsg+0x271/0x3b0 [ 1836.437713][T21745] ? kmsan_get_metadata+0xf1/0x160 [ 1836.437918][T21745] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1836.438134][T21745] ? __rcu_read_unlock+0x6c/0xd0 [ 1836.438297][T21745] ? __fget_files+0x3b4/0x4a0 [ 1836.438491][T21745] ? __fget_files+0x3b9/0x4a0 [ 1836.438685][T21745] ? kmsan_get_metadata+0xf1/0x160 [ 1836.438869][T21745] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1836.439086][T21745] __sys_sendmsg+0x1aa/0x300 [ 1836.439294][T21745] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1836.439459][T21745] ia32_sys_call+0x35f2/0x4340 [ 1836.439665][T21745] __do_fast_syscall_32+0x14a/0x310 [ 1836.439869][T21745] do_fast_syscall_32+0x37/0x80 [ 1836.440052][T21745] do_SYSENTER_32+0x1f/0x30 [ 1836.440227][T21745] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1836.440415][T21745] RIP: 0023:0xf747d539 [ 1836.440523][T21745] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1836.440654][T21745] RSP: 002b:00000000f546450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1836.440790][T21745] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 1836.440893][T21745] RDX: 0000000000040004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1836.440986][T21745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1836.441075][T21745] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1836.441164][T21745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1836.441294][T21745] [ 1836.817539][ T5833] usb 7-1: USB disconnect, device number 15 [ 1836.852505][T10830] usb 8-1: USB disconnect, device number 92 [ 1836.969197][T15863] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1837.230356][T21747] loop6: detected capacity change from 0 to 512 [ 1837.375175][T21747] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4386: invalid indirect mapped block 256 (level 2) [ 1837.518682][T21747] EXT4-fs (loop6): 2 truncates cleaned up [ 1837.579752][T21747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1837.730431][T21750] 9p: Bad value for 'rfdno' [ 1837.780262][T21747] EXT4-fs (loop6): shut down requested (1) [ 1838.243821][T20921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1838.533029][ T11] block nbd0: Possible stuck request ffff888108a02100: control (read@0,1024B). Runtime 630 seconds [ 1838.545186][ T11] block nbd0: Dead connection, failed to find a fallback [ 1838.554116][ T11] block nbd0: shutting down sockets [ 1838.559650][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1838.570496][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1838.580157][T11668] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1838.590233][T11668] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1838.662404][T11668] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1838.673552][T11668] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1838.682149][T11668] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1838.692133][T11668] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1838.701224][T11668] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1838.712097][T11668] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1838.720133][T11668] ldm_validate_partition_table(): Disk read failed. [ 1838.735118][T11668] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1838.745021][T11668] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1838.754307][T11668] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1838.764289][T11668] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1838.773068][T11668] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1838.782946][T11668] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1838.835688][T11668] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1838.851416][T11668] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1838.859489][T11668] Dev nbd0: unable to read RDB block 0 [ 1838.930692][ T5833] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1838.966990][T11668] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1838.977285][T11668] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1839.018551][T11668] nbd0: unable to read partition table [ 1839.031251][T11668] nbd0: partition table beyond EOD, truncated [ 1839.062495][T11668] ldm_validate_partition_table(): Disk read failed. [ 1839.109257][ T5833] usb 5-1: device descriptor read/64, error -71 [ 1839.117048][T11668] Dev nbd0: unable to read RDB block 0 [ 1839.170901][T11668] nbd0: unable to read partition table [ 1839.177824][T11668] nbd0: partition table beyond EOD, truncated [ 1839.289846][T19907] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1839.376595][ T5833] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1839.479150][T19907] usb 7-1: Using ep0 maxpacket: 16 [ 1839.516293][T19907] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1839.524822][T19907] usb 7-1: config 0 has no interface number 0 [ 1839.548640][ T5833] usb 5-1: device descriptor read/64, error -71 [ 1839.572249][T19907] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1839.581985][T19907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.590538][T19907] usb 7-1: Product: syz [ 1839.594899][T19907] usb 7-1: Manufacturer: syz [ 1839.600345][T19907] usb 7-1: SerialNumber: syz [ 1839.667444][ T5833] usb usb5-port1: attempt power cycle [ 1839.683993][T19907] usb 7-1: config 0 descriptor?? [ 1839.744195][T19907] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1839.752806][T21775] loop7: detected capacity change from 0 to 164 [ 1839.771963][T21775] iso9660: Unknown parameter 'unhin_jgZKb{mfIIde' [ 1840.016744][T21772] loop0: detected capacity change from 0 to 4096 [ 1840.057584][ T5833] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1840.091234][T21772] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1840.137554][ T5833] usb 5-1: device descriptor read/8, error -71 [ 1840.146093][T21772] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 1840.179914][T21772] System zones: 0-5 [ 1840.261583][T21772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1840.360896][T21772] FAULT_INJECTION: forcing a failure. [ 1840.360896][T21772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1840.377916][T21772] CPU: 1 UID: 0 PID: 21772 Comm: syz.0.4395 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 1840.378122][T21772] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1840.378222][T21772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1840.378308][T21772] Call Trace: [ 1840.378364][T21772] [ 1840.378420][T21772] __dump_stack+0x26/0x30 [ 1840.378605][T21772] dump_stack_lvl+0x14c/0x1c0 [ 1840.378788][T21772] dump_stack+0x1e/0x25 [ 1840.378969][T21772] should_fail_ex+0x7e2/0x8c0 [ 1840.379170][T21772] should_fail+0x2a/0x40 [ 1840.379355][T21772] should_fail_usercopy+0x2e/0x40 [ 1840.379540][T21772] strncpy_from_user+0x38/0x4b0 [ 1840.379691][T21772] ? kmsan_get_metadata+0xf1/0x160 [ 1840.379907][T21772] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1840.380139][T21772] getname_flags+0x178/0xac0 [ 1840.380370][T21772] __se_sys_sysfs+0x1e8/0x7c0 [ 1840.380526][T21772] ? kmsan_get_metadata+0xf1/0x160 [ 1840.380733][T21772] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1840.380959][T21772] __ia32_sys_sysfs+0x96/0xe0 [ 1840.381114][T21772] ia32_sys_call+0x370a/0x4340 [ 1840.381318][T21772] __do_fast_syscall_32+0x14a/0x310 [ 1840.381524][T21772] do_fast_syscall_32+0x37/0x80 [ 1840.381706][T21772] do_SYSENTER_32+0x1f/0x30 [ 1840.381883][T21772] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1840.382067][T21772] RIP: 0023:0xf7f02539 [ 1840.382173][T21772] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1840.382311][T21772] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000087 [ 1840.382454][T21772] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 1840.382545][T21772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1840.382636][T21772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1840.382725][T21772] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1840.382814][T21772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1840.382943][T21772] [ 1840.397780][ T5833] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1840.652507][ T5833] usb 5-1: device descriptor read/8, error -71 [ 1840.714515][T13441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.766884][ T5833] usb usb5-port1: unable to enumerate USB device [ 1840.910937][T21769] loop6: detected capacity change from 0 to 128 [ 1841.040093][T21769] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1841.115355][T19907] gspca_spca1528: reg_w err -110 [ 1841.134961][T19907] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 1841.207429][T21769] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1841.582925][T21769] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 20: comm syz.6.4393: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 1841.732014][T21786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1841.818233][T21782] loop7: detected capacity change from 0 to 4096 [ 1841.838259][T21769] EXT4-fs error (device loop6) in do_split:2027: Corrupt filesystem [ 1842.619037][T21794] loop0: detected capacity change from 0 to 8 [ 1842.701024][T21794] squashfs: Unknown parameter '' [ 1842.987022][T21796] loop5: detected capacity change from 0 to 512 [ 1843.116427][T21796] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4403: invalid indirect mapped block 256 (level 2) [ 1843.207187][T21796] EXT4-fs (loop5): 2 truncates cleaned up [ 1843.237253][T21796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1843.459593][T19907] usb 7-1: USB disconnect, device number 16 [ 1843.537685][T21796] EXT4-fs (loop5): shut down requested (1) [ 1843.661708][T20921] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1844.130831][T19573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1844.322398][T21812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4408'. [ 1844.399477][T21812] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4408'. [ 1844.671262][T21821] FAULT_INJECTION: forcing a failure. [ 1844.671262][T21821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1844.685198][T21821] CPU: 0 UID: 0 PID: 21821 Comm: syz.5.4409 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 1844.685400][T21821] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1844.685457][T21821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1844.685542][T21821] Call Trace: [ 1844.685593][T21821] [ 1844.685642][T21821] __dump_stack+0x26/0x30 [ 1844.685809][T21821] dump_stack_lvl+0x14c/0x1c0 [ 1844.685968][T21821] dump_stack+0x1e/0x25 [ 1844.686134][T21821] should_fail_ex+0x7e2/0x8c0 [ 1844.686321][T21821] should_fail+0x2a/0x40 [ 1844.686496][T21821] should_fail_usercopy+0x2e/0x40 [ 1844.686689][T21821] _copy_from_user+0x33/0x100 [ 1844.686871][T21821] get_compat_msghdr+0x63/0x740 [ 1844.687090][T21821] ? kmsan_get_metadata+0xf1/0x160 [ 1844.687320][T21821] ___sys_sendmsg+0x198/0x3b0 [ 1844.687461][T21821] ? kmsan_get_metadata+0xf1/0x160 [ 1844.687685][T21821] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1844.687908][T21821] ? __rcu_read_unlock+0x6c/0xd0 [ 1844.688069][T21821] ? __fget_files+0x3b4/0x4a0 [ 1844.688266][T21821] ? __fget_files+0x3b9/0x4a0 [ 1844.688461][T21821] ? kmsan_get_metadata+0xf1/0x160 [ 1844.688666][T21821] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1844.688887][T21821] __sys_sendmsg+0x1aa/0x300 [ 1844.689025][T21821] ? kmsan_get_metadata+0xf1/0x160 [ 1844.689229][T21821] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1844.689374][T21821] ia32_sys_call+0x35f2/0x4340 [ 1844.689574][T21821] __do_fast_syscall_32+0x14a/0x310 [ 1844.689798][T21821] do_fast_syscall_32+0x37/0x80 [ 1844.689983][T21821] do_SYSENTER_32+0x1f/0x30 [ 1844.690162][T21821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1844.690347][T21821] RIP: 0023:0xf747d539 [ 1844.690470][T21821] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1844.690614][T21821] RSP: 002b:00000000f548550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1844.690759][T21821] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 1844.690866][T21821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1844.690958][T21821] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1844.691060][T21821] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1844.691154][T21821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1844.691289][T21821] [ 1845.121770][T10830] usb 8-1: new full-speed USB device number 93 using dummy_hcd [ 1845.410766][T10830] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1845.422994][T10830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 39042, setting to 64 [ 1845.434972][T10830] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1845.438100][T19907] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1845.444947][T10830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.488575][T10830] usb 8-1: config 0 descriptor?? [ 1845.497537][T21816] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1845.535604][ T24] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1845.610182][T21817] loop4: detected capacity change from 0 to 4096 [ 1845.674654][T19907] usb 7-1: config 145 has an invalid descriptor of length 0, skipping remainder of the config [ 1845.686143][T19907] usb 7-1: config 145 has 0 interfaces, different from the descriptor's value: 1 [ 1845.696313][ T24] usb 1-1: device descriptor read/64, error -71 [ 1845.744057][T10830] ath6kl: Failed to submit usb control message: -71 [ 1845.751442][T10830] ath6kl: unable to send the bmi data to the device: -71 [ 1845.759444][T10830] ath6kl: Unable to send get target info: -71 [ 1845.769909][T10830] ath6kl: Failed to init ath6kl core: -71 [ 1845.786744][T10830] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1845.849606][T10830] usb 8-1: USB disconnect, device number 93 [ 1845.871830][T19907] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1845.882406][T19907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.890806][T19907] usb 7-1: Product: syz [ 1845.895406][T19907] usb 7-1: Manufacturer: syz [ 1845.900212][T19907] usb 7-1: SerialNumber: syz [ 