last executing test programs: 4m7.61504611s ago: executing program 2 (id=234): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 4m7.61317236s ago: executing program 4 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x1, 0x0, {0x0, 0x1, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0xc050) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="9e7eafc0e8f2", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xf, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xff80, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) fadvise64(r3, 0x2, 0x0, 0x4) 4m6.583349746s ago: executing program 2 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 4m5.477276794s ago: executing program 2 (id=238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x1, 0x0, {0x0, 0x1, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0xc050) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="9e7eafc0e8f2", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xf, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xff80, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0x1) 4m4.372497612s ago: executing program 4 (id=240): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 4m4.285840354s ago: executing program 2 (id=241): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000380)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r0 = syz_open_procfs(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 4m1.462646645s ago: executing program 4 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 4m0.975338837s ago: executing program 2 (id=247): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 3m59.847733105s ago: executing program 2 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) pread64(r3, &(0x7f0000000200)=""/102395, 0x18ffb, 0xb) 3m59.500847934s ago: executing program 32 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) pread64(r3, &(0x7f0000000200)=""/102395, 0x18ffb, 0xb) 3m57.131931004s ago: executing program 4 (id=253): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000380)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 3m55.352138258s ago: executing program 4 (id=256): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000380)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8}]}, 0x0, 0x2ce, &(0x7f0000000700)="$eJzs3UFPE00YwPGHFtpSAu2BvMn7Jm98ohe9bKB+gsZAYmyiAWrEg8kiW226tqRbMTVGuHn1E/gBiN48aaLeDRdv3o0XLiZeOIhrut21pSyhjYGt8P8lZIaZfbozzJQ83cDuzq3nDyolxyiZDYmlVGIim7Irkm3VfCN+GfPqCem2KZcmvn/+f3H59rV8oTC3oDqfX7qcU9Wpc+8ePXl5/kNj4ubrqbdJ2c7e2fmW+7L9z/a/Oz+XgleviZi6Uqs1zBXb0tWyUzFUb9iW6VharjpWvaFd/SW7trbWVLO6Opleq1uOo2a1qRWrqY2aNupNNe+Z5aoahqGT6d7hn3rxgSOKewmR/LEMBlEYD2us1/NmPLSzuHUSgwIAAMMlqvz/ftnRsqPVWiu/b73wIfl/TAbI/0XC8n8cqri1sGCS/59yrfw/7b9/9yP/BwAAAAAAAAAAAAAAAAAAAADgb7ArknFdN7Prul4ZfCVFJCUiwfdRjxPHI1h31v9sWlweEf8f91Ii9rP1YkLaZbs/X5Ky2GLJzJjID28/+Nr1+auFuRn1ZOW9vbFebEW2yrgkg/hANjx+th2v3fEbMibp7vPnJCPT4fG5kPjWPC5ecJP+mS0xJCOf7kpNbFn19nUn/ums6pXrhZ74ce84AAAAAABOA0N/O/D53es3NLhtSE9/u7FzfUAynesDc2HXB3o+X4/Kf6PRzRsAAAAAgLPEaT6umLZt1Y+qpDotH/uPGqpK8PyDgcPjIV3BX8REN51UvwePiojf8mZY1qKfSuwPfrzxAVZ57OB+TojIvpbpk9/zr14M8Pbsr/L1Yf+bNqrfSAAAAACOS5D0n5mHZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMIT6vXlYcPyBrj3XdY8I7zpdPJpZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMPhVwAAAP//ZXYNzw==") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 3m54.639402866s ago: executing program 4 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 3m54.379886973s ago: executing program 33 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 3m50.983062868s ago: executing program 1 (id=277): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) 3m49.995582773s ago: executing program 1 (id=279): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 3m47.118817355s ago: executing program 1 (id=273): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="9e7eafc0e8f2", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xf, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xff80, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0x1) 3m45.505868886s ago: executing program 1 (id=276): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000380)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 3m45.010143148s ago: executing program 1 (id=278): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="9e7eafc0e8f2", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xf, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xff80, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0x1) 3m43.374119899s ago: executing program 1 (id=280): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4c800) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0xffffffffffffff49}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090027f38200000000000400"], 0x14}, 0x1, 0x0, 0x0, 0x42884}, 0x10) bind$inet6(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 3m42.885957651s ago: executing program 34 (id=280): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4c800) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0xffffffffffffff49}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090027f38200000000000400"], 0x14}, 0x1, 0x0, 0x0, 0x42884}, 0x10) bind$inet6(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 3m36.112423672s ago: executing program 6 (id=263): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000380)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r0 = syz_open_procfs(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 3m35.742989301s ago: executing program 6 (id=285): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4c800) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0xffffffffffffff49}, 0x28) bind$inet6(r1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) 3m34.323855377s ago: executing program 6 (id=287): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="9e7eafc0e8f2", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xf, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xff80, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0x1) 3m34.130826471s ago: executing program 35 (id=287): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="9e7eafc0e8f2", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xf, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xff80, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0x1) 3m32.829067704s ago: executing program 0 (id=290): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4c800) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0xffffffffffffff49}, 0x28) bind$inet6(r1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) 3m31.551574166s ago: executing program 0 (id=291): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 3m30.491836973s ago: executing program 0 (id=292): sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000028c0)={0x0, 0x0, "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", "162c75b16b9f5b4501e0359e58f95b5e8fe8d2231dd1a9e87de4ed2491971892d6184901ab59a572aec59061fda9bf3599298c539f953ad933775e90180f29262679849ba38e934ede83775531ae9bd1f9fa88f7954102e68a8be43e68e63d6c5bdd5296ec91111b0cfdc2a4773b6d07e8e4dced105df510bb750cf5ad6a506233babfd6ab30c5bc95a712fb0b8f1e884333414c0d719c39fb2b4f9e31a8c3a85feecc90511df7221c21af4efe953bee37725d84aad309ea357db53b8936cb6fcb87fc6c0f94d1c428f5bcf1be0765125764759631b345807d7d547c44ee82bd8e3bbf0ed73f202f9af921908c9c2f654f75f94ec0d6180c14697da598d15dcc68a4cd63fbdc7aab8b47815f39e9c090cdb2a800e31059ccbe0055f20843bf53f43f0fc0867e118d21d7b8a4a52514077b1a13e478516355e571e1aa5ff5b2eb860981d360fa258434d3d43323379922a104922dfec11712c2a578b956a5c3458abcfa1e4c54b4692d12df3b4fed22cf9f74d4cc82ccbd1d50db4f91e4aa5914d2ece08c4a10c577c49b5c090a04c1cb7824f9be8bad246dd5570b5ee0314297d7b756caaab30e9b3efee473c2a32fcfdf9e12d7090d4d425e0955b5392bd5bde7e67efe2c977cdee73eda75ac878f159562bc7ac04516d202282b8596fd83b76e46c58d1355cc0409b8bd9d5a9a9c0689d39f96cb9c0db3420bdf6ffe956a8a026c877f09c329f687ff217cf36d6864c5f2183e81c7e6d1ee8bf588f1b9694fa6e03539dbe35d218786db9443b36dffdf65fc9a05c47b871720379845a261d88addecf1e64fa23ece6c13119a963622eaa7cf1e3973bec9f217755afa33e8af4e17b5fdcd590718f3f843d1b2b203522e5ddf18f0f53c314d1a3670d3687ff9e7e8768026283e6ce2e13d4c3ba3e0f23d5f3f7f2284e9f9ef232b7419332ae844fcbf9d4c1efb03f04dad3d0d7b023c9260afec0cad999926223d4d5a00108aac3234fe681a295a4020aeccf0a733bea1c3d48e5c21a73754f43387e0fce9c3d0553967ab8501ac7a14243715b486c6ebb093d2ffb08ec8305957ee451d42fcf45564f1b3c2bf2ad4f159de043984a1fc5ff1325313ae5e743c3aaab2bedc33ebc25e27d2538b0fc7ab7cb38f57cbc0b31c7767ed2064da9edb032083c670fc3a9f73d4da26f3158038b0c4347507b04e842cacc7fe5bb7a74b12ace2f7629ec7b80acafab41e49117477ae43bbc4b562f717990e2626c51948ea4b157206f8913e1d669601835e0906bfdb95e76ffb13facdeed1897d23ddc48b9d41ed8e66fcbf32a07a48091dccc3574facb256ccecd72abe5e6331bea8690704e2d0c18df88c7efb40c016c7ab065e8c3a7ccfafff81feb7cb26387a368fb292774abb06aa82501e9f22996cd3b0fe3e8ba2c761e7c913c414d0f3d70385730468584c5d7e427a3e860e4bccc714cd199275ed229a072c6efe01051d342aa79209daf66b887a5e1ec9cff1969d4eb2e73242d47296a83d1f6ce9258e37f33013b1120e3a0779aa8abcb9256e925b785dbb1fccf9cfda353f71e7d9352160a7ae599fff091dd5033570f1f5e2b6c9c7051a4b5b2890dff68c91e1860dd507fc6867ad0a6b959831f27c6b47ad4cf5dd2eff8372e65d8ed8232a11899a7f419f057df6bffad800ecb33d73c84b90f1d52633770f780dcbdd6c133811fc35421d51839461a5e3a2d5f718667c24b6eb3abab6e523efebd8a46ef17df264e2e27731f4ba75b797750125df09921a5c73dced36573cf965ea0272a3881b8890ff251772b68b0c5ea7675fe310d3e324b1c281806b94debd2e2e87eb20a772ef04612719a2009954ce069589285b463ee2f7983a3d99982f5c09ba3f7107468ad0d692e41c05a4c7d010e9a56e959fa35c2a46c737d9faea9b4ca93b4b8155c8ea4abe7bfe1cc14f33cbe8013011ae277a3face8dd40fb690f0856481e4f6a1ff0747ac3f67f47ebef07c9df1df04db852bb8bbf336ebe870dff1f12e045e688501560f56f7fac85d162b3491e260ad32f06d37a85a70e7e04adb3b2992a7097a29db81d9516d6301895d82032822370acf1610c4849c49dfb3be31e3e2c956ca1374f2cbcdeb42d083f3b7075dbfc6ba1bd0d1964b689b26564d2ae5c2d70dfe8101ddac4be38b8988a7cbaaca6e84be74fd1c9c88377e38865c6c315ce7b4d2bb5a45241f88d6b3c2a6f4802e752794e919ca4e951001a5385d1bbc1a392d5f0756ee2f543441a7f7ba8dcd9dedaf7880e6235ac7eed6eda9424b9984599251661929e1395583c65d9d2b7871748699503dd336820b7c87ca1caea074e46d8ce0d4887df49c875c72dd1263ab4edb9d1d8a6bd986916ef280e73b204ac2740e9656c9ece6d76383297bcd9384ed84201add080c2694e87ba10d39a2253476b7bde5f73798fc5e4823a1da4a87ce0395fa7b80478bda6b627a427b9a63f572b6c14590f17b3df5dceedb84e65eb788a4ad036d39ea23c42062c694cf9105a3e0aa63b04d95e8f899e19a24676a8bd62b50e4495e93dcb0396049db5cca8db2b6938d3662b6e661ab9807d2c4039846787e56b8a7530e36510aa1ced3b67ca34f08086571aa0e9761c7865da4edbff06b1ddabc61feea82e1cf21e30f8616eda1c9f8119c0b8dd94d53a78358c7c6a4ae797e1fd33f152866becc5f25ff9074dcbbc1d7f33027586ce112bf3464d8c29cf664785207779257e826d432d813fbd9064bcc3c33c30e60012b3e247a44f846a2f2ca478c8581184dbd3075a8d16c28dbf29ce9c83b98253a31203acd07bc2aa27c63db374f8d4ecd8833cf4139bd1adda6baf83c0a896bdf08345a9f3f8a9e6f7d38c7dd53bec5dee0098934c74c8a0aac5a6524b270da4b975887304e38a44de21c1abe7dc933651cb3c70e73f60006d2bd9abc06ee4996e25cf37f019871ccb441bafef0b61559c9ebc58d5a6259fd71227682a5eeca54b1b91c837d26cf2fd99ea0da3534fdaef26c108bebbe716cfb7708557a741b899adcbd7e0ad5629ee684a9c389c65fa9bfd8d0308c996ff8ce922f6c05d8fb1db35c8dab17355de686007d1331dc80ca0cdec96d8227d9e3e493dc96491f9a1275e46210878c7ccf2996842b0aa0a7b25cb4c27e0c965e5fcce4039d004beeb57935a1fa3f7abc66af391ef544c35241d8d1951f3a949d0f3afa5877ceabf01beffbef1e1cc6daa549703189ab0d1a530a388f1d134e10f5396a1faf30d6d8419c738e76c8f7576712a8710a1d2e11e785498dcbb6f5e68a4519a5071cb5ece54f674b851209f08b872a49752769688c127cb0f8f1c859c75da5bce8f4cda4f0dea04a7d160f0f6d6aab0caa56d65180e9715a12376dc132e0173489c2df1687d359d6ac52070f55a64a1ad505b3e46564e7a74b20b178efc5493b8035255e678c73dc78870517c6a175f53d9266d3acdc8702fa5e663d564bf7aa7bba93940717a1bc895ded45a4a05682c7293aeecbf5857a890e295664d0c59211f457f44f45a58c8922bb1fdc6fa01328c5770aab049f25426f0c368e4ea269364da1b474f11d466de1c79b01878cf1d01a269426f022c3f309f5cd166185a404880b0e35913ea2c40559e113bf70e6a53059249572122c6fd2e1c349f40c70bc9232685317b0168577e1a862fe2040f4846b8375191ea875423ce797467f56440e834860b06d0bf0739027d6f025731097baac850a67e501b99019bbb7cfdfbf1b3121f8d970a1985aebbbb34efad5a2530634334baa684aa2620de203410621c35f5ac6b26856b8d3928e3d3180483c365a8f1843420136dae0f298e927f89b2c6cbb8555f91a80111d9616f4ecd1efb0a8428673382da837cf5a412ba8ac0d3b34b47998b2f3755e60c84cf97a891be853f1a41815d6091292a3de7e9f0c28f1b084be07824a4c77ccf2bc8ebbb5ab12ce6bb143ba7ac895bbab7f9564234affa4390a1b52335b7f86b4f6acf5a0beb52fcd5afa53acbf6a63a9be07b30de6f11f0e9dcb140c5bda9f48728312f1c58ff4844124acdf412a14e0d35d56981fa084876361083cc54c1cd2210787f9014128d652993f8a2f3e948561311fd4b3f7700c38f888deadf911072c6438d9eced3d18a732573c589e4175f0ccf3f1f2684ffb839a872f7a5492ed850c5cc62d9b2bdb6d43735148712d69ebd2fe693d09eb5b6dc89dcf1745ea4e5d33f5c24f617deda506a00b41ede240762e297694bec72025e059d48fbf3715009b468db1b11f9a29514ffe1436d7509d96250ace4136bb8e27f49e6d0e2a59554463dcae9fc55d61350a8c98b2b5133ea43937604ea6d57362f033c8b5eb604bd6282b4c75de603e9f85eb4184d5fb95bc4f079506a96f02f076dcdf6a7a40195e1aebd36dfbca133cf0667b68012d8714ec594f673469855e7b1ab118b51678605f36a23644ab779634fb46bb092343a6bb8c710c5f5e67814c039f792fa844d227c5050d1c058e5b14e8b18fcc6b0b38d4f57c2f4580205758eca44a36b474111de8765debb51492430c71a73c3a23f46290c4b0d39c9bca5f63c4e8a9045a01561f00f7a66055c5ad9f88b76f95f62d13a4ed808366c715b848662d99959f7103dbc9aaf30a6bc048a486e1bd192851916841011be64c81b7f8c1b6b504921dde513128c05efed0293b694e00c3427d4d0ef90b5b5ab35a4f8a9da648cc182b8618e808913d58bb80987b98102c8bf4722566713a5808e1830b39b24d12e510456aeff9085d8728d68fff621e58ceb86a43dd83f2a9c1a5774cde386acdac42da976c1dd2f5ad4fc943b07cb434bbdc839a26566f5eb6d9c9907acd700fd039576a3190d9aa58bb2e0b6df322dda007e01eb6140bb9d0a26770c350d83eee1e3a9a7560a386b4dd36aa16b92b1a01cab92d990ad55f261ccf18489e896d41abfd63e1ed872625db447ea2696e0a4579e60a068103df68dea45b9899be9bfa3ef6f0921a992aa92e4200e6a7939a528362f634199676a4f2ffb2f919df42157517cf036cdc7929cfd2f069ff10a0e790871b6b2c743e279c9f4071538c5df7384f9c6076e8f051636591788ff6cefa31921ac7bf38b71da2801047a2bd10b7d27223e6761b63a948df97421112daa91a1b13ac26a496858bb7338e19cb63ad328508d3a2e153decc220fff835b9961e57a3ae612e34658ad8391f99bdd000ad407c01004c69dee4cb51b1540b905cc2f40fc70eb0fdc9acf980d75e8433c3bcae3b37ca1de2ee6c108d2e8d47e6f43da777a01b9da38d52ff7e7b2cbdfa37a61016b63dda64ce56b1815d351c1cd13fd386e70314bfea771ded3e7d211a2dc6d4eeb172286823a8dc765db5504b9c4df24731fd7aac982020af65b2d5c07bb607be9442fd"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000016c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000018c0)={r1, r2, "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", "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"}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffff9]}, 0x0, 0x8) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0x25, &(0x7f00000004c0)={0x0, 0x0, 0xf}) r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xffffffffffff8000]}, 0x8) read(r5, &(0x7f0000000340)=""/384, 0x180) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0x10000, &(0x7f0000000240)={@align=0x20000000000000f3, {0x4, 0x9, 0xa8c, 0x5}}, 0x1, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x80000001}) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070001040000000000040002000600030000000903000038000104ce0000000e0000000b0020"], 0x58) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) accept4$rose(r6, &(0x7f0000000140)=@short={0xb, @remote, @bcast, 0x1, @null}, &(0x7f0000000540)=0x1c, 0x80800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0xff, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x81, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3m27.727742382s ago: executing program 0 (id=293): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000380)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") r0 = syz_open_procfs(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 3m27.599257335s ago: executing program 0 (id=294): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4c800) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0xffffffffffffff49}, 0x28) bind$inet6(r1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) 3m25.80507898s ago: executing program 0 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x2141, 0x59) pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 3m25.003750091s ago: executing program 36 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x2141, 0x59) pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 8.045605658s ago: executing program 8 (id=978): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdf2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000280)='.\x00', 0x10000, 0x0) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) close(0x3) syz_open_procfs(0x0, &(0x7f0000019080)='net/ptype\x00') 5.98001871s ago: executing program 8 (id=983): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xff, 0xffff, 0x8001, 0x693fffd, 0xa0, 0x9, 0x9}, &(0x7f00000001c0)=0x9c) 4.911927907s ago: executing program 8 (id=993): setreuid(0xffffffffffffffff, 0xee01) r0 = msgget$private(0x0, 0x505) msgctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x3, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0x4f, 0xb51e}, 0x0, 0x0, 0x5, 0x8000, 0xfffffffffffffff8, 0x5, 0x7, 0x7f, 0x9, 0x200, 0xffffffffffffffff, 0xffffffffffffffff}) 4.78098644s ago: executing program 8 (id=995): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 4.181527855s ago: executing program 8 (id=1001): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x2200006, &(0x7f0000000100)=ANY=[], 0x2, 0x252, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20) fadvise64(r0, 0x5, 0x0, 0x3) 3.823881914s ago: executing program 9 (id=1003): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.7918748s ago: executing program 9 (id=1006): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x200, 0x3a, '\\)!