last executing test programs: 4m40.741702967s ago: executing program 0 (id=219): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x42799000) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x103800) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x189482) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4m40.500471872s ago: executing program 0 (id=222): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 4m38.519470921s ago: executing program 0 (id=233): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000580)='./debug\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(r3, &(0x7f0000000640)=""/132, 0x84, 0x81) bpf$MAP_CREATE(0x0, 0x0, 0x50) 4m36.636592632s ago: executing program 0 (id=239): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f00000006c0)=[0xee00]) setregid(0x0, r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc41a, &(0x7f0000000080)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000140)="$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") prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7, 0x100}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs, 0x6e) futex(0x0, 0x0, 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) r1 = syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$watch_queue(0xffffffffffffffff, &(0x7f0000000840)=""/176, 0xb0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, 0x0) 4m36.147193258s ago: executing program 0 (id=244): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000b00)=ANY=[], 0x90) 4m35.358276131s ago: executing program 0 (id=251): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000580)='./debug\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(r3, &(0x7f0000000640)=""/132, 0x84, 0x81) bpf$MAP_CREATE(0x0, 0x0, 0x50) 4m34.864745174s ago: executing program 32 (id=251): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000580)='./debug\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(r3, &(0x7f0000000640)=""/132, 0x84, 0x81) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2m21.247711632s ago: executing program 5 (id=742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0x9, 0x0, 0xffff}, 0x20) open(0x0, 0x80242, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000080)=ANY=[@ANYRES8=r0]) fsmount(r3, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) ptrace(0x4206, r4) syz_read_part_table(0x5ed, &(0x7f00000004c0)="$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") 2m19.114076826s ago: executing program 5 (id=750): r0 = socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000300)='./file0\x00', 0x4804497, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES32=r1, @ANYRES32=r0], 0x68, 0xc54, &(0x7f0000000ec0)="$eJzs3V9oXOl9N/DfMyOtRtq8G2028SZvs9uBlMQotfG/2AouQY4VtQHHGyIrdK+ikSU7w8ojI8mNN22D2pIWehO6N6U3RTRZWshFr7q9jNJsIaEUSshFclEQNFn2ohe6CJS2bFTOmWekkSzbs+uVJXs/HzP+njnzO6PnOc/ozBnQMycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjPfu7CiZPpoFsBADxMlye/dOK0938AeE+54vM/AAAAAAAAAAAAAAAcdimqcSRSDL22kabL+221S83WrdtT4xN7bzaYIkUlqmV9caudPHX6zKfOnhvt5L23f7d9JF6YvHKhfvFnx28uzi0tzc3Wp1rNqwuzcz0/Q3v7hRvvdPvdRsodUL/x0q3Za9eW6qeOn97x8O3hNwaePDJ8/tyxs6Od2qnxiYnJrpq+/nf80+9wtxkeT0Q1GpHireE3UyMiKvHg++I+r539Nlh2YqTsxNT4RNmR+WajtVw8mCq5qhJR79porLOPHsJYPJCxiJWi+UWDR4ruTd5sLDZm5ufqX2wsLjeXmwutVGm3tuhPPSoxmiJWI2J94M6n649qPB8pXjmxkWYiotrZD58sJwbfvz2VfehjD4p21vsjViuPwJgdYgNRjcuR4pevH42rxT7Lt/h4xBeKfC3i1SI/E5GKF8aZiF/s8Tri0dQX1fjXSLGQNtJseTzoHFcufbn++da1ha7a8rjS9xi8PzxMh/zYVItqzJRH/I30zk92AAAAAAAAAAAAAAAAAHi3DUY1vh0p/uS53yvnFUc5L/3950ff9+Jvd88Zf/Y+z1PUHo+IlUpvc3L789ThVCn+7UPH6EktqvGNPP/vjw66MQAAAAAAAAAAAAAAAAAAAO9p1XgxUnzl2NG0Gt3XFG+2rtevNGbm21eF7VxTvHPN9M3Nzc16audYzumcKzlXc67lXM8Zlbx9zrGc0zlXcq7mXMu5njOqefucYzmnc67kXM25lnM9Z/Tl7XOO5ZzOuZJzNedazvWccUiu3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DipRDV+FSm+9bWNFCkixiKmo51rAwfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgUEvVOB4p1l6slfdXKxFXIuJXm5ub5e2/Nzc3IzaK5Qd10H0FAAAAAAAAAAAAAAAAAACAQytV42OR4pn/2Uj1iLg9/MbAk0eGz587dna0GtVIRUl3/QuTVy7ULy7cuLk4t7Q0N1ufuvidt/PjapearVu3p8Yn3vWO9GTwzva3mlcXZud6fYL7tH+wdnHh5suLzetfXd7z8aHahZml5cXG1b0fjsGoREx3rxkpGzw1PlE2er7ZaJWbpspdGliJGOu1MwAAAAAAAAAAAAAAAAAAABwaQ6kan4sUP//3M6kzb7yvPef//7XvVbdqX/2D7e8CmN+VHd3fH9DLcuq1oSPlxPv61PjExGTX6r7+O0uLNqVUjWcjxSde+XA5Hz7F0J5z44u6p4q6G2dy3fCvFXUrO6pqI1PjE/XLC61jF+bnF642lhsz83eZgP9Urx0CAAAAAAAAAAAAAAAAAACAbUOpGj+JFP/5d/+WOtedz/P/+9r3uub//1Y5hb5USztzSzm3/6lybn97+f3nR4eef+5u6/dj/n/RppSq8c3tryvYmv8/vau2qPuzSPHmcx8tH0tReaKoa3S6037Ga835uRNF7V9Hil9/q1MbZe31XPvMdu3JonYwUvzlxs7ar+baD27Xnipqj0aKH/zH3rUf2q49XdT+PFL849/WO7VDRe3v59oj27XHry7Mz95vtxbj/91I8Z3Lv5M6fb7r+Hd9/8PKrtxyx5jfe7n38e+0Y+/xH+5at5LH9U8jxemffLgcy3uN/9lI8d3aR3Nde9/P5MefLv/fHv9PRIqf/cvO2mu59gPbtSd77dZBK8b/25Hi+3/1060+5/HPe3Z7hLrH///37cytV8m+jf+9f/+f7lo3nNt19W3ui/eipZe//lJjfn5u8YEXas9HvBvP0+tC8TLd95+VvwMnHmK/LFg4DAv3O3J8b3D/j07st+L9/88jxf8eqabOeUx+/39f+972+d9/fWP7/f/8rtxyQO//H+hadz6ftfT3RdSWb9zsfzaitvTy1481bzSuz12fa506eeLTnz578sTJs/1PdE7utpd63nePg2L8fxQpfvz3P976HLPz/G/v8/+hXbnlgMb/me4+7Tiv6XlXvCcV4/83keLpz/506/Pmvc7/O5//j35sZ279/h3Q+H+wa91wblfzbe4LAAAAAAAAAACAR8lQqsZfRIrf/ePfTJ05RL38/d/srtxyQH//daRr3Wxv8xoiPeCfSfe8kwEADpHi/O9DkeJ7mz/cmsu98/wvfqNT233+dzeH4fr/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwqEtRjT+MFEOvbaS1geJ+W+1Ss3Xr9tT4xN6bDaZIUYlqWV/caidPnT7zqbPnRjt5aeBhduMj8cLklQv1iws3bi7OLS3NzdanWs2rC7NzPT/Dg26/20i5A+s3Xro1e+3aUv3U8dM7Hr49/MbAk0eGz587dna0Uzs1PjEx2VXT1/+Of/od0l3WPxHV+GGkeGv4zfT9gYhKPPi+uM9rZ78Nlp0YKTsxNT5RdmS+2WgtFw+mSq6qRNS7Nhrr7KOHMBYPZCxipWh+0eCRonuTNxuLjZn5ufoXG4vLzeXmQitV2q0t+lOPSoymiNWIWN/jV7I/qvHNSPHKiY30TwMR1c5++OTlyS+dOH3/9lT2oY89KNpZ749YrTwCY3aIDUQ1/iFS/PL1o/GDgYi+aN/i4xFfKPK1iFeL/ExEKl4YZyJ+8VAP7eynvqjGmUixkDbS6wPF8aBzXLn05frnW9cWumo7x5VH/v3hYTrkx6ZaVONH5RF/I/3z7t/roQNqFAAAAAAAAAAAAAAAAADlTNrVSPGVY0dTOT94a05xs3W9fqUxM9+e1teZ+9eZM725ublZT+0cyzmdcyXnas61nOs5o5K3zzmWczrnSs7VnGs513NGNW+fcyzndM6VnKtlDmy1eD2vj768fc6xnNM5V3Ku5lzLuZ4zDsncPQAAAAAAAAAAAAAAAAAA4PFSiWp5FfdvfW0jlVOlxyKmo51rrvP72Pu/AAAA//8L9F/b") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x81000, @empty}, 0x1c) read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, 0xffffffffffffffff) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @loopback={0xff00000000000000}, 0x101}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000e80)=ANY=[], 0x18}}], 0x1, 0x4000880) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r6 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x141200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0) 2m15.068665379s ago: executing program 5 (id=760): mkdir(&(0x7f00000000c0)='./file0\x00', 0x25) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1600019, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x9) 2m14.685671769s ago: executing program 5 (id=766): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='10', 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000dc0)=@caif=@rfm, &(0x7f0000000e40)=0x80) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10002004}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x1, r2, 0x1, 0x4, 0x8, 0x8, 0x0, 0x1, 0x6}}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) rt_sigqueueinfo(0x0, 0x13, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x46, 0xdd, 0x7ff, 0x7, 0x1, 0x5, 0x40, 0xa, 0x81, 0x4, 0x53b6, 0xfffffffa, 0x4, 0x7, 0x8, 0xab, [0x1ff, 0xcbde]}}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6004, 0x1) 2m12.726775211s ago: executing program 5 (id=772): r0 = syz_open_dev$sndpcmc(&(0x7f0000000b40), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000b80)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000ec0)=0x4) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 2m11.559600018s ago: executing program 5 (id=782): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004700)=@nat={'nat\x00', 0x2, 0x5, 0x490, 0x0, 0x310, 0xffffffff, 0x310, 0x0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@empty, @ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, @port=0x4e23, @port=0x4e24}}}, {{@ipv6={@dev, @loopback, [0xff0000ff, 0xffffffff], [0xff, 0xffffff00], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x9, @ipv6=@mcast1, @ipv6=@mcast1, @port=0x4e20, @port=0x4e21}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0x0, 0x0, 0xff], [0x0, 0xffffffff, 0xff000000, 0xff000000], 'xfrm0\x00', 'wlan0\x00', {0xff}, {}, 0x1d, 0x0, 0x7, 0x35}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@local, @ipv6=@loopback, @icmp_id=0x65, @icmp_id=0x67}}}, {{@ipv6={@local, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'pim6reg\x00', {}, {}, 0x2f}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv4=@private=0xa010101, @ipv6=@remote, @port=0x4e23, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x603, &(0x7f0000002f40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) read$FUSE(r1, 0x0, 0x0) socket(0x25, 0x800, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x4, 0x3, 0x22, @mcast1, @local, 0x40, 0x1, 0x0, 0x80}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_dev$usbfs(&(0x7f0000000380), 0x76, 0x101b01) 2m11.103362469s ago: executing program 33 (id=782): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004700)=@nat={'nat\x00', 0x2, 0x5, 0x490, 0x0, 0x310, 0xffffffff, 0x310, 0x0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@empty, @ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, @port=0x4e23, @port=0x4e24}}}, {{@ipv6={@dev, @loopback, [0xff0000ff, 0xffffffff], [0xff, 0xffffff00], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x9, @ipv6=@mcast1, @ipv6=@mcast1, @port=0x4e20, @port=0x4e21}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0x0, 0x0, 0xff], [0x0, 0xffffffff, 0xff000000, 0xff000000], 'xfrm0\x00', 'wlan0\x00', {0xff}, {}, 0x1d, 0x0, 0x7, 0x35}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@local, @ipv6=@loopback, @icmp_id=0x65, @icmp_id=0x67}}}, {{@ipv6={@local, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'pim6reg\x00', {}, {}, 0x2f}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv4=@private=0xa010101, @ipv6=@remote, @port=0x4e23, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x603, &(0x7f0000002f40)="$eJzs3V1oXGkZAOD3TH5q29hUEcFepVgwaJ00P5YGFFuvhFqpraCoWGMy+SGTTEwm0ASkahEKCu2FqCAWcqGCKAQU7wT1yp8L/9iLdpdCFxZ2C6FLt7AXe5HlTGbS6WaaNJs0Z+k8D5z2+76Zk+898/Y9nfP1dCaAptWV/pKL+EhE3EgiOusea43qg11rz1vqXx5PtyRWVy/eTyJJ9+lfHq89P6n+frC6W3dE/O2HEWfbN847t7A4OVQsFmar/Z7y1EzP3MLiJyemhsYKY4XpvoETg4ODA/2DJ3btWH/2u1+//vGvfO5/V39w9vcr/7j6zSROR0f1sfrj2C1d0VV9TdridP0DScTJ3Z4sY7msA2DbTvYcO95SrfO2SM8BndFSrfrSL7/xoDP+eftJ+y6/efO1vYwV2H1XImIVaFKJ+ocmVXsfkF7/1ra9eu/xmx/v1Uw8ycqZtQvAG9W1naX1/LeurQ3F+yrXhgfeSKpXhmuS2trRDtzKpz/j/gf/k//zn9ItntE6DO9Nyy9nHQFZah/IOgKydORLWUdAlv59LesIyNL/V7KOgCxduJh1BGTpi8/bP4KzLb+4n3UE/OVMRBxvtP6XW1//iQbrPwcjYqd35vzxSERXvPDz+rGN6z+5ezuchk2snIn4dN29XUt1+a863FLtvT/tRFsyOlEspLk/FBHd0bYv7fduMseLx/7++UbjX72b5v/mhdr6X7ql89fWAqtx3Gvd9/h+I0PloZ0eN2tWvh9xpLVR/pP1+k8a1H/65+H8U85Rul663mj80K00/7+6unn+eZZWlyI+1rD+k/XnJJvfn9lTOR/01M4KG1347ytzjcZPHU3z/+BT8p+dtP4PbJ7/yvl//X7dhpnc3GfHOm80Gr/7ozT/b3373Zz/25MvVwKs3Vp8eahcnu2NaE++sHG8b/sxP69qr0ft9Urz3/3Rxn//b3b+3x8R33rKOf/63buvNhr/2mSa/399Xf1nJ83/yBb1nzxW/9tvnP/M0SuN5v7waJr/U/u3rv+BSjDd1RHv/7b2tAnKOk4AAAAAAAAAAAAAAAAAAAAAAIBmk4uIjkhy+fV2LpfPr32+74fiQK5Ymit/YrQ0Pz0Sle/KPhxtudonPXbWfR5sb6X9qN/3jn5/RHwgIq617K/088Ol4kjWBw9NqiPizh++M9zgm/kBAAAAAAAAAAAAAAAAAICsHHzC//9PvdSSdXTAs9ARcWf0Jy3fS9sP1Tk0lbT+f/tw6myof2g66h+al/qH5qX+oXmpf2he6h+al/qH5qX+oXmpf2he9fUPAAAAADyfzp87l26rS/3L42l/ujQ2MTk+M9h3Ij81P5wfLs3O5MdKpbHKN/ZPbf3ziqXSTG9fzF/uKRfmyj1zC4uXpkrz0+VLE1NDY4VLhbY9OCZga7d/OjCedQwAAAAAAAAAAAAAAAAAAMAjcwuLk0PFYmFWQ0NDY72R9ZkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB55OwAA//8t2VDh") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) read$FUSE(r1, 0x0, 0x0) socket(0x25, 0x800, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x4, 0x3, 0x22, @mcast1, @local, 0x40, 0x1, 0x0, 0x80}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_dev$usbfs(&(0x7f0000000380), 0x76, 0x101b01) 57.553971236s ago: executing program 7 (id=1030): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') pread64(r2, &(0x7f0000000400)=""/172, 0xac, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000640), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f00000006c0)) setpgid(r3, r3) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, &(0x7f0000000740)="0590d0270258e1a721c1a81ce7c95bec2fd187271b3199d67d28d08f8c325bde7c2675b54313bd88261f27a63463fb157ded05b1173ca7400a59817632e52fb46c378a4a3133ce07fb2601fe5231c830a5e8dd93d6fe510d5c48e621253935868816fe11afac52b30e54271eb256b4d091dcf494be046fb927cdb43f6ee95dc599d92ab70403e7"}) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000800)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4, &(0x7f0000000900)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000000940)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000980)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000b80)={0x0, 0xffffffffffffff8c, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x28, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000080)=0x5, 0x4) ioctl$FIOCLEX(r0, 0x5451) 55.977037211s ago: executing program 7 (id=1036): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x64}}}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) 55.693848715s ago: executing program 7 (id=1041): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40014) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) mkdir(&(0x7f0000000540)='./file0\x00', 0x97) mkdir(&(0x7f00000005c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000006c0)='./bus\x00') r3 = open(&(0x7f0000000700)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000740)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000800), 0x7f03) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x8) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xff) close(0x3) 54.575941176s ago: executing program 7 (id=1046): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='10', 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000dc0)=@caif=@rfm, &(0x7f0000000e40)=0x80) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10002004}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x1, r2, 0x1, 0x4, 0x8, 0x8, 0x0, 0x1, 0x6}}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) rt_sigqueueinfo(0x0, 0x13, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x46, 0xdd, 0x7ff, 0x7, 0x1, 0x5, 0x40, 0xa, 0x81, 0x4, 0x53b6, 0xfffffffa, 0x4, 0x7, 0x8, 0xab, [0x1ff, 0xcbde]}}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6004, 0x1) 52.894612172s ago: executing program 7 (id=1054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf250c00000008000300", @ANYRES32, @ANYBLOB="0a0006000822ef0000010000080037000000000005000800"], 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8010) 52.391153979s ago: executing program 7 (id=1061): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x844) socket(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000540)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) r1 = creat(&(0x7f0000000a00)='./bus\x00', 0x0) r2 = open(&(0x7f0000000a40)='./file1\x00', 0x86442, 0x10) dup3(r2, r1, 0x0) io_setup(0x91, &(0x7f0000000a80)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000ac0)=[&(0x7f0000000b00)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r1, &(0x7f0000000b40), 0x200a00}]) 51.781215511s ago: executing program 34 (id=1061): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x844) socket(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000540)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) r1 = creat(&(0x7f0000000a00)='./bus\x00', 0x0) r2 = open(&(0x7f0000000a40)='./file1\x00', 0x86442, 0x10) dup3(r2, r1, 0x0) io_setup(0x91, &(0x7f0000000a80)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000ac0)=[&(0x7f0000000b00)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r1, &(0x7f0000000b40), 0x200a00}]) 32.848315933s ago: executing program 4 (id=1146): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0xee01) r0 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x10000000) 32.514596114s ago: executing program 4 (id=1148): r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000d40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e40)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ec0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f40)=0x6) r4 = add_key$keyring(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', 0x0, 0x20) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000001040)=@secondary) add_key(&(0x7f0000001080)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) symlink(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0x0, &(0x7f00000010c0)='mounts\x00') read$FUSE(r5, &(0x7f0000001100)={0x2020}, 0x2020) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000001c0)={0xe5, [[0xffffffff, 0xffffffff, 0x5, 0xfffbffff, 0x6, 0x2, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xa, 0xffffffff, 0xffffffff, 0xd06f], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0x100, 0x7fffffff]], '\x00', [{0x6, 0x100, 0x0, 0x0, 0x1}, {0x18000000, 0x3e4d, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x21388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0xd, 0x0, 0x0, 0x1}, {0x2, 0x6, 0x0, 0x0, 0x1}, {0x270e, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x10000ffc, 0x0, 0x0, 0x1, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x100000, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ppoll(&(0x7f0000000440)=[{r0, 0x50a2}], 0x1, 0x0, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup/syz0\x00', 0x1ff) 30.642366793s ago: executing program 4 (id=1151): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x401, &(0x7f00000009c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000a40)="$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") syz_mount_image$fuse(&(0x7f00000015c0), &(0x7f0000001600)='.\x00', 0x84406d, &(0x7f0000001640)=ANY=[], 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000008c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x24000040) syz_open_dev$vcsu(0x0, 0x2, 0x2000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) ioctl(0xffffffffffffffff, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2014) 29.278254487s ago: executing program 4 (id=1154): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='10', 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000dc0)=@caif=@rfm, &(0x7f0000000e40)=0x80) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10002004}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x1, r2, 0x1, 0x4, 0x8, 0x8, 0x0, 0x1, 0x6}}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) rt_sigqueueinfo(0x0, 0x13, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x46, 0xdd, 0x7ff, 0x7, 0x1, 0x5, 0x40, 0xa, 0x81, 0x4, 0x53b6, 0xfffffffa, 0x4, 0x7, 0x8, 0xab, [0x1ff, 0xcbde]}}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6004, 0x1) 26.532554277s ago: executing program 4 (id=1160): setresuid(0x0, 0x0, 0xee01) r0 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x10000000) 24.729832972s ago: executing program 4 (id=1166): r0 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/thermal/cooling_device0/type\x00', 0x0, 0x0) read(r4, &(0x7f0000000740)=""/1024, 0x400) mount$nfs(0x0, &(0x7f0000000b40)='.\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="61636c2c6673636f6e746578743d756e636f6e66696e65645f752c00a2960c17e20daa308057063a22b4b3"]) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x280440e, &(0x7f0000000cc0)={[], [{@obj_role={'obj_role', 0x3d, '\"-}&!!