1845.986804][ T24] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1846.065053][ T5838] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1846.134805][ T24] usb 1-1: device descriptor read/64, error -71 [ 1846.258937][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 1846.270106][ T24] usb usb1-port1: attempt power cycle [ 1846.302367][ T5838] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1846.311239][ T5838] usb 6-1: config 0 has no interface number 0 [ 1846.368294][ T5838] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1846.378317][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.386878][ T5838] usb 6-1: Product: syz [ 1846.391257][ T5838] usb 6-1: Manufacturer: syz [ 1846.398832][ T5838] usb 6-1: SerialNumber: syz [ 1846.461851][ T5838] usb 6-1: config 0 descriptor?? [ 1846.468064][T19907] usb 7-1: USB disconnect, device number 17 [ 1846.575280][ T5838] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1846.705850][ T24] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1846.775426][ T24] usb 1-1: device descriptor read/8, error -71 [ 1847.065614][ T24] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1847.112952][ T24] usb 1-1: device descriptor read/8, error -71 [ 1847.128023][T21831] loop7: detected capacity change from 0 to 512 [ 1847.177320][T21831] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1847.184914][T21831] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1847.238898][ T24] usb usb1-port1: unable to enumerate USB device [ 1847.297285][T21831] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #17: comm syz.7.4415: corrupted in-inode xattr: invalid ea_ino [ 1847.323167][T21831] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4415: couldn't read orphan inode 17 (err -117) [ 1847.393706][T21831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1847.426057][T21831] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1847.501311][T21829] loop5: detected capacity change from 0 to 128 [ 1847.682902][T21829] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1847.743124][ T5838] gspca_spca1528: reg_w err -110 [ 1847.756964][T21829] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1847.821164][ T5838] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 1847.904745][T19907] usb 6-1: USB disconnect, device number 31 [ 1847.997260][T15863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1848.332671][T19907] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1848.570773][T19907] usb 5-1: Using ep0 maxpacket: 16 [ 1848.596372][T19907] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1848.604908][T19907] usb 5-1: config 0 has no interface number 0 [ 1848.714965][T19907] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1848.727423][T19907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.735988][T19907] usb 5-1: Product: syz [ 1848.742060][T19907] usb 5-1: Manufacturer: syz [ 1848.747455][T19907] usb 5-1: SerialNumber: syz [ 1848.864243][T19573] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1848.888479][T21846] loop6: detected capacity change from 0 to 512 [ 1848.906844][T19907] usb 5-1: config 0 descriptor?? [ 1848.934252][T19907] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1849.099069][T21846] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4419: invalid indirect mapped block 256 (level 2) [ 1849.137028][T21846] EXT4-fs (loop6): 2 truncates cleaned up [ 1849.226667][T21846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1849.414476][T21846] EXT4-fs (loop6): shut down requested (1) [ 1849.871938][T21857] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4422'. [ 1849.907606][T21841] loop4: detected capacity change from 0 to 128 [ 1849.963477][T20921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1850.100007][T21841] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1850.120144][T19907] gspca_spca1528: reg_w err -110 [ 1850.142351][T19907] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 1850.250776][T21841] ext4 filesystem being mounted at /239/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1850.562825][T21860] 9pnet_fd: Insufficient options for proto=fd [ 1850.570941][T21841] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 20: comm syz.4.4417: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 1850.643202][T21841] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem [ 1850.706322][T21841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1850.938030][ T5838] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1851.130350][ T5838] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 1851.139143][ T5838] usb 7-1: config 0 has no interface number 0 [ 1851.177978][ T5838] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1851.188430][ T5838] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1851.198128][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.272043][ T5838] usb 7-1: config 0 descriptor?? [ 1851.335806][ T5838] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input46 [ 1851.413193][T21860] loop0: detected capacity change from 0 to 8192 [ 1851.482136][T21860] FAT-fs (loop0): bogus number of reserved sectors [ 1851.489194][T21860] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1851.527163][ T5838] usb 7-1: USB disconnect, device number 18 [ 1851.712236][T21871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4427'. [ 1851.822019][T21874] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4427'. [ 1852.226207][T19907] usb 8-1: new full-speed USB device number 94 using dummy_hcd [ 1852.480962][T19907] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1852.492997][T19907] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 39042, setting to 64 [ 1852.504856][T19907] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1852.514576][T19907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.650874][ T5838] usb 5-1: USB disconnect, device number 65 [ 1852.661060][T19907] usb 8-1: config 0 descriptor?? [ 1852.767709][T21871] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1852.867562][T17690] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1853.046156][T19907] ath6kl: Failed to submit usb control message: -71 [ 1853.053153][T19907] ath6kl: unable to send the bmi data to the device: -71 [ 1853.060866][T19907] ath6kl: Unable to send get target info: -71 [ 1853.157129][T19907] ath6kl: Failed to init ath6kl core: -71 [ 1853.179405][T19907] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1853.211340][T21884] loop0: detected capacity change from 0 to 8 [ 1853.253392][T21884] squashfs: Unknown parameter '' [ 1853.267060][T19907] usb 8-1: USB disconnect, device number 94 [ 1853.297908][ T5838] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1853.469075][ T5838] usb 7-1: device descriptor read/64, error -71 [ 1853.748147][ T5838] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1853.956464][ T5838] usb 7-1: device descriptor read/64, error -71 [ 1853.992455][T21890] loop5: detected capacity change from 0 to 512 [ 1854.085401][ T5838] usb usb7-port1: attempt power cycle [ 1854.095328][T21890] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4433: invalid indirect mapped block 256 (level 2) [ 1854.299442][T21890] EXT4-fs (loop5): 2 truncates cleaned up [ 1854.342533][T21890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1854.400778][T21896] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4435'. [ 1854.479356][T21890] EXT4-fs (loop5): shut down requested (1) [ 1854.523615][ T5838] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1854.578122][ T5838] usb 7-1: device descriptor read/8, error -71 [ 1854.847033][ T5838] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1854.858857][T19573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1854.924247][ T5838] usb 7-1: device descriptor read/8, error -71 [ 1855.037514][ T5838] usb usb7-port1: unable to enumerate USB device [ 1855.365141][T21904] loop4: detected capacity change from 0 to 512 [ 1855.426599][T21904] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1855.544766][T21904] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 1855.604335][T21904] System zones: 0-2, 18-18, 34-34 [ 1855.613015][T21904] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1855.649200][T21904] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4440: bg 0: block 248: padding at end of block bitmap is not set [ 1855.715019][T21904] __quota_error: 298 callbacks suppressed [ 1855.715105][T21904] Quota error (device loop4): write_blk: dquota write failed [ 1855.729341][T21904] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1855.792606][ T5804] block nbd1: Possible stuck request ffff888108a36000: control (read@0,1024B). Runtime 30 seconds [ 1855.806977][ T5804] block nbd1: Possible stuck request ffff888108a36180: control (read@1024,1024B). Runtime 30 seconds [ 1855.819995][ T5804] block nbd1: Possible stuck request ffff888108a36300: control (read@2048,1024B). Runtime 30 seconds [ 1855.833414][ T5804] block nbd1: Possible stuck request ffff888108a36480: control (read@3072,1024B). Runtime 30 seconds [ 1855.845198][T21904] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4440: Failed to acquire dquot type 1 [ 1855.922084][T21904] EXT4-fs (loop4): 1 truncate cleaned up [ 1855.954807][T21904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1856.012275][ T5838] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1856.232224][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 1856.290019][ T5838] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1856.298407][ T5838] usb 1-1: config 0 has no interface number 0 [ 1856.362788][T17690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1856.390586][ T5838] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1856.400680][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.409080][ T5838] usb 1-1: Product: syz [ 1856.415244][ T5838] usb 1-1: Manufacturer: syz [ 1856.420037][ T5838] usb 1-1: SerialNumber: syz [ 1856.484446][ T5838] usb 1-1: config 0 descriptor?? [ 1856.503784][ T5838] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1856.823137][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4445'. [ 1856.934036][T21919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4445'. [ 1857.083207][T21922] loop7: detected capacity change from 0 to 8 [ 1857.103491][T21922] squashfs: Unknown parameter '' [ 1857.381301][T19907] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1857.477194][T21910] loop0: detected capacity change from 0 to 128 [ 1857.603789][T19907] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1857.616166][T19907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 39042, setting to 64 [ 1857.627879][T19907] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1857.637809][T19907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.662162][ T5838] gspca_spca1528: reg_w err -110 [ 1857.722615][ T5838] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 1857.754138][T21910] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1857.804658][T21910] ext4 filesystem being mounted at /459/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1857.930442][T19907] usb 7-1: config 0 descriptor?? [ 1858.012421][T21923] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1858.144205][T21910] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 20: comm syz.0.4442: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 1858.272837][T21938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1858.307641][T19907] ath6kl: Failed to submit usb control message: -71 [ 1858.314939][T19907] ath6kl: unable to send the bmi data to the device: -71 [ 1858.322651][T19907] ath6kl: Unable to send get target info: -71 [ 1858.395867][T21910] EXT4-fs error (device loop0) in do_split:2027: Corrupt filesystem [ 1858.450668][T19907] ath6kl: Failed to init ath6kl core: -71 [ 1858.528950][T19907] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1858.574495][T21943] loop7: detected capacity change from 0 to 512 [ 1858.633441][T19907] usb 7-1: USB disconnect, device number 23 [ 1858.641004][T21943] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4449: invalid indirect mapped block 256 (level 2) [ 1858.659432][T21943] EXT4-fs (loop7): 2 truncates cleaned up [ 1858.681994][T21943] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1858.874317][T21943] EXT4-fs (loop7): shut down requested (1) [ 1859.197353][T15863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1859.935645][ T5838] usb 1-1: USB disconnect, device number 117 [ 1859.992236][T13441] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1860.498786][ T5838] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1860.678446][ T5838] usb 6-1: device descriptor read/64, error -71 [ 1860.938675][ T5838] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1861.010028][T21977] FAULT_INJECTION: forcing a failure. [ 1861.010028][T21977] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.025946][T21977] CPU: 1 UID: 0 PID: 21977 Comm: syz.0.4460 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 1861.026155][T21977] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1861.026218][T21977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1861.026301][T21977] Call Trace: [ 1861.026355][T21977] [ 1861.026427][T21977] __dump_stack+0x26/0x30 [ 1861.026609][T21977] dump_stack_lvl+0x14c/0x1c0 [ 1861.026788][T21977] dump_stack+0x1e/0x25 [ 1861.026952][T21977] should_fail_ex+0x7e2/0x8c0 [ 1861.027160][T21977] should_failslab+0x158/0x200 [ 1861.027321][T21977] __kmalloc_noprof+0x1e4/0x1bf0 [ 1861.027480][T21977] ? kmsan_get_metadata+0xf1/0x160 [ 1861.027704][T21977] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 1861.027890][T21977] ? tomoyo_path_number_perm+0x91/0x7d0 [ 1861.028029][T21977] ? kmsan_get_metadata+0xf1/0x160 [ 1861.028241][T21977] tomoyo_realpath_from_path+0xeb/0x9f0 [ 1861.028419][T21977] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1861.028630][T21977] ? __srcu_read_lock+0x5e/0xd0 [ 1861.028813][T21977] tomoyo_path_number_perm+0x1d0/0x7d0 [ 1861.028989][T21977] ? kmsan_get_metadata+0xf1/0x160 [ 