^#', 0x3a, ',', 0x3a, './bus'}, 0x2b) 2.735397231s ago: executing program 9 (id=1008): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000014c0)=""/2, 0x1a, 0x2, 0x1}, 0x28) 2.564667865s ago: executing program 9 (id=1010): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) listen(r1, 0x5) syz_emit_ethernet(0x4c, &(0x7f0000000300)={@local, @empty, @void, {@generic={0x800, "450000400000000040847c377f0000017f0000014e204e210000000067645d940100002012345678000186a0000a000a000000018002000a0001020304050000"}}}, 0x0) 2.082956788s ago: executing program 9 (id=1014): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000800)='ceph v2\n\x00'/20, 0x1c) shutdown(r2, 0x2) close(r2) close(r0) nanosleep(&(0x7f0000000800)={0x2}, 0x0) 2.031873689s ago: executing program 3 (id=1015): syz_emit_ethernet(0x6e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x2, "269fe0", 0x38, 0x3a, 0x1, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x2, 0x6, "29e50e", 0x0, 0x6c, 0x1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, [], "0a06efb2988b900b"}}}}}}}, 0x0) 1.882546123s ago: executing program 3 (id=1017): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x1a4, 0x10, 0x32, 0x0, 0x0, {{@in=@private=0xa010101, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x32}, {@in=@private=0xa010101, 0x1234, 0x32}, @in=@private=0xa010102, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x28, 0x1, {{'hmac(sha1)\x00'}, 0x80, '\x00'/20}}, @algo_crypt={0x28, 0x2, {{'cbc(aes)\x00'}, 0x80, '\x00'/16}}]}, 0x1a4}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="840000002900010000000000000000000a01010100000000000000000000000034120000020032000a0101030000000000000000000000000a01010400000000000000000000000000000000000000000a0101010000000000000000000000000a010102000000000000000000000000000000000000020020203200000000000000000000000000020002000000"], 0x84}], 0x1}, 0x0) 1.6034885s ago: executing program 3 (id=1021): r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89d0, &(0x7f0000000000)='\x00\x00\x00') sendto(r0, &(0x7f0000000100)='hello', 0x5, 0x0, &(0x7f0000000200)=@generic={0x2d, "000001010800"}, 0x10) 1.363506666s ago: executing program 3 (id=1027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1234567812345678}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8765432187654321}]}]}, 0x30}}, 0x0) 1.232383999s ago: executing program 5 (id=1029): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/5, 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\n\x00', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) 1.155784751s ago: executing program 3 (id=1030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1}}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtclass={0x48, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}, 0x2710, 0x2710, 0x3e8}}]}}]}, 0x48}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000340)={0x11, 0x3, r3}, 0x14) sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000400)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 986.505825ms ago: executing program 5 (id=1031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x204e, @loopback}}, {0x14, 0x2, @in={0x2, 0x204e, @loopback}}}}]}]}, 0x54}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x11) connect$inet(r2, &(0x7f0000000100)={0x2, 0x204e, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000200)='\x00'/16, 0x10, 0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x3f, 0x1, 0x1}}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000500)=@name={0x1e, 0x2, 0x2, {{0x3f, 0x1}}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x0) 731.919891ms ago: executing program 7 (id=1033): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ed) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x2345, @loopback}, 0x10) listen(r2, 0x5) r3 = socket(0x2, 0x3, 0x84) sendto$inet(r3, &(0x7f0000000100)="1234234500000000000000000400000800000000c100001400000001000500087f000001c00100087f000002", 0x2c, 0x0, &(0x7f0000000200)={0x2, 0x2345, @loopback}, 0x10) 731.716862ms ago: executing program 9 (id=1034): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in={0x2, 0x1a0b, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='mount_timeout\x00', &(0x7f0000000250)='10\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 687.811232ms ago: executing program 5 (id=1035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x68, 0x2, {{0x1, [], 0x1, [0x1]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}]}, 0x98}}, 0x0) 580.745575ms ago: executing program 7 (id=1036): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x1}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0x1}, 0x1c) 479.876698ms ago: executing program 5 (id=1037): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/all/use_tempaddr\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='2\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/default/use_tempaddr\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='2\n', 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv6/conf/syzkaller0/use_tempaddr\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='2\n', 0x2) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, r4}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00'}) 479.617788ms ago: executing program 3 (id=1038): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x2, &(0x7f0000000280)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback=r2, r3, 0x24, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380)='\x00\x00\x00\x00', &(0x7f00000003c0)=@udp=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='hello\x00', 0x5}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/10, 0xa}], 0x1}, 0x0) 475.010678ms ago: executing program 7 (id=1039): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00000000000000000000000100000001000000010002000001000000000000000000000100000000000000000100", 0x2a, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 438.589219ms ago: executing program 7 (id=1040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000080004400000000414000000110001"], 0x84}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a01040000000000000000020000000900010073797a30000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c0002801800018008000140fffffffd0900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000070a01020000000000000000020000000900010073797a30000000000900020073797a3100000000140000001100010000000000000000000000000a"], 0x54}}, 0x0) 367.018081ms ago: executing program 8 (id=1041): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='udp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x8008, @loopback}, 0x10) write(r4, &(0x7f0000000400)="000000010000000000000002000186a30000000300000001000000010000001c00"/64, 0x40) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) read(r3, &(0x7f0000000600), 0x1000) 319.981462ms ago: executing program 7 (id=1042): r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x108, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\x00', 0x9) 185.088586ms ago: executing program 7 (id=1043): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='100 1\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim100/sriov_numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@getlink={0x24, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x24}}, 0x0) 117.980367ms ago: executing program 5 (id=1044): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000500)=[{0x10, 0x2c, 0x1, "0100000000000000"}], 0x18}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000700)="0000000100000001000000010000000100000001010500000000", 0x1c, 0x0, &(0x7f0000000800)={0x2, 0x4e20, @loopback}, 0x10) 0s ago: executing program 5 (id=1045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1001}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) kernel console output (not intermixed with test programs): nk: 16 bytes leftover after parsing attributes in process `syz.3.542'. [ 368.708046][ T1325] usb 9-1: unit 4 not found! [ 368.727826][ T7075] loop7: detected capacity change from 0 to 128 [ 368.791516][ T7075] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 368.827282][ T1325] usb 9-1: USB disconnect, device number 11 [ 368.889106][ T7075] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 369.101313][ T4184] udevd[4184]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.344648][ T7102] loop8: detected capacity change from 0 to 128 [ 369.441111][ T7107] loop7: detected capacity change from 0 to 2048 [ 369.492202][ T7102] EXT4-fs (loop8): Test dummy encryption mode enabled [ 369.630991][ T7102] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 369.647921][ T7107] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 369.698708][ T7107] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.726078][ T7102] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 370.233529][ T7139] loop8: detected capacity change from 0 to 512 [ 370.271930][ T5458] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /53/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 370.356700][ T7092] loop3: detected capacity change from 0 to 32768 [ 370.391697][ T7139] EXT4-fs warning (device loop8): dx_probe:833: inode #2: comm syz.8.553: Unrecognised inode hash code 255 [ 370.432992][ T7139] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.553: Corrupt directory, running e2fsck is recommended [ 370.483628][ T7139] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 370.492796][ T7139] EXT4-fs error (device loop8): ext4_iget_extra_inode:4573: inode #15: comm syz.8.553: corrupted in-inode xattr [ 370.531976][ T7139] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.553: couldn't read orphan inode 15 (err -117) [ 370.544371][ T7092] XFS (loop3): Mounting V5 Filesystem [ 370.559361][ T7139] EXT4-fs (loop8): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 370.641125][ T7092] XFS (loop3): log mount failed [ 370.722399][ T7161] EXT4-fs warning (device loop8): dx_probe:833: inode #2: comm syz.8.553: Unrecognised inode hash code 255 [ 370.738502][ T7160] program syz.7.554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.747952][ T7161] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.553: Corrupt directory, running e2fsck is recommended [ 370.786490][ T7161] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 4: comm syz.8.553: path /40/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 370.815351][ T7164] device vlan0 entered promiscuous mode [ 370.990469][ T7161] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 64: comm syz.8.553: path /40/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 371.170922][ T7171] loop3: detected capacity change from 0 to 128 [ 371.233868][ T7171] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 371.273361][ T7171] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 371.357215][ T7176] loop7: detected capacity change from 0 to 512 [ 371.462408][ T1325] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 371.478173][ T7176] EXT4-fs warning (device loop7): dx_probe:833: inode #2: comm syz.7.558: Unrecognised inode hash code 255 [ 371.500516][ T7176] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.558: Corrupt directory, running e2fsck is recommended [ 371.514105][ T7176] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 371.523112][ T7176] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.558: corrupted in-inode xattr [ 371.536005][ T7176] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.558: couldn't read orphan inode 15 (err -117) [ 371.548582][ T7176] EXT4-fs (loop7): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 371.616080][ T7180] loop8: detected capacity change from 0 to 128 [ 371.689076][ T7180] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 371.763329][ T7180] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 371.881450][ T1325] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.900664][ T1325] usb 10-1: config 0 has no interface number 0 [ 372.051877][ T7187] loop8: detected capacity change from 0 to 2048 [ 372.119835][ T1325] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 372.129046][ T1325] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.166440][ T1325] usb 10-1: Product: syz [ 372.175897][ T1325] usb 10-1: Manufacturer: syz [ 372.180971][ T1325] usb 10-1: SerialNumber: syz [ 372.250942][ T1325] usb 10-1: config 0 descriptor?? [ 372.450346][ T7176] EXT4-fs warning (device loop7): dx_probe:833: inode #2: comm syz.7.558: Unrecognised inode hash code 255 [ 372.466449][ T7176] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.558: Corrupt directory, running e2fsck is recommended [ 372.521575][ T1325] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 372.612371][ T1325] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 372.665468][ T1325] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 372.703752][ T7182] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.560 (7182) [ 372.743321][ T1325] usb 10-1: media controller created [ 372.757337][ T7203] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 372.804524][ T1325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.885149][ T7182] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 372.925861][ T7182] BTRFS info (device loop3): setting nodatasum [ 372.948196][ T7182] BTRFS info (device loop3): force zlib compression, level 3 [ 373.028469][ T7182] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 373.071031][ T7182] BTRFS info (device loop3): use lzo compression, level 0 [ 373.079703][ T7182] BTRFS info (device loop3): turning on flush-on-commit [ 373.093447][ T7182] BTRFS info (device loop3): enabling auto defrag [ 373.146868][ T7182] BTRFS info (device loop3): max_inline at 4096 [ 373.166042][ T7182] BTRFS info (device loop3): using free space tree [ 373.173207][ T7182] BTRFS info (device loop3): has skinny extents [ 373.645617][ T7182] BTRFS info (device loop3): enabling ssd optimizations [ 373.733443][ T7] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 374.004169][ T7] usb 9-1: Using ep0 maxpacket: 32 [ 374.134473][ T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 374.156458][ T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 374.351086][ T7] usb 9-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 374.367024][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.389477][ T7] usb 9-1: Product: syz [ 374.393731][ T7] usb 9-1: Manufacturer: syz [ 374.409770][ T7] usb 9-1: SerialNumber: syz [ 374.437844][ T7] usb 9-1: config 0 descriptor?? [ 374.462809][ T7208] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 374.699101][ T5543] usb 10-1: USB disconnect, device number 9 [ 374.779355][ T7] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input8 [ 375.264132][ T7273] set_capacity_and_notify: 2 callbacks suppressed [ 375.264150][ T7273] loop3: detected capacity change from 0 to 24 [ 375.326078][ T7273] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 375.383664][ T7273] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 375.400200][ T7208] device syzkaller0 entered promiscuous mode [ 375.433938][ T7276] loop9: detected capacity change from 0 to 1024 [ 375.587698][ T4241] usb 9-1: USB disconnect, device number 12 [ 376.075702][ T7293] loop7: detected capacity change from 0 to 128 [ 376.132737][ T7293] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 376.316764][ T7303] FAULT_INJECTION: forcing a failure. [ 376.316764][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 376.335778][ T7293] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 376.354791][ T7293] ext2 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.398165][ T7303] CPU: 0 PID: 7303 Comm: syz.8.574 Not tainted syzkaller #0 [ 376.405534][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 376.415628][ T7303] Call Trace: [ 376.418947][ T7303] [ 376.421907][ T7303] dump_stack_lvl+0x188/0x250 [ 376.426632][ T7303] ? show_regs_print_info+0x20/0x20 [ 376.431873][ T7303] ? load_image+0x410/0x410 [ 376.436425][ T7303] ? __might_sleep+0xf0/0xf0 [ 376.441047][ T7303] ? __lock_acquire+0x7b50/0x7b50 [ 376.446122][ T7303] should_fail+0x383/0x4b0 [ 376.450583][ T7303] should_failslab+0x5/0x20 [ 376.455121][ T7303] slab_pre_alloc_hook+0x51/0xc0 [ 376.460130][ T7303] __kmalloc_node_track_caller+0x68/0x3a0 [ 376.465888][ T7303] ? netlink_sendmsg+0x654/0xbe0 [ 376.470875][ T7303] ? __alloc_skb+0xf4/0x750 [ 376.475412][ T7303] ? netlink_sendmsg+0x654/0xbe0 [ 376.480385][ T7303] __alloc_skb+0x22c/0x750 [ 376.484862][ T7303] netlink_sendmsg+0x654/0xbe0 [ 376.489670][ T7303] ? netlink_getsockopt+0x570/0x570 [ 376.494901][ T7303] ? aa_sock_msg_perm+0x94/0x150 [ 376.499875][ T7303] ? apparmor_socket_sendmsg+0x88/0x230 [ 376.505457][ T7303] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 