\x9e#\x7f\x1a\x8b\xd8\\\x10\x0e\xcd\xb9D%\xe1\x84t\xc2\xc7g\xe2\xf8\xcb\x1d\xf6\xfbu\xa1\xb7\xf3+r\xb6{6\xb4\xb9\x89\xc6H1\xb8\xff\xcfK`\xca\xbf0\xe6\fm\xc9,\xe3\t\x85\x8e\x1e\xf6\xa3\x02\xc3\xa2\xfdY\xa2\x10\x8a\xf1\xa4\xa7\xb9\r\x9d\xa9Gq\xcegI\rEv\xda\xee{\xda\xad\xd1\xe8\xf3\xe9YD\x1b\xcaX+\x890\x11\xc6\x00\x82\xb5\xa9\xfdo\xd5\xbd~\xeaJQm@\xab\xb8\xc2\xed\x7f\xc2c\xf1{\r0\x00J\bDn\xa86k\x8f\"v\x85(\xee\xc3q\x18Q\xe3\xc6I\xfe\xd6\xd6\xb2\xb0=q\xfb\xdff3\x05\xcbXa\x8eR\xfd\xd8\xc3\xa1\'\xf1c6\xeb`XmJ\xb2\x98%6r\x96\x97\xdb\xb2I\xa1\x88'}}, {@fowner_gt}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0x1, 0xbdb, &(0x7f0000000e00)="$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") setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000700)=ANY=[@ANYBLOB='+5\x00\x00\x00\x00'], 0x1b8) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 24.005732499s ago: executing program 35 (id=1166): r0 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/thermal/cooling_device0/type\x00', 0x0, 0x0) read(r4, &(0x7f0000000740)=""/1024, 0x400) mount$nfs(0x0, &(0x7f0000000b40)='.\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="61636c2c6673636f6e746578743d756e636f6e66696e65645f752c00a2960c17e20daa308057063a22b4b3"]) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x280440e, &(0x7f0000000cc0)={[], [{@obj_role={'obj_role', 0x3d, '\"-}&!!\x9e#\x7f\x1a\x8b\xd8\\\x10\x0e\xcd\xb9D%\xe1\x84t\xc2\xc7g\xe2\xf8\xcb\x1d\xf6\xfbu\xa1\xb7\xf3+r\xb6{6\xb4\xb9\x89\xc6H1\xb8\xff\xcfK`\xca\xbf0\xe6\fm\xc9,\xe3\t\x85\x8e\x1e\xf6\xa3\x02\xc3\xa2\xfdY\xa2\x10\x8a\xf1\xa4\xa7\xb9\r\x9d\xa9Gq\xcegI\rEv\xda\xee{\xda\xad\xd1\xe8\xf3\xe9YD\x1b\xcaX+\x890\x11\xc6\x00\x82\xb5\xa9\xfdo\xd5\xbd~\xeaJQm@\xab\xb8\xc2\xed\x7f\xc2c\xf1{\r0\x00J\bDn\xa86k\x8f\"v\x85(\xee\xc3q\x18Q\xe3\xc6I\xfe\xd6\xd6\xb2\xb0=q\xfb\xdff3\x05\xcbXa\x8eR\xfd\xd8\xc3\xa1\'\xf1c6\xeb`XmJ\xb2\x98%6r\x96\x97\xdb\xb2I\xa1\x88'}}, {@fowner_gt}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0x1, 0xbdb, &(0x7f0000000e00)="$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") setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000700)=ANY=[@ANYBLOB='+5\x00\x00\x00\x00'], 0x1b8) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 10.820665214s ago: executing program 6 (id=1208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000ac1e0001000000000000000000000000fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000046b38d46c00000000000000000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000020000000000000000000000000000001f00000000000000fefffdfffff7159fffffff04000000fcffffff400000002abd700004350000020001002000000000000000480003006465666c61746500"/245], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000500)=0x8002, 0x4) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r4, 0x121, 0x70bd2b, 0xffffffff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0xf040}, 0x0) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000580)=0x5, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[], 0x8) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in=@private=0xa010102, @in6=@private1, 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000340), 0x2e9, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x2c, r9, 0x719, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x808c2) 9.934048485s ago: executing program 2 (id=1209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x4070bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) 9.821966245s ago: executing program 2 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0xffffffffffffff2a, 0x0, &(0x7f0000000280)=[@request_freeze={0x400c6313, 0x5, 0x1}, @clear_death={0x400c630f, 0x1, 0x3}], 0x22e, 0x0, &(0x7f00000002c0)}) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f00000003c0)={0x20080522}, &(0x7f0000000400)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r4 = fsopen(&(0x7f0000000440)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) chown(&(0x7f0000000480)='.\x00', 0x0, 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x20400, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x8) syz_open_pts(r7, 0x41) close_range(r6, 0xffffffffffffffff, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r8, 0x40045402, &(0x7f0000000540)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000580)={{0x1, 0x0, 0x8000}}) syz_usb_connect(0x2, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB="1201100181acd840f60d56004b0109021b00017f00500f09043900017afa712c09050c02ff03030c0900000000"], 0x0) 8.603182299s ago: executing program 1 (id=1212): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$eJzs3MtvVFUYAPDv3r54tyo+QNAqJhIfLS3PhRuMJi40MdEFxlVtC0EGqrQmQkhAF7g0JO6NSxP/Ale6MerKxMSV7g0JMWxEE5Mx9869nXE6Uzt0YID5/ZIL58w9wznfnHPmPs5cAuhb49kfScSWiPg1IjbUsv8tMF7768b1C7N/Xb8wm0S1+sYfSV7uz+sXZsui5fs21zLVapEfaVHv5bcjZiqV+bNFfnLp9HuTi+fOP3/y9MyJ+RPzZ6aPHDmwf/fwoemDXYlzNGvrSCzs2vHKW1demz125Z0fvsrau6XY3xhHt4zXPt2VBrpdU+9tbUgngz1sCB3JhmLWXUP5/B+Ngdi4vG80Xv64p40DbqlqtVptdXwuXKoC97Aket0CoDfKA312/Vtut+nU445w7WjE+4dr8d8ottqewUiLMkNN17fdNB4Rxy79/Xm2xS26DwEA0OiboxHxXKvzvzQeaii3rVhDGYuI+yLi/oh4ICK2R8SDEXnZhyPikQ7rb14hWXn+k169qcDWKDv/e6FY21o+//unmsdfGBsoclvz+IeS4ycr8/uKz2RvDI1k+alV6vj2pZ8/bbev8fwv27L6y3PBmvTqYNMNurmZpZl1hr3s2kcROweb4s8lUS7jJBGxIyJ2dvQv168wTj7z5a52perxb4yIVvGvogvrTNUvIp6u9f+laIq/lLRdn5w6fGj64OSGqMzvmyxHxUo//nT59Xb1/3//31pZ/29qHv/13ruYDflkQ8TiufOn8vXaxc7ruPzbJy2vaTatY/wPJ2/m6eHitQ9nlpbOTkUMJ6+ufH26/t4yX5bP4t+7p9X4T/PvuCj6/9GIyAbx7oh4LCIeL9r+REQ8GRF7Von/+xeferfdvvbxr3JXvouy+Oda9H/D+B/LUvX+7zwxcOq7rzuPv5T1/4E8tbd4ZS3ff2tt4Ho+OwAAALhbpPlv4JN0YjmdphMTtd/wb49NaWVhcenZ4wsfnJmr/VZ+LIbS8k7XaMP90Kni3nCZn27K7y/uG382sDHPT8wuVOZ6HTz0uc1t5n/m93vwORWgiee1oH+Z/9C/zH/oX/X5f6in7QBuP8d/6F+t5v/FHrQDuP0c/6F/mf/Qv8x/6F/mP/Slts/Gp+t65P+uTfyy7Y5oxl2QiLTzdw1GL9s83NPabzoxuOb/zOImEyMtd/X6mwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA7/g0AAP//hh/x1w==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='10', 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000dc0)=@caif=@rfm, &(0x7f0000000e40)=0x80) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10002004}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x1, r2, 0x1, 0x4, 0x8, 0x8, 0x0, 0x1, 0x6}}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) rt_sigqueueinfo(0x0, 0x13, 0x0) fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6004, 0x1) 7.364504669s ago: executing program 1 (id=1214): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') pread64(r0, &(0x7f0000000400)=""/172, 0xac, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) 7.148882019s ago: executing program 3 (id=1215): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x1, 0x4800003a, r3, 0x0) 7.088572987s ago: executing program 6 (id=1216): syslog(0x3, &(0x7f0000000940)=""/185, 0x64075da62934d5d1) 5.898290521s ago: executing program 1 (id=1217): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x157, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 5.099892752s ago: executing program 3 (id=1218): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f00000006c0)=[0xee00]) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc41a, &(0x7f0000000080)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000140)="$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") prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7, 0x100}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000800)={[0xfffffffffffffff7]}, 0x8, 0x0) read$watch_queue(r1, &(0x7f0000000840)=""/176, 0xb0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0) 5.09915335s ago: executing program 6 (id=1219): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x28642, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x16, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000019c0), 0x8, 0x10, &(0x7f0000001a00), 0x10}, 0x94) ioctl$TIOCMGET(r3, 0x5415, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x1, &(0x7f0000000380)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@rodir}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@uni_xlate}, {@numtail}, {@utf8no}, {@shortname_winnt}]}, 0x1, 0x2db, &(0x7f0000000c00)="$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") mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./bus\x00', 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x8) 5.098215045s ago: executing program 2 (id=1220): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x44, 0x0, 0xff, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0xa0001, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="300000004a00030000200000fbdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="020000001400010000000000000000000000ffdd"], 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=mix%d,uni_xlate=0,uni_xlate=1,uni_xlate=0,shortname=mixed,\x00'], 0x1, 0x364, &(0x7f0000000540)="$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") r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, 0x0) write(r6, &(0x7f0000000180)='1', 0x1) 3.922655643s ago: executing program 6 (id=1221): r0 = socket(0x10, 0x3, 0x0) pidfd_send_signal(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x1f, 0x9, 0x10}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x1}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x18410, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0xfe, 0x4b9, &(0x7f0000000f00)="$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") symlinkat(&(0x7f00000013c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000001500), &(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f0000001640)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001640), 0x7530b570, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f00000019c0)={0x2, [[0xe8, 0x80000001, 0x2, 0x40, 0x2, 0xfffffe00, 0x7], [0x400, 0x8001, 0x4a91, 0x9, 0x6, 0x8, 0xe, 0x7], [0x101, 0x5, 0x2, 0x7, 0x81, 0x5, 0x8000, 0x4]], '\x00', [{0x3ff, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x40, 0x8, 0x1, 0x1}, {0xbab7, 0x2}, {0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x401, 0x0, 0x1}, {0x5, 0x400, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x80000000, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x80000001, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x3938ce76, 0x1, 0x1, 0x1}], '\x00', 0x1}) syz_mount_image$fuse(0x0, &(0x7f0000001680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./file7\x00', 0x1c0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000), 0x4, 0xbe2, &(0x7f0000000300)="$eJzs3M9rHNcdAPDvjKSVbKtduZRS91CrmGJD27XsIlObQu3i0ksPhfZasJBXRtX6B5KKK1mQVfIPhCTnQC6BJCbBh/jsSwI5JpfEyTEmh4AJipVACInC7o6kjbUrydauR1ifDzzNe/Nm932/fqznPdjZAPas4dqfNOJQRFxIIorZ+TQiCvXaQES1cd3y0sL410sL40msrPzriySSiHiwtDC++l5JdjyQNQYi4oO/JvGz5zaOOzM3PzVWqZSns/bx2cvXjs/Mzf9h8vLYpfKl8pUTp/40enL01Mjp0Y7l+s2nZ29/9Zu/f1b99vXvbn754qtJnI3BrK85j04ZjuG1f5NmvREx1unBctKT5dOcZ9K7xYvSLgcFAEBbadMa7hdRjJ5YX7wV450Pcw0OAAAA6IiVnogVAAAA4CmX2P8DAADAU271ewAPlhbGV0u+30h4su6fi4ihRv7LWWn09Ea1fhyIvojY/yCJ5sdak8bLOuLex6ffqpXo0nPIm6kuRsQvW81/Us9/qP4UdyP/ZmlEjHRg/OGH2rst/98X1vNvnv9a/mc7MP5O8692IAYA9p475xo3so33v3Rt/RMt7n+9Le5djyPv+//9c420ljes/9bz72mz/vvnNse48drL19v11fL/8+2/vblaauPXjjvJ6VHcX4z4VW+r/JO1/JM2+V/Y5hjF76+X2/W1z//9wztKbJtWXok42nL+19e7yea/T3R8YrJSHmn8bfnbNovvjb7RbvzdMP/72+S/1fxf2+YY/zl//la9cnpgQ9/W+aefF5J/12uF7Mz/x2Znp09EFJJ/bDx/MnugvY3Va1bfo5b/sSObf/5b5d+Trb2TbC+wmB1r7WcfGvMvN2+83S6e4Wz/l+f8X3zM+X9+m2P89t0XjrXrG27a/9ZKbfx7SWMvDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACr0ogYjCQtrdXTtFSKOBARP4/9aeXqzOzvJq7+78rFWl/EUPSlE5OV8khEFBvtpNY+Ua+vt08+1P5jRByMiJeK++rt0vjVysW8kwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDNgYgYjCQtRUQaEcvFNC2V8o4KAAAA6LihiHgm7yAAAACArhrKOwAAAACg6+z/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LKDh+/cTSKiemZfvdQUsr6+XCMDui3NOwAgNz15BwDkpjfvAIDcPOIe33IBnkLJFv0DbXv6Ox4LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvX0UN37iYRUT2zr15qCllfX8tXHH6C0QHdlOYdAJCbns06e1ufLnQpFuDJavMRB/aA1nt8YC9JtugfWL+m+uOe/q7FBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1gvSVqKiLReT9NSKeInEUc++fV/a5eURyLipxHxUbGvf2KyUu7PO2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6bmZufmqsUilPq6jkVOmLXRFG/pVk5++TZJ/rnceT839MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkYmZufmqsUilPz+QdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJC3mbn5qbFKpTy9jcqtR7m4qZJ3jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5OeHAAAA//8v7AwF") 2.149230117s ago: executing program 1 (id=1222): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000180)=r1, 0x12) 2.048466997s ago: executing program 2 (id=1223): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) fallocate(r0, 0x20, 0x0, 0x100000001) 1.941372926s ago: executing program 3 (id=1224): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$eJzs3MtvVFUYAPDv3r54tyo+QNAqJhIfLS3PhRuMJi40MdEFxlVtC0EGqrQmQkhAF7g0JO6NSxP/Ale6MerKxMSV7g0JMWxEE5Mx9869nXE6Uzt0YID5/ZIL58w9wznfnHPmPs5cAuhb49kfScSWiPg1IjbUsv8tMF7768b1C7N/Xb8wm0S1+sYfSV7uz+sXZsui5fs21zLVapEfaVHv5bcjZiqV+bNFfnLp9HuTi+fOP3/y9MyJ+RPzZ6aPHDmwf/fwoemDXYlzNGvrSCzs2vHKW1demz125Z0fvsrau6XY3xhHt4zXPt2VBrpdU+9tbUgngz1sCB3JhmLWXUP5/B+Ngdi4vG80Xv64p40DbqlqtVptdXwuXKoC97Aket0CoDfKA312/Vtut+nU445w7WjE+4dr8d8ottqewUiLMkNN17fdNB4Rxy79/Xm2xS26DwEA0OiboxHxXKvzvzQeaii3rVhDGYuI+yLi/oh4ICK2R8SDEXnZhyPikQ7rb14hWXn+k169qcDWKDv/e6FY21o+//unmsdfGBsoclvz+IeS4ycr8/uKz2RvDI1k+alV6vj2pZ8/bbev8fwv27L6y3PBmvTqYNMNurmZpZl1hr3s2kcROweb4s8lUS7jJBGxIyJ2dvQv168wTj7z5a52perxb4yIVvGvogvrTNUvIp6u9f+laIq/lLRdn5w6fGj64OSGqMzvmyxHxUo//nT59Xb1/3//31pZ/29qHv/13ruYDflkQ8TiufOn8vXaxc7ruPzbJy2vaTatY/wPJ2/m6eHitQ9nlpbOTkUMJ6+ufH26/t4yX5bP4t+7p9X4T/PvuCj6/9GIyAbx7oh4LCIeL9r+REQ8GRF7Von/+xeferfdvvbxr3JXvouy+Oda9H/D+B/LUvX+7zwxcOq7rzuPv5T1/4E8tbd4ZS3ff2tt4Ho+OwAAALhbpPlv4JN0YjmdphMTtd/wb49NaWVhcenZ4wsfnJmr/VZ+LIbS8k7XaMP90Kni3nCZn27K7y/uG382sDHPT8wuVOZ6HTz0uc1t5n/m93vwORWgiee1oH+Z/9C/zH/oX/X5f6in7QBuP8d/6F+t5v/FHrQDuP0c/6F/mf/Qv8x/6F/mP/Slts/Gp+t65P+uTfyy7Y5oxl2QiLTzdw1GL9s83NPabzoxuOb/zOImEyMtd/X6mwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA7/g0AAP//hh/x1w==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='10', 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000dc0)=@caif=@rfm, &(0x7f0000000e40)=0x80) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10002004}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x1, r2, 0x1, 0x4, 0x8, 0x8, 0x0, 0x1, 0x6}}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) rt_sigqueueinfo(0x0, 0x13, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x46, 0xdd, 0x7ff, 0x7, 0x1, 0x5, 0x40, 0xa, 0x81, 0x4, 0x53b6, 0xfffffffa, 0x4, 0x7, 0x8, 0xab, [0x1ff, 0xcbde]}}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6004, 0x1) 680.263106ms ago: executing program 2 (id=1225): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) 639.620829ms ago: executing program 6 (id=1226): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) read(r0, &(0x7f0000000180)=""/167, 0xa7) 621.829814ms ago: executing program 1 (id=1227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e900172f8db0049d28b31c32a790343c48040000db", 0x2a}, {&(0x7f0000000180)="24f5bbd11cb3", 0x6}, {&(0x7f00000001c0)="a43b2eaab4000000000080", 0xb}, {&(0x7f0000000200)='N4', 0x2}, {&(0x7f00000002c0)="dff81d", 0x3}], 0x5) 620.930285ms ago: executing program 3 (id=1228): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "00bc00", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x2c}}}}}}}, 0x0) 525.708179ms ago: executing program 2 (id=1229): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210080, &(0x7f0000000280)={[{@user_xattr}, {@resgid}, {@dioread_nolock}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@barrier}, {@noauto_da_alloc}, {@nojournal_checksum}, {@noinit_itable}]}, 0x3, 0x587, &(0x7f00000083c0)="$eJzs3c9rHFUcAPDvbHbb9Ic2hVKsiBR6sFKbNIk/KnioR9FiQT3XkGxDyaZbspvSxILtwV68aBFELIh3vXvwULx49K8oaKFICQp6WZnNbH40m2R3szFp9/OBSd6bmd03b958H2/27TIB9Kzj6Z9cxLGI+CKJOLRiWz6yjccX91t4dGM8XZKo1T74M4kkW9fYP8n+H8gyz0XEL59FnMqtLbcyNz81VioVZ7L8UHX66lBlbv705emxyeJk8crI6OjZ10ZH3nzj9XWOvL/tur584e9v3r/3ztnPTyx8/eODw3eSOBcHs20r69GWvatyN1dmjtdq2TkpxLnHXjbcUWG7V7LTB0BH+rI4L0TEscKhQiPqgaffpxFRA3pU0mb879VfwFOiMQ5o3Nt3fB/8hHr49uIN0Nr65xc/G4n++r3R/oVk1Z1Rer870IXy0zJ++uPunXSJrXwOAdCmm7ci4kw+v7b/S7L+r3NnWtjn8TL0f/D/uZeOf15pNv7JLY1/osn450CT2O3E5vGfe9CFYtaVjv/eajr+XZq0GujLcs/Ux3yF5NLlUjHt256NiJNR2JvmN5rPObtwv7betpXjv3RJy2+MBbPjeJBfPccUE2PVsa3UeaWHtyKebzr+TZbaP2nS/un5+KjFMo4W77643rbN67+9at9HvNS0/ZdntJKN5yeH6tfDUOOqWOuv20d/W6/85vX/9edtqGpTafvv37j+A8nK+dpK+2V81/9vcb1tnV7/e5IP6+k92brrY9XqzHDEnuS9tetHll/byDf2T+t/8sTG/V+z639fRHzcYv1vH/nhhc7rv73S+k+01f7tJ+6/+8m365XfWvu/Wk+dzNa00v+1eoBbOXcAAAAAAACw2+Qi4mAkucHoz9K53ODg4vc7jsT+XKlcqZ66VJ69MhH138oORCHXmOk+tOL7EMPZ92Eb+ZHH8qMRcTgivurbV88PjpdLEztdeQAAAAAAAAAAAAAAAAAAANglDiz9/j9W/f4/9XvfTh8dsO3yi8//BnrQpo/878aTnoBdadP4B55a4h96l/iH3iX+oSfVp/jEP/Qu8Q+9S/xD7xL/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FUXzp9Pl9rCoxvjaX7i2tzsVPna6YliZWpwenZ8cLw8c3VwsvzlQmvvVyqXrw6PxOz1oWqxUh2qzM1fnC7PXqlevDw9Nlm8WPSccQAAAAAAAAAAAAAAAAAAAFirMjc/NVYqFWe6kCiUSsVcRLSyc0SXCn3iEv9s+X3SdruZb+08b08iieU1+V1xViW6ndjpngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlv0XAAD//7NUMRw=") r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x109801, 0x10) write$rfkill(r1, &(0x7f0000000140)={0x8, 0x6}, 0xfe76) truncate(&(0x7f0000000100)='./file1\x00', 0x4) 310.707879ms ago: executing program 3 (id=1230): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000140)=@base={0x18, 0x3, 0x41, 0xfffffffd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x50) 54.050163ms ago: executing program 3 (id=1231): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x28642, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x16, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000019c0), 0x8, 0x10, &(0x7f0000001a00), 0x10}, 0x94) ioctl$TIOCMGET(r1, 0x5415, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x1, &(0x7f0000000380)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@rodir}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@uni_xlate}, {@numtail}, {@utf8no}, {@shortname_winnt}]}, 0x1, 0x2db, &(0x7f0000000c00)="$eJzs3U1rE0EYwPGnSdukKW1yKAUFcdCLXpY2foIgLYgBpXaLehC2dqMha1KyMRIR05vXfo7i0YMoaL9AL72J1+IlCIKXHsSV7Gabl66QRuPW5v+DMtOZeTazO9vy7EKnjbvbTwo5W8sZFYnElUREtuRQJNWstYy1yohbn5ROW3J1+vunC3fu3b+ZyWaXVpRazqxeSyulZi9+ePbi9aXdyvTam9n3MdlLPWh8Sx/sze+da/xc9Y9eEjHUeqlUMdYtU23k7YKm1G3LNGxT5Yu2Wa6ojv6cVdrcrCmjuDGT2Cybtq2MYk0VzJqqlFSlXFPGIyNfVJqmqZmEdIvJWRc9cYS+s7JiZIYyGYRhKqixXM4Y0cBOfedfTAoAAJwujd3taBj5/+O8rfK2yh105ffH8/+InCD/F/Hy/8mg/H+UTPc5ro/8fyKwdentALNCOJr5f6L189uN/B8AAAAAAAAAAAAAAAAAAAAAgP/BoeMkHcdJ+qX/FRORuIj434c9TwwH6z/aOv5wLy5ivarqVd0rvf5MTvJiiSkLEyI/3PvBceLNwqsv38guLSjXvHy06q34elWPujtuuPG+VCve1Y5f9OJVZ3xdJiTR+flpScpccHy6Nz4m9ao+KVcuO/6mH6ZokpT9h1ISSzbc+7od/3JRqeu3sqp7/lPuOAAAAAAAzgJNHUn1Pr+7/Zrytw3p6fca2+8HJHn0fqDn+Xwh4Pm+qo/L+fHwzhsAAAAAgFFi154XDMsyyyNQ8f//QVfXuAx2wPAvXbzfwc3zbrW8Oy1r0a6MbXmrcrwrIiKDHjkqfzSxryLS1TIX+nL/jcqXp961Pmr5/PvBazOh/VICAAAAMBR+0j924kh9fygTAgAAAAAAAAAAAAAAAAAAAAAAAAAAAABgBPW7eZg/fpC9xzo+LhrOWQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACnw68AAAD///2/FNA=") mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./bus\x00', 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x8) 53.637357ms ago: executing program 6 (id=1232): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x2, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x608, 0xfd, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000080)=ANY=[], 0x0) 0s ago: executing program 1 (id=1233): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x44, 0x0, 0xff, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0xa0001, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="300000004a00030000200000fbdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="020000001400010000000000000000000000ffdd"], 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=mix%d,uni_xlate=0,uni_xlate=1,uni_xlate=0,shortname=mixed,\x00'], 0x1, 0x364, &(0x7f0000000540)="$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") r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, 