1861.029189][T21977] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1861.029468][T21977] tomoyo_file_ioctl+0x3d/0x50 [ 1861.029659][T21977] security_file_ioctl_compat+0x139/0x570 [ 1861.029917][T21977] __ia32_compat_sys_ioctl+0x150/0x1270 [ 1861.030152][T21977] ? kmsan_get_metadata+0xf1/0x160 [ 1861.030387][T21977] ia32_sys_call+0x25d9/0x4340 [ 1861.030598][T21977] __do_fast_syscall_32+0x14a/0x310 [ 1861.030815][T21977] do_fast_syscall_32+0x37/0x80 [ 1861.031001][T21977] do_SYSENTER_32+0x1f/0x30 [ 1861.031201][T21977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1861.031388][T21977] RIP: 0023:0xf7f02539 [ 1861.031498][T21977] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1861.031635][T21977] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1861.031779][T21977] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008040640a [ 1861.031894][T21977] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1861.031983][T21977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1861.032073][T21977] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1861.032179][T21977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1861.032335][T21977] [ 1861.275135][T21977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1861.397083][ T5838] usb 6-1: device descriptor read/64, error -71 [ 1861.538927][ T5838] usb usb6-port1: attempt power cycle [ 1861.878016][ T5838] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1861.939699][ T5838] usb 6-1: device descriptor read/8, error -71 [ 1861.965428][T21986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4463'. [ 1862.055427][T21986] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4463'. [ 1862.197695][ T5838] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1862.240690][ T5838] usb 6-1: device descriptor read/8, error -71 [ 1862.241531][T21986] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4463'. [ 1862.358567][ T5838] usb usb6-port1: unable to enumerate USB device [ 1862.397643][T19907] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1862.557546][ T5838] usb 8-1: new full-speed USB device number 95 using dummy_hcd [ 1862.577408][T19907] usb 7-1: Using ep0 maxpacket: 16 [ 1862.594071][T19907] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1862.602793][T19907] usb 7-1: config 0 has no interface number 0 [ 1862.658367][T19907] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1862.668142][T19907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.676401][T19907] usb 7-1: Product: syz [ 1862.681052][T19907] usb 7-1: Manufacturer: syz [ 1862.685873][T19907] usb 7-1: SerialNumber: syz [ 1862.766083][T19907] usb 7-1: config 0 descriptor?? [ 1862.784361][ T5838] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1862.796316][ T5838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 39042, setting to 64 [ 1862.808147][ T5838] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1862.817753][ T5838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.878779][T21996] FAULT_INJECTION: forcing a failure. [ 1862.878779][T21996] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.892112][T21996] CPU: 1 UID: 0 PID: 21996 Comm: syz.0.4467 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 1862.892320][T21996] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1862.892386][T21996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1862.892488][T21996] Call Trace: [ 1862.892545][T21996] [ 1862.892599][T21996] __dump_stack+0x26/0x30 [ 1862.892777][T21996] dump_stack_lvl+0x14c/0x1c0 [ 1862.892973][T21996] dump_stack+0x1e/0x25 [ 1862.893123][T21996] should_fail_ex+0x7e2/0x8c0 [ 1862.893304][T21996] should_failslab+0x158/0x200 [ 1862.893446][T21996] __kmalloc_noprof+0x1e4/0x1bf0 [ 1862.893589][T21996] ? dynamic_dname+0x27d/0x2c0 [ 1862.893759][T21996] ? tomoyo_encode+0x603/0x9f0 [ 1862.893955][T21996] ? kmsan_get_metadata+0xf1/0x160 [ 1862.894165][T21996] ? kmsan_get_metadata+0xf1/0x160 [ 1862.894383][T21996] tomoyo_encode+0x603/0x9f0 [ 1862.894593][T21996] tomoyo_realpath_from_path+0x92e/0x9f0 [ 1862.894789][T21996] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1862.895032][T21996] tomoyo_path_number_perm+0x1d0/0x7d0 [ 1862.895215][T21996] ? kmsan_get_metadata+0xf1/0x160 [ 1862.895421][T21996] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1862.895686][T21996] tomoyo_file_ioctl+0x3d/0x50 [ 1862.895855][T21996] security_file_ioctl_compat+0x139/0x570 [ 1862.896072][T21996] __ia32_compat_sys_ioctl+0x150/0x1270 [ 1862.896279][T21996] ? kmsan_get_metadata+0xf1/0x160 [ 1862.896523][T21996] ia32_sys_call+0x25d9/0x4340 [ 1862.896740][T21996] __do_fast_syscall_32+0x14a/0x310 [ 1862.896978][T21996] do_fast_syscall_32+0x37/0x80 [ 1862.897171][T21996] do_SYSENTER_32+0x1f/0x30 [ 1862.897352][T21996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1862.897540][T21996] RIP: 0023:0xf7f02539 [ 1862.897650][T21996] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1862.897790][T21996] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1862.897936][T21996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040046602 [ 1862.898037][T21996] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1862.898136][T21996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1862.898219][T21996] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1862.898303][T21996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1862.898442][T21996] [ 1862.902652][T19907] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1862.910376][T21996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1863.166890][ T5838] usb 8-1: config 0 descriptor?? [ 1863.216453][T21986] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1863.462183][ T5838] ath6kl: Failed to submit usb control message: -71 [ 1863.471721][ T5838] ath6kl: unable to send the bmi data to the device: -71 [ 1863.484499][ T5838] ath6kl: Unable to send get target info: -71 [ 1863.512466][T10830] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1863.569792][ T5838] ath6kl: Failed to init ath6kl core: -71 [ 1863.613370][T13442] Bluetooth: hci7: command 0x0406 tx timeout [ 1863.632719][ T5838] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1863.716005][T10830] usb 5-1: Using ep0 maxpacket: 16 [ 1863.751998][T10830] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1863.760883][T10830] usb 5-1: config 0 has no interface number 0 [ 1863.809752][ T5838] usb 8-1: USB disconnect, device number 95 [ 1863.881445][T10830] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1863.893327][T10830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.901819][T10830] usb 5-1: Product: syz [ 1863.906370][T10830] usb 5-1: Manufacturer: syz [ 1863.911174][T10830] usb 5-1: SerialNumber: syz [ 1864.081001][T10830] usb 5-1: config 0 descriptor?? [ 1864.140088][T19907] gspca_spca1528: reg_w err -110 [ 1864.183202][T10830] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1864.183323][T19907] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 1865.062834][T21998] loop4: detected capacity change from 0 to 136 [ 1865.310011][T21998] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1865.326073][T10830] gspca_spca1528: reg_w err -110 [ 1865.359244][T10830] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 1865.426095][T21998] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1865.654939][T10830] usb 7-1: USB disconnect, device number 24 [ 1865.788113][T21998] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 20: comm syz.4.4466: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 1865.888407][T21998] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem [ 1865.976363][T22021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1866.463874][T22024] loop0: detected capacity change from 0 to 2048 [ 1866.591672][T22024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1867.025809][T13441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1867.045622][T19907] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1867.215606][T19907] usb 6-1: Using ep0 maxpacket: 8 [ 1867.249110][T19907] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1867.257528][T19907] usb 6-1: can't read configurations, error -61 [ 1867.455388][T19907] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1867.651122][T19907] usb 6-1: Using ep0 maxpacket: 8 [ 1867.676326][T19907] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1867.684684][T19907] usb 6-1: can't read configurations, error -61 [ 1867.732996][T19907] usb usb6-port1: attempt power cycle [ 1867.767578][T10872] usb 5-1: USB disconnect, device number 66 [ 1867.862898][T17690] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1867.874967][ T5833] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1868.062965][ T5833] usb 7-1: Using ep0 maxpacket: 16 [ 1868.101285][T19907] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1868.137740][ T5833] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1868.146429][ T5833] usb 7-1: config 0 has no interface number 0 [ 1868.182358][ T5833] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1868.192642][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.201112][ T5833] usb 7-1: Product: syz [ 1868.205584][ T5833] usb 7-1: Manufacturer: syz [ 1868.210391][ T5833] usb 7-1: SerialNumber: syz [ 1868.217709][T19907] usb 6-1: Using ep0 maxpacket: 8 [ 1868.264648][T22043] loop7: detected capacity change from 0 to 1024 [ 1868.275943][T19907] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1868.283990][T19907] usb 6-1: can't read configurations, error -61 [ 1868.410899][ T5833] usb 7-1: config 0 descriptor?? [ 1868.434629][T19907] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1868.486491][ T5833] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1868.509218][T19907] usb 6-1: Using ep0 maxpacket: 8 [ 1868.526354][T19907] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1868.534700][T19907] usb 6-1: can't read configurations, error -61 [ 1868.560456][T19907] usb usb6-port1: unable to enumerate USB device [ 1869.177061][T19907] IPVS: starting estimator thread 0... [ 1869.274946][T22051] IPVS: using max 192 ests per chain, 9600 per kthread [ 1869.539966][T22053] loop4: detected capacity change from 0 to 8 [ 1869.645532][ T5833] gspca_spca1528: reg_w err -71 [ 1869.650872][ T5833] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 1869.696824][T22053] squashfs: Unknown parameter '' [ 1869.738484][ T5833] usb 7-1: USB disconnect, device number 25 [ 1869.748499][T22055] 9p: Bad value for 'rfdno' [ 1869.854862][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4489'. [ 1869.894992][T22057] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4489'. [ 1869.959950][T22058] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4489'. [ 1870.543985][T22060] loop5: detected capacity change from 0 to 2048 [ 1870.722889][T22060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1870.876258][T22066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4491'. [ 1871.113516][T19907] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1871.197878][T19573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1871.335754][T19907] usb 7-1: Using ep0 maxpacket: 16 [ 1871.403426][T19907] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1871.412680][T19907] usb 7-1: config 0 has no interface number 0 [ 1871.485205][T19907] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1871.495229][T19907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.504000][T19907] usb 7-1: Product: syz [ 1871.508370][T19907] usb 7-1: Manufacturer: syz [ 1871.513404][T19907] usb 7-1: SerialNumber: syz [ 1871.621768][T19907] usb 7-1: config 0 descriptor?? [ 1871.732673][T19907] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1872.002389][T22087] loop5: detected capacity change from 0 to 1024 [ 1872.494590][T22091] loop0: detected capacity change from 0 to 164 [ 1872.525088][T22091] iso9660: Unknown parameter 'unhin_jgZKb{mfIIde' [ 1872.668753][T22073] loop6: detected capacity change from 0 to 128 [ 1872.779028][T22091] loop0: detected capacity change from 0 to 1024 [ 1872.843871][T22073] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1872.857783][T19907] gspca_spca1528: reg_w err -110 [ 1872.899673][T19907] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 1872.994639][T22073] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1873.207993][T22100] loop4: detected capacity change from 0 to 256 [ 1873.220012][T22073] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 20: comm syz.6.4494: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 1873.257073][T22100] exfat: Deprecated parameter 'namecase' [ 1873.293951][T22100] exfat: Deprecated parameter 'utf8' [ 1873.310842][T22073] EXT4-fs error (device loop6) in do_split:2027: Corrupt filesystem [ 1873.314758][T19907] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1873.385817][T22073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1873.444499][T17386] hfsplus: b-tree write err: -5, ino 4 [ 1873.478003][T22100] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1873.534233][T19907] usb 6-1: Using ep0 maxpacket: 8 [ 1873.573399][T19907] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1873.581579][T19907] usb 6-1: can't read configurations, error -61 [ 1873.712782][ T5833] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1873.784006][T19907] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1873.943101][ T5833] usb 8-1: Using ep0 maxpacket: 16 [ 1873.977196][T19907] usb 6-1: Using ep0 maxpacket: 8 [ 1874.013744][ T5833] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1874.022656][ T5833] usb 8-1: config 0 has no interface number 0 [ 1874.058188][T10872] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1874.104574][T19907] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1874.113079][T19907] usb 6-1: can't read configurations, error -61 [ 1874.173529][ T5833] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1874.183263][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.191477][ T5833] usb 8-1: Product: syz [ 1874.196620][ T5833] usb 8-1: Manufacturer: syz [ 1874.201419][ T5833] usb 8-1: SerialNumber: syz [ 1874.234344][T19907] usb usb6-port1: attempt power cycle [ 1874.312691][T10872] usb 1-1: Using ep0 maxpacket: 16 [ 1874.329715][T10872] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1874.338319][T10872] usb 1-1: config 0 has no interface number 0 [ 1874.385647][ T5833] usb 8-1: config 0 descriptor?? [ 1874.444397][T10872] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1874.457290][T10872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.466100][T10872] usb 1-1: Product: syz [ 1874.470468][T10872] usb 1-1: Manufacturer: syz [ 1874.475504][T10872] usb 1-1: SerialNumber: syz [ 1874.490638][ T5833] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1874.586340][T10872] usb 1-1: config 0 descriptor?? [ 1874.623893][T19907] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1874.680746][T19907] usb 6-1: Using ep0 maxpacket: 8 [ 1874.705033][T10872] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1874.738640][T19907] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1874.747292][T19907] usb 6-1: can't read configurations, error -61 [ 1874.923666][T19907] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1874.985890][T19907] usb 6-1: Using ep0 maxpacket: 8 [ 1875.049127][T19907] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1875.057772][T19907] usb 6-1: can't read configurations, error -61 [ 1875.094644][T14819] usb 7-1: USB disconnect, device number 26 [ 1875.119441][T19907] usb usb6-port1: unable to enumerate USB device [ 1875.238079][T22111] FAULT_INJECTION: forcing a failure. [ 1875.238079][T22111] name failslab, interval 1, probability 0, space 0, times 0 [ 1875.252759][T22111] CPU: 0 UID: 0 PID: 22111 Comm: syz.4.4504 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 1875.252948][T22111] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1875.253012][T22111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1875.253098][T22111] Call Trace: [ 1875.253147][T22111] [ 1875.253200][T22111] __dump_stack+0x26/0x30 [ 1875.253368][T22111] dump_stack_lvl+0x14c/0x1c0 [ 1875.253535][T22111] dump_stack+0x1e/0x25 [ 1875.253679][T22111] should_fail_ex+0x7e2/0x8c0 [ 1875.253860][T22111] should_failslab+0x158/0x200 [ 1875.253997][T22111] kmem_cache_alloc_noprof+0x14f/0x1730 [ 1875.254147][T22111] ? getname_flags+0x101/0xac0 [ 1875.254315][T22111] ? filter_irq_stacks+0x49/0x190 [ 1875.254497][T22111] ? kmsan_get_metadata+0xf1/0x160 [ 1875.254696][T22111] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1875.254913][T22111] getname_flags+0x101/0xac0 [ 1875.255135][T22111] do_sys_openat2+0xaa/0x430 [ 1875.255306][T22111] __ia32_compat_sys_openat+0x238/0x300 [ 1875.255493][T22111] ia32_sys_call+0x31ba/0x4340 [ 1875.255697][T22111] __do_fast_syscall_32+0x14a/0x310 [ 1875.255920][T22111] do_fast_syscall_32+0x37/0x80 [ 1875.256110][T22111] do_SYSENTER_32+0x1f/0x30 [ 1875.256287][T22111] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1875.256493][T22111] RIP: 0023:0xf73ed539 [ 1875.256605][T22111] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1875.256738][T22111] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1875.256882][T22111] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000340 [ 1875.256992][T22111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1875.257005][T20921] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1875.257086][T22111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1875.257174][T22111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1875.257375][T22111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1875.257686][T22111] [ 1875.619896][T22103] loop7: detected capacity change from 0 to 128 [ 1875.711272][ T5833] gspca_spca1528: reg_w err -110 [ 1875.797396][ T5833] spca1528 8-1:0.1: probe with driver spca1528 failed with error -110 [ 1875.811396][T22108] loop0: detected capacity change from 0 to 128 [ 1875.867099][T22103] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1876.036867][T22103] ext4 filesystem being mounted at /373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1876.056198][T10872] gspca_spca1528: reg_w err -110 [ 1876.103810][T10872] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 1876.121478][T22108] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1876.189405][T22108] ext4 filesystem being mounted at /475/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1876.241050][T10872] usb 8-1: USB disconnect, device number 96 [ 1876.386348][T14819] usb 1-1: USB disconnect, device number 118 [ 1876.419664][ T5833] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1876.632966][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 1876.652100][ T5833] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1876.661363][ T5833] usb 5-1: config 0 has no interface number 0 [ 1876.741969][ T5833] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1876.751962][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.760436][ T5833] usb 5-1: Product: syz [ 1876.765045][ T5833] usb 5-1: Manufacturer: syz [ 1876.769956][ T5833] usb 5-1: SerialNumber: syz [ 1876.950858][ T5833] usb 5-1: config 0 descriptor?? [ 1877.109187][ T5833] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1877.175650][T15863] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1877.486055][T13441] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1877.838057][T22130] loop7: detected capacity change from 0 to 1024 [ 1877.893814][T22130] EXT4-fs: Ignoring removed orlov option [ 1877.928613][ T5833] gspca_spca1528: reg_w err -71 [ 1877.963702][ T5833] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 1878.053652][ T5833] usb 5-1: USB disconnect, device number 67 [ 1878.061441][T22131] loop5: detected capacity change from 0 to 1024 [ 1878.140754][T22130] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1878.173934][T22130] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1878.556773][T22140] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4509'. [ 1879.159484][ T30] audit: type=1800 audit(2000002684.570:5096): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4509" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1879.194247][T22141] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.4509: lblock 0 mapped to illegal pblock 0 (length 1) [ 1879.253742][T22148] loop6: detected capacity change from 0 to 164 [ 1879.303808][T22148] iso9660: Unknown parameter 'unhin_jgZKb{mfIIde' [ 1879.643134][ T5833] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1879.862764][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 1879.897934][ T5833] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1879.909816][ T5833] usb 5-1: config 0 has no interface number 0 [ 1879.977700][ T5833] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1879.987403][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.995900][ T5833] usb 5-1: Product: syz [ 1880.000277][ T5833] usb 5-1: Manufacturer: syz [ 1880.005434][ T5833] usb 5-1: SerialNumber: syz [ 1880.064692][ T5833] usb 5-1: config 0 descriptor?? [ 1880.087281][ T5833] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1880.197775][T22158] loop5: detected capacity change from 0 to 512 [ 1880.356786][T22158] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4516: invalid indirect mapped block 256 (level 2) [ 1880.533226][T22158] EXT4-fs (loop5): 2 truncates cleaned up [ 1880.600609][T15863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1880.654269][T22158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1880.672176][T22163] loop0: detected capacity change from 0 to 1024 [ 1880.734267][T22163] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1880.744766][T14819] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1880.754614][T22163] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1880.813551][T22163] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1880.876556][T22158] EXT4-fs (loop5): shut down requested (1) [ 1880.886604][T22163] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: inode #5: comm syz.0.4518: unexpected bad inode w/o EXT4_IGET_BAD [ 1880.919622][T14819] usb 7-1: Using ep0 maxpacket: 8 [ 1880.977069][T22163] EXT4-fs (loop0): no journal found [ 1880.983441][T14819] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1880.983700][T14819] usb 7-1: can't read configurations, error -61 [ 1881.000067][T22163] EXT4-fs (loop0): can't get journal size [ 1881.104328][T22155] loop4: detected capacity change from 0 to 128 [ 1881.143647][T14819] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1881.165324][T22163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1881.243927][ T5833] gspca_spca1528: reg_w err -110 [ 1881.270050][ T5833] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 1881.275094][T22155] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1881.323329][T14819] usb 7-1: Using ep0 maxpacket: 8 [ 1881.355338][T22155] ext4 filesystem being mounted at /255/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1881.392610][T14819] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1881.400653][T14819] usb 7-1: can't read configurations, error -61 [ 1881.410609][T14819] usb usb7-port1: attempt power cycle [ 1881.567305][T19573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1881.658202][T13441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1881.669498][T22155] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 20: comm syz.4.4515: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 1881.772918][T22155] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem [ 1881.807765][T22169] loop7: detected capacity change from 0 to 2048 [ 1881.809183][T22171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1881.912771][T14819] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1881.957749][T22169] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1882.020406][T14819] usb 7-1: Using ep0 maxpacket: 8 [ 1882.087022][T14819] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1882.095374][T14819] usb 7-1: can't read configurations, error -61 [ 1882.263679][T14819] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1882.339510][T14819] usb 7-1: Using ep0 maxpacket: 8 [ 1882.385397][T14819] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1882.393677][T14819] usb 7-1: can't read configurations, error -61 [ 1882.449960][T14819] usb usb7-port1: unable to enumerate USB device [ 1882.464989][T15863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1883.041902][T10830] usb 5-1: USB disconnect, device number 68 [ 1883.105892][T17690] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1883.291700][T22184] loop0: detected capacity change from 0 to 1024 [ 1883.934615][T10830] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1884.213218][T10830] usb 5-1: Using ep0 maxpacket: 16 [ 1884.287231][T10830] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1884.296034][T10830] usb 5-1: config 0 has no interface number 0 [ 1884.370294][T10830] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1884.380182][T10830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.388695][T10830] usb 5-1: Product: syz [ 1884.393207][T10830] usb 5-1: Manufacturer: syz [ 1884.398018][T10830] usb 5-1: SerialNumber: syz [ 1884.435808][T22196] loop0: detected capacity change from 0 to 164 [ 1884.494568][T22196] iso9660: Unknown parameter 'unhin_jgZKb{mfIIde' [ 1884.526506][T10830] usb 5-1: config 0 descriptor?? [ 1884.565365][T10830] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1884.711228][T22199] loop7: detected capacity change from 0 to 512 [ 1884.796200][T22199] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1884.940561][T22199] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.4528: bad orphan inode 131083 [ 1885.071233][T22199] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1885.265655][T22206] loop6: detected capacity change from 0 to 512 [ 1885.444449][T22199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4528'. [ 1885.474738][T22206] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4530: invalid indirect mapped block 256 (level 2) [ 1885.513376][T10830] gspca_spca1528: reg_w err -71 [ 1885.548973][T10830] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 1885.573768][T22206] EXT4-fs (loop6): 2 truncates cleaned up [ 1885.597244][T10830] usb 5-1: USB disconnect, device number 69 [ 1885.630008][T22206] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1885.697281][T12046] udevd[12046]: setting mode of /dev/bus/usb/005/069 to 020664 failed: No such file or directory [ 1885.709046][T14819] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1885.747310][T22211] loop0: detected capacity change from 0 to 2048 [ 1885.774363][T12046] udevd[12046]: setting owner of /dev/bus/usb/005/069 to uid=0, gid=0 failed: No such file or directory [ 1885.844957][ T5804] block nbd1: Possible stuck request ffff888108a36000: control (read@0,1024B). Runtime 60 seconds [ 1885.858811][ T5804] block nbd1: Possible stuck request ffff888108a36180: control (read@1024,1024B). Runtime 60 seconds [ 1885.873380][ T5804] block nbd1: Possible stuck request ffff888108a36300: control (read@2048,1024B). Runtime 60 seconds [ 1885.884911][ T5804] block nbd1: Possible stuck request ffff888108a36480: control (read@3072,1024B). Runtime 60 seconds [ 1885.903408][T22206] EXT4-fs (loop6): shut down requested (1) [ 1885.931128][T14819] usb 6-1: Using ep0 maxpacket: 16 [ 1885.965448][T14819] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1885.974463][T14819] usb 6-1: config 0 has no interface number 0 [ 1886.039828][T15863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1886.068111][T14819] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1886.077760][T14819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.086242][T14819] usb 6-1: Product: syz [ 1886.090631][T14819] usb 6-1: Manufacturer: syz [ 1886.096314][T14819] usb 6-1: SerialNumber: syz [ 1886.100976][T22211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1886.249240][T14819] usb 6-1: config 0 descriptor?? [ 1886.396125][T14819] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1886.554859][T20921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1886.674571][T13441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1887.102847][ T7414] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1887.145644][ T8493] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1887.198446][ T8493] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1887.313839][ T8493] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1887.471346][T14819] gspca_spca1528: reg_w err -110 [ 1887.501858][T14819] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 1887.542745][T10830] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1887.786879][T10830] usb 7-1: Using ep0 maxpacket: 16 [ 1887.849896][T10830] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1887.858453][T10830] usb 7-1: config 0 has no interface number 0 [ 1887.884110][T10830] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1887.893901][T10830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.902167][T10830] usb 7-1: Product: syz [ 1887.906721][T10830] usb 7-1: Manufacturer: syz [ 1887.911517][T10830] usb 7-1: SerialNumber: syz [ 1887.964833][T22225] loop7: detected capacity change from 0 to 1024 [ 1887.979494][T10830] usb 7-1: config 0 descriptor?? [ 1888.039597][T10830] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1888.847232][T14819] usb 6-1: USB disconnect, device number 44 [ 1889.007192][T22221] loop6: detected capacity change from 0 to 128 [ 1889.188357][T10830] gspca_spca1528: reg_w err -110 [ 1889.205760][T22221] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1889.245300][T10830] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 1889.314100][T22221] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1889.581836][T22221] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 20: comm syz.6.4535: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 1889.605401][ T5833] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1889.629030][T22243] loop5: detected capacity change from 0 to 164 [ 1889.677259][T22221] EXT4-fs error (device loop6) in do_split:2027: Corrupt filesystem [ 1889.722834][T22243] iso9660: Unknown parameter 'unhin_jgZKb{mfIIde' [ 1889.824043][T22221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1889.834727][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 1889.908852][ T5833] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1889.917763][ T5833] usb 1-1: config 0 has no interface number 0 [ 1889.969991][ T5833] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1889.981162][ T5833] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1890.069649][T22243] loop5: detected capacity change from 0 to 1024 [ 1890.132249][ T5833] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1890.142164][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.150591][ T5833] usb 1-1: Product: syz [ 1890.155116][ T5833] usb 1-1: Manufacturer: syz [ 1890.159903][ T5833] usb 1-1: SerialNumber: syz [ 1890.203010][T22248] loop4: detected capacity change from 0 to 1024 [ 1890.240252][T22248] ext4: Unknown parameter 'fsmagic' [ 1890.387777][ T5833] usb 1-1: config 0 descriptor?? [ 1890.473725][T22238] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1890.481545][T22238] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1890.770246][ T8493] hfsplus: b-tree write err: -5, ino 4 [ 1890.818947][T22238] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1890.854018][T22238] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1891.333640][T10830] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1891.552607][T10830] usb 8-1: Using ep0 maxpacket: 16 [ 1891.560844][T22238] loop0: detected capacity change from 0 to 64 [ 1891.594415][T10830] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1891.604689][T10830] usb 8-1: config 0 has no interface number 0 [ 1891.639547][T22238] MINIX-fs: bad superblock [ 1891.728074][T10830] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1891.740028][T10830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.748512][T10830] usb 8-1: Product: syz [ 1891.752936][T10830] usb 8-1: Manufacturer: syz [ 1891.757722][T10830] usb 8-1: SerialNumber: syz [ 1891.797102][T22254] loop5: detected capacity change from 0 to 512 [ 1891.821076][T22238] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1891.839053][T14819] usb 7-1: USB disconnect, device number 31 [ 1891.935026][ T5833] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1891.946588][ T5833] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1891.961708][ T5833] asix 1-1:0.251: probe with driver asix failed with error -71 [ 1891.966730][T20921] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1891.997211][T22254] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4545: invalid indirect mapped block 256 (level 2) [ 1892.065032][T22252] loop4: detected capacity change from 0 to 2048 [ 1892.077901][T10830] usb 8-1: config 0 descriptor?? [ 1892.101280][ T5833] usb 1-1: USB disconnect, device number 119 [ 1892.129414][T22254] EXT4-fs (loop5): 2 truncates cleaned up [ 1892.177686][T10830] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1892.205426][T22254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1892.264141][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1892.366337][T22252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1892.549648][T22254] EXT4-fs (loop5): shut down requested (1) [ 1893.049878][T19573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1893.108269][T10830] gspca_spca1528: reg_w err -71 [ 1893.150511][T10830] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 1893.201054][T17690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1893.247713][T10830] usb 8-1: USB disconnect, device number 97 [ 1893.715131][T22265] FAULT_INJECTION: forcing a failure. [ 1893.715131][T22265] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.729198][T22265] CPU: 0 UID: 0 PID: 22265 Comm: syz.5.4548 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 1893.729397][T22265] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1893.729460][T22265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1893.729549][T22265] Call Trace: [ 1893.729607][T22265] [ 1893.729661][T22265] __dump_stack+0x26/0x30 [ 1893.729837][T22265] dump_stack_lvl+0x14c/0x1c0 [ 1893.730017][T22265] dump_stack+0x1e/0x25 [ 1893.730179][T22265] should_fail_ex+0x7e2/0x8c0 [ 1893.730360][T22265] should_failslab+0x158/0x200 [ 1893.730518][T22265] __kmalloc_noprof+0x1e4/0x1bf0 [ 1893.730674][T22265] ? tomoyo_encode+0x603/0x9f0 [ 1893.730848][T22265] ? prepend_path+0xfc1/0x1090 [ 1893.730990][T22265] ? kmsan_get_metadata+0xf1/0x160 [ 1893.731204][T22265] ? kmsan_get_metadata+0xf1/0x160 [ 1893.731424][T22265] tomoyo_encode+0x603/0x9f0 [ 1893.731630][T22265] tomoyo_realpath_from_path+0x92e/0x9f0 [ 1893.731848][T22265] tomoyo_path_number_perm+0x1d0/0x7d0 [ 1893.732036][T22265] ? kmsan_get_metadata+0xf1/0x160 [ 1893.732245][T22265] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1893.732505][T22265] tomoyo_file_ioctl+0x3d/0x50 [ 1893.732694][T22265] security_file_ioctl_compat+0x139/0x570 [ 1893.732943][T22265] __ia32_compat_sys_ioctl+0x150/0x1270 [ 1893.733142][T22265] ? kmsan_get_metadata+0xf1/0x160 [ 1893.733383][T22265] ia32_sys_call+0x25d9/0x4340 [ 1893.733587][T22265] __do_fast_syscall_32+0x14a/0x310 [ 1893.733797][T22265] do_fast_syscall_32+0x37/0x80 [ 1893.733979][T22265] do_SYSENTER_32+0x1f/0x30 [ 1893.734177][T22265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1893.734361][T22265] RIP: 0023:0xf747d539 [ 1893.734467][T22265] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1893.734596][T22265] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1893.734735][T22265] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008040640a [ 1893.734838][T22265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1893.734926][T22265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1893.735017][T22265] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1893.735116][T22265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1893.735244][T22265] [ 1893.969603][T22265] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1894.503093][T10830] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1894.573647][ T5833] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1894.692099][T10830] usb 5-1: config 0 has an invalid interface number: 25 but max is 0 [ 1894.700950][T10830] usb 5-1: config 0 has no interface number 0 [ 1894.733938][T10830] usb 5-1: config 0 interface 25 altsetting 5 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 1894.737102][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 1894.745835][T10830] usb 5-1: config 0 interface 25 has no altsetting 0 [ 1894.808170][ T5833] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1894.816935][ T5833] usb 1-1: config 0 has no interface number 0 [ 1894.840400][T10830] usb 5-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=68.f2 [ 1894.850041][T10830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.858661][T10830] usb 5-1: Product: syz [ 1894.863456][T10830] usb 5-1: Manufacturer: syz [ 1894.868271][T10830] usb 5-1: SerialNumber: syz [ 1894.889213][T10830] usb 5-1: config 0 descriptor?? [ 1894.897250][ T5833] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1894.907832][ T5833] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1894.920060][T22268] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1894.988660][ T5833] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1894.998379][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.006880][ T5833] usb 1-1: Product: syz [ 1895.011673][ T5833] usb 1-1: Manufacturer: syz [ 1895.016860][ T5833] usb 1-1: SerialNumber: syz [ 1895.096986][ T5833] usb 1-1: config 0 descriptor?? [ 1895.135178][T22264] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1895.153621][T22264] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1895.366861][T22264] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1895.396941][T22264] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1895.534058][T22279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1895.607688][T22279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.059966][T22264] loop0: detected capacity change from 0 to 64 [ 1896.133226][T22264] MINIX-fs: bad superblock [ 1896.226250][T22264] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1896.304337][ T5833] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1896.314946][ T5833] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1896.378218][ T5833] asix 1-1:0.251: probe with driver asix failed with error -71 [ 1896.524429][ T5833] usb 1-1: USB disconnect, device number 120 [ 1897.353387][ T5833] usb 5-1: USB disconnect, device number 70 [ 1897.809335][T22301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4563'. [ 1898.015775][T22303] netlink: 'syz.6.4565': attribute type 32 has an invalid length. [ 1898.024457][T22303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4565'. [ 1898.259054][T22303] netlink: 'syz.6.4565': attribute type 32 has an invalid length. [ 1898.693026][T10830] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1898.883441][T10830] usb 5-1: Using ep0 maxpacket: 16 [ 1898.963169][T10830] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1899.033358][T10830] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 1899.041771][T10830] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.054563][T10830] usb 5-1: config 13 has no interface number 0 [ 1899.140046][T10830] usb 5-1: config 13 interface 50 altsetting 167 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1899.150611][T10830] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 0 [ 1899.161135][T10830] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1899.174973][T10830] usb 5-1: config 13 interface 50 has no altsetting 0 [ 1899.308236][T10830] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1899.320440][T10830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.328875][T10830] usb 5-1: Product: syz [ 1899.333426][T10830] usb 5-1: Manufacturer: syz [ 1899.338223][T10830] usb 5-1: SerialNumber: syz [ 1899.432031][T22315] loop0: detected capacity change from 0 to 1024 [ 1899.468265][T22315] ext4: Unknown parameter 'noacl' [ 1899.736905][T10830] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1899.773564][T10830] usb 5-1: MIDIStreaming interface descriptor not found [ 1900.007244][T10830] usb 5-1: USB disconnect, device number 71 [ 1900.353379][T11381] udevd[11381]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1900.703949][ T5833] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1900.917550][ T5833] usb 7-1: Using ep0 maxpacket: 16 [ 1900.954464][ T5833] usb 7-1: config 0 has an invalid interface number: 8 but max is 1 [ 1900.963401][ T5833] usb 7-1: config 0 has an invalid interface number: 31 but max is 1 [ 1900.971694][ T5833] usb 7-1: config 0 has no interface number 0 [ 1900.978377][ T5833] usb 7-1: config 0 has no interface number 1 [ 1901.102675][ T5833] usb 7-1: config 0 interface 8 has no altsetting 0 [ 1901.109565][ T5833] usb 7-1: config 0 interface 31 has no altsetting 0 [ 1901.235265][ T5833] usb 7-1: New USB device found, idVendor=1199, idProduct=907b, bcdDevice=34.dc [ 1901.245111][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.253840][ T5833] usb 7-1: Product: syz [ 1901.258703][ T5833] usb 7-1: Manufacturer: syz [ 1901.263639][ T5833] usb 7-1: SerialNumber: syz [ 1901.366965][ T5833] usb 7-1: config 0 descriptor?? [ 1901.742543][ T5833] usb 7-1: USB disconnect, device number 32 [ 1901.854607][T22330] loop4: detected capacity change from 0 to 16 [ 1901.933960][T22330] erofs (device loop4): mounted with root inode @ nid 36. [ 1902.115991][ T30] audit: type=1800 audit(2000002707.530:5097): pid=22330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4573" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 1902.404641][T22335] loop7: detected capacity change from 0 to 512 [ 1902.435564][T22335] EXT4-fs: Ignoring removed oldalloc option [ 1902.490473][T22335] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1902.608847][T22335] EXT4-fs (loop7): 1 truncate cleaned up [ 1902.644647][T22335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1902.890080][T22336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1902.927296][T22335] 