376.510779][ T7303] ? security_socket_sendmsg+0x7c/0xa0 [ 376.516280][ T7303] ? netlink_getsockopt+0x570/0x570 [ 376.521765][ T7303] ____sys_sendmsg+0x5be/0x8f0 [ 376.526589][ T7303] ? __sys_sendmsg_sock+0x30/0x30 [ 376.531666][ T7303] ? import_iovec+0x6f/0xa0 [ 376.536220][ T7303] ___sys_sendmsg+0x236/0x2e0 [ 376.540941][ T7303] ? __sys_sendmsg+0x290/0x290 [ 376.545787][ T7303] __se_sys_sendmsg+0x1b7/0x2a0 [ 376.550684][ T7303] ? __x64_sys_sendmsg+0x80/0x80 [ 376.555653][ T7303] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 376.561684][ T7303] ? lockdep_hardirqs_on+0x94/0x140 [ 376.566931][ T7303] do_syscall_64+0x4c/0xa0 [ 376.571378][ T7303] ? clear_bhb_loop+0x30/0x80 [ 376.576086][ T7303] ? clear_bhb_loop+0x30/0x80 [ 376.580804][ T7303] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.586741][ T7303] RIP: 0033:0x7fdf64496e99 [ 376.591203][ T7303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.610857][ T7303] RSP: 002b:00007fdf626ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.619319][ T7303] RAX: ffffffffffffffda RBX: 00007fdf6471efa0 RCX: 00007fdf64496e99 [ 376.627330][ T7303] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 376.635339][ T7303] RBP: 00007fdf626ef090 R08: 0000000000000000 R09: 0000000000000000 [ 376.643346][ T7303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.651351][ T7303] R13: 00007fdf6471f038 R14: 00007fdf6471efa0 R15: 00007ffc43cb9208 [ 376.659383][ T7303] [ 377.479261][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.9.580'. [ 377.503192][ T4439] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 378.087037][ T5543] syzkaller0: tun_net_xmit 76 [ 378.111642][ T5543] syzkaller0: tun_net_xmit 48 [ 378.118721][ T5544] syzkaller0: tun_net_xmit 76 [ 378.735411][ T7337] loop9: detected capacity change from 0 to 131072 [ 378.747991][ T4241] syzkaller0: tun_net_xmit 76 [ 378.832969][ T7337] F2FS-fs (loop9): Invalid log sectorsize (67108873) [ 378.840537][ T7337] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 378.850586][ T7337] F2FS-fs (loop9): invalid crc value [ 378.902188][ T7337] F2FS-fs (loop9): Found nat_bits in checkpoint [ 378.954463][ T4439] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 378.974544][ T4439] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.994279][ T7337] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 379.001642][ T7337] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 379.016949][ T4439] usb 8-1: config 0 descriptor?? [ 379.031473][ T26] audit: type=1800 audit(1785140886.537:6): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.582" name="file1" dev="loop9" ino=7 res=0 errno=0 [ 379.269166][ T4241] syzkaller0: tun_net_xmit 76 [ 379.790228][ T4439] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 379.798847][ T4439] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 379.875988][ T4439] [drm:udl_init] *ERROR* Selecting channel failed [ 379.911754][ T4439] [drm] Initialized udl 0.0.1 20120220 for 8-1:0.0 on minor 2 [ 379.929049][ T4439] [drm] Initialized udl on minor 2 [ 379.958538][ T4439] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 379.997039][ T4439] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 380.019225][ T4439] usb 8-1: USB disconnect, device number 2 [ 380.049653][ T1325] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 380.090435][ T1325] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 380.157374][ T1325] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 380.790140][ T7384] loop8: detected capacity change from 0 to 1024 [ 380.913913][ T7394] program syz.8.594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.987926][ T7397] device vlan0 entered promiscuous mode [ 381.088578][ T4241] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 381.363790][ T7407] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 381.381236][ T7407] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 381.503158][ T7413] device ip6_vti0 entered promiscuous mode [ 381.545078][ T4241] usb 8-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 381.559385][ T4241] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.579562][ T4241] usb 8-1: config 0 descriptor?? [ 381.662395][ T5544] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 381.884000][ T7431] overlayfs: failed to clone upperpath [ 381.946051][ T7438] overlayfs: failed to clone upperpath [ 382.103286][ T7386] netlink: 'syz.7.592': attribute type 1 has an invalid length. [ 382.113030][ T4240] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 382.127358][ T7386] (unnamed net_device) (uninitialized): option mode: invalid value (8) [ 382.156152][ T5544] usb 4-1: unable to get BOS descriptor or descriptor too short [ 382.205107][ T5544] usb 4-1: too many configurations: 115, using maximum allowed: 8 [ 382.315173][ T7386] bond1 (unregistering): Released all slaves [ 382.365541][ T5544] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 382.391192][ T7456] FAULT_INJECTION: forcing a failure. [ 382.391192][ T7456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.406179][ T7456] CPU: 0 PID: 7456 Comm: syz.8.603 Not tainted syzkaller #0 [ 382.413518][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 382.423601][ T7456] Call Trace: [ 382.426908][ T7456] [ 382.429885][ T7456] dump_stack_lvl+0x188/0x250 [ 382.434606][ T7456] ? show_regs_print_info+0x20/0x20 [ 382.439845][ T7456] ? load_image+0x410/0x410 [ 382.444388][ T7456] ? __lock_acquire+0x7b50/0x7b50 [ 382.449465][ T7456] should_fail+0x383/0x4b0 [ 382.453921][ T7456] _copy_to_user+0x2e/0x130 [ 382.458551][ T7456] simple_read_from_buffer+0xe3/0x150 [ 382.463957][ T7456] proc_fail_nth_read+0x1a6/0x220 [ 382.469020][ T7456] ? proc_fault_inject_write+0x310/0x310 [ 382.474690][ T7456] ? fsnotify_perm+0x254/0x560 [ 382.479485][ T7456] ? proc_fault_inject_write+0x310/0x310 [ 382.485146][ T7456] vfs_read+0x2ff/0xd50 [ 382.489336][ T7456] ? __lock_acquire+0x7b50/0x7b50 [ 382.494397][ T7456] ? kernel_read+0x1e0/0x1e0 [ 382.499045][ T7456] ? mutex_lock_nested+0x17/0x20 [ 382.504037][ T7456] ? __fdget_pos+0x2bf/0x370 [ 382.508651][ T7456] ? ksys_read+0x70/0x260 [ 382.513029][ T7456] ksys_read+0x153/0x260 [ 382.517302][ T7456] ? vfs_write+0xd70/0xd70 [ 382.521758][ T7456] ? lockdep_hardirqs_on+0x94/0x140 [ 382.527015][ T7456] do_syscall_64+0x4c/0xa0 [ 382.531462][ T7456] ? clear_bhb_loop+0x30/0x80 [ 382.536170][ T7456] ? clear_bhb_loop+0x30/0x80 [ 382.540876][ T7456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 382.546805][ T7456] RIP: 0033:0x7fdf644576ce [ 382.551265][ T7456] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 382.570909][ T7456] RSP: 002b:00007fdf626eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.579363][ T7456] RAX: ffffffffffffffda RBX: 00007fdf626ef6c0 RCX: 00007fdf644576ce [ 382.588282][ T7456] RDX: 000000000000000f RSI: 00007fdf626ef0a0 RDI: 0000000000000004 [ 382.596291][ T7456] RBP: 00007fdf626ef090 R08: 0000000000000000 R09: 0000000000000000 [ 382.604321][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.612323][ T7456] R13: 00007fdf6471f038 R14: 00007fdf6471efa0 R15: 00007ffc43cb9208 [ 382.620345][ T7456] [ 382.623528][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.630142][ T5544] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 382.756535][ T4240] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 382.766110][ T5544] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 382.779795][ T4240] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.826348][ T4240] usb 10-1: config 0 descriptor?? [ 382.832839][ T4241] hackrf 8-1:0.0: usb_control_msg() failed -71 request 0f [ 382.840025][ T4241] hackrf 8-1:0.0: Could not detect board [ 382.864537][ T4241] hackrf: probe of 8-1:0.0 failed with error -71 [ 382.883704][ T4241] usb 8-1: USB disconnect, device number 3 [ 382.903697][ T5544] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 382.930044][ T7462] loop8: detected capacity change from 0 to 1024 [ 383.032896][ T5544] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 383.173725][ T5544] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 383.189715][ T4240] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 383.209911][ T4240] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 383.254899][ T4240] [drm:udl_init] *ERROR* Selecting channel failed [ 383.279724][ T4240] [drm] Initialized udl 0.0.1 20120220 for 10-1:0.0 on minor 2 [ 383.302300][ T4240] [drm] Initialized udl on minor 2 [ 383.316694][ T5544] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 383.335107][ T4240] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 383.345891][ T4240] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 383.365416][ T4240] usb 10-1: USB disconnect, device number 10 [ 383.376580][ T5956] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 383.399111][ T5956] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 383.428223][ T5544] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 383.448313][ T5956] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 383.657360][ T5544] usb 4-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 0.40 [ 383.676968][ T5544] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=115 [ 383.713620][ T5544] usb 4-1: Product: syz [ 383.717877][ T5544] usb 4-1: Manufacturer: syz [ 383.747400][ T5544] usb 4-1: SerialNumber: syz [ 383.907041][ T7469] loop8: detected capacity change from 0 to 32768 [ 383.980357][ T7469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.606 (7469) [ 384.234759][ T7469] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 384.295878][ T7469] BTRFS info (device loop8): setting nodatasum [ 384.306108][ T7469] BTRFS info (device loop8): force zlib compression, level 3 [ 384.313697][ T7469] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 384.323815][ T7469] BTRFS info (device loop8): use lzo compression, level 0 [ 384.331413][ T7469] BTRFS info (device loop8): turning on flush-on-commit [ 384.339307][ T7469] BTRFS info (device loop8): enabling auto defrag [ 384.345931][ T7469] BTRFS info (device loop8): max_inline at 4096 [ 384.352824][ T7469] BTRFS info (device loop8): using free space tree [ 384.359772][ T7469] BTRFS info (device loop8): has skinny extents [ 384.431247][ T5544] usb 4-1: unit 4 not found! [ 384.505349][ T5544] usb 4-1: USB disconnect, device number 7 [ 384.600138][ T7519] loop9: detected capacity change from 0 to 2048 [ 384.646149][ T7519] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 384.700374][ T7469] BTRFS info (device loop8): enabling ssd optimizations [ 384.756608][ T7519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.797246][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.828365][ T7536] device ipip0 entered promiscuous mode [ 384.892370][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.7.618'. [ 384.901878][ T1325] Bluetooth: hci1: command 0x0406 tx timeout [ 384.912230][ T1325] Bluetooth: hci3: command 0x0406 tx timeout [ 385.110749][ T7547] FAULT_INJECTION: forcing a failure. [ 385.110749][ T7547] name failslab, interval 1, probability 0, space 0, times 0 [ 385.198710][ T7547] CPU: 1 PID: 7547 Comm: syz.3.620 Not tainted syzkaller #0 [ 385.206137][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 385.216229][ T7547] Call Trace: [ 385.219539][ T7547] [ 385.222548][ T7547] dump_stack_lvl+0x188/0x250 [ 385.227280][ T7547] ? show_regs_print_info+0x20/0x20 [ 385.232520][ T7547] ? load_image+0x410/0x410 [ 385.237079][ T7547] ? __might_sleep+0xf0/0xf0 [ 385.241711][ T7547] ? __lock_acquire+0x7b50/0x7b50 [ 385.246778][ T7547] should_fail+0x383/0x4b0 [ 385.251238][ T7547] should_failslab+0x5/0x20 [ 385.255954][ T7547] slab_pre_alloc_hook+0x51/0xc0 [ 385.260932][ T7547] __kmalloc_node_track_caller+0x68/0x3a0 [ 385.266690][ T7547] ? netlink_sendmsg+0x654/0xbe0 [ 385.271670][ T7547] ? __alloc_skb+0xf4/0x750 [ 385.276250][ T7547] ? netlink_sendmsg+0x654/0xbe0 [ 385.281233][ T7547] __alloc_skb+0x22c/0x750 [ 385.285683][ T7547] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 385.291871][ T7547] netlink_sendmsg+0x654/0xbe0 [ 385.296690][ T7547] ? netlink_getsockopt+0x570/0x570 [ 385.301923][ T7547] ? aa_sock_msg_perm+0x94/0x150 [ 385.306902][ T7547] ? apparmor_socket_sendmsg+0x88/0x230 [ 385.312552][ T7547] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 385.317929][ T7547] ? security_socket_sendmsg+0x7c/0xa0 [ 385.323428][ T7547] ? netlink_getsockopt+0x570/0x570 [ 385.328670][ T7547] ____sys_sendmsg+0x5be/0x8f0 [ 385.333537][ T7547] ? __sys_sendmsg_sock+0x30/0x30 [ 385.338703][ T7547] ? import_iovec+0x6f/0xa0 [ 385.343270][ T7547] ___sys_sendmsg+0x236/0x2e0 [ 385.347986][ T7547] ? __sys_sendmsg+0x290/0x290 [ 385.352828][ T7547] __se_sys_sendmsg+0x1b7/0x2a0 [ 385.357725][ T7547] ? __x64_sys_sendmsg+0x80/0x80 [ 385.362691][ T7547] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 385.368717][ T7547] ? lockdep_hardirqs_on+0x94/0x140 [ 385.373953][ T7547] do_syscall_64+0x4c/0xa0 [ 385.378418][ T7547] ? clear_bhb_loop+0x30/0x80 [ 385.383136][ T7547] ? clear_bhb_loop+0x30/0x80 [ 385.387850][ T7547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 385.393828][ T7547] RIP: 0033:0x7f003ac81e99 [ 385.398409][ T7547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.418057][ T7547] RSP: 002b:00007f0038eda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.426519][ T7547] RAX: ffffffffffffffda RBX: 00007f003af09fa0 RCX: 00007f003ac81e99 [ 385.434539][ T7547] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003 [ 385.442560][ T7547] RBP: 00007f0038eda090 R08: 0000000000000000 R09: 0000000000000000 [ 385.450577][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.458602][ T7547] R13: 00007f003af0a038 R14: 00007f003af09fa0 R15: 00007ffe796b7868 [ 385.466630][ T7547] [ 386.087760][ T7519] UDF-fs: error (device loop9): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 386.226672][ T7570] FAULT_INJECTION: forcing a failure. [ 386.226672][ T7570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.272943][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.8.622'. [ 386.345056][ T7570] CPU: 0 PID: 7570 Comm: syz.3.623 Not tainted syzkaller #0 [ 386.352427][ T7570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 386.362516][ T7570] Call Trace: [ 386.365820][ T7570] [ 386.368797][ T7570] dump_stack_lvl+0x188/0x250 [ 386.373534][ T7570] ? show_regs_print_info+0x20/0x20 [ 386.378774][ T7570] ? load_image+0x410/0x410 [ 386.383328][ T7570] ? __lock_acquire+0x7b50/0x7b50 [ 386.388390][ T7570] should_fail+0x383/0x4b0 [ 386.392842][ T7570] _copy_to_iter+0x234/0x1170 [ 386.397556][ T7570] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 386.403489][ T7570] ? iov_iter_init+0x170/0x170 [ 386.408294][ T7570] ? __virt_addr_valid+0x3c6/0x470 [ 386.413431][ T7570] ? __phys_addr_symbol+0x2b/0x70 [ 386.418492][ T7570] ? __check_object_size+0x30c/0x410 [ 386.423817][ T7570] __skb_datagram_iter+0xde/0x740 [ 386.428906][ T7570] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 386.434489][ T7570] skb_copy_datagram_iter+0xad/0x1f0 [ 386.439807][ T7570] netlink_recvmsg+0x2d3/0xe50 [ 386.444648][ T7570] ? netlink_sendmsg+0xbe0/0xbe0 [ 386.449638][ T7570] ? aa_sk_perm+0x7dc/0x910 [ 386.454225][ T7570] ? aa_af_perm+0x340/0x340 [ 386.458774][ T7570] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 386.464093][ T7570] ? security_socket_recvmsg+0x85/0xb0 [ 386.469587][ T7570] ? netlink_sendmsg+0xbe0/0xbe0 [ 386.474561][ T7570] ____sys_recvmsg+0x2ca/0x5b0 [ 386.479358][ T7570] ? __might_fault+0xb3/0x110 [ 386.484076][ T7570] ? __sys_recvmsg_sock+0x40/0x40 [ 386.489148][ T7570] ? import_iovec+0x6f/0xa0 [ 386.493691][ T7570] ___sys_recvmsg+0x213/0x5c0 [ 386.498405][ T7570] ? __sys_recvmsg+0x280/0x280 [ 386.503215][ T7570] ? __lock_acquire+0x7b50/0x7b50 [ 386.508274][ T7570] ? vfs_write+0xaa6/0xd70 [ 386.512969][ T7570] ? __fget_files+0x402/0x470 [ 386.517701][ T7570] __x64_sys_recvmsg+0x201/0x2d0 [ 386.522683][ T7570] ? ___sys_recvmsg+0x5c0/0x5c0 [ 386.527560][ T7570] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 386.533590][ T7570] ? lockdep_hardirqs_on+0x94/0x140 [ 386.538822][ T7570] do_syscall_64+0x4c/0xa0 [ 386.543266][ T7570] ? clear_bhb_loop+0x30/0x80 [ 386.548195][ T7570] ? clear_bhb_loop+0x30/0x80 [ 386.552913][ T7570] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 386.558841][ T7570] RIP: 0033:0x7f003ac81e99 [ 386.563299][ T7570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.583182][ T7570] RSP: 002b:00007f0038eda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 386.591638][ T7570] RAX: ffffffffffffffda RBX: 00007f003af09fa0 RCX: 00007f003ac81e99 [ 386.599650][ T7570] RDX: 0000000000000100 RSI: 0000200000000080 RDI: 0000000000000003 [ 386.607650][ T7570] RBP: 00007f0038eda090 R08: 0000000000000000 R09: 0000000000000000 [ 386.615655][ T7570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.623696][ T7570] R13: 00007f003af0a038 R14: 00007f003af09fa0 R15: 00007ffe796b7868 [ 386.631708][ T7570] [ 387.429275][ T7575] loop8: detected capacity change from 0 to 32768 [ 387.477122][ T7575] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.624 (7575) [ 387.540311][ T7575] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 387.549303][ T7605] loop3: detected capacity change from 0 to 2048 [ 387.618167][ T7575] BTRFS info (device loop8): setting nodatasum [ 