0x0) write(r6, &(0x7f0000000180)='1', 0x1) kernel console output (not intermixed with test programs): xt4_process_orphan:346 [ 128.300951][ T6587] EXT4-fs (loop0): 1 truncate cleaned up [ 128.316523][ T6587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.421906][ T5767] usb 4-1: unit 2 not found! [ 128.421933][ T5767] usb 4-1: unit 236 not found! [ 128.493065][ T6593] mmap: syz.4.242 (6593) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.508888][ T5633] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 128.564807][ T5767] usb 4-1: USB disconnect, device number 2 [ 128.565885][ T5633] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 128.591884][ T5633] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 128.594607][ T5633] EXT4-fs error (device loop0): ext4_lookup:1779: inode #2: comm syz-executor: bad inode number: 6 [ 128.597862][ T5633] EXT4-fs error (device loop0): ext4_lookup:1779: inode #2: comm syz-executor: bad inode number: 6 [ 128.696808][ T6189] udevd[6189]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.046196][ T6611] loop2: detected capacity change from 0 to 256 [ 129.049083][ T6611] exfat: Deprecated parameter 'namecase' [ 129.089676][ T6611] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x11c000d0, checksum : 0x1119abd0) [ 129.089704][ T6611] exFAT-fs (loop2): invalid boot region [ 129.089714][ T6611] exFAT-fs (loop2): failed to recognize exfat type [ 129.163093][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.173340][ T5767] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 129.338816][ T5767] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 129.340646][ T5767] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.341050][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.342390][ T5767] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 129.342416][ T5767] usb 6-1: SerialNumber: syz [ 129.666280][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.841541][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.012706][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.014379][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.015350][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.017873][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.018863][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.090508][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.191489][ T5767] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 130.855217][ T6648] ip_tables: iptables: counters copy to user failed while replacing table [ 131.053675][ T6649] hub 5-0:1.0: USB hub found [ 131.058521][ T6649] hub 5-0:1.0: 1 port detected [ 131.400639][ T30] bridge_slave_1: left allmulticast mode [ 131.400680][ T30] bridge_slave_1: left promiscuous mode [ 131.401522][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.408863][ T6609] loop5: detected capacity change from 0 to 164 [ 131.630932][ T30] bridge_slave_0: left allmulticast mode [ 131.630970][ T30] bridge_slave_0: left promiscuous mode [ 131.631195][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.716492][ T6656] loop3: detected capacity change from 0 to 8 [ 131.749130][ T6641] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.749158][ T6641] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 131.923871][ T6656] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.924278][ T6656] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.926458][ T29] audit: type=1800 audit(1793338208.494:3): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.263" name="file1" dev="loop3" ino=5 res=0 errno=-5 [ 132.005574][ T6641] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.005601][ T6641] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 132.060709][ T10] usb 6-1: USB disconnect, device number 4 [ 132.076238][ T10] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 132.133089][ T5643] Bluetooth: hci4: command tx timeout [ 132.136407][ T6641] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.136428][ T6641] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 132.216044][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.216125][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.317482][ T6641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.317511][ T6641] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 132.410187][ T6641] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 132.410214][ T6641] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 132.454914][ T6678] loop5: detected capacity change from 0 to 1024 [ 132.461795][ T6641] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 132.461819][ T6641] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 132.470950][ T6678] hfsplus: failed to load extents file [ 132.789479][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.808001][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.824843][ T30] bond0 (unregistering): Released all slaves [ 132.851250][ T6692] loop5: detected capacity change from 0 to 128 [ 134.665447][ T5641] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 134.665494][ T5641] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 134.665519][ T5641] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 134.665544][ T5641] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 134.665568][ T5641] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 134.665591][ T5641] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 134.665615][ T5641] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 134.665638][ T5641] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 134.753778][ T5641] hid-generic 0000:0000:0001.0002: hidraw0: HID v0.10 Device [syz0] on syz1 [ 134.922324][ T6628] rxe_eth0 speed is unknown, defaulting to 1000 [ 135.993698][ T6723] fido_id[6723]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 137.263046][ T6752] syzkaller0: entered promiscuous mode [ 137.263071][ T6752] syzkaller0: entered allmulticast mode [ 137.343264][ T6761] Bluetooth: MGMT ver 1.23 [ 137.499454][ T6766] loop4: detected capacity change from 0 to 1024 [ 137.519896][ T6766] hfsplus: failed to load extents file [ 139.378326][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 139.528151][ T6786] loop1: detected capacity change from 0 to 512 [ 139.822036][ T6790] vlan2: entered promiscuous mode [ 139.822064][ T6790] dummy0: entered promiscuous mode [ 139.844527][ T6790] vlan2: entered allmulticast mode [ 139.844552][ T6790] dummy0: entered allmulticast mode [ 139.935395][ T6786] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 139.935442][ T6786] FAT-fs (loop1): Filesystem has been set read-only [ 140.251697][ T30] hsr_slave_0: left promiscuous mode [ 140.267970][ T30] hsr_slave_1: left promiscuous mode [ 140.270704][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.270748][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.308293][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.308320][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.438011][ T30] veth1_macvtap: left promiscuous mode [ 140.438066][ T30] veth0_macvtap: left promiscuous mode [ 140.438177][ T30] veth1_vlan: left promiscuous mode [ 140.438262][ T30] veth0_vlan: left promiscuous mode [ 142.350883][ T6862] loop1: detected capacity change from 0 to 128 [ 142.395343][ T6862] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 142.395370][ T6862] FAT-fs (loop1): Filesystem has been set read-only [ 142.422709][ T6862] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 143.605077][ T6873] fuse: Bad value for 'group_id' [ 143.605100][ T6873] fuse: Bad value for 'group_id' [ 143.674551][ T30] team0 (unregistering): Port device team_slave_1 removed [ 143.717364][ T30] team0 (unregistering): Port device team_slave_0 removed [ 143.909281][ T6881] loop4: detected capacity change from 0 to 256 [ 144.024996][ T6881] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 145.019123][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.193170][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 145.213634][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 145.213680][ T10] usb 4-1: New USB device found: idVendor=07fd, idProduct=0004, bcdDevice=0.40 [ 145.238343][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.238369][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 145.265731][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.265758][ T10] usb 4-1: Product: syz [ 145.265775][ T10] usb 4-1: Manufacturer: syz [ 145.265792][ T10] usb 4-1: SerialNumber: syz [ 145.320646][ T10] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 145.320671][ T10] usb 4-1: 1:1 : format type 255 is not supported yet [ 145.981959][ T10] usb 4-1: unit 131 not found! [ 146.073296][ T10] usb 4-1: USB disconnect, device number 3 [ 146.157124][ T6189] udevd[6189]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.285555][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 148.224166][ T29] audit: type=1326 audit(1793338480.789:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.5.330" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3be2d9f559 code=0x0 [ 148.300196][ T6931] fuse: Bad value for 'group_id' [ 148.300219][ T6931] fuse: Bad value for 'group_id' [ 149.140920][ T6934] loop3: detected capacity change from 0 to 512 [ 149.150451][ T6934] vfat: Bad value for 'shortname' [ 149.267795][ T6932] loop5: detected capacity change from 0 to 256 [ 149.381395][ T6932] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 149.465611][ T6932] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 149.465642][ T6932] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 149.465657][ T6932] UDF-fs: Scanning with blocksize 512 failed [ 149.478820][ T6939] loop1: detected capacity change from 0 to 128 [ 149.514835][ T6932] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 149.534452][ T6932] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 149.534524][ T6932] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 149.534556][ T6932] UDF-fs: Scanning with blocksize 1024 failed [ 149.546270][ T6932] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 149.553165][ T6932] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 149.553191][ T6932] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 149.553206][ T6932] UDF-fs: Scanning with blocksize 2048 failed [ 149.555918][ T6932] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 149.572320][ T6932] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 149.572348][ T6932] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 149.572362][ T6932] UDF-fs: Scanning with blocksize 4096 failed [ 149.572374][ T6932] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 149.682981][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.683390][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.683535][ T6628] bridge_slave_0: entered allmulticast mode [ 149.685478][ T6628] bridge_slave_0: entered promiscuous mode [ 149.716318][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.716768][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.716919][ T6628] bridge_slave_1: entered allmulticast mode [ 149.719349][ T6628] bridge_slave_1: entered promiscuous mode [ 149.785655][ T6628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.789105][ T6628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.440272][ T6953] loop4: detected capacity change from 0 to 128 [ 150.979144][ T6628] team0: Port device team_slave_0 added [ 151.051890][ T6628] team0: Port device team_slave_1 added [ 151.180023][ T6957] loop2: detected capacity change from 0 to 128 [ 151.276875][ T6957] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 151.302362][ T6967] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 151.302387][ T6967] FAT-fs (loop1): Filesystem has been set read-only [ 151.502867][ T6966] loop3: detected capacity change from 0 to 512 [ 151.529696][ T6628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.529715][ T6628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.529745][ T6628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.531104][ T29] audit: type=1800 audit(1793338484.099:5): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.338" name="file1" dev="loop2" ino=94 res=0 errno=-22 [ 151.608445][ T6628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.608463][ T6628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.608490][ T6628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.664735][ T6966] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 151.667364][ T6972] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 151.691582][ T6968] syzkaller0: entered promiscuous mode [ 151.691606][ T6968] syzkaller0: entered allmulticast mode [ 151.747849][ T6972] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 151.771418][ T6966] EXT4-fs (loop3): 1 truncate cleaned up [ 151.788017][ T6972] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 151.844728][ T6966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.209984][ T6628] hsr_slave_0: entered promiscuous mode [ 152.211263][ T6628] hsr_slave_1: entered promiscuous mode [ 152.212169][ T6628] debugfs: 'hsr0' already exists in 'hsr' [ 152.212190][ T6628] Cannot create hsr debugfs directory [ 152.318201][ T6978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 153.744046][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.964229][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 154.004358][ T6992] fuse: Bad value for 'group_id' [ 154.004380][ T6992] fuse: Bad value for 'group_id' [ 154.030654][ T6994] syz.3.345 (6994): attempted to duplicate a private mapping with mremap. This is not supported. [ 154.114707][ T6628] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 154.135042][ T6628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.137742][ T6628] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 154.165862][ T6628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.167194][ T6628] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 154.195896][ T6628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.198631][ T6628] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 154.224956][ T6628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.262059][ T6994] loop3: detected capacity change from 0 to 1024 [ 154.279057][ T6994] EXT4-fs: Ignoring removed bh option [ 154.279141][ T6994] EXT4-fs: Ignoring removed orlov option [ 154.314120][ T6994] EXT4-fs: Mount option(s) incompatible with ext2 [ 154.503917][ T6628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.778495][ T6628] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.801848][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.801944][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.647794][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.647930][ T6714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.704438][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.856645][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 155.857595][ T10] usb 3-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 155.880679][ T10] usb 3-1: config 0 has no interfaces? [ 155.909191][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.909223][ T10] usb 3-1: Product: syz [ 155.909240][ T10] usb 3-1: Manufacturer: syz [ 155.909257][ T10] usb 3-1: SerialNumber: syz [ 155.972782][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 155.972813][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 156.111065][ T7023] vlan2: entered promiscuous mode [ 156.111092][ T7023] dummy0: entered promiscuous mode [ 156.111385][ T7023] vlan2: entered allmulticast mode [ 156.111404][ T7023] dummy0: entered allmulticast mode [ 156.217258][ T7031] syzkaller0: entered promiscuous mode [ 156.217285][ T7031] syzkaller0: entered allmulticast mode [ 157.592938][ T7048] loop1: detected capacity change from 0 to 512 [ 157.625586][ T7048] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 157.655432][ T7048] EXT4-fs (loop1): 1 truncate cleaned up [ 157.665968][ T7048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.393152][ T29] audit: type=1800 audit(1793338490.489:6): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="file1" dev="loop1" ino=15 res=0 errno=-22 [ 158.684917][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.725647][ T5793] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 160.535990][ T7064] loop4: detected capacity change from 0 to 4096 [ 160.540009][ T7064] EXT4-fs: Ignoring removed orlov option [ 160.540093][ T7064] EXT4-fs: Ignoring removed oldalloc option [ 160.634923][ T7064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.670864][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 160.780268][ T7092] loop3: detected capacity change from 0 to 128 [ 160.806718][ T7092] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 160.843509][ T6628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.938521][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.940017][ T29] audit: type=1800 audit(1793338493.509:7): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.368" name="file1" dev="loop3" ino=94 res=0 errno=-22 [ 161.066640][ T7098] syzkaller0: entered promiscuous mode [ 161.066666][ T7098] syzkaller0: entered allmulticast mode [ 162.679617][ T7129] fuse: Unknown parameter 'group_i00000000000000000000' [ 162.823830][ T6628] veth0_vlan: entered promiscuous mode [ 162.862062][ T6628] veth1_vlan: entered promiscuous mode [ 162.967417][ T6628] veth0_macvtap: entered promiscuous mode [ 163.002371][ T6628] veth1_macvtap: entered promiscuous mode [ 163.274686][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.300240][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.184208][ T7138] syzkaller0: entered promiscuous mode [ 164.184234][ T7138] syzkaller0: entered allmulticast mode [ 164.188754][ T1005] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.190273][ T6567] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.190414][ T6567] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.190545][ T6567] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.400843][ T7144] loop1: detected capacity change from 0 to 512 [ 164.419319][ T7144] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 164.474044][ T7144] EXT4-fs (loop1): 1 truncate cleaned up [ 164.496312][ T7144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.928798][ T7153] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 165.736371][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.801808][ T3344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.801832][ T3344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.022292][ T6773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.022316][ T6773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.759152][ T7177] loop6: detected capacity change from 0 to 512 [ 167.324596][ T7181] fuse: Unknown parameter 'group_i00000000000000000000' [ 167.331981][ T7185] loop4: detected capacity change from 0 to 256 [ 167.365905][ T7177] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 167.415695][ T7177] EXT4-fs error (device loop6) in ext4_process_orphan:346: Out of memory [ 167.415723][ T7177] loop6: lost filesystem error report for type 5 error -12 [ 167.422874][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 167.422898][ C0] EXT4-fs (loop6): initial error at time 1793338499: ext4_process_orphan:346 [ 167.422925][ C0] EXT4-fs (loop6): last error at time 1793338499: ext4_process_orphan:346 [ 167.428247][ T7177] EXT4-fs (loop6): 1 truncate cleaned up [ 167.435054][ T7177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.436017][ T7183] loop1: detected capacity change from 0 to 1024 [ 167.570425][ T7183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.752040][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.853931][ T6628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.978392][ T7195] loop2: detected capacity change from 0 to 2048 [ 168.016627][ T7195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.656291][ T7197] syzkaller0: entered promiscuous mode [ 168.656317][ T7197] syzkaller0: entered allmulticast mode [ 169.073171][ T7209] loop1: detected capacity change from 0 to 2048 [ 169.101395][ T7209] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 169.126247][ T7209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.127275][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.397'. [ 169.127412][ T7215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.201922][ T7215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.235860][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 171.178411][ T29] audit: type=1800 audit(1793338503.639:8): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.391" name="file1" dev="loop2" ino=1415 res=0 errno=-4 [ 171.937460][ T7243] loop5: detected capacity change from 0 to 512 [ 171.938472][ T7243] EXT4-fs: Ignoring removed nobh option [ 172.014193][ T7243] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory [ 172.014221][ T7243] loop5: lost filesystem error report for type 5 error -12 [ 172.022584][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 172.022609][ C0] EXT4-fs (loop5): initial error at time 1793338504: ext4_process_orphan:346 [ 172.022636][ C0] EXT4-fs (loop5): last error at time 1793338504: ext4_process_orphan:346 [ 172.028731][ T7243] EXT4-fs (loop5): 2 truncates cleaned up [ 172.033343][ T7243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.323630][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.483389][ T2244] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 173.636185][ T2244] usb 5-1: New USB device found: idVendor=1908, idProduct=1315, bcdDevice=0.00 [ 173.642785][ T2244] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 173.642815][ T2244] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.642859][ T2244] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.642905][ T2244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.655317][ T2244] usb 5-1: config 0 descriptor?? [ 173.672466][ T2244] usb-storage 5-1:0.0: USB Mass Storage device detected [ 173.696357][ T2244] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 173.961830][ T7252] loop4: detected capacity change from 0 to 1024 [ 174.001521][ T7252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.001583][ T7252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.027325][ T5767] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 174.598360][ T7252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 174.598480][ T7252] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.642647][ T5767] usb 3-1: Using ep0 maxpacket: 16 [ 174.650956][ T5767] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.651007][ T5767] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b1, bcdDevice=0.40 [ 174.674731][ T5767] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.674775][ T5767] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 174.727379][ T7276] vlan2: entered promiscuous mode [ 174.727403][ T7276] dummy0: entered promiscuous mode [ 174.727644][ T7276] vlan2: entered allmulticast mode [ 174.727661][ T7276] dummy0: entered allmulticast mode [ 174.781327][ T5767] usb 3-1: string descriptor 0 read error: -22 [ 174.781528][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.909467][ T7279] syzkaller0: entered promiscuous mode [ 174.909493][ T7279] syzkaller0: entered allmulticast mode [ 175.051629][ T5767] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 175.080668][ T5767] usb 3-1: USB disconnect, device number 5 [ 175.167195][ T7282] warning: `syz.6.411' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.289329][ T7288] EXT4-fs warning (device sda1): ext4_group_extend:1872: need to use ext2online to resize further [ 176.162662][ T5793] usb 5-1: USB disconnect, device number 4 [ 176.253030][ T7252] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 176.678221][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 176.791076][ T7309] loop6: detected capacity change from 0 to 1024 [ 177.006506][ T7317] loop6: detected capacity change from 0 to 512 [ 177.011801][ T7317] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 177.011817][ T7317] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 177.059096][ T7317] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.422: bg 0: block 384: padding at end of block bitmap is not set [ 177.059130][ T7317] loop6: lost filesystem error report for type 5 error -117 [ 177.074233][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 177.074255][ C1] EXT4-fs (loop6): initial error at time 1793338509: ext4_validate_block_bitmap:445 [ 177.074282][ C1] EXT4-fs (loop6): last error at time 1793338509: ext4_validate_block_bitmap:445 [ 177.120387][ T7317] EXT4-fs (loop6): Remounting filesystem read-only [ 177.121577][ T7317] EXT4-fs (loop6): 1 truncate cleaned up [ 177.138537][ T7317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.207683][ T6628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.302604][ T7326] syzkaller0: entered promiscuous mode [ 177.302626][ T7326] syzkaller0: entered allmulticast mode [ 177.399537][ T7328] loop3: detected capacity change from 0 to 512 [ 177.444878][ T7328] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 177.504342][ T7328] EXT4-fs (loop3): 1 truncate cleaned up [ 177.522028][ T7328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.693470][ T7331] loop5: detected capacity change from 0 to 512 [ 177.727061][ T7331] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 177.829153][ T7331] EXT4-fs (loop5): 1 truncate cleaned up [ 177.830949][ T7331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.750755][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.793017][ T7340] loop6: detected capacity change from 0 to 1024 [ 178.796273][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.838319][ T7340] hfsplus: failed to load extents file [ 178.935050][ T7342] vlan2: entered promiscuous mode [ 178.935075][ T7342] dummy0: entered promiscuous mode [ 178.935316][ T7342] vlan2: entered allmulticast mode [ 178.935332][ T7342] dummy0: entered allmulticast mode [ 179.211199][ T7346] loop3: detected capacity change from 0 to 512 [ 179.213544][ T2244] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 179.328524][ T7346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.384833][ T2244] usb 7-1: Using ep0 maxpacket: 32 [ 179.390357][ T2244] usb 7-1: New USB device found: idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 179.395580][ T2244] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 179.395607][ T2244] usb 7-1: config 0 has no interface number 0 [ 179.395650][ T2244] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 179.395678][ T2244] usb 7-1: config 0 interface 196 has no altsetting 0 [ 179.402207][ T2244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.402234][ T2244] usb 7-1: Product: syz [ 179.402251][ T2244] usb 7-1: Manufacturer: syz [ 179.402268][ T2244] usb 7-1: SerialNumber: syz [ 179.423992][ T2244] usb 7-1: config 0 descriptor?? [ 179.426054][ T7340] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 179.674983][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.878268][ T7360] loop3: detected capacity change from 0 to 2048 [ 179.955558][ T7360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.080258][ T2244] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 180.113678][ T2244] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 180.144799][ T7360] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 180.205616][ T7366] loop5: detected capacity change from 0 to 256 [ 180.260133][ T7366] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 180.274073][ T7366] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 180.274101][ T7366] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 180.274117][ T7366] UDF-fs: Scanning with blocksize 512 failed [ 180.314139][ T7366] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 180.317070][ T7366] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 180.317127][ T7366] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 180.317158][ T7366] UDF-fs: Scanning with blocksize 1024 failed [ 180.379090][ T7366] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 180.381657][ T7366] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 180.381683][ T7366] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 180.381698][ T7366] UDF-fs: Scanning with blocksize 2048 failed [ 180.386051][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.564711][ T7370] loop4: detected capacity change from 0 to 256 [ 181.158022][ T7366] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 181.188607][ T7370] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 181.188999][ T7370] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 181.189625][ T7370] exFAT-fs (loop4): failed to load alloc-bitmap [ 181.189638][ T7370] exFAT-fs (loop4): failed to recognize exfat type [ 181.211568][ T7366] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 181.211596][ T7366] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 181.211612][ T7366] UDF-fs: Scanning with blocksize 4096 failed [ 181.211623][ T7366] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 181.229992][ T7368] xt_TCPMSS: Only works on TCP SYN packets [ 181.528323][ T7376] xt_policy: neither incoming nor outgoing policy selected [ 181.785629][ T7388] loop4: detected capacity change from 0 to 512 [ 181.796372][ T7388] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 181.842000][ T7388] EXT4-fs (loop4): 1 truncate cleaned up [ 181.860151][ T7378] syzkaller0: entered promiscuous mode [ 181.860179][ T7378] syzkaller0: entered allmulticast mode [ 181.901231][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 181.901366][ T7394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.930906][ T7394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.083773][ T7388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.769558][ T2244] usb 7-1: USB disconnect, device number 2 [ 183.899706][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.300728][ T7430] loop4: detected capacity change from 0 to 512 [ 184.306692][ T7430] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.554689][ T7432] loop4: detected capacity change from 0 to 1024 [ 184.576236][ T7432] hfsplus: failed to load extents file [ 185.041459][ T7443] loop4: detected capacity change from 0 to 1024 [ 185.386407][ T5793] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 185.748756][ T5793] usb 5-1: Using ep0 maxpacket: 16 [ 185.845298][ T5793] usb 5-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 185.860324][ T5793] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.860361][ T5793] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.860386][ T5793] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 185.860416][ T5793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.860452][ T5793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.955822][ T5793] usb 5-1: config 0 descriptor?? [ 186.456364][ T5793] hid (null): unknown global tag 0xd [ 186.727823][ T5793] usb 5-1: USB disconnect, device number 5 [ 187.574990][ T2244] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 188.671941][ T7472] fuse: Bad value for 'fd' [ 189.233042][ T7495] nfs: Unknown parameter 'fscontext' [ 190.096283][ T7502] netlink: 44 bytes leftover after parsing attributes in process `syz.4.478'. [ 190.096312][ T7502] netlink: 51 bytes leftover after parsing attributes in process `syz.4.478'. [ 190.096490][ T7502] netlink: 'syz.4.478': attribute type 6 has an invalid length. [ 190.096508][ T7502] netlink: 51 bytes leftover after parsing attributes in process `syz.4.478'. [ 190.098565][ T7498] syzkaller0: entered promiscuous mode [ 190.098586][ T7498] syzkaller0: entered allmulticast mode [ 191.381629][ T44] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 191.381666][ T44] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 191.381691][ T44] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 191.381715][ T44] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 191.381738][ T44] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 191.381762][ T44] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 191.381787][ T44] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 191.381810][ T44] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 191.464483][ T44] hid-generic 0000:0000:0001.0004: hidraw0: HID v0.10 Device [syz0] on syz1 [ 191.476657][ T7528] loop4: detected capacity change from 0 to 512 [ 191.500239][ T7528] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 191.552725][ T7525] loop2: detected capacity change from 0 to 512 [ 191.648872][ T7525] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 191.651445][ T7525] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 191.651470][ T7525] loop2: lost filesystem error report for type 5 error -12 [ 191.655110][ T7525] EXT4-fs (loop2): 1 truncate cleaned up [ 191.662801][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 191.674052][ T7525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.037434][ T7536] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 192.418153][ T10] usb 6-1: New USB device found: idVendor=0bda, idProduct=317f, bcdDevice=a0.27 [ 192.434723][ T7536] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 192.436623][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.436649][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 192.496596][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.496628][ T10] usb 6-1: Product: syz [ 192.496645][ T10] usb 6-1: Manufacturer: syz [ 192.496662][ T10] usb 6-1: SerialNumber: syz [ 192.558306][ T10] usb 6-1: config 0 descriptor?? [ 192.776644][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.904354][ T44] usb 6-1: USB disconnect, device number 5 [ 194.115267][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.115333][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.732203][ T7576] fuse: fd is not a fuse device [ 194.776514][ T7578] loop2: detected capacity change from 0 to 128 [ 194.802979][ T7578] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 196.059642][ T7585] syzkaller0: entered promiscuous mode [ 196.059668][ T7585] syzkaller0: entered allmulticast mode [ 196.583233][ T7604] loop2: detected capacity change from 0 to 128 [ 197.608313][ T7615] loop4: detected capacity change from 0 to 4096 [ 197.609422][ T7615] ext4: Unknown parameter 'noacl' [ 197.744660][ T7624] loop2: detected capacity change from 0 to 512 [ 197.851640][ T7624] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 198.648203][ T7624] EXT4-fs (loop2): 1 truncate cleaned up [ 198.661347][ T7624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.653612][ T7647] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 199.982991][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.337501][ T7669] loop3: detected capacity change from 0 to 256 [ 201.402073][ T7669] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 201.512976][ T940] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 201.666647][ T940] usb 5-1: New USB device found: idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 201.667924][ T940] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 201.667951][ T940] usb 5-1: config 0 has no interface number 0 [ 201.667996][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.688059][ T940] usb 5-1: config 0 descriptor?? [ 201.702341][ T940] ums-realtek 5-1:0.3: USB Mass Storage device detected [ 201.941110][ T940] usb 5-1: USB disconnect, device number 6 [ 203.273687][ T7699] loop5: detected capacity change from 0 to 256 [ 203.297865][ T7699] exfat: Unknown parameter '' [ 204.074215][ T7709] nfs: Unknown parameter 'fscontext' [ 204.975702][ T7716] loop2: detected capacity change from 0 to 128 [ 205.005238][ T7716] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 205.005271][ T7716] FAT-fs (loop2): data area starts beyond volume (36 > 11) [ 205.005290][ T7716] FAT-fs (loop2): Can't find a valid FAT filesystem [ 205.922349][ T7721] loop4: detected capacity change from 0 to 512 [ 206.049092][ T7721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.049213][ T7721] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.096828][ T7726] fuse: Bad value for 'fd' [ 206.464185][ T7733] loop2: detected capacity change from 0 to 512 [ 206.503391][ T7733] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 206.507544][ T7733] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 206.507568][ T7733] loop2: lost filesystem error report for type 5 error -12 [ 206.516497][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 206.516527][ C0] EXT4-fs (loop2): initial error at time 1793338539: ext4_process_orphan:346 [ 206.516561][ C0] EXT4-fs (loop2): last error at time 1793338539: ext4_process_orphan:346 [ 206.565905][ T7733] EXT4-fs (loop2): 1 truncate cleaned up [ 206.591794][ T7733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.836505][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.478149][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.171657][ T7778] overlayfs: failed to resolve './file1': -2 [ 212.097558][ T7792] loop3: detected capacity change from 0 to 1024 [ 212.103830][ T7795] loop2: detected capacity change from 0 to 512 [ 212.121259][ T7795] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 212.140749][ T7795] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 212.140776][ T7795] loop2: lost filesystem error report for type 5 error -12 [ 212.142241][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 212.142263][ C1] EXT4-fs (loop2): initial error at time 1793338800: ext4_process_orphan:346 [ 212.142290][ C1] EXT4-fs (loop2): last error at time 1793338800: ext4_process_orphan:346 [ 212.191486][ T7795] EXT4-fs (loop2): 1 truncate cleaned up [ 212.226791][ T7792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.229972][ T7795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.540830][ T7813] overlayfs: failed to clone upperpath [ 213.170117][ T7798] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 213.456338][ T7798] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 213.666163][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.796497][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.366562][ T7824] loop4: detected capacity change from 0 to 512 [ 214.387852][ T7824] vfat: Bad value for 'shortname' [ 214.931663][ T7829] usb usb5: usbfs: process 7829 (syz.4.566) did not claim interface 63 before use [ 215.050305][ T7826] syz.6.565 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 215.267224][ T7837] loop4: detected capacity change from 0 to 512 [ 215.311610][ T7837] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 216.132729][ T7837] EXT4-fs (loop4): 1 truncate cleaned up [ 216.144260][ T7837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.241478][ T29] audit: type=1800 audit(1793338804.804:9): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.569" name="file3" dev="loop4" ino=16 res=0 errno=-22 [ 217.781883][ T5767] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 217.933955][ T5767] usb 4-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=1.4b [ 217.934001][ T5767] usb 4-1: no configurations [ 217.934016][ T5767] usb 4-1: can't read configurations, error -22 [ 218.050430][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.073890][ T5767] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 