9p: Unknown access argument m7FDie>J7X{: -22 [ 1903.227611][T22343] loop6: detected capacity change from 0 to 512 [ 1903.248995][T15863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1903.496701][T22343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1903.616307][T22343] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1903.731820][T22343] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.4577: corrupted inode contents [ 1903.822751][T22343] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #2: comm syz.6.4577: mark_inode_dirty error [ 1903.908962][T22343] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.4577: corrupted inode contents [ 1904.053096][T22343] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.4577: mark_inode_dirty error [ 1904.093743][T22349] loop7: detected capacity change from 0 to 512 [ 1904.137652][T22349] EXT4-fs: Ignoring removed bh option [ 1904.266206][T22349] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1904.275797][T22349] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1904.403042][T22349] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1904.475472][T22349] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1904.499777][T22349] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1904.509656][T20921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1904.598021][T22349] fscrypt (loop7, inode 12): Error -61 getting encryption context [ 1904.766535][T22352] loop4: detected capacity change from 0 to 1024 [ 1904.995633][T15863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1906.419777][T22365] loop7: detected capacity change from 0 to 128 [ 1906.569882][T22365] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1906.657590][T22365] ext4 filesystem being mounted at /391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1907.749707][T15863] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1907.947198][T22372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4587'. [ 1908.801642][T22379] loop4: detected capacity change from 0 to 512 [ 1908.843680][T22379] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1908.934409][T22379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e02c, mo2=0102] [ 1908.964736][T22379] System zones: 1-12 [ 1908.969699][T22379] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1909.026495][T22379] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4590: bg 0: block 361: padding at end of block bitmap is not set [ 1909.091376][T22379] EXT4-fs (loop4): Remounting filesystem read-only [ 1909.127298][T22379] EXT4-fs (loop4): 1 truncate cleaned up [ 1909.148546][T22379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1909.208138][T22382] loop6: detected capacity change from 0 to 128 [ 1909.225828][T22379] EXT4-fs (loop4): shut down requested (0) [ 1909.353760][T22382] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1909.576136][T17690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1909.610761][T22383] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1909.709495][T22382] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1910.830874][T22389] loop4: detected capacity change from 0 to 1024 [ 1911.086819][T22389] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1911.097539][T22389] hfsplus: xattr searching failed [ 1911.697760][T22392] loop6: detected capacity change from 0 to 4096 [ 1911.848762][T22392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1912.471684][T20921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1913.620695][T20890] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1913.633067][T20890] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1913.673355][T20890] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1913.728745][T20890] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1913.744994][T20890] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1914.132855][T10830] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1914.149399][T22410] virt_wifi0 speed is unknown, defaulting to 1000 [ 1914.354893][T10830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1914.369156][T10830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1914.379447][T10830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1914.392813][T10830] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1914.402126][T10830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.584019][T10830] usb 1-1: config 0 descriptor?? [ 1915.078873][T10830] hid-multitouch 0003:0EEF:72D0.0019: unknown main item tag 0x0 [ 1915.091275][T10830] hid-multitouch 0003:0EEF:72D0.0019: unknown main item tag 0x0 [ 1915.099691][T10830] hid-multitouch 0003:0EEF:72D0.0019: unknown main item tag 0x0 [ 1915.107827][T10830] hid-multitouch 0003:0EEF:72D0.0019: unknown main item tag 0x0 [ 1915.115911][T10830] hid-multitouch 0003:0EEF:72D0.0019: collection stack underflow [ 1915.124207][T10830] hid-multitouch 0003:0EEF:72D0.0019: item 0 0 0 12 parsing failed [ 1915.208254][T10830] hid-multitouch 0003:0EEF:72D0.0019: probe with driver hid-multitouch failed with error -22 [ 1915.367984][T10830] usb 1-1: USB disconnect, device number 121 [ 1915.854064][T20890] Bluetooth: hci8: command tx timeout [ 1915.928676][ T5804] block nbd1: Possible stuck request ffff888108a36000: control (read@0,1024B). Runtime 90 seconds [ 1915.941182][ T5804] block nbd1: Possible stuck request ffff888108a36180: control (read@1024,1024B). Runtime 90 seconds [ 1915.953156][ T5804] block nbd1: Possible stuck request ffff888108a36300: control (read@2048,1024B). Runtime 90 seconds [ 1915.964746][ T5804] block nbd1: Possible stuck request ffff888108a36480: control (read@3072,1024B). Runtime 90 seconds [ 1916.278153][T22410] chnl_net:caif_netlink_parms(): no params data found [ 1916.706803][T22436] loop0: detected capacity change from 0 to 1024 [ 1916.889272][T22439] loop6: detected capacity change from 0 to 512 [ 1917.100853][T22439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1917.124744][T22439] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1917.338276][ T30] audit: type=1800 audit(2000002722.750:5098): pid=22439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4611" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1917.714860][T22446] loop4: detected capacity change from 0 to 512 [ 1917.740423][T22446] EXT4-fs: Ignoring removed mblk_io_submit option [ 1917.820685][T20921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1917.933685][T20890] Bluetooth: hci8: command tx timeout [ 1917.992873][T22446] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1918.005629][T22446] EXT4-fs (loop4): blocks per group (256) and clusters per group (32768) inconsistent [ 1918.149535][T22410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.160289][T22410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1918.210564][T22410] bridge_slave_0: entered allmulticast mode [ 1918.287794][T22410] bridge_slave_0: entered promiscuous mode [ 1918.368253][T22410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.376185][T22410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.473218][T22410] bridge_slave_1: entered allmulticast mode [ 1918.544576][T22410] bridge_slave_1: entered promiscuous mode [ 1918.673091][T22450] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 1919.128407][ T5833] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1919.145967][T22410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1919.257264][T22410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1919.333374][ T5833] usb 7-1: Using ep0 maxpacket: 16 [ 1919.391548][ T5833] usb 7-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1919.405105][ T5833] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1919.412021][ T5833] usb 7-1: New USB device found, idVendor=0461, idProduct=4e05, bcdDevice= 0.00 [ 1919.421711][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.582852][ T5833] usb 7-1: config 0 descriptor?? [ 1919.590259][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4616'. [ 1919.778979][T22410] team0: Port device team_slave_0 added [ 1919.889856][T22410] team0: Port device team_slave_1 added [ 1920.003851][T20890] Bluetooth: hci8: command tx timeout [ 1920.104778][ T5833] primax 0003:0461:4E05.001A: hidraw0: USB HID v0.00 Device [HID 0461:4e05] on usb-dummy_hcd.6-1/input0 [ 1920.154512][T22458] loop7: detected capacity change from 0 to 4096 [ 1920.292159][ T5838] usb 7-1: USB disconnect, device number 33 [ 1920.465886][T22458] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1920.628893][T22410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1920.636850][T22410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1920.663673][T22410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1920.678720][ T30] audit: type=1800 audit(2000002726.090:5099): pid=22458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4617" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1920.803166][ T5838] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1920.835601][T22410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1920.843264][T22410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1920.869868][T22410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1921.051086][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.062466][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.072720][ T5838] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1921.086347][ T5838] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1921.095835][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.165500][T15863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1921.269853][ T5838] usb 1-1: config 0 descriptor?? [ 1921.470424][T22465] fido_id[22465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1921.872950][ T5838] usbhid 1-1:0.0: can't add hid device: -71 [ 1921.879576][ T5838] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1921.999368][ T5838] usb 1-1: USB disconnect, device number 122 [ 1922.083446][T20890] Bluetooth: hci8: command tx timeout [ 1922.298497][T22410] hsr_slave_0: entered promiscuous mode [ 1922.326009][T22410] hsr_slave_1: entered promiscuous mode [ 1922.386785][T22410] debugfs: 'hsr0' already exists in 'hsr' [ 1922.393023][T22410] Cannot create hsr debugfs directory [ 1922.653725][T22476] loop4: detected capacity change from 0 to 512 [ 1922.849207][T22476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1922.890008][T22474] binder: 22472:22474 ioctl c0306201 800016c0 returned -14 [ 1922.973156][T22476] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1923.557214][T17386] bridge_slave_1: left allmulticast mode [ 1923.563190][T17386] bridge_slave_1: left promiscuous mode [ 1923.569859][T17386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1923.645787][T17386] bridge_slave_0: left allmulticast mode [ 1923.651666][T17386] bridge_slave_0: left promiscuous mode [ 1923.658548][T17386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.385344][T17690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1924.854891][T17386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1924.915795][T17386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1924.956279][T17386] bond0 (unregistering): Released all slaves [ 1925.901824][T22504] cgroup: No subsys list or none specified [ 1926.136102][T22506] loop0: detected capacity change from 0 to 8 [ 1926.167889][T17386] hsr_slave_0: left promiscuous mode [ 1926.176514][T17386] hsr_slave_1: left promiscuous mode [ 1926.196786][T22506] squashfs: Unknown parameter '18446744073709551615' [ 1926.248940][T17386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1926.300205][T17386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1926.347431][T17386] batman_adv: batadv0: Removing interface: dummy0 [ 1926.502807][ T5833] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1926.756377][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1926.767855][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1926.778138][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1926.791432][ T5833] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1926.800984][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.919330][ T5833] usb 5-1: config 0 descriptor?? [ 1927.414464][ T5833] usbhid 5-1:0.0: can't add hid device: -71 [ 1927.421128][ T5833] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1927.597435][ T5833] usb 5-1: USB disconnect, device number 72 [ 1927.791463][T17386] team0 (unregistering): Port device team_slave_1 removed [ 1927.904898][T17386] team0 (unregistering): Port device team_slave_0 removed [ 1927.981422][T22514] binder: 22513:22514 ioctl c0306201 800001c0 returned -14 [ 1928.173449][T22516] loop0: detected capacity change from 0 to 512 [ 1928.467233][T22516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1928.568152][T22516] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1929.233281][ T5838] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1929.481121][ T5838] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1929.491085][ T5838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.499789][ T5838] usb 8-1: Product: syz [ 1929.504403][ T5838] usb 8-1: Manufacturer: syz [ 1929.509196][ T5838] usb 8-1: SerialNumber: syz [ 1929.853873][T13441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1929.900085][T22532] loop4: detected capacity change from 0 to 1024 [ 1929.926351][T22532] EXT4-fs: Ignoring removed orlov option [ 1929.933209][T22532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1930.053817][ T5838] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1930.066381][ T5838] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1930.077268][ T5838] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1930.156771][T22532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1930.326634][ T5838] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1930.465680][ T5838] usb 8-1: USB disconnect, device number 98 [ 1930.538304][ T5833] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1930.590230][T17690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1930.722857][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 