387.635614][ T7575] BTRFS info (device loop8): force zlib compression, level 3 [ 387.638005][ T7605] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 387.659059][ T7575] BTRFS info (device loop8): turning on flush-on-commit [ 387.681160][ T7575] BTRFS info (device loop8): max_inline at 4096 [ 387.717851][ T7575] BTRFS info (device loop8): using free space tree [ 387.777018][ T7575] BTRFS info (device loop8): has skinny extents [ 387.973228][ T7575] BTRFS info (device loop8): enabling ssd optimizations [ 388.202744][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.217541][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.680819][ T7605] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 389.689702][ T7605] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 389.698905][ T7605] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 390.061362][ T7643] loop9: detected capacity change from 0 to 32768 [ 390.126350][ T7643] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.634 (7643) [ 390.229913][ T7643] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 390.279155][ T7643] BTRFS info (device loop9): setting nodatasum [ 390.291286][ T7643] BTRFS info (device loop9): force zlib compression, level 3 [ 390.341999][ T7643] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_LZO (0x8) [ 390.393606][ T7643] BTRFS info (device loop9): use lzo compression, level 0 [ 390.400900][ T7643] BTRFS info (device loop9): turning on flush-on-commit [ 390.497111][ T7643] BTRFS info (device loop9): enabling auto defrag [ 390.529317][ T7643] BTRFS info (device loop9): max_inline at 4096 [ 390.555152][ T7643] BTRFS info (device loop9): using free space tree [ 390.571857][ T7643] BTRFS info (device loop9): has skinny extents [ 392.855317][ T7643] BTRFS error (device loop9): open_ctree failed: -12 [ 392.863994][ T4184] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by udevd (4184) [ 394.322776][ T7739] loop7: detected capacity change from 0 to 2048 [ 394.714797][ T7569] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 395.055946][ T7569] usb 8-1: Using ep0 maxpacket: 32 [ 395.196982][ T7569] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 395.219792][ T7569] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 395.430929][ T7569] usb 8-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 395.456275][ T7569] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.475669][ T7569] usb 8-1: Product: syz [ 395.479913][ T7569] usb 8-1: Manufacturer: syz [ 395.534566][ T7569] usb 8-1: SerialNumber: syz [ 395.569138][ T7569] usb 8-1: config 0 descriptor?? [ 395.592488][ T7739] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 395.738182][ T4703] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 395.853452][ T7569] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input9 [ 395.992825][ T4439] Bluetooth: hci0: command 0x0406 tx timeout [ 396.146853][ T4703] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.174384][ T4703] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.205730][ T4703] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 396.225891][ T7739] device syzkaller0 entered promiscuous mode [ 396.239836][ T4703] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 396.277625][ T4703] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.332676][ T4703] usb 9-1: config 0 descriptor?? [ 396.470429][ T4240] usb 8-1: USB disconnect, device number 4 [ 396.817398][ T7749] loop9: detected capacity change from 0 to 131072 [ 396.851898][ T4703] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 396.864651][ T7749] F2FS-fs (loop9): invalid crc value [ 396.916935][ T4703] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 396.931466][ T7749] F2FS-fs (loop9): Found nat_bits in checkpoint [ 397.080710][ T7800] FAULT_INJECTION: forcing a failure. [ 397.080710][ T7800] name failslab, interval 1, probability 0, space 0, times 0 [ 397.131461][ T7800] CPU: 1 PID: 7800 Comm: syz.3.658 Not tainted syzkaller #0 [ 397.138830][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 397.149017][ T7800] Call Trace: [ 397.152332][ T7800] [ 397.155290][ T7800] dump_stack_lvl+0x188/0x250 [ 397.160014][ T7800] ? show_regs_print_info+0x20/0x20 [ 397.165253][ T7800] ? load_image+0x410/0x410 [ 397.169804][ T7800] should_fail+0x383/0x4b0 [ 397.174263][ T7800] should_failslab+0x5/0x20 [ 397.178803][ T7800] slab_pre_alloc_hook+0x51/0xc0 [ 397.183780][ T7800] ? dst_alloc+0x101/0x160 [ 397.188238][ T7800] kmem_cache_alloc+0x3d/0x280 [ 397.193065][ T7800] dst_alloc+0x101/0x160 [ 397.197351][ T7800] ip_route_output_key_hash_rcu+0x15b9/0x24f0 [ 397.203462][ T7800] ? ip_route_output_key_hash_rcu+0x1201/0x24f0 [ 397.209765][ T7800] ip_route_output_key_hash+0x1c6/0x300 [ 397.215363][ T7800] ? ip_route_input_rcu+0x30e0/0x30e0 [ 397.220788][ T7800] ? __mutex_lock_common+0x435/0x2400 [ 397.226208][ T7800] ip_route_output_flow+0x26/0x150 [ 397.229210][ T7749] F2FS-fs (loop9): Cannot turn on quotas: -2 on 2 [ 397.231361][ T7800] arp_req_set+0x2fc/0x760 [ 397.242311][ T7800] ? arp_req_delete+0x330/0x330 [ 397.247194][ T7800] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 397.252874][ T7800] ? __might_fault+0xb3/0x110 [ 397.257598][ T7800] arp_ioctl+0x3f0/0x530 [ 397.261889][ T7800] ? neigh_release+0x80/0x80 [ 397.266506][ T7800] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 397.272635][ T7800] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 397.277528][ T7800] inet_ioctl+0x378/0x460 [ 397.281897][ T7800] ? inet_shutdown+0x370/0x370 [ 397.286699][ T7800] ? kfree+0xef/0x2a0 [ 397.290728][ T7800] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 397.296232][ T7800] sock_do_ioctl+0xfb/0x320 [ 397.300782][ T7800] ? sock_show_fdinfo+0xb0/0xb0 [ 397.305695][ T7800] sock_ioctl+0x48a/0x700 [ 397.310068][ T7800] ? sock_poll+0x420/0x420 [ 397.314567][ T7800] ? bpf_lsm_file_ioctl+0x5/0x10 [ 397.319552][ T7800] ? security_file_ioctl+0x7c/0xa0 [ 397.324701][ T7800] ? sock_poll+0x420/0x420 [ 397.329230][ T7800] __se_sys_ioctl+0xfa/0x170 [ 397.333847][ T7800] do_syscall_64+0x4c/0xa0 [ 397.338295][ T7800] ? clear_bhb_loop+0x30/0x80 [ 397.342989][ T7800] ? clear_bhb_loop+0x30/0x80 [ 397.347682][ T7800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 397.353590][ T7800] RIP: 0033:0x7f003ac81e99 [ 397.358024][ T7800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.377652][ T7800] RSP: 002b:00007f0038eda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.386094][ T7800] RAX: ffffffffffffffda RBX: 00007f003af09fa0 RCX: 00007f003ac81e99 [ 397.394084][ T7800] RDX: 0000200000000180 RSI: 0000000000008955 RDI: 0000000000000003 [ 397.402081][ T7800] RBP: 00007f0038eda090 R08: 0000000000000000 R09: 0000000000000000 [ 397.410071][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.418065][ T7800] R13: 00007f003af0a038 R14: 00007f003af09fa0 R15: 00007ffe796b7868 [ 397.426066][ T7800] [ 397.446405][ T1325] usb 9-1: USB disconnect, device number 13 [ 397.465952][ T7749] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 399.948730][ T7839] loop8: detected capacity change from 0 to 1024 [ 401.389953][ T7860] loop7: detected capacity change from 0 to 256 [ 403.952043][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.7.680'. [ 404.613872][ T7913] loop9: detected capacity change from 0 to 1024 [ 404.824920][ T7925] openvswitch: netlink: Flow actions attr not present in new flow. [ 405.090454][ T7939] 9pnet: Could not find request transport: xen [ 405.219704][ T7946] device syzkaller1 entered promiscuous mode [ 405.229180][ T1325] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 405.423517][ T7953] FAULT_INJECTION: forcing a failure. [ 405.423517][ T7953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.455263][ T7953] CPU: 1 PID: 7953 Comm: syz.7.694 Not tainted syzkaller #0 [ 405.462620][ T7953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 405.472747][ T7953] Call Trace: [ 405.476083][ T7953] [ 405.479044][ T7953] dump_stack_lvl+0x188/0x250 [ 405.483775][ T7953] ? show_regs_print_info+0x20/0x20 [ 405.489008][ T7953] ? load_image+0x410/0x410 [ 405.492657][ T1325] usb 4-1: Using ep0 maxpacket: 8 [ 405.493549][ T7953] ? __lock_acquire+0x7b50/0x7b50 [ 405.493586][ T7953] should_fail+0x383/0x4b0 [ 405.508263][ T7953] _copy_from_user+0x2e/0x170 [ 405.512989][ T7953] strndup_user+0xae/0x150 [ 405.517447][ T7953] __se_sys_mount+0x9b/0x3d0 [ 405.522089][ T7953] ? __x64_sys_mount+0xc0/0xc0 [ 405.526896][ T7953] ? lockdep_hardirqs_on+0x94/0x140 [ 405.532144][ T7953] ? __x64_sys_mount+0x1c/0xc0 [ 405.536951][ T7953] do_syscall_64+0x4c/0xa0 [ 405.541407][ T7953] ? clear_bhb_loop+0x30/0x80 [ 405.546116][ T7953] ? clear_bhb_loop+0x30/0x80 [ 405.550823][ T7953] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 405.556745][ T7953] RIP: 0033:0x7ff51952de99 [ 405.561197][ T7953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.580936][ T7953] RSP: 002b:00007ff517786028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 405.589403][ T7953] RAX: ffffffffffffffda RBX: 00007ff5197b5fa0 RCX: 00007ff51952de99 [ 405.597413][ T7953] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 405.605423][ T7953] RBP: 00007ff517786090 R08: 0000200000000d80 R09: 0000000000000000 [ 405.613521][ T7953] R10: 0000000000008808 R11: 0000000000000246 R12: 0000000000000001 [ 405.621559][ T7953] R13: 00007ff5197b6038 R14: 00007ff5197b5fa0 R15: 00007ffd19628e58 [ 405.623212][ T1325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.629577][ T7953] [ 405.726975][ T7957] netlink: 'syz.7.695': attribute type 1 has an invalid length. [ 405.755923][ T7957] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.695'. [ 405.828278][ T1325] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 405.855898][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.925380][ T1325] usb 4-1: Product: syz [ 405.940725][ T1325] usb 4-1: Manufacturer: syz [ 405.956446][ T1325] usb 4-1: SerialNumber: syz [ 405.991326][ T1325] usb 4-1: config 0 descriptor?? [ 406.029815][ T7970] loop8: detected capacity change from 0 to 256 [ 406.047238][ T1325] gspca_main: t613-2.14.0 probing 17a1:0128 [ 406.337276][ T1325] gspca_t613: unknown sensor 0000 [ 406.342540][ T1325] t613: probe of 4-1:0.0 failed with error -22 [ 406.373566][ T1325] usb 4-1: USB disconnect, device number 8 [ 407.084918][ T1325] Bluetooth: hci4: command 0x0406 tx timeout [ 407.154994][ T7977] loop8: detected capacity change from 0 to 32768 [ 407.275227][ T7977] XFS (loop8): Mounting V5 Filesystem [ 407.401149][ T7977] XFS (loop8): Ending clean mount [ 407.422543][ T7977] XFS (loop8): Quotacheck needed: Please wait. [ 407.476681][ T8015] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 407.561492][ T7977] XFS (loop8): Quotacheck: Done. [ 407.628488][ T8015] bond1: (slave lo): Enslaving as an active interface with an up link [ 407.691858][ T8015] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 407.780013][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 407.886322][ T1325] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 408.102829][ T1325] usb 9-1: device descriptor read/64, error -71 [ 408.204200][ T8028] loop3: detected capacity change from 0 to 8192 [ 408.312920][ T7943] loop9: detected capacity change from 0 to 131072 [ 408.395248][ T1325] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 408.425685][ T7943] F2FS-fs (loop9): invalid crc value [ 408.469685][ T7943] F2FS-fs (loop9): Failed to start F2FS issue_checkpoint_thread (-12) [ 408.622887][ T1325] usb 9-1: device descriptor read/64, error -71 [ 408.753149][ T1325] usb usb9-port1: attempt power cycle [ 409.198123][ T1325] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 409.307936][ T8064] loop3: detected capacity change from 0 to 256 [ 409.326953][ T1325] usb 9-1: device descriptor read/8, error -71 [ 409.604986][ T5573] XFS (loop8): Unmounting Filesystem [ 409.619389][ T1325] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 409.890072][ T1325] usb 9-1: device not accepting address 17, error -71 [ 409.908051][ T1325] usb usb9-port1: unable to enumerate USB device [ 410.010974][ T7998] loop7: detected capacity change from 0 to 131072 [ 410.093924][ T7998] F2FS-fs (loop7): invalid crc value [ 410.133111][ T7998] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-4) [ 411.150817][ T8118] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 412.043035][ T8135] loop3: detected capacity change from 0 to 1024 [ 412.877638][ T8153] loop3: detected capacity change from 0 to 1024 [ 413.125635][ T8108] loop8: detected capacity change from 0 to 131072 [ 413.146268][ T8108] F2FS-fs (loop8): invalid crc value [ 413.432682][ T8108] F2FS-fs (loop8): Found nat_bits in checkpoint [ 414.163759][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.726'. [ 414.365130][ T8108] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 414.466083][ T8177] loop3: detected capacity change from 0 to 1024 [ 414.519093][ T8179] loop7: detected capacity change from 0 to 764 [ 414.591066][ T4703] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 414.867484][ T4703] usb 10-1: Using ep0 maxpacket: 16 [ 415.014367][ T4703] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.039444][ T4703] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.165532][ T4703] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 415.186446][ T4703] usb 10-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 415.239031][ T4703] usb 10-1: Manufacturer: syz [ 415.296425][ T4703] usb 10-1: config 0 descriptor?? [ 415.447489][ T8198] Cannot find del_set index 0 as target [ 415.574114][ T8177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.729'. [ 415.761169][ T4287] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 415.989357][ T4703] input: syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:041E:3100.0003/input/input11 [ 416.198714][ T4287] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 416.226957][ T4287] usb 9-1: config 0 has no interface number 0 [ 416.260355][ T4703] creative-sb0540 0003:041E:3100.0003: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 416.454672][ T4287] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 416.463790][ T4287] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.526813][ T4287] usb 9-1: Product: syz [ 416.542275][ T4287] usb 9-1: Manufacturer: syz [ 416.546948][ T4287] usb 9-1: SerialNumber: syz [ 416.615683][ T4287] usb 9-1: config 0 descriptor?? [ 416.684325][ T4287] usb 9-1: selecting invalid altsetting 1 [ 416.748110][ T4287] dvb_ttusb_budget: ttusb_init_controller: error [ 416.774464][ T4287] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 416.874608][ T8189] loop7: detected capacity change from 0 to 32768 [ 416.929365][ T8217] loop3: detected capacity change from 0 to 1024 [ 416.940626][ T4287] DVB: Unable to find symbol stv0299_attach() [ 416.996929][ T5543] usb 10-1: USB disconnect, device number 11 [ 417.024249][ T8189] JBD2: Ignoring recovery information on journal [ 417.057986][ T4287] DVB: Unable to find symbol tda8083_attach() [ 417.082646][ T4287] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 417.113516][ T8217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.160565][ T8189] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 417.404498][ T8230] device syzkaller0 entered promiscuous mode [ 418.315593][ T5458] ocfs2: Unmounting device (7,7) on (node local) [ 418.469624][ T4703] usb 9-1: USB disconnect, device number 18 [ 418.503126][ T8252] loop9: detected capacity change from 0 to 128 [ 418.544807][ T4287] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 418.611566][ T8252] UDF-fs: bad mount option "à•eä…ÍiíÓ>륯‡@ѽ`^ú¶œj/Å\WrXãûÈÔ®XÉsÑ8ÙL¿ ¦ß2™i±/@që?