218.189327][ T7872] loop4: detected capacity change from 0 to 128 [ 218.200999][ T7872] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 218.233525][ T5767] usb 4-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=1.4b [ 218.233571][ T5767] usb 4-1: no configurations [ 218.233593][ T5767] usb 4-1: can't read configurations, error -22 [ 218.234660][ T5767] usb usb4-port1: attempt power cycle [ 218.239176][ T7874] loop2: detected capacity change from 0 to 512 [ 218.277791][ T7874] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 218.384316][ T7874] EXT4-fs (loop2): 1 truncate cleaned up [ 218.574881][ T5767] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 218.596209][ T5767] usb 4-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=1.4b [ 218.596255][ T5767] usb 4-1: no configurations [ 218.596269][ T5767] usb 4-1: can't read configurations, error -22 [ 218.622213][ T7889] capability: warning: `syz.5.580' uses deprecated v2 capabilities in a way that may be insecure [ 218.718535][ T7874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.385619][ T7900] fuse: Bad value for 'fd' [ 219.496752][ T5767] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 219.518467][ T7906] fuse: Bad value for 'fd' [ 219.663673][ T7904] loop4: detected capacity change from 0 to 512 [ 219.701497][ T5767] usb 4-1: device not accepting address 7, error -71 [ 219.712833][ T5767] usb usb4-port1: unable to enumerate USB device [ 219.719838][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.725379][ T7904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.725488][ T7904] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.832657][ T29] audit: type=1800 audit(1793338808.404:10): pid=7904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.587" name="file1" dev="loop4" ino=15 res=0 errno=-22 [ 222.727245][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.515926][ T7945] loop5: detected capacity change from 0 to 512 [ 223.538906][ T7945] vfat: Bad value for 'shortname' [ 224.006552][ T7941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.596'. [ 224.038033][ T7948] loop3: detected capacity change from 0 to 512 [ 224.042006][ T7943] fuse: Bad value for 'fd' [ 224.125654][ T7952] loop2: detected capacity change from 0 to 512 [ 224.129306][ T7952] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 224.160221][ T7949] fuse: fd is not a fuse device [ 224.175725][ T7948] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 224.177473][ T7948] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 224.177497][ T7948] loop3: lost filesystem error report for type 5 error -12 [ 224.180768][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 224.180790][ C0] EXT4-fs (loop3): initial error at time 1793338812: ext4_process_orphan:346 [ 224.180817][ C0] EXT4-fs (loop3): last error at time 1793338812: ext4_process_orphan:346 [ 224.238795][ T7948] EXT4-fs (loop3): 1 truncate cleaned up [ 224.239302][ T7952] EXT4-fs (loop2): 1 truncate cleaned up [ 224.253864][ T7948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.270419][ T7952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.323321][ T7967] hub 5-0:1.0: USB hub found [ 225.332158][ T7967] hub 5-0:1.0: 1 port detected [ 227.014231][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.040190][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.221385][ T7978] loop5: detected capacity change from 0 to 512 [ 227.278066][ T7978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 227.278200][ T7978] System zones: 1-12 [ 227.298838][ T7978] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.611: missing EA_INODE flag [ 227.298868][ T7978] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 227.300401][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 227.300422][ C1] EXT4-fs (loop5): initial error at time 1793338815: ext4_xattr_inode_iget:437: inode 12 [ 227.300459][ C1] EXT4-fs (loop5): last error at time 1793338815: ext4_xattr_inode_iget:437: inode 12 [ 227.314283][ T7978] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.611: error while reading EA inode 12 err=-117 [ 227.314317][ T7978] loop5: lost filesystem error report for type 5 error -117 [ 227.325676][ T7978] EXT4-fs (loop5): 1 orphan inode deleted [ 227.328192][ T7978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.585903][ T7982] vlan2: entered promiscuous mode [ 227.585929][ T7982] dummy0: entered promiscuous mode [ 227.586213][ T7982] vlan2: entered allmulticast mode [ 227.586231][ T7982] dummy0: entered allmulticast mode [ 228.549735][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.726174][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.617'. [ 229.790992][ T8009] loop5: detected capacity change from 0 to 512 [ 229.791939][ T8009] vfat: Bad value for 'shortname' [ 230.535775][ T8019] nfs: Unknown parameter 'fscontext' [ 231.540829][ T8025] loop3: detected capacity change from 0 to 4096 [ 231.543430][ T8028] loop2: detected capacity change from 0 to 2048 [ 232.098472][ T8031] loop4: detected capacity change from 0 to 256 [ 232.102345][ T8033] hub 5-0:1.0: USB hub found [ 232.139860][ T8033] hub 5-0:1.0: 1 port detected [ 232.543947][ T8025] EXT4-fs (loop3): Test dummy encryption mode enabled [ 233.013046][ T8028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.013186][ T8028] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 233.018098][ T8025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.442938][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.505179][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.556655][ T8015] syz.6.620 (8015) used greatest stack depth: 18216 bytes left [ 233.745051][ T8020] syz.6.620 (8020) used greatest stack depth: 17704 bytes left [ 233.899227][ T8051] fuse: Bad value for 'fd' [ 234.010643][ T940] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 234.160386][ T940] usb 6-1: Using ep0 maxpacket: 16 [ 234.988458][ T940] usb 6-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 235.004616][ T940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.004670][ T940] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.004699][ T940] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.004723][ T940] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 235.004751][ T940] usb 6-1: config 0 interface 0 has no altsetting 0 [ 235.004789][ T940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.073100][ T940] usb 6-1: config 0 descriptor?? [ 235.873293][ T940] logitech-djreceiver 0003:046D:C53A.0005: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.5-1/input0 [ 236.094957][ T8077] nfs: Unknown parameter 'fscontext' [ 236.949675][ T5766] usb 6-1: USB disconnect, device number 6 [ 237.825446][ T8103] vlan2: entered promiscuous mode [ 237.825470][ T8103] dummy0: entered promiscuous mode [ 237.825718][ T8103] vlan2: entered allmulticast mode [ 237.825734][ T8103] dummy0: entered allmulticast mode [ 237.988508][ T29] audit: type=1800 audit(1793338826.556:11): pid=8092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.644" name="file1" dev="ramfs" ino=14910 res=0 errno=-4 [ 238.067383][ T8106] loop4: detected capacity change from 0 to 512 [ 238.159279][ T29] audit: type=1107 audit(1793338826.656:12): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÌçG'3š•lÕ¨‹K>uwIh$ô 0R ˜1L¾ÙñM6‘¢Ã"?À#êò0y' [ 238.194411][ T8106] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 238.211781][ T8106] EXT4-fs (loop4): 1 truncate cleaned up [ 238.215805][ T8106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.086924][ T8122] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (266218) [ 239.246900][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.302763][ T8128] fuse: Bad value for 'fd' [ 239.823813][ T8143] loop2: detected capacity change from 0 to 256 [ 240.748511][ T8150] loop5: detected capacity change from 0 to 8 [ 241.487847][ T8154] loop4: detected capacity change from 0 to 512 [ 241.514047][ T8154] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 241.514071][ T8154] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 241.514182][ T8154] System zones: 0-1, 15-15, 18-18, 34-34 [ 241.514489][ T8154] EXT4-fs (loop4): orphan cleanup on readonly fs [ 241.514575][ T8154] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 241.514660][ T8154] EXT4-fs warning (device loop4): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 241.514690][ T8154] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 241.518828][ T8154] EXT4-fs (loop4): 1 truncate cleaned up [ 241.713927][ T8154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.767783][ T8154] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 241.886829][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.001198][ T8163] nfs: Unknown parameter 'fscontext' [ 242.788064][ T29] audit: type=1800 audit(1793338831.357:13): pid=8159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.664" name="file1" dev="ramfs" ino=15001 res=0 errno=-4 [ 244.358457][ T8192] loop2: detected capacity change from 0 to 256 [ 245.175210][ T8195] loop5: detected capacity change from 0 to 512 [ 245.584050][ T8195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.584182][ T8195] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.840522][ T8239] hub 5-0:1.0: USB hub found [ 248.849217][ T8239] hub 5-0:1.0: 1 port detected [ 249.215118][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.687'. [ 250.176653][ T8249] fuse: Bad value for 'fd' [ 250.204907][ T8254] FAULT_INJECTION: forcing a failure. [ 250.204907][ T8254] name failslab, interval 1, probability 0, space 0, times 1 [ 250.204942][ T8254] CPU: 1 UID: 0 PID: 8254 Comm: syz.4.692 Not tainted syzkaller #0 PREEMPT(full) [ 250.204969][ T8254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 250.204984][ T8254] Call Trace: [ 250.204993][ T8254] [ 250.205004][ T8254] dump_stack_lvl+0xe8/0x150 [ 250.205050][ T8254] should_fail_ex+0x3eb/0x540 [ 250.205086][ T8254] ? __pfx_proc_alloc_inode+0x10/0x10 [ 250.205112][ T8254] should_failslab+0xa8/0x100 [ 250.205152][ T8254] ? __pfx_proc_alloc_inode+0x10/0x10 [ 250.205176][ T8254] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 250.205210][ T8254] ? proc_alloc_inode+0x2a/0xc0 [ 250.205232][ T8254] ? proc_alloc_inode+0x2a/0xc0 [ 250.205263][ T8254] ? __pfx_proc_alloc_inode+0x10/0x10 [ 250.205283][ T8254] proc_alloc_inode+0x2a/0xc0 [ 250.205303][ T8254] alloc_inode+0x6a/0x1b0 [ 250.205327][ T8254] new_inode+0x1f/0x170 [ 250.205348][ T8254] ? proc_get_inode+0x1a/0x6a0 [ 250.205372][ T8254] proc_get_inode+0x22/0x6a0 [ 250.205397][ T8254] proc_lookup_de+0x251/0x340 [ 250.205424][ T8254] proc_tgid_net_lookup+0x61/0x90 [ 250.205450][ T8254] lookup_open+0x94b/0x1970 [ 250.205504][ T8254] path_openat+0x70c/0x20f0 [ 250.205555][ T8254] do_file_open+0x23e/0x4a0 [ 250.205589][ T8254] ? __pfx_do_file_open+0x10/0x10 [ 250.205634][ T8254] ? __pfx_kfree_link+0x10/0x10 [ 250.205670][ T8254] ? _raw_spin_unlock+0x28/0x50 [ 250.205689][ T8254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.205714][ T8254] ? alloc_fd+0x6af/0x760 [ 250.205749][ T8254] do_sys_openat2+0x115/0x200 [ 250.205771][ T8254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.205794][ T8254] ? __se_sys_futex+0x3a8/0x450 [ 250.205816][ T8254] ? __pfx_do_sys_openat2+0x10/0x10 [ 250.205843][ T8254] ? rcu_is_watching+0x16/0xb0 [ 250.205874][ T8254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.205903][ T8254] __x64_sys_openat+0x138/0x170 [ 250.205929][ T8254] do_syscall_64+0x166/0x520 [ 250.205954][ T8254] ? trace_irq_disable+0x3b/0x140 [ 250.205984][ T8254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.206013][ T8254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.206035][ T8254] RIP: 0033:0x7fb7af35fd8e [ 250.206054][ T8254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 250.206071][ T8254] RSP: 002b:00007fb7b0252ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 250.206094][ T8254] RAX: ffffffffffffffda RBX: 00007fb7b02536c0 RCX: 00007fb7af35fd8e [ 250.206109][ T8254] RDX: 0000000000000002 RSI: 00007fb7b0252f90 RDI: ffffffffffffff9c [ 250.206124][ T8254] RBP: 00007fb7af436b20 R08: 0000000000000000 R09: 0000000000000000 [ 250.206138][ T8254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.206151][ T8254] R13: 00007fb7af626038 R14: 00007fb7af625fa0 R15: 00007ffd2f0168c8 [ 250.206187][ T8254] [ 250.418981][ T8257] loop3: detected capacity change from 0 to 256 [ 252.378193][ T8276] loop3: detected capacity change from 0 to 256 [ 252.798396][ T8277] overlayfs: failed to clone upperpath [ 253.179169][ T8276] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 253.179546][ T8276] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 253.179989][ T8276] exFAT-fs (loop3): failed to load alloc-bitmap [ 253.180002][ T8276] exFAT-fs (loop3): failed to recognize exfat type [ 253.192237][ T8272] xt_TCPMSS: Only works on TCP SYN packets [ 253.716950][ T8284] input: syz0 as /devices/virtual/input/input10 [ 253.820046][ T8288] loop3: detected capacity change from 0 to 512 [ 253.850207][ T8288] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 253.856578][ T8288] EXT4-fs error (device loop3): ext4_iget_extra_inode:6027: inode #15: comm syz.3.704: corrupted in-inode xattr: e_value size too large [ 253.856613][ T8288] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 253.857342][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 253.857364][ C0] EXT4-fs (loop3): initial error at time 1793338842: ext4_iget_extra_inode:6027: inode 15 [ 253.857398][ C0] EXT4-fs (loop3): last error at time 1793338842: ext4_iget_extra_inode:6027: inode 15 [ 253.890384][ T8288] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.704: couldn't read orphan inode 15 (err -117) [ 253.890419][ T8288] loop3: lost filesystem error report for type 5 error -117 [ 253.934215][ T8288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.153931][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.204078][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.470028][ T8307] loop5: detected capacity change from 0 to 512 [ 254.480180][ T8307] EXT4-fs: Ignoring removed bh option [ 255.081702][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.081878][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.371678][ T8307] EXT4-fs (loop5): Test dummy encryption mode enabled [ 255.405310][ T8307] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.711: corrupted in-inode xattr: invalid ea_ino [ 255.405348][ T8307] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.420045][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 255.420072][ C0] EXT4-fs (loop5): initial error at time 1793338843: ext4_iget_extra_inode:6027: inode 15 [ 255.420107][ C0] EXT4-fs (loop5): last error at time 1793338843: ext4_iget_extra_inode:6027: inode 15 [ 255.466494][ T8307] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.711: couldn't read orphan inode 15 (err -117) [ 255.466531][ T8307] loop5: lost filesystem error report for type 5 error -117 [ 255.510348][ T8307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.553871][ T8303] loop2: detected capacity change from 0 to 4096 [ 255.554972][ T8303] ext4: Unknown parameter 'noacl' [ 255.702825][ T8310] loop4: detected capacity change from 0 to 512 [ 255.724551][ T8310] vfat: Bad value for 'shortname' [ 257.042012][ T8319] loop3: detected capacity change from 0 to 256 [ 258.570279][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.820530][ T8334] loop3: detected capacity change from 0 to 512 [ 258.905586][ T8334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.905716][ T8334] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.871401][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.813530][ T8376] loop4: detected capacity change from 0 to 512 [ 260.842545][ T8376] vfat: Bad value for 'shortname' [ 261.227278][ T8365] loop3: detected capacity change from 0 to 4096 [ 261.239870][ T8365] ext4: Unknown parameter 'noacl' [ 264.085477][ T8407] loop4: detected capacity change from 0 to 2048 [ 264.086806][ T8407] udf: Bad value for 'volume' [ 264.125720][ T8403] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5637] was attempted by " \x0c  @!  \x0b , ÿÿÿÿ ÿÿÿÿ ¨ü  € À umask=00000000000000000177777,nostrict,uid=00000000000000000000,nostrict,volume=00000000000000000004,rootdir=00000000000000000015,unhide,nostrict,uid=forget,vo [ 264.481985][ T8416] loop4: detected capacity change from 0 to 736 [ 264.729099][ T8420] tmpfs: Unknown parameter '(' [ 265.001263][ T8421] loop5: detected capacity change from 0 to 2048 [ 265.389195][ T8421] loop5: p1 < > [ 265.642318][ T8416] rock: directory entry would overflow storage [ 265.642336][ T8416] rock: sig=0x3b10, size=4, remaining=3 [ 265.774607][ T8435] loop5: detected capacity change from 0 to 512 [ 265.842158][ T8435] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 265.843008][ T8435] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory [ 265.843032][ T8435] loop5: lost filesystem error report for type 5 error -12 [ 265.851726][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 265.851752][ C0] EXT4-fs (loop5): initial error at time 1793338854: ext4_process_orphan:346 [ 265.851780][ C0] EXT4-fs (loop5): last error at time 1793338854: ext4_process_orphan:346 [ 266.103927][ T8435] EXT4-fs (loop5): 1 truncate cleaned up [ 266.124361][ T8435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.226161][ T8441] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 267.378097][ T8437] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 267.640557][ T8437] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 268.012410][ T8442] loop2: detected capacity change from 0 to 4096 [ 268.024726][ T8442] ext4: Unknown parameter 'noacl' [ 268.245571][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 269.291864][ T8435] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.750: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 269.524415][ T9] usb 5-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=1.4b [ 269.524481][ T9] usb 5-1: no configurations [ 269.524496][ T9] usb 5-1: can't read configurations, error -22 [ 269.602459][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.602850][ T8462] loop2: detected capacity change from 0 to 256 [ 269.656452][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 269.677619][ T8462] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 269.816249][ T9] usb 5-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=1.4b [ 269.816297][ T9] usb 5-1: no configurations [ 269.816312][ T9] usb 5-1: can't read configurations, error -22 [ 269.819957][ T9] usb usb5-port1: attempt power cycle [ 269.901097][ T8469] loop3: detected capacity change from 0 to 512 [ 269.911922][ T8469] EXT4-fs (loop3): Test dummy encryption mode enabled [ 269.911944][ T8469] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 269.911957][ T8469] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 270.113533][ T8469] EXT4-fs (loop3): 1 truncate cleaned up [ 270.139765][ T8469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.318997][ T8482] loop5: detected capacity change from 0 to 512 [ 270.324815][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.325441][ T8482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.357489][ T8482] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 270.385083][ T8482] EXT4-fs (loop5): 1 truncate cleaned up [ 270.407236][ T8482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.463310][ T8482] FAULT_INJECTION: forcing a failure. [ 270.463310][ T8482] name failslab, interval 1, probability 0, space 0, times 0 [ 270.463346][ T8482] CPU: 0 UID: 0 PID: 8482 Comm: syz.5.766 Not tainted syzkaller #0 PREEMPT(full) [ 