1930.770597][ T5833] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1930.779578][ T5833] usb 7-1: config 179 has no interface number 0 [ 1930.861632][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1930.873429][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1930.885408][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1930.897148][ T5833] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1930.908955][ T5833] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1930.922830][ T5833] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1930.932105][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.190118][T22536] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1931.313585][T22410] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1931.351171][T22410] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1931.583947][T22410] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1931.595035][T22540] loop4: detected capacity change from 0 to 2048 [ 1931.630986][ T5833] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input47 [ 1931.809220][ T5838] usb 7-1: USB disconnect, device number 34 [ 1931.813006][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1931.823991][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1931.846120][T22410] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1931.853326][T22540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1932.733250][T14819] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1932.980487][T14819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.991920][T14819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1933.002532][T14819] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1933.016189][T14819] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1933.025807][T14819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.077109][T22554] loop4: detected capacity change from 0 to 128 [ 1933.264300][T22554] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1933.286353][T22554] ext4 filesystem being mounted at /290/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1933.301757][T14819] usb 1-1: config 0 descriptor?? [ 1933.715872][T22561] netlink: 'syz.7.4652': attribute type 3 has an invalid length. [ 1933.789033][T14819] usbhid 1-1:0.0: can't add hid device: -71 [ 1933.795917][T14819] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1933.914313][T14819] usb 1-1: USB disconnect, device number 123 [ 1933.925125][T17690] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1933.955423][T22410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1934.223298][T22410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1934.401946][ T8493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.409707][ T8493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1934.626039][ T8493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1934.633681][ T8493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1935.576748][T22578] loop0: detected capacity change from 0 to 1024 [ 1935.628171][T22578] EXT4-fs: Ignoring removed oldalloc option [ 1935.768222][T22578] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1935.955469][T22578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1936.881790][T22593] loop4: detected capacity change from 0 to 2048 [ 1937.084834][T22593] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1937.230350][T22599] loop6: detected capacity change from 0 to 128 [ 1937.329140][T22599] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1937.440284][T13441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1937.533033][T22599] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1937.674044][T22599] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1938.269710][T22410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1938.338294][T22609] loop0: detected capacity change from 0 to 164 [ 1938.446104][T22609] ISOFS: unable to read i-node block [ 1938.451646][T22609] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1938.896819][T22617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1938.963027][ T5833] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1939.148169][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1939.160592][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1939.171791][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1939.185436][ T5833] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1939.195044][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.385939][ T5833] usb 5-1: config 0 descriptor?? [ 1939.880665][ T5833] usbhid 5-1:0.0: can't add hid device: -71 [ 1939.887589][ T5833] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1939.939564][T22599] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))" [ 1939.999568][ T5833] usb 5-1: USB disconnect, device number 73 [ 1940.946631][T20921] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1941.541937][T22410] veth0_vlan: entered promiscuous mode [ 1941.722025][T22410] veth1_vlan: entered promiscuous mode [ 1941.920316][T22649] loop0: detected capacity change from 0 to 512 [ 1941.988942][T22649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1942.049274][T22649] EXT4-fs: Ignoring removed orlov option [ 1942.179987][T22649] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.4673: corrupted in-inode xattr: bad e_name length [ 1942.266116][T22657] loop4: detected capacity change from 0 to 164 [ 1942.275414][T22649] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4673: couldn't read orphan inode 15 (err -117) [ 1942.310315][T22657] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1942.365431][T22649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1942.427223][T22410] veth0_macvtap: entered promiscuous mode [ 1942.554859][ T30] audit: type=1800 audit(2000002747.960:5100): pid=22649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4673" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1942.588261][T22410] veth1_macvtap: entered promiscuous mode [ 1943.089957][T22410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1943.172187][T13441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1943.297798][T22410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1943.426320][T17386] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.493212][T17386] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.502264][T17386] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.525907][ T1081] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.881423][T22667] loop4: detected capacity change from 0 to 1024 [ 1944.060565][T22667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1944.119450][T22667] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1944.192927][T22667] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 1944.293616][T22667] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.4677: Freeing blocks not in datazone - block = 0, count = 4096 [ 1944.393126][T22667] EXT4-fs (loop4): Remounting filesystem read-only [ 1944.400072][T22667] EXT4-fs (loop4): 1 orphan inode deleted [ 1944.414681][T17890] EXT4-fs (loop4): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 1944.425586][T17890] Quota error (device loop4): write_blk: dquota write failed [ 1944.433181][ T5838] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 1944.441031][T17890] Quota error (device loop4): free_dqentry: Can't move quota data block (2) to free list [ 1944.476841][T22667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1944.644721][ T5838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1944.656417][ T5838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1944.666671][ T5838] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1944.682248][ T5838] usb 8-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1944.691698][ T5838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1944.817324][ T5838] usb 8-1: config 0 descriptor?? [ 1944.999683][T22667] kvm: pic: non byte read [ 1945.104104][T22667] kvm: pic: non byte read [ 1945.318066][ T5838] usbhid 8-1:0.0: can't add hid device: -71 [ 1945.324956][ T5838] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1945.406623][ T5838] usb 8-1: USB disconnect, device number 99 [ 1945.617124][T17690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1946.023548][ T5804] block nbd1: Possible stuck request ffff888108a36000: control (read@0,1024B). Runtime 120 seconds [ 1946.037970][ T5804] block nbd1: Possible stuck request ffff888108a36180: control (read@1024,1024B). Runtime 120 seconds [ 1946.049585][ T5804] block nbd1: Possible stuck request ffff888108a36300: control (read@2048,1024B). Runtime 120 seconds [ 1946.062118][ T5804] block nbd1: Possible stuck request ffff888108a36480: control (read@3072,1024B). Runtime 120 seconds [ 1946.761892][T22700] loop6: detected capacity change from 0 to 128 [ 1946.868243][T22698] loop7: detected capacity change from 0 to 1024 [ 1946.914247][T22700] FAT-fs (loop6): Directory bread(block 524322) failed [ 1946.921491][T22700] FAT-fs (loop6): Directory bread(block 524323) failed [ 1947.012836][T22700] FAT-fs (loop6): Directory bread(block 524324) failed [ 1947.033166][T22700] FAT-fs (loop6): Directory bread(block 524325) failed [ 1947.073045][T22700] FAT-fs (loop6): Directory bread(block 524326) failed [ 1947.080267][T22700] FAT-fs (loop6): Directory bread(block 524327) failed [ 1947.109831][T22698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1947.171391][T22700] FAT-fs (loop6): Directory bread(block 524328) failed [ 1947.211726][T22700] FAT-fs (loop6): Directory bread(block 524329) failed [ 1947.393722][T22700] FAT-fs (loop6): Directory bread(block 524322) failed [ 1947.445199][T22700] FAT-fs (loop6): Directory bread(block 524323) failed [ 1947.707592][T15863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1947.823261][T14819] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1948.052842][T14819] usb 5-1: Using ep0 maxpacket: 16 [ 1948.108348][T14819] usb 5-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 1948.177606][T14819] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1948.191260][T14819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1948.198382][T14819] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1948.207875][T14819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.405873][T14819] usb 5-1: config 0 descriptor?? [ 1948.778034][T14819] usbhid 5-1:0.0: can't add hid device: -71 [ 1948.784859][T14819] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1948.917497][T14819] usb 5-1: USB disconnect, device number 74 [ 1948.919194][T22723] loop6: detected capacity change from 0 to 1024 [ 1948.975118][T22723] EXT4-fs: Ignoring removed orlov option [ 1948.984333][T22723] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1949.173900][T22723] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1949.777905][T20921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1950.699911][T22743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4695'. [ 1950.755318][T22744] loop6: detected capacity change from 0 to 512 [ 1950.784002][T14819] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1950.900178][T22744] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4693: inode has both inline data and extents flags [ 1950.957713][T22744] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4693: couldn't read orphan inode 15 (err -117) [ 1951.013311][T14819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1951.024955][T14819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1951.035238][T14819] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1951.048746][T14819] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1951.067815][T14819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.133525][T22744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1951.285600][T14819] usb 5-1: config 0 descriptor?? [ 1951.626669][T20921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1951.725025][T22755] loop0: detected capacity change from 0 to 8 [ 1951.767185][T14819] usbhid 5-1:0.0: can't add hid device: -71 [ 1951.773936][T14819] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1951.889902][T14819] usb 5-1: USB disconnect, device number 75 [ 1952.569138][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1952.577360][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1952.999340][T17890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1953.008218][T17890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1953.297506][T22771] loop4: detected capacity change from 0 to 128 [ 1953.461605][T22771] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1953.637868][T22771] ext4 filesystem being mounted at /300/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1953.747221][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1953.962226][T22771] fscrypt: AES-128-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 1954.018909][T22771] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1954.155690][T22785] loop6: detected capacity change from 0 to 128 [ 1954.222872][ T5838] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1954.311992][T22786] loop9: detected capacity change from 0 to 512 [ 1954.350043][T22785] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1954.398094][T17690] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1954.439921][T22785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1954.456544][ T5838] usb 8-1: Using ep0 maxpacket: 32 [ 1954.482245][ T5838] usb 8-1: config 2 has an invalid interface number: 189 but max is 2 [ 1954.491179][ T5838] usb 8-1: config 2 has an invalid interface number: 141 but max is 2 [ 1954.499776][ T5838] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1954.512962][ T5838] usb 8-1: config 2 has 2 interfaces, different from the descriptor's value: 3 [ 1954.522231][ T5838] usb 8-1: config 2 has no interface number 0 [ 1954.533560][ T5838] usb 8-1: config 2 has no interface number 1 [ 1954.640043][ T5838] usb 8-1: config 2 interface 189 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1954.653625][ T5838] usb 8-1: config 2 interface 189 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 11 [ 1954.670405][ T5838] usb 8-1: config 2 interface 141 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1954.686844][ T5838] usb 8-1: config 2 interface 189 has no altsetting 0 [ 1954.694165][ T5838] usb 8-1: config 2 interface 141 has no altsetting 0 [ 1954.720532][T22786] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1954.784260][ T5838] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=fd.52 [ 1954.794435][ T5838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.803931][ T5838] usb 8-1: Product: syz [ 1954.808302][ T5838] usb 8-1: Manufacturer: syz [ 1954.816284][ T5838] usb 8-1: SerialNumber: syz [ 1954.853007][T22786] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1955.035823][T22786] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.4598: corrupted inode contents [ 1955.122562][T22786] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #2: comm syz.9.4598: mark_inode_dirty error [ 1955.255901][T22786] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.4598: corrupted inode contents [ 1955.295108][T22794] loop4: detected capacity change from 0 to 256 [ 1955.390891][T22794] FAT-fs (loop4): Directory bread(block 1285) failed [ 1955.414225][T22786] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.4598: mark_inode_dirty error [ 1955.475615][T22794] FAT-fs (loop4): Directory bread(block 1286) failed [ 1955.513281][T22794] FAT-fs (loop4): Directory bread(block 1287) failed [ 1955.562894][T22794] FAT-fs (loop4): Directory bread(block 1288) failed [ 1955.609781][ T5838] usb 8-1: USB disconnect, device number 100 [ 1955.673992][T22794] FAT-fs (loop4): Directory bread(block 1285) failed [ 1955.680942][T22794] FAT-fs (loop4): Directory bread(block 1286) failed [ 1955.805223][T22794] FAT-fs (loop4): Directory bread(block 1287) failed [ 1955.871367][T22794] FAT-fs (loop4): Directory bread(block 1288) failed [ 1955.926762][T11668] udevd[11668]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1955.965606][T22794] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 1956.271992][ T5838] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1956.341042][T22410] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1956.539830][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1956.550416][ T5838] usb 7-1: New USB device found, idVendor=05ac, idProduct=0280, bcdDevice= 0.00 [ 1956.563417][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.628181][ T5838] usb 7-1: config 0 descriptor?? [ 1956.770868][T22805] loop7: detected capacity change from 0 to 128 [ 1956.863094][ T5833] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1956.900053][T22805] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1957.014440][T22805] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1957.061158][T22805] ext4 filesystem being mounted at /422/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1957.133254][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1957.144927][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1957.155089][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1957.168820][ T5833] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1957.178645][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.199384][ T5838] apple 0003:05AC:0280.001B: unbalanced delimiter at end of report description [ 1957.307989][ T5838] apple 0003:05AC:0280.001B: parse failed [ 1957.314683][ T5838] apple 0003:05AC:0280.001B: probe with driver apple failed with error -22 [ 1957.351536][ T30] audit: type=1800 audit(2000002762.760:5101): pid=22805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4710" name="file1" dev="loop7" ino=12 res=0 errno=0 [ 1957.488193][ T5833] usb 1-1: config 0 descriptor?? [ 1957.535557][ T5838] usb 7-1: USB disconnect, device number 35 [ 1957.868830][ T8493] ===================================================== [ 1957.876085][ T8493] BUG: KMSAN: uninit-value in aes_encrypt+0x1239/0x1960 [ 1957.883226][ T8493] aes_encrypt+0x1239/0x1960 [ 1957.888012][ T8493] aesti_encrypt+0x3d/0xa0 [ 1957.892626][ T8493] crypto_ecb_encrypt2+0x142/0x300 [ 1957.897937][ T8493] crypto_lskcipher_crypt_sg+0x3ad/0x960 [ 1957.903848][ T8493] crypto_lskcipher_encrypt_sg+0x8b/0xc0 [ 1957.909693][ T8493] crypto_skcipher_encrypt+0x111/0x1e0 [ 1957.915378][ T8493] xts_encrypt+0x2e1/0x570 [ 1957.919941][ T8493] crypto_skcipher_encrypt+0x18a/0x1e0 [ 1957.925605][ T8493] fscrypt_crypt_data_unit+0x38e/0x590 [ 1957.931303][ T8493] fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 1957.937784][ T8493] ext4_bio_write_folio+0x1383/0x30b0 [ 1957.943345][ T8493] mpage_submit_folio+0x399/0x3d0 [ 1957.948621][ T8493] mpage_process_page_bufs+0xaef/0xf50 [ 1957.954329][ T8493] ext4_do_writepages+0x3a94/0x7770 [ 1957.959720][ T8493] ext4_writepages+0x337/0x870 [ 1957.964725][ T8493] do_writepages+0x3f2/0x860 [ 1957.969504][ T8493] __writeback_single_inode+0x101/0x1180 [ 1957.975403][ T8493] writeback_sb_inodes+0xb2d/0x1f10 [ 1957.980793][ T8493] wb_writeback+0x4d0/0xc00 [ 1957.985459][ T8493] wb_workfn+0x397/0x1900 [ 1957.989947][ T8493] process_scheduled_works+0xae7/0x1d60 [ 1957.995719][ T8493] worker_thread+0x1741/0x1de0 [ 1958.000703][ T8493] kthread+0xd5a/0xf00 [ 1958.004918][ T8493] ret_from_fork+0x207/0x6f0 [ 1958.009734][ T8493] ret_from_fork_asm+0x1a/0x30 [ 1958.014722][ T8493] [ 1958.017131][ T8493] Uninit was stored to memory at: [ 1958.022382][ T8493] xts_xor_tweak+0x576/0xa90 [ 1958.027130][ T8493] xts_encrypt+0x278/0x570 [ 1958.031697][ T8493] crypto_skcipher_encrypt+0x18a/0x1e0 [ 1958.037333][ T8493] fscrypt_crypt_data_unit+0x38e/0x590 [ 1958.042994][ T8493] fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 1958.049444][ T8493] ext4_bio_write_folio+0x1383/0x30b0 [ 1958.054990][ T8493] mpage_submit_folio+0x399/0x3d0 [ 1958.060200][ T8493] mpage_process_page_bufs+0xaef/0xf50 [ 1958.065940][ T8493] ext4_do_writepages+0x3a94/0x7770 [ 1958.071334][ T8493] ext4_writepages+0x337/0x870 [ 1958.076303][ T8493] do_writepages+0x3f2/0x860 [ 1958.081100][ T8493] __writeback_single_inode+0x101/0x1180 [ 1958.086922][ T8493] writeback_sb_inodes+0xb2d/0x1f10 [ 1958.092301][ T8493] wb_writeback+0x4d0/0xc00 [ 1958.096973][ T8493] wb_workfn+0x397/0x1900 [ 1958.101447][ T8493] process_scheduled_works+0xae7/0x1d60 [ 1958.107188][ T8493] worker_thread+0x1741/0x1de0 [ 1958.112162][ T8493] kthread+0xd5a/0xf00 [ 1958.116395][ T8493] ret_from_fork+0x207/0x6f0 [ 1958.121222][ T8493] ret_from_fork_asm+0x1a/0x30 [ 1958.126176][ T8493] [ 1958.128581][ T8493] Uninit was created at: [ 1958.133072][ T8493] __alloc_frozen_pages_noprof+0x6df/0xf50 [ 1958.139065][ T8493] alloc_pages_mpol+0x328/0x860 [ 1958.144134][ T8493] folio_alloc_noprof+0x108/0x360 [ 1958.149309][ T8493] filemap_alloc_folio_noprof+0xd9/0x480 [ 1958.155147][ T8493] __filemap_get_folio_mpol+0xb43/0x1960 [ 1958.160969][ T8493] ext4_write_begin+0x6dd/0x2d50 [ 1958.166186][ T8493] ext4_da_write_begin+0x75e/0x1420 [ 1958.171638][ T8493] generic_perform_write+0x364/0x1050 [ 1958.177197][ T8493] ext4_buffered_write_iter+0x61a/0xce0 [ 1958.182937][ T8493] ext4_file_write_iter+0x25fa/0x3eb0 [ 1958.188486][ T8493] vfs_write+0xbe1/0x15c0 [ 1958.192997][ T8493] ksys_write+0x1d9/0x470 [ 1958.197519][ T8493] __ia32_sys_write+0x9a/0xf0 [ 1958.202412][ T8493] ia32_sys_call+0x3d5e/0x4340 [ 1958.207394][ T8493] __do_fast_syscall_32+0x14a/0x310 [ 1958.212812][ T8493] do_fast_syscall_32+0x37/0x80 [ 1958.217846][ T8493] do_SYSENTER_32+0x1f/0x30 [ 1958.222507][ T8493] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1958.229038][ T8493] [ 1958.231491][ T8493] CPU: 1 UID: 0 PID: 8493 Comm: kworker/u8:11 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 1958.243254][ T8493] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1958.248557][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1958.258749][ T8493] Workqueue: writeback wb_workfn (flush-7:7) [ 1958.264920][ T8493] ===================================================== [ 1958.271947][ T8493] Disabling lock debugging due to kernel taint [ 1958.278227][ T8493] Kernel panic - not syncing: kmsan.panic set ... [ 1958.284771][ T8493] CPU: 1 UID: 0 PID: 8493 Comm: kworker/u8:11 Tainted: G B W L syzkaller #0 PREEMPT(voluntary) [ 1958.296542][ T8493] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1958.303072][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1958.313298][ T8493] Workqueue: writeback wb_workfn (flush-7:7) [ 1958.319487][ T8493] Call Trace: [ 1958.322866][ T8493] [ 1958.325899][ T8493] __dump_stack+0x26/0x30 [ 1958.330408][ T8493] dump_stack_lvl+0x50/0x1c0 [ 1958.335200][ T8493] ? dump_stack+0x12/0x25 [ 1958.339719][ T8493] dump_stack+0x1e/0x25 [ 1958.344040][ T8493] vpanic+0x435/0xd40 [ 1958.348216][ T8493] panic+0x15d/0x160 [ 1958.352371][ T8493] kmsan_report+0x31a/0x320 [ 1958.357110][ T8493] ? __msan_warning+0x1b/0x30 [ 1958.361994][ T8493] ? aes_encrypt+0x1239/0x1960 [ 1958.366950][ T8493] ? aesti_encrypt+0x3d/0xa0 [ 1958.371736][ T8493] ? crypto_ecb_encrypt2+0x142/0x300 [ 1958.377246][ T8493] ? crypto_lskcipher_crypt_sg+0x3ad/0x960 [ 1958.383275][ T8493] ? crypto_lskcipher_encrypt_sg+0x8b/0xc0 [ 1958.389304][ T8493] ? crypto_skcipher_encrypt+0x111/0x1e0 [ 1958.395116][ T8493] ? xts_encrypt+0x2e1/0x570 [ 1958.399845][ T8493] ? crypto_skcipher_encrypt+0x18a/0x1e0 [ 1958.405635][ T8493] ? fscrypt_crypt_data_unit+0x38e/0x590 [ 1958.411453][ T8493] ? fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 1958.418069][ T8493] ? ext4_bio_write_folio+0x1383/0x30b0 [ 1958.423785][ T8493] ? mpage_submit_folio+0x399/0x3d0 [ 1958.429185][ T8493] ? mpage_process_page_bufs+0xaef/0xf50 [ 1958.435027][ T8493] ? ext4_do_writepages+0x3a94/0x7770 [ 1958.440589][ T8493] ? ext4_writepages+0x337/0x870 [ 1958.445752][ T8493] ? do_writepages+0x3f2/0x860 [ 1958.450711][ T8493] ? __writeback_single_inode+0x101/0x1180 [ 1958.456709][ T8493] ? writeback_sb_inodes+0xb2d/0x1f10 [ 1958.462270][ T8493] ? wb_writeback+0x4d0/0xc00 [ 1958.467133][ T8493] ? wb_workfn+0x397/0x1900 [ 1958.471793][ T8493] ? process_scheduled_works+0xae7/0x1d60 [ 1958.477725][ T8493] ? worker_thread+0x1741/0x1de0 [ 1958.482867][ T8493] ? kthread+0xd5a/0xf00 [ 1958.487264][ T8493] ? ret_from_fork+0x207/0x6f0 [ 1958.492238][ T8493] ? ret_from_fork_asm+0x1a/0x30 [ 1958.497391][ T8493] ? finish_task_switch+0x141/0x8b0 [ 1958.502803][ T8493] ? __schedule+0x26ee/0x8180 [ 1958.507663][ T8493] ? stack_depot_save_flags+0x35/0x790 [ 1958.513308][ T8493] ? kmsan_get_metadata+0xf1/0x160 [ 1958.518661][ T8493] __msan_warning+0x1b/0x30 [ 1958.523367][ T8493] aes_encrypt+0x1239/0x1960 [ 1958.528210][ T8493] aesti_encrypt+0x3d/0xa0 [ 1958.532832][ T8493] crypto_ecb_encrypt2+0x142/0x300 [ 1958.538159][ T8493] ? __pfx_aesti_encrypt+0x10/0x10 [ 1958.543474][ T8493] crypto_lskcipher_crypt_sg+0x3ad/0x960 [ 1958.549344][ T8493] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 1958.555220][ T8493] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 1958.561075][ T8493] crypto_lskcipher_encrypt_sg+0x8b/0xc0 [ 1958.566956][ T8493] crypto_skcipher_encrypt+0x111/0x1e0 [ 1958.572619][ T8493] xts_encrypt+0x2e1/0x570 [ 1958.577203][ T8493] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1958.583249][ T8493] ? __pfx_xts_encrypt+0x10/0x10 [ 1958.588341][ T8493] crypto_skcipher_encrypt+0x18a/0x1e0 [ 1958.593998][ T8493] fscrypt_crypt_data_unit+0x38e/0x590 [ 1958.599685][ T8493] ? __alloc_frozen_pages_noprof+0x6df/0xf50 [ 1958.605878][ T8493] ? kmsan_get_metadata+0xf1/0x160 [ 1958.611214][ T8493] ? __pfx_xts_encrypt_done+0x10/0x10 [ 1958.616760][ T8493] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1958.622821][ T8493] ? alloc_pages_mpol+0x52c/0x860 [ 1958.628087][ T8493] ? kmsan_get_metadata+0xf1/0x160 [ 1958.633464][ T8493] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 1958.639513][ T8493] ? kmsan_get_metadata+0xf1/0x160 [ 1958.644834][ T8493] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1958.650896][ T8493] fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 1958.657379][ T8493] ext4_bio_write_folio+0x1383/0x30b0 [ 1958.663006][ T8493] mpage_submit_folio+0x399/0x3d0 [ 1958.668229][ T8493] mpage_process_page_bufs+0xaef/0xf50 [ 1958.673918][ T8493] ? kmsan_get_metadata+0xf1/0x160 [ 1958.679258][ T8493] ? kmsan_get_metadata+0xf1/0x160 [ 1958.684612][ T8493] ext4_do_writepages+0x3a94/0x7770 [ 1958.689986][ T8493] ? ieee80211_inform_bss+0x14cd/0x15e0 [ 1958.695767][ T8493] ? kmsan_get_metadata+0xf1/0x160 [ 1958.701101][ T8493] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1958.707814][ T8493] ext4_writepages+0x337/0x870 [ 1958.712802][ T8493] ? kmsan_get_metadata+0xf1/0x160 [ 1958.718159][ T8493] ? __pfx_ext4_writepages+0x10/0x10 [ 1958.723637][ T8493] do_writepages+0x3f2/0x860 [ 1958.728399][ T8493] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1958.734462][ T8493] ? kmsan_get_metadata+0xf1/0x160 [ 1958.739795][ T8493] ? kmsan_get_metadata+0xf1/0x160 [ 1958.745154][ T8493] __writeback_single_inode+0x101/0x1180 [ 1958.751002][ T8493] ? kmsan_get_metadata+0xf1/0x160 [ 1958.756350][ T8493] writeback_sb_inodes+0xb2d/0x1f10 [ 1958.761847][ T8493] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1958.767898][ T8493] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1958.773954][ T8493] wb_writeback+0x4d0/0xc00 [ 1958.778658][ T8493] ? queue_io+0x4c1/0x790 [ 1958.783194][ T8493] wb_workfn+0x397/0x1900 [ 1958.787708][ T8493] ? kmsan_get_metadata+0xf1/0x160 [ 1958.793052][ T8493] ? __pfx_wb_workfn+0x10/0x10 [ 1958.797974][ T8493] process_scheduled_works+0xae7/0x1d60 [ 1958.803871][ T8493] worker_thread+0x1741/0x1de0 [ 1958.808914][ T8493] kthread+0xd5a/0xf00 [ 1958.813143][ T8493] ? __pfx_worker_thread+0x10/0x10 [ 1958.818489][ T8493] ? __pfx_kthread+0x10/0x10 [ 1958.823347][ T8493] ret_from_fork+0x207/0x6f0 [ 1958.828156][ T8493] ? __switch_to+0x521/0x750 [ 1958.832958][ T8493] ? __pfx_kthread+0x10/0x10 [ 1958.837706][ T8493] ret_from_fork_asm+0x1a/0x30 [ 1958.842695][ T8493] [ 1958.846441][ T8493] Kernel Offset: disabled [ 1958.850840][ T8493] Rebooting in 86400 seconds..