Áz:‘3ú8¬ÓqävPGU" or missing value [ 418.804765][ T4287] usb 4-1: Using ep0 maxpacket: 8 [ 419.270590][ T4287] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 419.279371][ T4287] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.280103][ T8264] FAULT_INJECTION: forcing a failure. [ 419.280103][ T8264] name failslab, interval 1, probability 0, space 0, times 0 [ 419.459278][ T8264] CPU: 1 PID: 8264 Comm: syz.7.743 Not tainted syzkaller #0 [ 419.466732][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 419.476912][ T8264] Call Trace: [ 419.480227][ T8264] [ 419.483323][ T8264] dump_stack_lvl+0x188/0x250 [ 419.488054][ T8264] ? show_regs_print_info+0x20/0x20 [ 419.493297][ T8264] ? load_image+0x410/0x410 [ 419.497837][ T8264] ? __might_sleep+0xf0/0xf0 [ 419.502462][ T8264] ? __lock_acquire+0x7b50/0x7b50 [ 419.507559][ T8264] should_fail+0x383/0x4b0 [ 419.512020][ T8264] should_failslab+0x5/0x20 [ 419.516556][ T8264] slab_pre_alloc_hook+0x51/0xc0 [ 419.521841][ T8264] ? getname_flags+0xb7/0x4f0 [ 419.526559][ T8264] kmem_cache_alloc+0x3d/0x280 [ 419.531366][ T8264] getname_flags+0xb7/0x4f0 [ 419.535906][ T8264] __x64_sys_execveat+0xa9/0xe0 [ 419.540789][ T8264] do_syscall_64+0x4c/0xa0 [ 419.545239][ T8264] ? clear_bhb_loop+0x30/0x80 [ 419.549967][ T8264] ? clear_bhb_loop+0x30/0x80 [ 419.554680][ T8264] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 419.560605][ T8264] RIP: 0033:0x7ff51952de99 [ 419.565056][ T8264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.584696][ T8264] RSP: 002b:00007ff517786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 419.593212][ T8264] RAX: ffffffffffffffda RBX: 00007ff5197b5fa0 RCX: 00007ff51952de99 [ 419.601216][ T8264] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 419.609217][ T8264] RBP: 00007ff517786090 R08: 0000000000000000 R09: 0000000000000000 [ 419.617251][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.625249][ T8264] R13: 00007ff5197b6038 R14: 00007ff5197b5fa0 R15: 00007ffd19628e58 [ 419.633262][ T8264] [ 419.767042][ T4287] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.777044][ T4287] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.787242][ T4287] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.800503][ T4287] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 419.809817][ T4287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.965340][ T8273] loop9: detected capacity change from 0 to 512 [ 420.104678][ T4287] usb 4-1: usb_control_msg returned -32 [ 420.110451][ T4287] usbtmc 4-1:16.0: can't read capabilities [ 420.155259][ T4287] usb 4-1: USB disconnect, device number 9 [ 420.187069][ T8283] loop3: detected capacity change from 0 to 512 [ 420.202704][ T8273] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier=0x00000000000000a0,noload,sb=0x0000000000000007,block_validity,quota,,errors=continue. Quota mode: writeback. [ 420.221529][ T8278] loop7: detected capacity change from 0 to 1024 [ 420.228650][ T8273] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.347327][ T8278] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,sb=0x0000000000000006,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 420.355497][ T8283] EXT4-fs (loop3): 1 truncate cleaned up [ 420.389756][ T8278] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.407807][ T8283] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 420.522600][ T26] audit: type=1800 audit(1785140924.841:7): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.748" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 420.921170][ T8293] loop3: detected capacity change from 0 to 1024 [ 422.161201][ T8304] loop7: detected capacity change from 0 to 512 [ 422.275837][ T8304] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.753: Unimplemented hash flags: 0x0001 [ 422.305212][ T8304] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.753: Corrupt directory, running e2fsck is recommended [ 422.326050][ T8304] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 422.335652][ T8304] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.753: corrupted in-inode xattr [ 422.361698][ T8304] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.753: couldn't read orphan inode 15 (err -117) [ 422.381268][ T8304] EXT4-fs (loop7): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.min_batch_time=0x0000000000000006,barrier=0x0000000000000008,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 422.424834][ T8315] loop3: detected capacity change from 0 to 512 [ 422.464575][ T8314] loop9: detected capacity change from 0 to 1024 [ 422.529145][ T8315] EXT4-fs (loop3): 1 truncate cleaned up [ 422.573870][ T8304] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.753: Unimplemented hash flags: 0x0001 [ 422.586269][ T8304] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.753: Corrupt directory, running e2fsck is recommended [ 422.603814][ T8315] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 422.617336][ T8304] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz.7.753: path /93/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 422.659388][ T8314] hfsplus: unable to parse mount options [ 422.913879][ T8327] netlink: 'syz.7.757': attribute type 29 has an invalid length. [ 422.926189][ T8327] netlink: 'syz.7.757': attribute type 29 has an invalid length. [ 422.972854][ T8328] netlink: 'syz.7.757': attribute type 29 has an invalid length. [ 423.062955][ T8331] loop3: detected capacity change from 0 to 256 [ 423.119147][ T8331] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 423.145011][ T8331] FAULT_INJECTION: forcing a failure. [ 423.145011][ T8331] name failslab, interval 1, probability 0, space 0, times 0 [ 423.158216][ T8331] CPU: 1 PID: 8331 Comm: syz.3.758 Not tainted syzkaller #0 [ 423.165551][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 423.175643][ T8331] Call Trace: [ 423.178955][ T8331] [ 423.181908][ T8331] dump_stack_lvl+0x188/0x250 [ 423.186620][ T8331] ? show_regs_print_info+0x20/0x20 [ 423.191846][ T8331] ? load_image+0x410/0x410 [ 423.196421][ T8331] ? __lock_acquire+0x7b50/0x7b50 [ 423.201505][ T8331] should_fail+0x383/0x4b0 [ 423.205963][ T8331] should_failslab+0x5/0x20 [ 423.210561][ T8331] slab_pre_alloc_hook+0x51/0xc0 [ 423.215530][ T8331] ? getname_flags+0xb7/0x4f0 [ 423.220235][ T8331] kmem_cache_alloc+0x3d/0x280 [ 423.225037][ T8331] getname_flags+0xb7/0x4f0 [ 423.229577][ T8331] __x64_sys_rename+0x6a/0x90 [ 423.234286][ T8331] do_syscall_64+0x4c/0xa0 [ 423.238726][ T8331] ? clear_bhb_loop+0x30/0x80 [ 423.243428][ T8331] ? clear_bhb_loop+0x30/0x80 [ 423.248138][ T8331] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 423.254067][ T8331] RIP: 0033:0x7f003ac81e99 [ 423.258517][ T8331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.267950][ T4287] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 423.278177][ T8331] RSP: 002b:00007f0038eda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 423.278206][ T8331] RAX: ffffffffffffffda RBX: 00007f003af09fa0 RCX: 00007f003ac81e99 [ 423.278222][ T8331] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 423.278237][ T8331] RBP: 00007f0038eda090 R08: 0000000000000000 R09: 0000000000000000 [ 423.278250][ T8331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.278262][ T8331] R13: 00007f003af0a038 R14: 00007f003af09fa0 R15: 00007ffe796b7868 [ 423.278292][ T8331] [ 423.365108][ T5083] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 423.499141][ T8339] netlink: 'syz.3.760': attribute type 30 has an invalid length. [ 423.609789][ T8346] loop3: detected capacity change from 0 to 512 [ 423.658377][ T8346] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 423.704232][ T8346] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 423.731281][ T8346] ext4 filesystem being mounted at /101/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.765891][ T4287] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.782365][ T4287] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.792821][ T4287] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 423.799028][ T5083] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 423.802810][ T4287] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.837052][ T4287] usb 8-1: config 0 descriptor?? [ 423.838587][ T5083] usb 10-1: config 1 has no interface number 0 [ 423.885601][ T5083] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 32 [ 423.902200][ T8346] EXT4-fs error (device loop3): ext4_dx_csum_verify:502: inode #2: comm syz.3.762: dir seems corrupt? Run e2fsck -D. [ 423.914835][ T5083] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 16 [ 423.915978][ T4184] udevd[4184]: incorrect ext4 checksum on /dev/loop3 [ 424.004672][ T8346] EXT4-fs (loop3): Remounting filesystem read-only [ 424.011361][ T8346] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.762: Directory index failed checksum [ 424.031702][ T8346] EXT4-fs (loop3): Remounting filesystem read-only [ 424.142045][ T5083] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 424.173320][ T5083] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.192318][ T5083] usb 10-1: Product: syz [ 424.203272][ T5083] usb 10-1: Manufacturer: syz [ 424.219127][ T5083] usb 10-1: SerialNumber: syz [ 424.274103][ T8314] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 424.283192][ T8314] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 424.307571][ T4287] usbhid 8-1:0.0: can't add hid device: -71 [ 424.313628][ T4287] usbhid: probe of 8-1:0.0 failed with error -71 [ 424.409377][ T4287] usb 8-1: USB disconnect, device number 5 [ 424.450036][ T8374] netlink: 'syz.7.768': attribute type 21 has an invalid length. [ 424.525632][ T8314] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 424.532871][ T8314] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 424.558193][ T5083] usb 10-1: No status endpoint found [ 424.651199][ T8380] loop8: detected capacity change from 0 to 1024 [ 424.794411][ T5083] usb 10-1: USB disconnect, device number 12 [ 425.440467][ T8399] loop8: detected capacity change from 0 to 512 [ 425.527831][ T8389] loop3: detected capacity change from 0 to 32768 [ 425.547728][ T8399] EXT4-fs (loop8): Test dummy encryption mode enabled [ 425.576477][ T8399] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 425.609570][ T8399] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=3002c018, mo2=0002] [ 425.725436][ T8399] System zones: 1-12 [ 426.573343][ T8399] EXT4-fs error (device loop8): ext4_orphan_get:1432: comm syz.8.773: bad orphan inode 16 [ 426.611750][ T8389] JBD2: Ignoring recovery information on journal [ 426.675448][ T8399] ext4_test_bit(bit=15, block=4) = 0 [ 426.684822][ T8399] EXT4-fs (loop8): 1 orphan inode deleted [ 426.750695][ T8399] EXT4-fs (loop8): mounted filesystem without journal. Opts: noinit_itable,test_dummy_encryption=v1,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,data_err=abort,debug,auto_da_alloc,,errors=continue. Quota mode: none. [ 426.849859][ T8389] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 427.068312][ T8423] device tunl0 entered promiscuous mode [ 427.093958][ T8426] loop8: detected capacity change from 0 to 16 [ 427.106800][ T8423] netlink: 'syz.7.778': attribute type 4 has an invalid length. [ 427.150435][ T8423] netlink: 9 bytes leftover after parsing attributes in process `syz.7.778'. [ 427.176088][ T8426] erofs: (device loop8): mounted with root inode @ nid 36. [ 427.521177][ T8435] loop9: detected capacity change from 0 to 1024 [ 427.586815][ T5445] ocfs2: Unmounting device (7,3) on (node local) [ 427.957868][ T8458] loop7: detected capacity change from 0 to 1024 [ 428.055242][ T8458] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 428.174355][ T8458] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 428.273682][ T8458] JBD2: no valid journal superblock found [ 428.293579][ T8458] EXT4-fs (loop7): error loading journal [ 428.885745][ T8446] loop8: detected capacity change from 0 to 32768 [ 428.928434][ T8494] FAULT_INJECTION: forcing a failure. [ 428.928434][ T8494] name failslab, interval 1, probability 0, space 0, times 0 [ 428.942653][ T8494] CPU: 1 PID: 8494 Comm: syz.3.795 Not tainted syzkaller #0 [ 428.950000][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 428.960098][ T8494] Call Trace: [ 428.963401][ T8494] [ 428.966353][ T8494] dump_stack_lvl+0x188/0x250 [ 428.971067][ T8494] ? show_regs_print_info+0x20/0x20 [ 428.976294][ T8494] ? load_image+0x410/0x410 [ 428.980836][ T8494] ? __might_sleep+0xf0/0xf0 [ 428.985461][ T8494] ? __lock_acquire+0x7b50/0x7b50 [ 428.990519][ T8494] ? netlink_insert+0xe90/0x11f0 [ 428.995496][ T8494] should_fail+0x383/0x4b0 [ 428.999934][ T8494] should_failslab+0x5/0x20 [ 429.004455][ T8494] slab_pre_alloc_hook+0x51/0xc0 [ 429.009408][ T8494] kmem_cache_alloc_node+0x47/0x2c0 [ 429.014619][ T8494] ? __alloc_skb+0xf4/0x750 [ 429.019139][ T8494] __alloc_skb+0xf4/0x750 [ 429.023484][ T8494] netlink_sendmsg+0x654/0xbe0 [ 429.028275][ T8494] ? netlink_getsockopt+0x570/0x570 [ 429.033491][ T8494] ? aa_sock_msg_perm+0x94/0x150 [ 429.038451][ T8494] ? apparmor_socket_sendmsg+0x88/0x230 [ 429.044012][ T8494] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 429.049317][ T8494] ? security_socket_sendmsg+0x7c/0xa0 [ 429.054795][ T8494] ? netlink_getsockopt+0x570/0x570 [ 429.060013][ T8494] ____sys_sendmsg+0x5be/0x8f0 [ 429.067512][ T8494] ? __sys_sendmsg_sock+0x30/0x30 [ 429.072830][ T8494] ? import_iovec+0x6f/0xa0 [ 429.077371][ T8494] ___sys_sendmsg+0x236/0x2e0 [ 429.082087][ T8494] ? __sys_sendmsg+0x290/0x290 [ 429.086904][ T8494] __se_sys_sendmsg+0x1b7/0x2a0 [ 429.091778][ T8494] ? __x64_sys_sendmsg+0x80/0x80 [ 429.096756][ T8494] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 429.102867][ T8494] ? lockdep_hardirqs_on+0x94/0x140 [ 429.108117][ T8494] do_syscall_64+0x4c/0xa0 [ 429.112563][ T8494] ? clear_bhb_loop+0x30/0x80 [ 429.117289][ T8494] ? clear_bhb_loop+0x30/0x80 [ 429.121992][ T8494] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 429.127908][ T8494] RIP: 0033:0x7f003ac81e99 [ 429.132340][ T8494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.151978][ T8494] RSP: 002b:00007f0038eda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.160409][ T8494] RAX: ffffffffffffffda RBX: 00007f003af09fa0 RCX: 00007f003ac81e99 [ 429.168399][ T8494] RDX: 0000000000004004 RSI: 0000200000000180 RDI: 0000000000000003 [ 429.176387][ T8494] RBP: 00007f0038eda090 R08: 0000000000000000 R09: 0000000000000000 [ 429.184372][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.192357][ T8494] R13: 00007f003af0a038 R14: 00007f003af09fa0 R15: 00007ffe796b7868 [ 429.200369][ T8494] [ 429.215288][ T8446] (syz.8.784,8446,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 429.235756][ T8446] (syz.8.784,8446,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 429.381947][ T8497] loop7: detected capacity change from 0 to 64 [ 429.480454][ T8497] MINIX-fs: bad superblock [ 429.582514][ T8510] device tunl0 entered promiscuous mode [ 429.725245][ T8510] netlink: 'syz.9.797': attribute type 4 has an invalid length. [ 429.732964][ T8510] netlink: 9 bytes leftover after parsing attributes in process `syz.9.797'. [ 430.227169][ T8532] loop9: detected capacity change from 0 to 1024 [ 430.259647][ T8532] hfsplus: unable to parse mount options [ 430.498063][ T8500] loop8: detected capacity change from 0 to 32768 [ 430.596963][ T8500] JBD2: Ignoring recovery information on journal [ 430.674970][ T8500] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 430.687391][ T7256] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 430.958233][ T7256] usb 8-1: Using ep0 maxpacket: 16 [ 431.094578][ T7256] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 431.109964][ T7256] usb 8-1: config 0 has no interface number 0 [ 431.144422][ T7256] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 431.161249][ T7256] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 431.403014][ T7256] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 431.423148][ T7256] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.445041][ T7256] usb 8-1: Product: syz [ 431.462138][ T7256] usb 8-1: Manufacturer: syz [ 431.466828][ T7256] usb 8-1: SerialNumber: syz [ 431.504157][ T7256] usb 8-1: config 0 descriptor?? [ 431.534811][ T8549] loop9: detected capacity change from 0 to 32768 [ 431.543271][ T8536] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 431.550400][ T8536] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 431.585749][ T5573] ocfs2: Unmounting device (7,8) on (node local) [ 431.691817][ T8549] XFS (loop9): Mounting V5 Filesystem [ 432.036490][ T8549] XFS (loop9): Ending clean mount [ 432.095729][ T8596] device tunl0 entered promiscuous mode [ 432.149696][ T8536] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 432.156833][ T8536] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 432.181511][ T8596] netlink: 'syz.8.815': attribute type 4 has an invalid length. [ 432.223394][ T8596] netlink: 9 bytes leftover after parsing attributes in process `syz.8.815'. [ 432.231825][ T5651] XFS (loop9): Unmounting Filesystem [ 432.518313][ T7256] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 432.542565][ T7256] asix: probe of 8-1:0.34 failed with error -71 [ 432.603989][ T7256] usb 8-1: USB disconnect, device number 6 [ 432.894362][ T8624] loop9: detected capacity change from 0 to 1024 [ 432.962318][ T7569] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 433.232901][ T7569] usb 9-1: Using ep0 maxpacket: 16 [ 433.407336][ T7569] usb 9-1: unable to get BOS descriptor or descriptor too short [ 433.548209][ T7569] usb 9-1: config 9 has an invalid interface number: 57 but max is 0 [ 433.656365][ T7569] usb 9-1: config 9 has no interface number 0 [ 433.731736][ T7569] usb 9-1: config 9 interface 57 has no altsetting 0 [ 433.789480][ T8639] loop3: detected capacity change from 0 to 512 [ 433.872712][ T8639] EXT4-fs (loop3): Ignoring removed orlov option [ 433.882490][ T8639] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 433.901052][ T8639] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 434.048740][ T7569] usb 9-1: string descriptor 0 read error: -22 [ 434.059319][ T7569] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 434.093114][ T7569] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.140094][ T8645] loop9: detected capacity change from 0 to 4096 [ 434.199622][ T8645] EXT4-fs (loop9): Test dummy encryption mode enabled [ 434.244403][ T8645] EXT4-fs (loop9): Ignoring removed orlov option [ 434.340801][ T8645] EXT4-fs (loop9): mounted filesystem without journal. Opts: norecovery,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 434.763073][ T8679] loop3: detected capacity change from 0 to 128 [ 434.822283][ T8642] loop7: detected capacity change from 0 to 40427 [ 434.868125][ T8642] F2FS-fs (loop7): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 434.887658][ T8642] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 434.902167][ T8679] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 434.989912][ T8679] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 435.020604][ T7569] video4linux radio48: keene_cmd_main failed (-110) [ 435.030880][ T7569] radio-keene 9-1:9.57: V4L2 device registered as radio48 [ 435.036406][ T8642] F2FS-fs (loop7): invalid crc value [ 435.094947][ T8642] F2FS-fs (loop7): Found nat_bits in checkpoint [ 435.159388][ T7569] usb 9-1: USB disconnect, device number 19 [ 435.255261][ T8679] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none. [ 435.423899][ T8642] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 435.439205][ T8642] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 435.528890][ T8704] loop8: detected capacity change from 0 to 1024 [ 435.554395][ T13] Bluetooth: hci4: command 0x0405 tx timeout [ 435.582261][ T8707] loop3: detected capacity change from 0 to 1024 [ 435.744865][ T8707] hfsplus: invalid length 32517 has been corrected to 255 [ 435.762530][ T8704] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 435.818077][ T8704] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.833504][ T5458] attempt to access beyond end of device [ 435.833504][ T5458] loop7: rw=2049, want=45104, limit=40427 [ 435.877204][ T8707] hfsplus: invalid length 32517 has been corrected to 255 [ 435.896402][ T8707] hfsplus: invalid length 32517 has been corrected to 255 [ 435.899345][ T8704] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.839: bg 0: block 112: padding at end of block bitmap is not set [ 436.028673][ T8728] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: block 3: comm syz.8.839: lblock 3 mapped to illegal pblock 3 (length 1) [ 436.066904][ T5000] hfsplus: b-tree write err: -5, ino 2 [ 436.077182][ T5000] hfsplus: b-tree write err: -5, ino 4 [ 436.114407][ T8728] EXT4-fs error (device loop8): ext4_ext_remove_space:2944: inode #15: comm syz.8.839: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 436.251530][ T8731] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: comm syz.8.839: lblock 0 mapped to illegal pblock 0 (length 1) [ 436.322791][ T8731] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: comm syz.8.839: lblock 0 mapped to illegal pblock 0 (length 1) [ 436.349226][ T8731] EXT4-fs error (device loop8): ext4_ext_remove_space:2944: inode #15: comm syz.8.839: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 436.802271][ T8751] FAULT_INJECTION: forcing a failure. [ 436.802271][ T8751] name failslab, interval 1, probability 0, space 0, times 0 [ 436.870136][ T8751] CPU: 1 PID: 8751 Comm: syz.3.848 Not tainted syzkaller #0 [ 436.877588][ T8751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 436.887709][ T8751] Call Trace: [ 436.891025][ T8751] [ 436.893993][ T8751] dump_stack_lvl+0x188/0x250 [ 436.898729][ T8751] ? show_regs_print_info+0x20/0x20 [ 436.903972][ T8751] ? load_image+0x410/0x410 [ 436.908522][ T8751] ? __might_sleep+0xf0/0xf0 [ 436.913150][ T8751] ? __lock_acquire+0x7b50/0x7b50 [ 436.918229][ T8751] should_fail+0x383/0x4b0 [ 436.922687][ T8751] should_failslab+0x5/0x20 [ 436.927222][ T8751] slab_pre_alloc_hook+0x51/0xc0 [ 436.932203][ T8751] __kmalloc+0x6b/0x340 [ 436.936390][ T8751] ? tomoyo_encode+0x28a/0x550 [ 436.941200][ T8751] tomoyo_encode+0x28a/0x550 [ 436.945832][ T8751] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 436.951528][ T8751] tomoyo_path_number_perm+0x251/0x6b0 [ 436.957028][ T8751] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 436.962541][ T8751] ? ksys_write+0x1d4/0x260 [ 436.967132][ T8751] security_file_ioctl+0x6c/0xa0 [ 436.972118][ T8751] __se_sys_ioctl+0x48/0x170 [ 436.976756][ T8751] do_syscall_64+0x4c/0xa0 [ 436.981214][ T8751] ? clear_bhb_loop+0x30/0x80 [ 436.985924][ T8751] ? clear_bhb_loop+0x30/0x80 [ 436.990636][ T8751] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.996600][ T8751] RIP: 0033:0x7f003ac81e99 [ 437.001064][ T8751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.020716][ T8751] RSP: 002b:00007f0038eda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.029183][ T8751] RAX: ffffffffffffffda RBX: 00007f003af09fa0 RCX: 00007f003ac81e99 [ 437.037198][ T8751] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000009 [ 437.045213][ T8751] RBP: 00007f0038eda090 R08: 0000000000000000 R09: 0000000000000000 [ 437.053228][ T8751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.061242][ T8751] R13: 00007f003af0a038 R14: 00007f003af09fa0 R15: 00007ffe796b7868 [ 437.069280][ T8751] [ 437.072477][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.172564][ T26] audit: type=1800 audit(1785140940.212:8): pid=8748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.8.847" name="/" dev="tmpfs" ino=306 res=0 errno=0 [ 437.238665][ T8751] ERROR: Out of memory at tomoyo_realpath_from_path. [ 437.253816][ T8762] device wlan0 entered promiscuous mode [ 437.670718][ T8771] loop3: detected capacity change from 0 to 2048 [ 437.912955][ T8771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.593592][ T8785] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 438.941135][ T8791] loop7: detected capacity change from 0 to 1024 [ 439.032172][ T8794] loop8: detected capacity change from 0 to 1024 [ 439.071531][ T8791] EXT4-fs (loop7): Ignoring removed bh option [ 439.077846][ T8791] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 439.148954][ T8794] EXT4-fs (loop8): Ignoring removed bh option [ 439.165452][ T8794] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 439.226809][ T8791] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 439.295290][ T8794] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 439.322614][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.419921][ T8814] FAULT_INJECTION: forcing a failure. [ 439.419921][ T8814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.439505][ T8814] CPU: 0 PID: 8814 Comm: syz.9.860 Not tainted syzkaller #0 [ 439.444417][ T8794] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 439.446903][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 439.446920][ T8814] Call Trace: [ 439.446927][ T8814] [ 439.446936][ T8814] dump_stack_lvl+0x188/0x250 [ 439.446971][ T8814] ? show_regs_print_info+0x20/0x20 [ 439.446996][ T8814] ? load_image+0x410/0x410 [ 439.447022][ T8814] ? __lock_acquire+0x7b50/0x7b50 [ 439.447053][ T8814] should_fail+0x383/0x4b0 [ 439.500566][ T8814] _copy_from_user+0x2e/0x170 [ 439.505294][ T8814] iovec_from_user+0x142/0x370 [ 439.510154][ T8814] __import_iovec+0x70/0x490 [ 439.514793][ T8814] ? __lock_acquire+0x13dc/0x7b50 [ 439.519865][ T8814] import_iovec+0x6f/0xa0 [ 439.524283][ T8814] ___sys_sendmsg+0x1fd/0x2e0 [ 439.529016][ T8814] ? __sys_sendmsg+0x290/0x290 [ 439.533860][ T8814] __se_sys_sendmsg+0x1b7/0x2a0 [ 439.538755][ T8814] ? __x64_sys_sendmsg+0x80/0x80 [ 439.543735][ T8814] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 439.549775][ T8814] ? lockdep_hardirqs_on+0x94/0x140 [ 439.555021][ T8814] do_syscall_64+0x4c/0xa0 [ 439.559480][ T8814] ? clear_bhb_loop+0x30/0x80 [ 439.564197][ T8814] ? clear_bhb_loop+0x30/0x80 [ 439.568914][ T8814] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 439.574840][ T8814] RIP: 0033:0x7f5947683e99 [ 439.579295][ T8814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.598970][ T8814] RSP: 002b:00007f59458dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.607460][ T8814] RAX: ffffffffffffffda RBX: 00007f594790bfa0 RCX: 00007f5947683e99 [ 439.615479][ T8814] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 439.623491][ T8814] RBP: 00007f59458dc090 R08: 0000000000000000 R09: 0000000000000000 [ 439.631495][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.639502][ T8814] R13: 00007f594790c038 R14: 00007f594790bfa0 R15: 00007ffe59cd98d8 [ 439.647529][ T8814] [ 439.748389][ T7256] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 439.954995][ T8823] loop9: detected capacity change from 0 to 1024 [ 440.044977][ T8823] EXT4-fs (loop9): Ignoring removed bh option [ 440.084050][ T8823] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 440.117783][ T8829] loop8: detected capacity change from 0 to 512 [ 440.183102][ T8823] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 440.210299][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.225211][ T7256] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 440.284655][ T8829] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 440.304792][ T7256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 440.414390][ T7256] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 440.478332][ T7256] usb 4-1: config 0 interface 0 has no altsetting 0 [ 440.489670][ T7256] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 440.512875][ T7256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.546666][ T7256] usb 4-1: config 0 descriptor?? [ 440.577100][ T8806] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 441.073200][ T8847] loop8: detected capacity change from 0 to 24 [ 441.134297][ T8806] udc-core: couldn't find an available UDC or it's busy [ 441.270425][ T8847] romfs: Unknown parameter '000007' [ 441.303676][ T8806] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 441.813939][ T7256] lenovo 0003:17EF:6062.0004: unknown main item tag 0x2 [ 441.840622][ T7256] lenovo 0003:17EF:6062.0004: unknown main item tag 0x3 [ 441.856256][ T7256] lenovo 0003:17EF:6062.0004: unknown main item tag 0x1 [ 441.886453][ T8856] FAULT_INJECTION: forcing a failure. [ 441.886453][ T8856] name failslab, interval 1, probability 0, space 0, times 0 [ 441.910431][ T7256] lenovo 0003:17EF:6062.0004: unknown main item tag 0x2 [ 441.932175][ T7256] lenovo 0003:17EF:6062.0004: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0 [ 441.949888][ T8856] CPU: 0 PID: 8856 Comm: syz.9.867 Not tainted syzkaller #0 [ 441.957254][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 441.967460][ T8856] Call Trace: [ 441.970781][ T8856] [ 441.973741][ T8856] dump_stack_lvl+0x188/0x250 [ 441.978489][ T8856] ? show_regs_print_info+0x20/0x20 [ 441.983737][ T8856] ? load_image+0x410/0x410 [ 441.988372][ T8856] ? __might_sleep+0xf0/0xf0 [ 441.993001][ T8856] ? __lock_acquire+0x7b50/0x7b50 [ 441.998063][ T8856] ? netlink_insert+0xe90/0x11f0 [ 442.003046][ T8856] should_fail+0x383/0x4b0 [ 442.007504][ T8856] should_failslab+0x5/0x20 [ 442.012041][ T8856] slab_pre_alloc_hook+0x51/0xc0 [ 442.017019][ T8856] kmem_cache_alloc_node+0x47/0x2c0 [ 442.022258][ T8856] ? __alloc_skb+0xf4/0x750 [ 442.026808][ T8856] __alloc_skb+0xf4/0x750 [ 442.031186][ T8856] netlink_sendmsg+0x654/0xbe0 [ 442.036016][ T8856] ? netlink_getsockopt+0x570/0x570 [ 442.041253][ T8856] ? aa_sock_msg_perm+0x94/0x150 [ 442.046237][ T8856] ? apparmor_socket_sendmsg+0x88/0x230 [ 442.051825][ T8856] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 442.057159][ T8856] ? security_socket_sendmsg+0x7c/0xa0 [ 442.062660][ T8856] ? netlink_getsockopt+0x570/0x570 [ 442.067900][ T8856] ____sys_sendmsg+0x5be/0x8f0 [ 442.072713][ T8856] ? __sys_sendmsg_sock+0x30/0x30 [ 442.077788][ T8856] ? import_iovec+0x6f/0xa0 [ 442.082323][ T8856] ___sys_sendmsg+0x236/0x2e0 [ 442.087038][ T8856] ? __sys_sendmsg+0x290/0x290 [ 442.091871][ T8856] __se_sys_sendmsg+0x1b7/0x2a0 [ 442.096762][ T8856] ? __x64_sys_sendmsg+0x80/0x80 [ 442.101733][ T8856] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 442.107775][ T8856] ? lockdep_hardirqs_on+0x94/0x140 [ 442.113021][ T8856] do_syscall_64+0x4c/0xa0 [ 442.117474][ T8856] ? clear_bhb_loop+0x30/0x80 [ 442.122182][ T8856] ? clear_bhb_loop+0x30/0x80 [ 442.126905][ T8856] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.132829][ T8856] RIP: 0033:0x7f5947683e99 [ 442.137271][ T8856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.156910][ T8856] RSP: 002b:00007f59458dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.165407][ T8856] RAX: ffffffffffffffda RBX: 00007f594790bfa0 RCX: 00007f5947683e99 [ 442.173423][ T8856] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 442.181436][ T8856] RBP: 00007f59458dc090 R08: 0000000000000000 R09: 0000000000000000 [ 442.189436][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.197429][ T8856] R13: 00007f594790c038 R14: 00007f594790bfa0 R15: 00007ffe59cd98d8 [ 442.205438][ T8856] [ 442.740925][ T8875] loop7: detected capacity change from 0 to 4096 [ 442.952198][ T8875] EXT4-fs (loop7): Test dummy encryption mode enabled [ 443.051744][ T8875] EXT4-fs (loop7): Ignoring removed orlov option [ 443.126712][ T8875] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 443.361684][ T4241] usb 4-1: USB disconnect, device number 10 [ 443.695361][ T8897] loop3: detected capacity change from 0 to 512 [ 443.856807][ T8897] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 443.889843][ T8897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 443.915794][ T8897] System zones: 1-12 [ 443.979960][ T8886] loop9: detected capacity change from 0 to 32768 [ 443.987447][ T8897] EXT4-fs (loop3): 1 truncate cleaned up [ 444.017697][ T8897] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,resgid=0x0000000000000000,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 444.300744][ T8886] XFS (loop9): Mounting V5 Filesystem [ 444.410221][ T8905] loop7: detected capacity change from 0 to 32768 [ 444.429488][ T8905] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 444.526737][ T8905] BTRFS info (device loop7): setting nodatasum [ 444.539854][ T8886] XFS (loop9): Ending clean mount [ 444.552784][ T8905] BTRFS info (device loop7): force zlib compression, level 3 [ 444.617252][ T8905] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 444.637442][ T8905] BTRFS info (device loop7): use lzo compression, level 0 [ 444.681311][ T8905] BTRFS info (device loop7): turning on flush-on-commit [ 444.735983][ T8905] BTRFS info (device loop7): enabling auto defrag [ 444.892277][ T8905] BTRFS info (device loop7): max_inline at 7 [ 445.104320][ T8905] BTRFS info (device loop7): using free space tree [ 445.111327][ T8905] BTRFS info (device loop7): has skinny extents [ 445.404216][ T5651] XFS (loop9): Unmounting Filesystem [ 445.502777][ T8950] loop3: detected capacity change from 0 to 512 [ 445.667906][ T8950] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 445.737784][ T8905] BTRFS info (device loop7): enabling ssd optimizations [ 446.588874][ T4439] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 446.639312][ T8986] loop8: detected capacity change from 0 to 2048 [ 446.775216][ T8986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 446.810653][ T8994] loop3: detected capacity change from 0 to 128 [ 446.878930][ T8996] loop7: detected capacity change from 0 to 128 [ 446.910203][ T8994] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 446.944241][ T8996] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 447.146162][ T8996] FAULT_INJECTION: forcing a failure. [ 447.146162][ T8996] name failslab, interval 1, probability 0, space 0, times 0 [ 447.177933][ T8996] CPU: 0 PID: 8996 Comm: syz.7.882 Not tainted syzkaller #0 [ 447.185290][ T8996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 447.195390][ T8996] Call Trace: [ 447.198706][ T8996] [ 447.201668][ T8996] dump_stack_lvl+0x188/0x250 [ 447.206387][ T8996] ? show_regs_print_info+0x20/0x20 [ 447.211704][ T8996] ? load_image+0x410/0x410 [ 447.216278][ T8996] ? __might_sleep+0xf0/0xf0 [ 447.220914][ T8996] ? __lock_acquire+0x7b50/0x7b50 [ 447.225982][ T8996] should_fail+0x383/0x4b0 [ 447.230443][ T8996] should_failslab+0x5/0x20 [ 447.234985][ T8996] slab_pre_alloc_hook+0x51/0xc0 [ 447.239960][ T8996] ? __alloc_file+0x25/0x240 [ 447.244585][ T8996] kmem_cache_alloc+0x3d/0x280 [ 447.249390][ T8996] ? mark_lock+0x94/0x320 [ 447.253762][ T8996] __alloc_file+0x25/0x240 [ 447.258218][ T8996] alloc_empty_file+0x90/0x180 [ 447.263017][ T8996] path_openat+0x11c/0x2fb0 [ 447.267560][ T8996] ? __lock_acquire+0x13dc/0x7b50 [ 447.271596][ T4242] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 447.272619][ T8996] ? stack_trace_snprint+0xe0/0xe0 [ 447.272651][ T8996] ? verify_lock_unused+0x140/0x140 [ 447.290541][ T8996] ? verify_lock_unused+0x140/0x140 [ 447.295795][ T8996] ? __kasan_slab_alloc+0xa9/0xc0 [ 447.300857][ T8996] ? __kasan_slab_alloc+0x92/0xc0 [ 447.305914][ T8996] ? slab_post_alloc_hook+0x4c/0x380 [ 447.311233][ T8996] ? verify_lock_unused+0x140/0x140 [ 447.316472][ T8996] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 447.322575][ T8996] ? do_filp_open+0x400/0x400 [ 447.327301][ T8996] do_filp_open+0x1df/0x400 [ 447.331845][ T8996] ? vfs_tmpfile+0x300/0x300 [ 447.336495][ T8996] ? _raw_spin_unlock+0x24/0x40 [ 447.341383][ T8996] ? alloc_fd+0x59e/0x650 [ 447.345770][ T8996] do_sys_openat2+0x14b/0x500 [ 447.350483][ T8996] ? __lock_acquire+0x7b50/0x7b50 [ 447.355544][ T8996] ? do_sys_open+0xe0/0xe0 [ 447.359996][ T8996] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 447.366016][ T8996] ? lock_chain_count+0x20/0x20 [ 447.370915][ T8996] __x64_sys_openat+0x135/0x160 [ 447.375807][ T8996] do_syscall_64+0x4c/0xa0 [ 447.380274][ T8996] ? clear_bhb_loop+0x30/0x80 [ 447.384982][ T8996] ? clear_bhb_loop+0x30/0x80 [ 447.389687][ T8996] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 447.395607][ T8996] RIP: 0033:0x7ff51952de99 [ 447.400048][ T8996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.419683][ T8996] RSP: 