270.463378][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 270.463393][ T8482] Call Trace: [ 270.463403][ T8482] [ 270.463414][ T8482] dump_stack_lvl+0xe8/0x150 [ 270.463460][ T8482] should_fail_ex+0x3eb/0x540 [ 270.463498][ T8482] should_failslab+0xa8/0x100 [ 270.463537][ T8482] ? ext4_mb_new_blocks+0x539/0x4520 [ 270.463576][ T8482] kmem_cache_alloc_noprof+0x9c/0x600 [ 270.463605][ T8482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.463638][ T8482] ? ext4_mb_new_blocks+0x539/0x4520 [ 270.463685][ T8482] ext4_mb_new_blocks+0x539/0x4520 [ 270.463747][ T8482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.463776][ T8482] ? rcu_is_watching+0x16/0xb0 [ 270.463814][ T8482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.463843][ T8482] ? ext4_get_branch+0x653/0x7c0 [ 270.463884][ T8482] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 270.463921][ T8482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.463950][ T8482] ? ext4_block_to_path+0x382/0x700 [ 270.464000][ T8482] ext4_ind_map_blocks+0xef3/0x2300 [ 270.464064][ T8482] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 270.464124][ T8482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.464181][ T8482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.464211][ T8482] ? down_write+0x166/0x200 [ 270.464248][ T8482] ext4_map_create_blocks+0xbb/0x530 [ 270.464282][ T8482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.464312][ T8482] ? ext4_fc_track_inode+0xf3/0x3f0 [ 270.464355][ T8482] ext4_map_blocks+0xe8e/0x1c60 [ 270.464385][ T8482] ? up_write+0x19d/0x4a0 [ 270.464451][ T8482] ? __pfx_ext4_map_blocks+0x10/0x10 [ 270.464490][ T8482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.464520][ T8482] ? __asan_memcpy+0x40/0x70 [ 270.464551][ T8482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.464581][ T8482] ? ext4_read_inline_data+0x100/0x2b0 [ 270.464614][ T8482] ext4_convert_inline_data_nolock+0x25d/0x980 [ 270.464656][ T8482] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10 [ 270.464684][ T8482] ? down_write+0x166/0x200 [ 270.464722][ T8482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.464752][ T8482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.464790][ T8482] ext4_convert_inline_data+0x484/0x5c0 [ 270.464828][ T8482] ? __pfx_ext4_convert_inline_data+0x10/0x10 [ 270.464861][ T8482] ? down_write+0x166/0x200 [ 270.464893][ T8482] ? __pfx_down_write+0x10/0x10 [ 270.464957][ T8482] ext4_fallocate+0x1e2/0x400 [ 270.464990][ T8482] vfs_fallocate+0x65a/0x7e0 [ 270.465024][ T8482] ? __fget_files+0x2a/0x420 [ 270.465061][ T8482] ? __pfx_vfs_fallocate+0x10/0x10 [ 270.465094][ T8482] ? __fget_files+0x2a/0x420 [ 270.465128][ T8482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.465158][ T8482] ? fdget+0x1ac/0x250 [ 270.465197][ T8482] __x64_sys_fallocate+0xbf/0x110 [ 270.465236][ T8482] do_syscall_64+0x166/0x520 [ 270.465269][ T8482] ? trace_irq_disable+0x3b/0x140 [ 270.465304][ T8482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.465337][ T8482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.465363][ T8482] RIP: 0033:0x7f3be2d9f559 [ 270.465385][ T8482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.465404][ T8482] RSP: 002b:00007f3be3c43028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 270.465429][ T8482] RAX: ffffffffffffffda RBX: 00007f3be3025fa0 RCX: 00007f3be2d9f559 [ 270.465447][ T8482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 270.465462][ T8482] RBP: 00007f3be2e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 270.465477][ T8482] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 270.465492][ T8482] R13: 00007f3be3026038 R14: 00007f3be3025fa0 R15: 00007ffc5989db48 [ 270.465533][ T8482] [ 271.701886][ T8495] nfs: Unknown parameter 'fscontext' [ 272.265442][ T5632] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 272.293610][ T5632] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 272.455946][ T8504] loop2: detected capacity change from 0 to 512 [ 272.460379][ T8504] EXT4-fs: Ignoring removed bh option [ 272.556274][ T8504] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 272.604894][ T8504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.605035][ T8504] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.707958][ T8512] loop3: detected capacity change from 0 to 256 [ 272.774798][ T8512] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 272.874236][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.990855][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.197298][ T5786] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 273.221760][ T3379] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.350262][ T5786] usb 4-1: Using ep0 maxpacket: 32 [ 273.351087][ T5786] usb 4-1: New USB device found: idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 273.352194][ T5786] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 273.352221][ T5786] usb 4-1: config 0 has no interface number 0 [ 273.352263][ T5786] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 273.352292][ T5786] usb 4-1: config 0 interface 196 has no altsetting 0 [ 273.354681][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.354707][ T5786] usb 4-1: Product: syz [ 273.354724][ T5786] usb 4-1: Manufacturer: syz [ 273.354740][ T5786] usb 4-1: SerialNumber: syz [ 273.367729][ T5786] usb 4-1: config 0 descriptor?? [ 273.369268][ T8512] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 273.385736][ T3379] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.490367][ T3379] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.675237][ T5786] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 273.684598][ T5786] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 273.724827][ T5786] usb 4-1: USB disconnect, device number 8 [ 274.050985][ T3379] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.493318][ T8544] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 275.287746][ T8545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.182878][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.186814][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.187572][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.195842][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.196915][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.466286][ T8565] loop4: detected capacity change from 0 to 256 [ 278.307332][ T8565] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 278.386922][ T8572] fuse: fd is not a fuse device [ 278.518629][ T3379] bridge_slave_1: left allmulticast mode [ 278.518659][ T3379] bridge_slave_1: left promiscuous mode [ 278.518907][ T3379] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.610632][ T3379] bridge_slave_0: left allmulticast mode [ 278.610663][ T3379] bridge_slave_0: left promiscuous mode [ 278.613391][ T3379] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.436677][ T5643] Bluetooth: hci3: command tx timeout [ 279.745944][ T5766] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 279.895853][ T5766] usb 3-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=1.4b [ 279.895900][ T5766] usb 3-1: no configurations [ 279.895914][ T5766] usb 3-1: can't read configurations, error -22 [ 280.522953][ T8611] loop4: detected capacity change from 0 to 256 [ 280.546559][ T5766] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 280.546815][ T8609] nfs: Unknown parameter 'fscontext' [ 280.717886][ T5766] usb 3-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=1.4b [ 280.720320][ T5766] usb 3-1: no configurations [ 280.720339][ T5766] usb 3-1: can't read configurations, error -22 [ 280.722371][ T5766] usb usb3-port1: attempt power cycle [ 280.856113][ T3379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.898306][ T3379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.913346][ T3379] bond0 (unregistering): Released all slaves [ 281.128859][ T8616] netlink: 'syz.3.813': attribute type 16 has an invalid length. [ 281.128887][ T8616] netlink: 'syz.3.813': attribute type 17 has an invalid length. [ 281.514158][ T5643] Bluetooth: hci3: command tx timeout [ 281.962477][ T5766] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 282.173944][ T5766] usb 3-1: device not accepting address 8, error -71 [ 282.175601][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.182878][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.250380][ T8634] loop2: detected capacity change from 0 to 512 [ 282.332676][ T8634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.332787][ T8634] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.338194][ T8624] xfrm1: entered promiscuous mode [ 282.338215][ T8624] xfrm1: entered allmulticast mode [ 282.640973][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.988245][ T8550] rxe_eth0 speed is unknown, defaulting to 1000 [ 283.490722][ T5292] 8021q: adding VLAN 0 to HW filter on device eth5 [ 283.553910][ T5643] Bluetooth: hci3: command tx timeout [ 283.839851][ T3379] hsr_slave_0: left promiscuous mode [ 283.856194][ T3379] hsr_slave_1: left promiscuous mode [ 283.869023][ T3379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.869048][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.110750][ T3379] veth1_macvtap: left promiscuous mode [ 284.113026][ T3379] veth0_macvtap: left promiscuous mode [ 284.113148][ T3379] veth1_vlan: left promiscuous mode [ 284.113226][ T3379] veth0_vlan: left promiscuous mode [ 285.693789][ T5643] Bluetooth: hci3: command tx timeout [ 286.521245][ T8717] fuse: Unknown parameter 'user_i00000000000000000000' [ 287.847715][ T3379] team0 (unregistering): Port device team_slave_1 removed [ 287.938103][ T3379] team0 (unregistering): Port device team_slave_0 removed [ 288.460108][ T8722] bridge1: entered promiscuous mode [ 288.460134][ T8722] bridge1: entered allmulticast mode [ 288.467883][ T5292] 8021q: adding VLAN 0 to HW filter on device eth6 [ 288.887950][ T8759] fuse: fd is not a fuse device [ 289.270931][ T8772] fuse: fd is not a fuse device [ 289.399611][ T8778] loop2: detected capacity change from 0 to 2048 [ 289.422420][ T8778] udf: Bad value for 'anchor' [ 289.575637][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.576003][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.576140][ T8550] bridge_slave_0: entered allmulticast mode [ 289.578131][ T8550] bridge_slave_0: entered promiscuous mode [ 289.610474][ T8550] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.610859][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.611007][ T8550] bridge_slave_1: entered allmulticast mode [ 289.635854][ T8550] bridge_slave_1: entered promiscuous mode [ 289.678279][ T8550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.681670][ T8550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.596669][ T8550] team0: Port device team_slave_0 added [ 290.707544][ T8550] team0: Port device team_slave_1 added [ 290.850989][ T8795] nfs: Unknown parameter 'fscontext' [ 291.668979][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.669000][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.669030][ T8550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.721124][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.721146][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.721179][ T8550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.123825][ T8550] hsr_slave_0: entered promiscuous mode [ 293.126871][ T8550] hsr_slave_1: entered promiscuous mode [ 293.127737][ T8550] debugfs: 'hsr0' already exists in 'hsr' [ 293.127760][ T8550] Cannot create hsr debugfs directory [ 293.269976][ T8815] fuse: fd is not a fuse device [ 293.463087][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 293.571357][ T8824] overlayfs: failed to clone upperpath [ 293.596336][ T8824] overlayfs: failed to clone upperpath [ 293.625093][ T10] usb 5-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=1.4b [ 293.625141][ T10] usb 5-1: no configurations [ 293.625155][ T10] usb 5-1: can't read configurations, error -22 [ 293.753404][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 293.907461][ T10] usb 5-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=1.4b [ 293.907511][ T10] usb 5-1: no configurations [ 293.907525][ T10] usb 5-1: can't read configurations, error -22 [ 293.908346][ T10] usb usb5-port1: attempt power cycle [ 293.984806][ T5292] 8021q: adding VLAN 0 to HW filter on device eth7 [ 294.119405][ T8550] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 294.141444][ T8550] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.151236][ T8550] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 294.170938][ T8550] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 294.178487][ T8550] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 294.313171][ T8836] overlayfs: failed to clone upperpath [ 295.120517][ T8550] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.149476][ T8550] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 295.182390][ T8550] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.626013][ T8851] x_tables: duplicate underflow at hook 3 [ 297.486588][ T8550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.572452][ T8550] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.597962][ T8867] nfs: Unknown parameter 'fscontext' [ 298.271218][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.271340][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.298855][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.298995][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.557093][ T8870] loop2: detected capacity change from 0 to 4096 [ 298.560584][ T8870] ext4: Unknown parameter 'noacl' [ 300.783511][ T8892] overlayfs: failed to clone upperpath [ 300.853582][ T8892] overlayfs: failed to clone upperpath [ 301.089249][ T8901] fuse: fd is not a fuse device [ 301.633486][ T8912] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 302.755301][ T8919] loop4: detected capacity change from 0 to 512 [ 302.769901][ T8919] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 302.810735][ T8919] EXT4-fs (loop4): 1 truncate cleaned up [ 302.822636][ T8919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.845178][ T8923] fuse: fd is not a fuse device [ 303.014967][ T8931] nfs: Unknown parameter 'fscontext' [ 305.572791][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.929900][ T5292] 8021q: adding VLAN 0 to HW filter on device eth8 [ 305.996227][ T8951] loop4: detected capacity change from 0 to 4096 [ 305.997330][ T8951] ext4: Unknown parameter 'noacl' [ 307.517651][ T8957] fuse: fd is not a fuse device [ 307.664797][ T8550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.291273][ T8964] fuse: fd is not a fuse device [ 309.965982][ T8990] nfs: Unknown parameter 'fscontext' [ 310.028605][ T8989] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 312.077788][ T8550] veth0_vlan: entered promiscuous mode [ 313.007080][ T8550] veth1_vlan: entered promiscuous mode [ 313.039292][ T8550] veth0_macvtap: entered promiscuous mode [ 313.045889][ T8550] veth1_macvtap: entered promiscuous mode [ 313.169538][ T8550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.336220][ T8550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.390304][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.390359][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.390400][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.390439][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.464632][ T9018] fuse: Bad value for 'fd' [ 313.497822][ T9022] loop4: detected capacity change from 0 to 4096 [ 313.507699][ T9022] ext4: Unknown parameter 'noacl' [ 313.630114][ T9026] nfs: Unknown parameter 'fscontext' [ 316.582050][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.582113][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.593697][ T3379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.593720][ T3379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.522813][ T9060] xt_TCPMSS: Only works on TCP SYN packets [ 318.179563][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.179589][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.265018][ T9092] nfs: Unknown parameter 'fscontext' [ 321.149560][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 321.185510][ T9101] fuse: Bad value for 'fd' [ 321.223557][ T9107] fuse: fd is not a fuse device [ 321.302859][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 321.302916][ T24] usb 5-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 321.304314][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.308974][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 321.309001][ T24] usb 5-1: Product: syz [ 321.309171][ T24] usb 5-1: Manufacturer: syz [ 321.462359][ T9106] loop7: detected capacity change from 0 to 2048 [ 321.496496][ T24] uvcvideo 5-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 321.496622][ T24] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 321.496686][ T24] uvcvideo 5-1:1.1: No supported video formats found. [ 321.496702][ T24] uvcvideo 5-1:1.1: Failed to initialize the device (-22). [ 322.329431][ T9106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.355865][ T24] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -22 [ 322.509538][ T8550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.374948][ T9138] loop7: detected capacity change from 0 to 256 [ 323.426943][ T9138] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 323.427345][ T9138] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 323.427830][ T9138] exFAT-fs (loop7): failed to load alloc-bitmap [ 323.427845][ T9138] exFAT-fs (loop7): failed to recognize exfat type [ 323.451540][ T9135] xt_TCPMSS: Only works on TCP SYN packets [ 323.609011][ T24] usb 5-1: USB disconnect, device number 13 [ 323.821297][ T5786] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 323.976527][ T5786] usb 3-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=1.4b [ 323.976574][ T5786] usb 3-1: no configurations [ 323.976590][ T5786] usb 3-1: can't read configurations, error -22 [ 324.173294][ T9156] loop4: detected capacity change from 0 to 128 [ 324.691316][ T5786] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 324.855915][ T5786] usb 3-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=1.4b [ 324.855964][ T5786] usb 3-1: no configurations [ 324.855979][ T5786] usb 3-1: can't read configurations, error -22 [ 324.873140][ T5786] usb usb3-port1: attempt power cycle [ 325.202629][ T9171] nfs: Unknown parameter 'fscontext' [ 325.900337][ T5786] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 326.096439][ T9183] fuse: Bad value for 'fd' [ 326.109935][ T5786] usb 3-1: device not accepting address 12, error -71 [ 326.239116][ T9187] tmpfs: Unknown parameter 'nr_' [ 328.078988][ T9205] xt_TCPMSS: Only works on TCP SYN packets [ 329.091270][ T9218] nfs: Unknown parameter 'fscontext' [ 329.127577][ T9218] loop7: detected capacity change from 0 to 4096 [ 329.129827][ T9218] ext4: Unknown parameter 'obj_role' [ 330.579598][ T9239] nfs: Unknown parameter 'fscontext' [ 331.215443][ T9247] loop2: detected capacity change from 0 to 512 [ 331.267746][ T9247] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 331.267768][ T9247] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 331.333248][ T9247] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.963: bg 0: block 4: invalid block bitmap [ 331.333286][ T9247] loop2: lost filesystem error report for type 5 error -117 [ 331.334908][ T9251] fuse: Unknown parameter '0x0000000000000003' [ 331.338384][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 331.338409][ C0] EXT4-fs (loop2): initial error at time 1793338919: ext4_validate_block_bitmap:436 [ 331.338437][ C0] EXT4-fs (loop2): last error at time 1793338919: ext4_validate_block_bitmap:436 [ 331.434178][ T9247] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 331.434208][ T9247] loop2: lost filesystem error report for type 5 error -117 [ 331.447735][ T9247] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #11: comm syz.2.963: invalid indirect mapped block 1 (level 1) [ 331.447775][ T9247] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 331.512225][ T9247] EXT4-fs (loop2): 1 truncate cleaned up [ 331.553622][ T9247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.594390][ T9268] loop4: detected capacity change from 0 to 512 [ 332.666036][ T9268] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 332.667483][ T9268] EXT4-fs error (device loop4) in ext4_process_orphan:346: Out of memory [ 332.667507][ T9268] loop4: lost filesystem error report for type 5 error -12 [ 332.667755][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 332.667783][ C1] EXT4-fs (loop4): initial error at time 1793338921: ext4_process_orphan:346 [ 332.667810][ C1] EXT4-fs (loop4): last error at time 1793338921: ext4_process_orphan:346 [ 332.748443][ T9268] EXT4-fs (loop4): 1 truncate cleaned up [ 332.766301][ T9268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.054572][ T9282] nfs: Unknown parameter 'fscontext' [ 333.089066][ T9282] loop7: detected capacity change from 0 to 4096 [ 333.090162][ T9282] ext4: Unknown parameter 'obj_role' [ 333.753061][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.699482][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.751552][ T9293] loop7: detected capacity change from 0 to 128 [ 334.849935][ T9293] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 335.832687][ T9304] loop2: detected capacity change from 0 to 1024 [ 335.852632][ T9304] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 335.887461][ T9304] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 335.887841][ T9304] EXT4-fs (loop2): orphan cleanup on readonly fs [ 335.895516][ T9304] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 335.895640][ T9304] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 335.895670][ T9304] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 335.939578][ T9304] EXT4-fs (loop2): 1 truncate cleaned up [ 335.946993][ T9304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 336.012329][ T9304] EXT4-fs error (device loop2): ext4_search_dir:1476: inode #2: block 16: comm syz.2.975: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 336.101976][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.105106][ T9311] fuse: fd is not a fuse device [ 336.248611][ T9313] fuse: Unknown parameter '0x0000000000000003' [ 337.371306][ T9336] nfs: Unknown parameter 'fscontext' [ 337.376570][ T9337] nfs: Unknown parameter 'fscontext' [ 338.125369][ T9350] hub 5-0:1.0: USB hub found [ 338.132357][ T9350] hub 5-0:1.0: 1 port detected [ 338.502344][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.992'. [ 338.779723][ T9353] loop7: detected capacity change from 0 to 4096 [ 338.790858][ T9353] ext4: Unknown parameter 'noacl' [ 340.207316][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 340.366862][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 340.369112][ T24] usb 5-1: New USB device found: idVendor=0c16, idProduct=0003, bcdDevice=0.00 [ 340.373560][ T24] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 340.373597][ T24] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.373628][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 340.373664][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.438673][ T24] usb 5-1: config 0 descriptor?? [ 340.936206][ T9392] nfs: Unknown parameter 'fscontext' [ 341.820334][ T9398] nfs: Unknown parameter 'fscontext' [ 341.837839][ T24] gyration 0003:0C16:0003.0006: hiddev0,hidraw0: USB HID v0.03 Device [HID 0c16:0003] on usb-dummy_hcd.4-1/input0 [ 342.293209][ T9415] fuse: Unknown parameter '0x0000000000000003' [ 342.423256][ T9417] usb 5-1: USB disconnect, device number 14 [ 343.134080][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1010'. [ 343.460441][ T9420] hub 5-0:1.0: USB hub found [ 343.460997][ T9420] hub 5-0:1.0: 1 port detected [ 343.808854][ T9428] loop4: detected capacity change from 0 to 512 [ 344.369678][ T9443] loop7: detected capacity change from 0 to 256 [ 344.395080][ T9443] exfat: Bad value for 'uid' [ 344.395204][ T9443] exfat: Bad value for 'uid' [ 346.152318][ T9458] tmpfs: Unknown parameter 'nr_' [ 347.906830][ T9483] usb usb5: usbfs: interface 0 claimed by hub while 'syz.7.1030' sets config #-1 [ 347.907203][ T9483] usb usb5: usbfs: interface 0 claimed by hub while 'syz.7.1030' sets config #1 [ 347.913721][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1030'. [ 348.575680][ T9487] fuse: Unknown parameter '0x0000000000000003' [ 349.258833][ T9511] overlayfs: failed to resolve './file1': -2 [ 350.265107][ T29] audit: type=1107 audit(1793338938.850:14): pid=9509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÌçG'3š•lÕ¨‹K>uwIh$ô 0R ˜1L¾ÙñM6‘¢Ã"?À#êò0y' [ 350.394676][ T9526] loop7: detected capacity change from 0 to 512 [ 350.413225][ T9526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.443794][ T9526] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 350.514658][ T9526] EXT4-fs (loop7): 1 truncate cleaned up [ 350.531157][ T9526] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.591410][ T9526] FAULT_INJECTION: forcing a failure. [ 350.591410][ T9526] name failslab, interval 1, probability 0, space 0, times 0 [ 350.591440][ T9526] CPU: 1 UID: 0 PID: 9526 Comm: syz.7.1046 Not tainted syzkaller #0 PREEMPT(full) [ 350.591468][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 350.591484][ T9526] Call Trace: [ 350.591494][ T9526] [ 350.591504][ T9526] dump_stack_lvl+0xe8/0x150 [ 350.591550][ T9526] should_fail_ex+0x3eb/0x540 [ 350.591587][ T9526] should_failslab+0xa8/0x100 [ 350.591629][ T9526] ? ext4_mb_new_blocks+0x539/0x4520 [ 350.591669][ T9526] kmem_cache_alloc_noprof+0x9c/0x600 [ 350.591697][ T9526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.591731][ T9526] ? ext4_mb_new_blocks+0x539/0x4520 [ 350.591780][ T9526] ext4_mb_new_blocks+0x539/0x4520 [ 350.591848][ T9526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.591878][ T9526] ? rcu_is_watching+0x16/0xb0 [ 350.591916][ T9526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.591946][ T9526] ? ext4_get_branch+0x653/0x7c0 [ 350.591986][ T9526] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 350.592023][ T9526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.592049][ T9526] ? ext4_block_to_path+0x382/0x700 [ 350.592097][ T9526] ext4_ind_map_blocks+0xef3/0x2300 [ 350.592158][ T9526] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 350.592214][ T9526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.592265][ T9526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.592292][ T9526] ? down_write+0x166/0x200 [ 350.592329][ T9526] ext4_map_create_blocks+0xbb/0x530 [ 350.592361][ T9526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.592388][ T9526] ? ext4_fc_track_inode+0xf3/0x3f0 [ 350.592429][ T9526] ext4_map_blocks+0xe8e/0x1c60 [ 350.592458][ T9526] ? up_write+0x19d/0x4a0 [ 350.592521][ T9526] ? __pfx_ext4_map_blocks+0x10/0x10 [ 350.592558][ T9526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.592586][ T9526] ? __asan_memcpy+0x40/0x70 [ 350.592618][ T9526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.592647][ T9526] ? ext4_read_inline_data+0x100/0x2b0 [ 350.592679][ T9526] ext4_convert_inline_data_nolock+0x25d/0x980 [ 350.592721][ T9526] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10 [ 350.592749][ T9526] ? down_write+0x166/0x200 [ 350.592786][ T9526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.592816][ T9526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.592859][ T9526] ext4_convert_inline_data+0x484/0x5c0 [ 350.592896][ T9526] ? __pfx_ext4_convert_inline_data+0x10/0x10 [ 350.592930][ T9526] ? down_write+0x166/0x200 [ 350.592962][ T9526] ? __pfx_down_write+0x10/0x10 [ 350.593007][ T9526] ext4_fallocate+0x1e2/0x400 [ 350.593042][ T9526] vfs_fallocate+0x65a/0x7e0 [ 350.593076][ T9526] ? __fget_files+0x2a/0x420 [ 350.593113][ T9526] ? __pfx_vfs_fallocate+0x10/0x10 [ 350.593145][ T9526] ? __fget_files+0x2a/0x420 [ 350.593181][ T9526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.593210][ T9526] ? fdget+0x1ac/0x250 [ 350.593243][ T9526] __x64_sys_fallocate+0xbf/0x110 [ 350.593283][ T9526] do_syscall_64+0x166/0x520 [ 350.593312][ T9526] ? trace_irq_disable+0x3b/0x140 [ 350.593347][ T9526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.593381][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.593407][ T9526] RIP: 0033:0x7fd07a19f559 [ 350.593429][ T9526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.593451][ T9526] RSP: 002b:00007fd07b05b028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 350.593478][ T9526] RAX: ffffffffffffffda RBX: 00007fd07a425fa0 RCX: 00007fd07a19f559 [ 350.593497][ T9526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 350.593512][ T9526] RBP: 00007fd07a236b20 R08: 0000000000000000 R09: 0000000000000000 [ 350.593529][ T9526] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 350.593545][ T9526] R13: 00007fd07a426038 R14: 00007fd07a425fa0 R15: 00007ffc74ef19a8 [ 350.593587][ T9526] [ 351.736505][ T8550] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 351.747283][ T8550] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 351.903899][ T9543] fuse: Unknown parameter '0x0000000000000003' [ 352.194690][ T8550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.477771][ T6714] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.677411][ T6714] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.809250][ T6714] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.989082][ T9568] loop4: detected capacity change from 0 to 512 [ 353.202189][ T9568] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 353.239865][ T6714] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.260040][ T9568] EXT4-fs (loop4): 1 truncate cleaned up [ 353.911739][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.916283][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.918234][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.921680][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.922906][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.027693][ T9568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.123563][ T9582] nfs: Unknown parameter 'fscontext' [ 354.484618][ T6714] bridge_slave_1: left allmulticast mode [ 354.484649][ T6714] bridge_slave_1: left promiscuous mode [ 354.484886][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.524909][ T6714] bridge_slave_0: left allmulticast mode [ 354.524939][ T6714] bridge_slave_0: left promiscuous mode [ 354.550114][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.600242][ T9596] nfs: Unknown parameter 'fscontext' [ 355.205138][ T9596] loop2: detected capacity change from 0 to 4096 [ 355.224611][ T9596] ext4: Unknown parameter 'obj_role' [ 355.519845][ T9592] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 355.945332][ T5634] Bluetooth: hci3: command tx timeout [ 356.252269][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.418411][ T6714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.440743][ T6714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.469482][ T6714] bond0 (unregistering): Released all slaves [ 356.637072][ T9639] nfs: Unknown parameter 'fscontext' [ 358.428750][ T5634] Bluetooth: hci3: command tx timeout [ 360.565148][ T5634] Bluetooth: hci3: command tx timeout [ 362.075963][ T9702] loop2: detected capacity change from 0 to 128 [ 362.111112][ T9702] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 362.181189][ T9576] rxe_eth0 speed is unknown, defaulting to 1000 [ 362.227849][ T5292] 8021q: adding VLAN 0 to HW filter on device eth9 [ 362.403370][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1108'. [ 362.457920][ T6714] hsr_slave_0: left promiscuous mode [ 362.512988][ T6714] hsr_slave_1: left promiscuous mode [ 362.514022][ T6714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.514046][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.541128][ T6714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.541154][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.587291][ T5634] Bluetooth: hci3: command tx timeout [ 362.643100][ T6714] veth1_macvtap: left promiscuous mode [ 362.643144][ T6714] veth0_macvtap: left promiscuous mode [ 362.643260][ T6714] veth1_vlan: left promiscuous mode [ 362.643340][ T6714] veth0_vlan: left promiscuous mode [ 365.957810][ T6714] team0 (unregistering): Port device team_slave_1 removed [ 365.988824][ T6714] team0 (unregistering): Port device team_slave_0 removed [ 366.485588][ T9754] veth2: entered allmulticast mode [ 367.716891][ T9777] loop4: detected capacity change from 0 to 764 [ 367.740763][ T9777] rock: directory entry would overflow storage [ 367.740780][ T9777] rock: sig=0x5245, size=8, remaining=5 [ 367.853061][ T29] audit: type=1107 audit(1793338956.432:15): pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÌçG'3š•lÕ¨‹K>uwIh$ô 0R ˜1L¾ÙñM6‘¢Ã"?À#êò0y' [ 369.978289][ T9795] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 370.615065][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 370.799123][ T9817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.976283][ T9825] loop2: detected capacity change from 0 to 256 [ 371.779172][ T9817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.006798][ T9836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1145'. [ 372.142516][ T9576] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.142785][ T9576] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.142950][ T9576] bridge_slave_0: entered allmulticast mode [ 372.169139][ T9576] bridge_slave_0: entered promiscuous mode [ 372.210732][ T9828] rxe_eth0 speed is unknown, defaulting to 1000 [ 372.213645][ T9576] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.215286][ T9576] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.215441][ T9576] bridge_slave_1: entered allmulticast mode [ 372.220442][ T9576] bridge_slave_1: entered promiscuous mode [ 372.361781][ T5292] 8021q: adding VLAN 0 to HW filter on device eth10 [ 372.430034][ T9576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.483940][ T9576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.228164][ T9860] loop4: detected capacity change from 0 to 512 [ 374.229318][ T9860] EXT4-fs: Ignoring removed mblk_io_submit option [ 374.276294][ T9860] EXT4-fs (loop4): orphan cleanup on readonly fs [ 374.276321][ T9860] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 374.322881][ T9860] EXT4-fs error (device loop4): ext4_clear_blocks:893: inode #13: comm syz.4.1151: attempt to clear invalid blocks 2 len 1 [ 374.322939][ T9860] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 374.332808][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 374.332841][ C0] EXT4-fs (loop4): initial error at time 1793338962: ext4_clear_blocks:893: inode 13 [ 374.332878][ C0] EXT4-fs (loop4): last error at time 1793338962: ext4_clear_blocks:893: inode 13 [ 374.363769][ T9860] EXT4-fs (loop4): Remounting filesystem read-only [ 374.369319][ T9860] EXT4-fs (loop4): 1 truncate cleaned up [ 375.045561][ T9860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 375.225759][ T9860] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 375.339449][ T9576] team0: Port device team_slave_0 added [ 375.358185][ T9576] team0: Port device team_slave_1 added [ 375.384300][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.594906][ T9576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.594927][ T9576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.594958][ T9576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.607681][ T9576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.607700][ T9576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.607731][ T9576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.777014][ T9874] loop4: detected capacity change from 0 to 512 [ 375.778059][ T9874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.781732][ T9874] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 376.659272][ T9874] EXT4-fs (loop4): 1 truncate cleaned up [ 376.661976][ T9576] hsr_slave_0: entered promiscuous mode [ 376.665958][ T9874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.669700][ T9576] hsr_slave_1: entered promiscuous mode [ 376.676892][ T9576] debugfs: 'hsr0' already exists in 'hsr' [ 376.676914][ T9576] Cannot create hsr debugfs directory [ 376.744421][ T9874] FAULT_INJECTION: forcing a failure. [ 376.744421][ T9874] name failslab, interval 1, probability 0, space 0, times 0 [ 376.744458][ T9874] CPU: 0 UID: 0 PID: 9874 Comm: syz.4.1154 Not tainted syzkaller #0 PREEMPT(full) [ 376.744485][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 376.744503][ T9874] Call Trace: [ 376.744514][ T9874] [ 376.744524][ T9874] dump_stack_lvl+0xe8/0x150 [ 376.744569][ T9874] should_fail_ex+0x3eb/0x540 [ 376.744607][ T9874] should_failslab+0xa8/0x100 [ 376.744644][ T9874] ? ext4_mb_new_blocks+0x539/0x4520 [ 376.744683][ T9874] kmem_cache_alloc_noprof+0x9c/0x600 [ 376.744712][ T9874] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.744745][ T9874] ? ext4_mb_new_blocks+0x539/0x4520 [ 376.744792][ T9874] ext4_mb_new_blocks+0x539/0x4520 [ 376.744854][ T9874] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.744882][ T9874] ? rcu_is_watching+0x16/0xb0 [ 376.744920][ T9874] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.744948][ T9874] ? ext4_get_branch+0x653/0x7c0 [ 376.744987][ T9874] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 376.745023][ T9874] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.745052][ T9874] ? ext4_block_to_path+0x382/0x700 [ 376.745131][ T9874] ext4_ind_map_blocks+0xef3/0x2300 [ 376.745195][ T9874] ? __pfx_ext4_ind_map_blocks+0x10/0x10 [ 376.745254][ T9874] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.745306][ T9874] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.745344][ T9874] ? down_write+0x166/0x200 [ 376.745381][ T9874] ext4_map_create_blocks+0xbb/0x530 [ 376.745415][ T9874] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.745444][ T9874] ? ext4_fc_track_inode+0xf3/0x3f0 [ 376.745487][ T9874] ext4_map_blocks+0xe8e/0x1c60 [ 376.745517][ T9874] ? up_write+0x19d/0x4a0 [ 376.745581][ T9874] ? __pfx_ext4_map_blocks+0x10/0x10 [ 376.745620][ T9874] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.745649][ T9874] ? __asan_memcpy+0x40/0x70 [ 376.745679][ T9874] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.745708][ T9874] ? ext4_read_inline_data+0x100/0x2b0 [ 376.745741][ T9874] ext4_convert_inline_data_nolock+0x25d/0x980 [ 376.745780][ T9874] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10 [ 376.745806][ T9874] ? down_write+0x166/0x200 [ 376.745843][ T9874] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.745872][ T9874] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.745906][ T9874] ext4_convert_inline_data+0x484/0x5c0 [ 376.745943][ T9874] ? __pfx_ext4_convert_inline_data+0x10/0x10 [ 376.745976][ T9874] ? down_write+0x166/0x200 [ 376.746008][ T9874] ? __pfx_down_write+0x10/0x10 [ 376.746052][ T9874] ext4_fallocate+0x1e2/0x400 [ 376.746098][ T9874] vfs_fallocate+0x65a/0x7e0 [ 376.746131][ T9874] ? __fget_files+0x2a/0x420 [ 376.746169][ T9874] ? __pfx_vfs_fallocate+0x10/0x10 [ 376.746201][ T9874] ? __fget_files+0x2a/0x420 [ 376.746236][ T9874] ? srso_alias_return_thunk+0x5/0xfbef5 [ 376.746265][ T9874] ? fdget+0x1ac/0x250 [ 376.746298][ T9874] __x64_sys_fallocate+0xbf/0x110 [ 376.746344][ T9874] do_syscall_64+0x166/0x520 [ 376.746372][ T9874] ? trace_irq_disable+0x3b/0x140 [ 376.746408][ T9874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.746441][ T9874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.746466][ T9874] RIP: 0033:0x7fb7af39f559 [ 376.746489][ T9874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.746510][ T9874] RSP: 002b:00007fb7b0253028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 376.746537][ T9874] RAX: ffffffffffffffda RBX: 00007fb7af625fa0 RCX: 00007fb7af39f559 [ 376.746555][ T9874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 376.746570][ T9874] RBP: 00007fb7af436b20 R08: 0000000000000000 R09: 0000000000000000 [ 376.746586][ T9874] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 376.746602][ T9874] R13: 00007fb7af626038 R14: 00007fb7af625fa0 R15: 00007ffd2f0168c8 [ 376.746644][ T9874] [ 377.946859][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.946920][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.126343][ T5637] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 378.130791][ T5637] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 378.847540][ T6816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.968045][ T5292] 8021q: adding VLAN 0 to HW filter on device eth11 [ 379.834105][ T9912] loop2: detected capacity change from 0 to 256 [ 379.835139][ T9912] exfat: Bad value for 'uid' [ 379.835157][ T9912] exfat: Bad value for 'uid' [ 380.309018][ T6714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.651640][ T6714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.034057][ T6714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.412722][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.229931][ T5643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.231186][ T5643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.913412][ T9937] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1172'. [ 382.962477][ T5643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.141303][ T5643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.376465][ T6714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.069417][ T9576] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 385.111554][ T9576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.114460][ T9576] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 385.153940][ T9576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.157461][ T9576] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 386.031619][ T5643] Bluetooth: hci5: command tx timeout [ 386.190144][ T9576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.196739][ T9576] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 386.293752][ T9576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.747631][ T6714] bridge_slave_1: left allmulticast mode [ 386.747662][ T6714] bridge_slave_1: left promiscuous mode [ 386.747889][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.783898][ T6714] bridge_slave_0: left allmulticast mode [ 386.783928][ T6714] bridge_slave_0: left promiscuous mode [ 386.784144][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.853431][ T9990] loop2: detected capacity change from 0 to 2048 [ 386.886164][ T9990] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 386.900643][ T9990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.433179][ T6714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.439331][ T6714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.462810][ T6714] bond0 (unregistering): Released all slaves [ 387.493287][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'. [ 387.626359][ T5292] 8021q: adding VLAN 0 to HW filter on device eth12 [ 388.125080][ T5643] Bluetooth: hci5: command tx timeout [ 388.621829][ T9576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.025069][T10027] nfs: Unknown parameter 'fscontext' [ 390.191211][ T5643] Bluetooth: hci5: command tx timeout [ 390.354812][ T9576] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.370443][ T1399] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.370552][ T1399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.447045][ T9931] rxe_eth0 speed is unknown, defaulting to 1000 [ 390.679449][ T1399] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.679560][ T1399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.255934][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 391.426037][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 391.426092][ T9] usb 3-1: New USB device found: idVendor=200c, idProduct=100b, bcdDevice=0.40 [ 391.448341][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.469605][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.469635][ T9] usb 3-1: Product: syz [ 391.469653][ T9] usb 3-1: Manufacturer: syz [ 391.469670][ T9] usb 3-1: SerialNumber: syz [ 391.914554][ T9] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 392.262424][ T5643] Bluetooth: hci5: command tx timeout [ 393.348332][T10077] loop2: detected capacity change from 0 to 256 [ 393.354013][ T9] usb 3-1: USB disconnect, device number 14 [ 393.387421][T10077] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 393.387446][T10077] FAT-fs (loop2): Can't find a valid FAT filesystem [ 394.591875][ T5292] 8021q: adding VLAN 0 to HW filter on device eth13 [ 394.838841][ T6714] hsr_slave_0: left promiscuous mode [ 394.868076][ T6714] hsr_slave_1: left promiscuous mode [ 394.868926][ T6714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.868965][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.905277][T10100] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1208'. [ 394.929324][ T6714] veth1_macvtap: left promiscuous mode [ 394.929359][ T6714] veth0_macvtap: left promiscuous mode [ 394.929475][ T6714] veth1_vlan: left promiscuous mode [ 394.929546][ T6714] veth0_vlan: left promiscuous mode [ 395.059367][T10103] udevd[10103]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.863616][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 396.111497][ T10] usb 3-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=1.4b [ 396.111545][ T10] usb 3-1: no configurations [ 396.111560][ T10] usb 3-1: can't read configurations, error -22 [ 396.252318][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 396.355896][ T6714] team0 (unregistering): Port device team_slave_1 removed [ 396.381998][ T6714] team0 (unregistering): Port device team_slave_0 removed [ 396.401738][ T10] usb 3-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=1.4b [ 396.401784][ T10] usb 3-1: no configurations [ 396.401799][ T10] usb 3-1: can't read configurations, error -22 [ 396.406108][ T10] usb usb3-port1: attempt power cycle [ 397.792221][ T10] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 399.333098][ T10] usb 3-1: device descriptor read/8, error -71 [ 399.977361][T10147] loop2: detected capacity change from 0 to 512 [ 399.978333][T10147] vfat: Bad value for 'shortname' [ 402.595661][ T9576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.864963][ T9931] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.865830][ T9931] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.865999][ T9931] bridge_slave_0: entered allmulticast mode [ 402.875442][ T9931] bridge_slave_0: entered promiscuous mode [ 402.925719][ T9931] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.925834][ T9931] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.926011][ T9931] bridge_slave_1: entered allmulticast mode [ 402.959771][ T9931] bridge_slave_1: entered promiscuous mode [ 403.945641][ T9931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.948981][ T9931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.184558][T10182] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1226'. [ 404.186826][T10187] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1226'. [ 404.198892][ T9931] team0: Port device team_slave_0 added [ 404.239486][ T9931] team0: Port device team_slave_1 added [ 404.289512][T10191] loop2: detected capacity change from 0 to 1024 [ 404.369812][T10191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.416517][T10191] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 404.432408][T10182] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1226'. [ 404.441392][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.441410][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.441441][ T9931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.462351][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.462370][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.462408][ T9931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.502154][T10191] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 404.683531][T10191] ------------[ cut here ]------------ [ 404.683548][T10191] !err [ 404.683556][T10191] WARNING: fs/ext4/inode.c:2512 at ext4_do_writepages+0x33b3/0x44a0, CPU#1: syz.2.1229/10191 [ 404.702260][T10191] Modules linked in: [ 404.706187][T10191] CPU: 1 UID: 0 PID: 10191 Comm: syz.2.1229 Not tainted syzkaller #0 PREEMPT(full) [ 404.715773][T10191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 404.725942][T10191] RIP: 0010:ext4_do_writepages+0x33b3/0x44a0 [ 404.731996][T10191] Code: 0f 0b 90 e9 b6 d9 ff ff e8 6a 00 2f ff 90 0f 0b 90 e9 e6 dc ff ff e8 5c 00 2f ff 90 0f 0b 90 e9 94 df ff ff e8 4e 00 2f ff 90 <0f> 0b 90 bb ea ff ff ff e9 ae f8 ff ff e8 3b 00 2f ff 48 8d 3d 24 [ 404.751715][T10191] RSP: 0018:ffffc900026371c0 EFLAGS: 00010287 [ 404.757795][T10191] RAX: ffffffff829a1582 RBX: 0000000000000000 RCX: 0000000000080000 [ 404.765842][T10191] RDX: ffffc900059ea000 RSI: 0000000000008c32 RDI: 0000000000008c33 [ 404.774162][T10191] RBP: ffffc900026375d0 R08: ffff888052d15347 R09: 1ffff1100a5a2a68 [ 404.782937][T10191] R10: dffffc0000000000 R11: ffffed100a5a2a69 R12: ffffc90002637680 [ 404.791313][T10191] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1100a5a2a7f [ 404.799505][T10191] FS: 00007f55d4f2e6c0(0000) GS:ffff888123720000(0000) knlGS:0000000000000000 [ 404.808441][T10191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.815201][T10191] CR2: 0000001b32c23ffc CR3: 0000000075e9b000 CR4: 0000000000350ef0 [ 404.823997][T10191] Call Trace: [ 404.827456][T10191] [ 404.830481][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.836141][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.841916][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.847592][T10191] ? add_lock_to_list+0xc7/0x100 [ 404.852597][T10191] ? __pfx_ext4_do_writepages+0x10/0x10 [ 404.858163][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.863871][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.869626][T10191] ? __lock_acquire+0x1511/0x2de0 [ 404.874731][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 404.881100][T10191] ? lock_acquire+0x115/0x350 [ 404.886071][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.891790][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.897455][T10191] ext4_writepages+0x1fe/0x4e0 [ 404.902395][T10191] ? __pfx_ext4_writepages+0x10/0x10 [ 404.907707][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.913450][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.919092][T10191] ? do_raw_spin_unlock+0xf5/0x200 [ 404.924272][T10191] ? __pfx_ext4_writepages+0x10/0x10 [ 404.929693][T10191] do_writepages+0x338/0x560 [ 404.934323][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.940036][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.945685][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.951396][T10191] ? do_raw_spin_unlock+0xf5/0x200 [ 404.956523][T10191] file_write_and_wait_range+0x36e/0x440 [ 404.962244][T10191] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 404.968452][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.974176][T10191] ? irqentry_exit+0x2a0/0x9b0 [ 404.978606][ T9931] hsr_slave_0: entered promiscuous mode [ 404.979941][ T9931] hsr_slave_1: entered promiscuous mode [ 404.980857][ T9931] debugfs: 'hsr0' already exists in 'hsr' [ 404.980884][ T9931] Cannot create hsr debugfs directory [ 405.002315][T10191] ? trace_irq_disable+0x3b/0x140 [ 405.007420][T10191] ext4_sync_file+0x252/0xa40 [ 405.012652][T10191] ext4_buffered_write_iter+0x471/0x540 [ 405.018235][T10191] ext4_file_write_iter+0xae4/0x1cd0 [ 405.024428][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.030199][T10191] ? lock_acquire+0x115/0x350 [ 405.034915][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.040625][T10191] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 405.046362][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.052122][T10191] vfs_write+0x612/0xba0 [ 405.056416][T10191] ? __pfx_vfs_write+0x10/0x10 [ 405.061675][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.067333][T10191] ? __fget_files+0x3a2/0x420 [ 405.072083][T10191] ? __fget_files+0x2a/0x420 [ 405.076702][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.082416][T10191] ? fdget+0x1ac/0x250 [ 405.087555][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.093568][T10191] ksys_write+0x150/0x270 [ 405.097923][T10191] ? __pfx_ksys_write+0x10/0x10 [ 405.102849][T10191] do_syscall_64+0x166/0x520 [ 405.107453][T10191] ? trace_irq_disable+0x3b/0x140 [ 405.112585][T10191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.118674][T10191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.124649][T10191] RIP: 0033:0x7f55d3f9f559 [ 405.129083][T10191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.150274][T10191] RSP: 002b:00007f55d4f2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.158712][T10191] RAX: ffffffffffffffda RBX: 00007f55d4225fa0 RCX: 00007f55d3f9f559 [ 405.166773][T10191] RDX: 000000000000fe76 RSI: 0000200000000140 RDI: 0000000000000004 [ 405.174871][T10191] RBP: 00007f55d4036b20 R08: 0000000000000000 R09: 0000000000000000 [ 405.182904][T10191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.191606][T10191] R13: 00007f55d4226038 R14: 00007f55d4225fa0 R15: 00007ffd3b174678 [ 405.199940][T10191] [ 405.202965][T10191] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 405.210245][T10191] CPU: 1 UID: 0 PID: 10191 Comm: syz.2.1229 Not tainted syzkaller #0 PREEMPT(full) [ 405.219618][T10191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 405.229673][T10191] Call Trace: [ 405.232954][T10191] [ 405.235885][T10191] vpanic+0x26f/0x710 [ 405.239883][T10191] panic+0xc5/0xd0 [ 405.243608][T10191] ? __pfx_panic+0x10/0x10 [ 405.248048][T10191] __warn+0x315/0x4c0 [ 405.252034][T10191] ? ext4_do_writepages+0x33b3/0x44a0 [ 405.257427][T10191] ? ext4_do_writepages+0x33b3/0x44a0 [ 405.262815][T10191] __report_bug+0x276/0x570 [ 405.267340][T10191] ? ext4_do_writepages+0x33b3/0x44a0 [ 405.272742][T10191] ? __pfx___report_bug+0x10/0x10 [ 405.277783][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.283422][T10191] ? ext4_map_blocks+0x17a2/0x1c60 [ 405.288559][T10191] ? ext4_do_writepages+0x33b3/0x44a0 [ 405.293946][T10191] report_bug+0x16b/0x220 [ 405.298288][T10191] ? ext4_do_writepages+0x33b3/0x44a0 [ 405.303670][T10191] ? ext4_do_writepages+0x33b5/0x44a0 [ 405.309054][T10191] handle_bug+0x9c/0x200 [ 405.313310][T10191] exc_invalid_op+0x1a/0x50 [ 405.317832][T10191] asm_exc_invalid_op+0x1a/0x20 [ 405.322679][T10191] RIP: 0010:ext4_do_writepages+0x33b3/0x44a0 [ 405.328663][T10191] Code: 0f 0b 90 e9 b6 d9 ff ff e8 6a 00 2f ff 90 0f 0b 90 e9 e6 dc ff ff e8 5c 00 2f ff 90 0f 0b 90 e9 94 df ff ff e8 4e 00 2f ff 90 <0f> 0b 90 bb ea ff ff ff e9 ae f8 ff ff e8 3b 00 2f ff 48 8d 3d 24 [ 405.348267][T10191] RSP: 0018:ffffc900026371c0 EFLAGS: 00010287 [ 405.354331][T10191] RAX: ffffffff829a1582 RBX: 0000000000000000 RCX: 0000000000080000 [ 405.362292][T10191] RDX: ffffc900059ea000 RSI: 0000000000008c32 RDI: 0000000000008c33 [ 405.370255][T10191] RBP: ffffc900026375d0 R08: ffff888052d15347 R09: 1ffff1100a5a2a68 [ 405.378219][T10191] R10: dffffc0000000000 R11: ffffed100a5a2a69 R12: ffffc90002637680 [ 405.386185][T10191] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1100a5a2a7f [ 405.394159][T10191] ? ext4_do_writepages+0x33b2/0x44a0 [ 405.399576][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.405220][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.410860][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.416490][T10191] ? add_lock_to_list+0xc7/0x100 [ 405.421430][T10191] ? __pfx_ext4_do_writepages+0x10/0x10 [ 405.426973][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.432601][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.438227][T10191] ? __lock_acquire+0x1511/0x2de0 [ 405.443277][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.448904][T10191] ? lock_acquire+0x115/0x350 [ 405.453580][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.459219][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.464865][T10191] ext4_writepages+0x1fe/0x4e0 [ 405.469632][T10191] ? __pfx_ext4_writepages+0x10/0x10 [ 405.474929][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.480564][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.486193][T10191] ? do_raw_spin_unlock+0xf5/0x200 [ 405.491302][T10191] ? __pfx_ext4_writepages+0x10/0x10 [ 405.496584][T10191] do_writepages+0x338/0x560 [ 405.501172][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.506804][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.512435][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.518061][T10191] ? do_raw_spin_unlock+0xf5/0x200 [ 405.523172][T10191] file_write_and_wait_range+0x36e/0x440 [ 405.528814][T10191] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 405.535000][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.540630][T10191] ? irqentry_exit+0x2a0/0x9b0 [ 405.545393][T10191] ? trace_irq_disable+0x3b/0x140 [ 405.550438][T10191] ext4_sync_file+0x252/0xa40 [ 405.555124][T10191] ext4_buffered_write_iter+0x471/0x540 [ 405.560672][T10191] ext4_file_write_iter+0xae4/0x1cd0 [ 405.565969][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.571626][T10191] ? lock_acquire+0x115/0x350 [ 405.576304][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.581932][T10191] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 405.587654][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.593293][T10191] vfs_write+0x612/0xba0 [ 405.597546][T10191] ? __pfx_vfs_write+0x10/0x10 [ 405.602314][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.607945][T10191] ? __fget_files+0x3a2/0x420 [ 405.612618][T10191] ? __fget_files+0x2a/0x420 [ 405.617209][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.622834][T10191] ? fdget+0x1ac/0x250 [ 405.626900][T10191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.632533][T10191] ksys_write+0x150/0x270 [ 405.636867][T10191] ? __pfx_ksys_write+0x10/0x10 [ 405.641728][T10191] do_syscall_64+0x166/0x520 [ 405.646317][T10191] ? trace_irq_disable+0x3b/0x140 [ 405.651341][T10191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.657411][T10191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.663295][T10191] RIP: 0033:0x7f55d3f9f559 [ 405.667703][T10191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.687305][T10191] RSP: 002b:00007f55d4f2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.695723][T10191] RAX: ffffffffffffffda RBX: 00007f55d4225fa0 RCX: 00007f55d3f9f559 [ 405.703691][T10191] RDX: 000000000000fe76 RSI: 0000200000000140 RDI: 0000000000000004 [ 405.711655][T10191] RBP: 00007f55d4036b20 R08: 0000000000000000 R09: 0000000000000000 [ 405.719618][T10191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.727577][T10191] R13: 00007f55d4226038 R14: 00007f55d4225fa0 R15: 00007ffd3b174678 [ 405.735563][T10191] [ 405.738813][T10191] Kernel Offset: disabled [ 405.743123][T10191] Rebooting in 86400 seconds..