002b:00007ff517786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 447.428133][ T8996] RAX: ffffffffffffffda RBX: 00007ff5197b5fa0 RCX: 00007ff51952de99 [ 447.436138][ T8996] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 447.444158][ T8996] RBP: 00007ff517786090 R08: 0000000000000000 R09: 0000000000000000 [ 447.452179][ T8996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.460220][ T8996] R13: 00007ff5197b6038 R14: 00007ff5197b5fa0 R15: 00007ffd19628e58 [ 447.468246][ T8996] [ 447.568002][ T4439] usb 10-1: config 0 has an invalid interface number: 6 but max is 0 [ 447.591878][ T4439] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.622843][ T4439] usb 10-1: config 0 has no interface number 0 [ 447.679189][ T4439] usb 10-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 447.712288][ T4439] usb 10-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 448.029485][ T4439] usb 10-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 448.060670][ T4439] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.831043][ T4242] usb 4-1: config 0 interface 0 has no altsetting 0 [ 448.845929][ T4242] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 449.129894][ T4242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.292045][ T4439] usb 10-1: Product: syz [ 449.296675][ T4439] usb 10-1: Manufacturer: syz [ 449.301490][ T4439] usb 10-1: SerialNumber: syz [ 449.308804][ T4439] usb 10-1: config 0 descriptor?? [ 449.340112][ T8974] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 449.341447][ T4242] usb 4-1: config 0 descriptor?? [ 449.347959][ T8974] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 449.385293][ T4439] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 449.479079][ T21] usb 10-1: USB disconnect, device number 13 [ 450.013808][ T4242] bigben 0003:146B:0902.0005: unexpected rdesc, please submit for review [ 450.024189][ T4242] bigben 0003:146B:0902.0005: unexpected long global item [ 450.032060][ T4242] bigben 0003:146B:0902.0005: parse failed [ 450.039000][ T4242] bigben: probe of 0003:146B:0902.0005 failed with error -22 [ 450.244510][ T8994] udc-core: couldn't find an available UDC or it's busy [ 450.309583][ T8994] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 450.349068][ T9057] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 450.509099][ T7569] usb 4-1: USB disconnect, device number 11 [ 450.850271][ T9075] loop7: detected capacity change from 0 to 1024 [ 451.146106][ T5445] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 451.224602][ T7569] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 451.235316][ T5445] FAT-fs (loop3): Filesystem has been set read-only [ 451.264737][ T5445] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 451.296563][ T9093] netlink: 'syz.5.908': attribute type 1 has an invalid length. [ 451.316140][ T9093] netlink: 'syz.5.908': attribute type 2 has an invalid length. [ 451.344761][ T9093] netlink: 32 bytes leftover after parsing attributes in process `syz.5.908'. [ 451.658486][ T7569] usb 9-1: config 0 has an invalid interface number: 6 but max is 0 [ 451.703457][ T7569] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.838499][ T9097] loop4: detected capacity change from 0 to 7 [ 451.874719][ T4184] loop4: [ 451.877832][ T4184] loop4: partition table partially beyond EOD, truncated [ 451.879965][ T7569] usb 9-1: config 0 has no interface number 0 [ 451.977500][ T7569] usb 9-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 451.993299][ T7569] usb 9-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 452.081027][ T9097] loop4: [ 452.084066][ T9097] loop4: partition table partially beyond EOD, truncated [ 452.243018][ T7569] usb 9-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 452.252212][ T7569] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.315138][ T7569] usb 9-1: Product: syz [ 452.329135][ T7569] usb 9-1: Manufacturer: syz [ 452.345733][ T7569] usb 9-1: SerialNumber: syz [ 452.378333][ T7569] usb 9-1: config 0 descriptor?? [ 452.427514][ T9082] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 452.441121][ T9082] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 452.464015][ T9121] loop7: detected capacity change from 0 to 1024 [ 452.507058][ T7569] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 452.583878][ T9121] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 452.699117][ T9121] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 452.709129][ T9126] loop3: detected capacity change from 0 to 128 [ 452.719520][ T9121] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000100,quota,,errors=continue. Quota mode: writeback. [ 452.933136][ T9126] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 452.982365][ T9132] FAULT_INJECTION: forcing a failure. [ 452.982365][ T9132] name failslab, interval 1, probability 0, space 0, times 0 [ 453.013540][ T9132] CPU: 1 PID: 9132 Comm: syz.7.915 Not tainted syzkaller #0 [ 453.020904][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 453.031000][ T9132] Call Trace: [ 453.034311][ T9132] [ 453.037267][ T9132] dump_stack_lvl+0x188/0x250 [ 453.041985][ T9132] ? show_regs_print_info+0x20/0x20 [ 453.047219][ T9132] ? load_image+0x410/0x410 [ 453.051764][ T9132] ? __might_sleep+0xf0/0xf0 [ 453.056389][ T9132] ? __lock_acquire+0x7b50/0x7b50 [ 453.061461][ T9132] ? netlink_insert+0xe90/0x11f0 [ 453.066455][ T9132] should_fail+0x383/0x4b0 [ 453.070911][ T9132] should_failslab+0x5/0x20 [ 453.075476][ T9132] slab_pre_alloc_hook+0x51/0xc0 [ 453.080453][ T9132] kmem_cache_alloc_node+0x47/0x2c0 [ 453.085688][ T9132] ? __alloc_skb+0xf4/0x750 [ 453.090227][ T9132] __alloc_skb+0xf4/0x750 [ 453.094595][ T9132] netlink_sendmsg+0x654/0xbe0 [ 453.099406][ T9132] ? netlink_getsockopt+0x570/0x570 [ 453.104671][ T9132] ? aa_sock_msg_perm+0x94/0x150 [ 453.109642][ T9132] ? apparmor_socket_sendmsg+0x88/0x230 [ 453.115223][ T9132] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 453.120538][ T9132] ? security_socket_sendmsg+0x7c/0xa0 [ 453.126037][ T9132] ? netlink_getsockopt+0x570/0x570 [ 453.131279][ T9132] ____sys_sendmsg+0x5be/0x8f0 [ 453.136092][ T9132] ? __sys_sendmsg_sock+0x30/0x30 [ 453.141154][ T9132] ? import_iovec+0x6f/0xa0 [ 453.145692][ T9132] ___sys_sendmsg+0x236/0x2e0 [ 453.150417][ T9132] ? __sys_sendmsg+0x290/0x290 [ 453.155253][ T9132] __se_sys_sendmsg+0x1b7/0x2a0 [ 453.160138][ T9132] ? __x64_sys_sendmsg+0x80/0x80 [ 453.165103][ T9132] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 453.171132][ T9132] ? lockdep_hardirqs_on+0x94/0x140 [ 453.176366][ T9132] do_syscall_64+0x4c/0xa0 [ 453.180849][ T9132] ? clear_bhb_loop+0x30/0x80 [ 453.185553][ T9132] ? clear_bhb_loop+0x30/0x80 [ 453.190261][ T9132] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 453.196183][ T9132] RIP: 0033:0x7ff51952de99 [ 453.200629][ T9132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.220265][ T9132] RSP: 002b:00007ff517786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.228722][ T9132] RAX: ffffffffffffffda RBX: 00007ff5197b5fa0 RCX: 00007ff51952de99 [ 453.236765][ T9132] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 453.244772][ T9132] RBP: 00007ff517786090 R08: 0000000000000000 R09: 0000000000000000 [ 453.252770][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.260771][ T9132] R13: 00007ff5197b6038 R14: 00007ff5197b5fa0 R15: 00007ffd19628e58 [ 453.268792][ T9132] [ 453.333026][ T9126] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 453.527271][ T9143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.917'. [ 453.552887][ T9141] loop7: detected capacity change from 0 to 512 [ 453.591745][ T9141] EXT4-fs (loop7): Test dummy encryption mode enabled [ 453.622755][ T9126] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 453.655852][ T9141] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.916: inode has both inline data and extents flags [ 453.715027][ T9141] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.916: couldn't read orphan inode 15 (err -117) [ 453.764914][ T9141] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 453.965452][ T9141] device veth0_macvtap left promiscuous mode [ 454.316111][ T4287] usb 9-1: USB disconnect, device number 20 [ 454.501828][ T9175] loop8: detected capacity change from 0 to 128 [ 454.588277][ T9141] syz.7.916 (9141) used greatest stack depth: 19920 bytes left [ 454.604745][ T9175] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 455.160539][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.167001][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.622361][ T13] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 455.635014][ T9175] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 455.775432][ T9185] netlink: 56 bytes leftover after parsing attributes in process `syz.5.923'. [ 455.787203][ T9189] netlink: 'syz.9.925': attribute type 3 has an invalid length. [ 456.008728][ T9189] loop9: detected capacity change from 0 to 32768 [ 456.077791][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 456.098031][ T9189] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 456.376565][ T9204] FAULT_INJECTION: forcing a failure. [ 456.376565][ T9204] name failslab, interval 1, probability 0, space 0, times 0 [ 456.391811][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.402538][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.488838][ T9204] CPU: 1 PID: 9204 Comm: syz.7.927 Not tainted syzkaller #0 [ 456.496220][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 456.506365][ T9204] Call Trace: [ 456.506380][ T9204] [ 456.506390][ T9204] dump_stack_lvl+0x188/0x250 [ 456.506424][ T9204] ? show_regs_print_info+0x20/0x20 [ 456.506449][ T9204] ? load_image+0x410/0x410 [ 456.506476][ T9204] ? __might_sleep+0xf0/0xf0 [ 456.506498][ T9204] ? __lock_acquire+0x7b50/0x7b50 [ 456.506528][ T9204] should_fail+0x383/0x4b0 [ 456.506554][ T9204] should_failslab+0x5/0x20 [ 456.506574][ T9204] slab_pre_alloc_hook+0x51/0xc0 [ 456.506617][ T9204] kmem_cache_alloc_node+0x47/0x2c0 [ 456.556381][ T9204] ? __alloc_skb+0xf4/0x750 [ 456.560928][ T9204] __alloc_skb+0xf4/0x750 [ 456.565287][ T9204] pfkey_sendmsg+0x19e/0x1130 [ 456.569996][ T9204] ? __might_sleep+0xf0/0xf0 [ 456.574625][ T9204] ? pfkey_release+0x340/0x340 [ 456.579430][ T9204] ? aa_sk_perm+0x7dc/0x910 [ 456.583975][ T9204] ? aa_af_perm+0x340/0x340 [ 456.588515][ T9204] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 456.594967][ T9204] ? aa_sock_msg_perm+0x94/0x150 [ 456.599938][ T9204] ? apparmor_socket_sendmsg+0x88/0x230 [ 456.605520][ T9204] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 456.610841][ T9204] ? security_socket_sendmsg+0x7c/0xa0 [ 456.616343][ T9204] ? pfkey_release+0x340/0x340 [ 456.621145][ T9204] ____sys_sendmsg+0x5be/0x8f0 [ 456.625953][ T9204] ? __sys_sendmsg_sock+0x30/0x30 [ 456.631031][ T9204] ? import_iovec+0x6f/0xa0 [ 456.635576][ T9204] ___sys_sendmsg+0x236/0x2e0 [ 456.640298][ T9204] ? __sys_sendmsg+0x290/0x290 [ 456.645134][ T9204] __se_sys_sendmsg+0x1b7/0x2a0 [ 456.650026][ T9204] ? __x64_sys_sendmsg+0x80/0x80 [ 456.654991][ T9204] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 456.661017][ T9204] ? lockdep_hardirqs_on+0x94/0x140 [ 456.666258][ T9204] do_syscall_64+0x4c/0xa0 [ 456.670706][ T9204] ? clear_bhb_loop+0x30/0x80 [ 456.675420][ T9204] ? clear_bhb_loop+0x30/0x80 [ 456.680154][ T9204] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 456.686086][ T9204] RIP: 0033:0x7ff51952de99 [ 456.690537][ T9204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.710267][ T9204] RSP: 002b:00007ff517786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.718727][ T9204] RAX: ffffffffffffffda RBX: 00007ff5197b5fa0 RCX: 00007ff51952de99 [ 456.726755][ T9204] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 456.734778][ T9204] RBP: 00007ff517786090 R08: 0000000000000000 R09: 0000000000000000 [ 456.742787][ T9204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.750796][ T9204] R13: 00007ff5197b6038 R14: 00007ff5197b5fa0 R15: 00007ffd19628e58 [ 456.758822][ T9204] [ 456.771359][ T13] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.046834][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.570757][ T13] usb 4-1: Product: syz [ 457.576669][ T13] usb 4-1: Manufacturer: syz [ 457.583798][ T13] usb 4-1: SerialNumber: syz [ 457.626443][ T13] usb 4-1: can't set config #1, error -71 [ 457.646940][ T13] usb 4-1: USB disconnect, device number 12 [ 457.736452][ T5651] ocfs2: Unmounting device (7,9) on (node local) [ 458.034846][ T9219] loop3: detected capacity change from 0 to 4096 [ 458.536649][ T9219] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 458.688327][ T9226] loop7: detected capacity change from 0 to 512 [ 458.705801][ T9226] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 458.723785][ T9224] loop9: detected capacity change from 0 to 128 [ 458.742280][ T9226] EXT4-fs (loop7): 1 truncate cleaned up [ 458.748007][ T9226] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x0000000000000101,i_version,,errors=continue. Quota mode: none. [ 458.812784][ T3852] device veth0_macvtap entered promiscuous mode [ 458.865599][ T9224] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 458.882932][ T9224] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 458.963824][ T26] audit: type=1800 audit(1785140960.328:9): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.932" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 459.011450][ T9229] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 459.109759][ T9229] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #15: comm syz.7.932: mark_inode_dirty error [ 459.182162][ T9239] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 459.270638][ T26] audit: type=1804 audit(1785140960.605:10): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.931" name="/newroot/130/file1/file1" dev="loop3" ino=30 res=1 errno=0 [ 459.454838][ T1280] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 459.474080][ T5445] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 459.496012][ T5445] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 459.513447][ T5445] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 459.524544][ T1280] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 459.557448][ T9248] loop7: detected capacity change from 0 to 8192 [ 459.582889][ T5445] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 459.790438][ T9248] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 459.800343][ T9248] REISERFS (device loop7): using ordered data mode [ 459.806967][ T9248] reiserfs: using flush barriers [ 459.814557][ T9248] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 459.831403][ T9248] REISERFS (device loop7): checking transaction log (loop7) [ 460.653143][ T9248] REISERFS (device loop7): Using tea hash to sort names [ 460.667919][ T9248] reiserfs: enabling write barrier flush mode [ 460.698694][ T9248] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 461.146849][ T9269] netlink: 164 bytes leftover after parsing attributes in process `syz.9.938'. [ 461.342298][ T9277] Illegal XDP return value 4294967282, expect packet loss! [ 461.521212][ T9286] netlink: 'syz.3.941': attribute type 4 has an invalid length. [ 462.257443][ T9284] loop4: detected capacity change from 0 to 7 [ 462.327549][ T9284] Dev loop4: unable to read RDB block 7 [ 462.333239][ T9284] loop4: unable to read partition table [ 462.342689][ T9288] loop9: detected capacity change from 0 to 128 [ 462.354503][ T9284] loop4: partition table beyond EOD, truncated [ 463.608860][ T9284] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 463.709029][ T9288] FAT-fs (loop9): Directory bread(block 32) failed [ 463.730071][ T9296] loop3: detected capacity change from 0 to 32768 [ 463.800506][ T9288] FAT-fs (loop9): Directory bread(block 33) failed [ 463.818487][ T9288] FAT-fs (loop9): Directory bread(block 34) failed [ 463.829015][ T9288] FAT-fs (loop9): Directory bread(block 35) failed [ 463.844719][ T9288] FAT-fs (loop9): Directory bread(block 36) failed [ 463.851589][ T9288] FAT-fs (loop9): Directory bread(block 37) failed [ 463.904494][ T9288] FAT-fs (loop9): Directory bread(block 38) failed [ 463.931503][ T9288] FAT-fs (loop9): Directory bread(block 39) failed [ 463.949387][ T9288] FAT-fs (loop9): Directory bread(block 40) failed [ 463.960302][ T9288] FAT-fs (loop9): Directory bread(block 41) failed [ 464.261030][ T9310] loop8: detected capacity change from 0 to 512 [ 464.375981][ T9310] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 464.472390][ T9310] EXT4-fs (loop8): 1 truncate cleaned up [ 464.549143][ T9310] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier=0x0000000000000101,i_version,,errors=continue. Quota mode: none. [ 465.602701][ T9329] loop9: detected capacity change from 0 to 1024 [ 465.799331][ T9329] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsddf,noquota,noquota,nodioread_nolock,auto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 465.847593][ T4439] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 465.956016][ T9329] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.005058][ T26] audit: type=1800 audit(1785140966.828:11): pid=9329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.953" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 466.026411][ T9307] loop7: detected capacity change from 0 to 32768 [ 466.064604][ T9342] loop8: detected capacity change from 0 to 1024 [ 466.180837][ T9307] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 466.248648][ T4439] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 466.261153][ T4439] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.271954][ T4439] usb 4-1: config 0 has no interface number 0 [ 466.278097][ T4439] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 466.286042][ T9342] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,noquota,noquota,nodioread_nolock,auto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 466.308988][ T9342] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.334943][ T26] audit: type=1800 audit(1785140967.132:12): pid=9342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.956" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 466.355464][ T9307] (syz.7.957,9307,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 466.543219][ T4439] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 466.985944][ T5458] ocfs2: Unmounting device (7,7) on (node local) [ 467.218544][ T9350] FAULT_INJECTION: forcing a failure. [ 467.218544][ T9350] name fail_futex, interval 1, probability 0, space 0, times 1 [ 467.267401][ T4439] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 467.277431][ T9350] CPU: 0 PID: 9350 Comm: syz.9.958 Not tainted syzkaller #0 [ 467.284771][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 467.294877][ T9350] Call Trace: [ 467.298184][ T9350] [ 467.301148][ T9350] dump_stack_lvl+0x188/0x250 [ 467.305867][ T9350] ? show_regs_print_info+0x20/0x20 [ 467.311112][ T9350] ? load_image+0x410/0x410 [ 467.315672][ T9350] should_fail+0x383/0x4b0 [ 467.320133][ T9350] get_futex_key+0x1a1/0x12d0 [ 467.324858][ T9350] ? futex_wait_restart+0x250/0x250 [ 467.330147][ T9350] futex_wake+0x101/0x540 [ 467.334522][ T9350] ? verify_lock_unused+0x140/0x140 [ 467.339764][ T9350] ? verify_lock_unused+0x140/0x140 [ 467.345049][ T9350] ? futex_wait+0x680/0x680 [ 467.349606][ T9350] do_futex+0xd83/0x12b0 [ 467.353991][ T9350] ? __might_sleep+0xf0/0xf0 [ 467.358618][ T9350] ? __might_fault+0xb7/0x110 [ 467.363326][ T9350] ? futex_exit_release+0x1c0/0x1c0 [ 467.368558][ T9350] ? __lock_acquire+0x7b50/0x7b50 [ 467.373630][ T9350] mm_release+0x278/0x3c0 [ 467.377995][ T9350] ? exit_mm_release+0x30/0x30 [ 467.382798][ T9350] ? lockdep_hardirqs_on+0x94/0x140 [ 467.388074][ T9350] exit_mm+0xaf/0x7b0 [ 467.392092][ T9350] ? perf_pmu_migrate_context+0xb70/0xb70 [ 467.397859][ T9350] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 467.404351][ T9350] ? _raw_spin_unlock+0x40/0x40 [ 467.409230][ T9350] ? acct_collect+0x547/0x710 [ 467.413951][ T9350] ? do_exit+0x2110/0x2110 [ 467.418406][ T9350] ? taskstats_exit+0x451/0xae0 [ 467.423305][ T9350] do_exit+0x5b8/0x2110 [ 467.427517][ T9350] ? put_task_struct+0x80/0x80 [ 467.432314][ T9350] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 467.438335][ T9350] ? _raw_spin_lock_irq+0xb7/0xf0 [ 467.443393][ T9350] do_group_exit+0x12c/0x2f0 [ 467.448010][ T9350] ? lockdep_hardirqs_on+0x94/0x140 [ 467.453238][ T9350] get_signal+0x7eb/0x12e0 [ 467.457699][ T9350] arch_do_signal_or_restart+0xe6/0x12a0 [ 467.463375][ T9350] ? do_raw_spin_unlock+0x11d/0x230 [ 467.468606][ T9350] ? vfs_submount+0xb0/0xb0 [ 467.473144][ T9350] ? do_utimes+0x220/0x2a0 [ 467.477586][ T9350] ? get_sigframe_size+0x10/0x10 [ 467.482575][ T9350] ? vfs_utimes+0x5b0/0x5b0 [ 467.487121][ T9350] ? __x64_sys_utimensat+0x15b/0x240 [ 467.492439][ T9350] ? exit_to_user_mode_loop+0x3b/0x130 [ 467.497935][ T9350] exit_to_user_mode_loop+0x9e/0x130 [ 467.503250][ T9350] exit_to_user_mode_prepare+0xee/0x180 [ 467.508826][ T9350] syscall_exit_to_user_mode+0x16/0x40 [ 467.514323][ T9350] do_syscall_64+0x58/0xa0 [ 467.518776][ T9350] ? clear_bhb_loop+0x30/0x80 [ 467.523492][ T9350] ? clear_bhb_loop+0x30/0x80 [ 467.528207][ T9350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 467.534142][ T9350] RIP: 0033:0x7f5947683e99 [ 467.538588][ T9350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.558232][ T9350] RSP: 002b:00007f59458bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 467.566694][ T9350] RAX: ffffffffffffff95 RBX: 00007f594790c090 RCX: 00007f5947683e99 [ 467.574700][ T9350] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 467.582701][ T9350] RBP: 00007f59458bb090 R08: 0000000000000000 R09: 0000000000000000 [ 467.590722][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.598723][ T9350] R13: 00007f594790c128 R14: 00007f594790c090 R15: 00007ffe59cd98d8 [ 467.606749][ T9350] [ 467.609818][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.636622][ T4439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.655791][ T4439] usb 4-1: Product: syz [ 467.667036][ T4439] usb 4-1: Manufacturer: syz [ 467.672006][ T4439] usb 4-1: SerialNumber: syz [ 467.735233][ T9354] loop8: detected capacity change from 0 to 256 [ 467.737616][ T4439] usb 4-1: config 0 descriptor?? [ 467.765083][ T9326] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 467.774833][ T9356] fuse: Bad value for 'group_id' [ 467.799680][ T9326] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 467.811801][ T4439] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 467.965609][ T9358] loop9: detected capacity change from 0 to 1024 [ 467.998889][ T9360] loop7: detected capacity change from 0 to 128 [ 468.134919][ T9360] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 468.195125][ T9360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.232088][ T26] audit: type=1800 audit(1785140968.877:13): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.961" name="file1" dev="loop7" ino=104 res=0 errno=0 [ 469.220718][ T9370] loop9: detected capacity change from 0 to 512 [ 469.392816][ T9370] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 469.484965][ T21] usb 4-1: USB disconnect, device number 13 [ 469.650217][ T9370] EXT4-fs (loop9): 1 truncate cleaned up [ 469.655937][ T9370] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier=0x0000000000000101,i_version,,errors=continue. Quota mode: none. [ 469.720510][ T9377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.966'. [ 469.870400][ T9381] loop8: detected capacity change from 0 to 2048 [ 470.090353][ T9383] loop3: detected capacity change from 0 to 8192 [ 470.492290][ T9383] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 470.716658][ T9383] REISERFS (device loop3): using ordered data mode [ 470.802597][ T9395] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 470.895842][ T9383] reiserfs: using flush barriers [ 470.956634][ T9383] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 470.991131][ T26] audit: type=1326 audit(1785140971.425:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.8.967" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf64496e99 code=0x0 [ 471.041441][ T9383] REISERFS (device loop3): checking transaction log (loop3) [ 471.069273][ T9397] sctp: [Deprecated]: syz.9.969 (pid 9397) Use of int in maxseg socket option. [ 471.069273][ T9397] Use struct sctp_assoc_value instead [ 471.147878][ T9381] NILFS (loop8): error -2 truncating bmap (ino=16) [ 471.170841][ T9381] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 471.288271][ T9406] loop9: detected capacity change from 0 to 256 [ 471.395840][ T9383] REISERFS (device loop3): Using tea hash to sort names [ 472.300928][ T9377] reiserfs: enabling write barrier flush mode [ 472.313021][ T9377] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 476.345196][ T9494] loop8: detected capacity change from 0 to 16 [ 476.456583][ T9494] erofs: (device loop8): mounted with root inode @ nid 36. [ 476.540663][ T9494] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 327679 of nid 36 [ 476.641400][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 476.699829][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 477.002830][ T9494] erofs: (device loop8): z_erofs_extent_lookback: unknown type 3 @ lcn 75 of nid 36 [ 477.225109][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 477.528890][ T9494] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 311295 of nid 36 [ 477.541362][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 477.589342][ T9494] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 477.665222][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 477.719421][ T9494] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 303103 of nid 36 [ 477.742782][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 477.813539][ T9494] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 299007 of nid 36 [ 477.842110][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 477.857393][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 477.869857][ T9494] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 477.899978][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 477.924343][ T9494] erofs: (device loop8): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 477.963352][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 478.007575][ T9494] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 478.051175][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 478.082375][ T9494] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 478.108360][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 478.137495][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 478.177612][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 478.219640][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 478.266635][ T9494] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 478.325889][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 478.379039][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 478.476330][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 478.517180][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 478.571005][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 478.580468][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 478.595481][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 478.672622][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 478.737609][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 478.746790][ T9494] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 478.802926][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 478.820413][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 478.842717][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 478.858777][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 478.884039][ T9494] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 478.926547][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 478.945097][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 478.976873][ T9494] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 478.986307][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 479.009648][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 479.018864][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 479.059534][ T9494] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 479.095870][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 479.113643][ T9581] tipc: Started in network mode [ 479.117438][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 479.134041][ T9581] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 479.143364][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 479.182432][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 479.203822][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 479.221753][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 479.241303][ T9494] erofs: (device loop8): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 479.278609][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 479.315508][ T9494] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 479.338358][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1030'. [ 479.340402][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 479.365279][ T1325] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 479.386196][ T9494] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36 [ 479.399783][ T9592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1030'. [ 479.416896][ T9550] ceph: No mds server is up or the cluster is laggy [ 479.423177][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 14 @ nid 36 [ 479.435799][ T9494] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36 [ 479.453967][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 479.463503][ T9494] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36 [ 479.473555][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 479.483940][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 479.504269][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 5 @ nid 36 [ 479.542677][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 479.560056][ T9594] tipc: Started in network mode [ 479.580815][ T9494] erofs: (device loop8): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 479.598510][ T9594] tipc: Node identity 7f000001, cluster identity 4711 [ 479.602313][ T9494] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 479.605734][ T9594] tipc: Enabling of bearer rejected, failed to enable media [ 479.642553][ T9494] attempt to access beyond end of device [ 479.642553][ T9494] loop8: rw=524288, want=312, limit=16 [ 479.675429][ T9594] tipc: Can't bind to reserved service type 63 [ 479.712531][ T9494] attempt to access beyond end of device [ 479.712531][ T9494] loop8: rw=524288, want=1049280, limit=16 [ 479.765455][ T9494] attempt to access beyond end of device [ 479.765455][ T9494] loop8: rw=524288, want=736, limit=16 [ 479.780724][ T9494] attempt to access beyond end of device [ 479.780724][ T9494] loop8: rw=524288, want=776, limit=16 [ 479.793930][ T9494] attempt to access beyond end of device [ 479.793930][ T9494] loop8: rw=524288, want=848, limit=16 [ 479.805563][ T9494] attempt to access beyond end of device [ 479.805563][ T9494] loop8: rw=524288, want=13478624104, limit=16 [ 479.818377][ T9494] attempt to access beyond end of device [ 479.818377][ T9494] loop8: rw=524288, want=13478624080, limit=16 [ 479.840513][ T9494] attempt to access beyond end of device [ 479.840513][ T9494] loop8: rw=524288, want=56, limit=16 [ 479.852670][ T9494] attempt to access beyond end of device [ 479.852670][ T9494] loop8: rw=524288, want=40, limit=16 [ 479.883453][ T9494] attempt to access beyond end of device [ 479.883453][ T9494] loop8: rw=524288, want=96, limit=16 [ 479.904712][ T4241] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 480.225336][ T4274] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 480.347879][ T9629] svc: failed to register lockdv1 RPC service (errno 111). [ 480.356219][ T9629] lockd_up: makesock failed, error=-111 [ 480.469665][ T9629] ------------[ cut here ]------------ [ 480.476053][ T9629] kernel BUG at net/sunrpc/svc.c:572! [ 480.481804][ T9629] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 480.487963][ T9629] CPU: 0 PID: 9629 Comm: syz.8.1041 Not tainted syzkaller #0 [ 480.495369][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 480.505460][ T9629] RIP: 0010:svc_destroy+0x184/0x190 [ 480.510712][ T9629] Code: 5f 5d e9 ff ae c3 f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 66 43 c4 f8 e9 17 ff ff ff e8 ac 20 7f f8 <0f> 0b e8 a5 20 7f f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 480.530351][ T9629] RSP: 0018:ffffc90002effaa0 EFLAGS: 00010246 [ 480.536459][ T9629] RAX: ffffffff88f9e0d4 RBX: ffff8880629a4c50 RCX: 0000000000080000 [ 480.544469][ T9629] RDX: ffffc9000e329000 RSI: 000000000007ffff RDI: 0000000000080000 [ 480.552486][ T9629] RBP: 0000000000000001 R08: ffffffff901ee2cf R09: 1ffffffff203dc59 [ 480.560517][ T9629] R10: dffffc0000000000 R11: fffffbfff203dc5a R12: dffffc0000000000 [ 480.568528][ T9629] R13: ffff888023464000 R14: ffff8880629a4c68 R15: ffff8880760b9a80 [ 480.576540][ T9629] FS: 00007fdf626ce6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 480.585511][ T9629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.592124][ T9629] CR2: 00007fc8b1f82dac CR3: 0000000051c7f000 CR4: 00000000003506f0 [ 480.600100][ T9629] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 480.608084][ T9629] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 480.616094][ T9629] Call Trace: [ 480.619397][ T9629] [ 480.622348][ T9629] nfsd_svc+0x7cf/0x9e0 [ 480.626509][ T9629] write_threads+0x2ea/0x350 [ 480.631102][ T9629] ? write_unlock_fs+0x1f0/0x1f0 [ 480.636044][ T9629] ? __might_fault+0xb3/0x110 [ 480.640736][ T9629] ? _copy_from_user+0x111/0x170 [ 480.645683][ T9629] ? simple_transaction_get+0x119/0x140 [ 480.651231][ T9629] nfsctl_transaction_write+0x105/0x150 [ 480.656789][ T9629] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 480.662451][ T9629] vfs_write+0x304/0xd70 [ 480.666731][ T9629] ? file_end_write+0x250/0x250 [ 480.671632][ T9629] ? mutex_lock_nested+0x17/0x20 [ 480.676602][ T9629] ? __fdget_pos+0x2bf/0x370 [ 480.681201][ T9629] ? ksys_write+0x70/0x260 [ 480.685624][ T9629] ksys_write+0x153/0x260 [ 480.689996][ T9629] ? __ia32_sys_read+0x80/0x80 [ 480.694796][ T9629] ? lockdep_hardirqs_on+0x94/0x140 [ 480.700023][ T9629] do_syscall_64+0x4c/0xa0 [ 480.704447][ T9629] ? clear_bhb_loop+0x30/0x80 [ 480.709136][ T9629] ? clear_bhb_loop+0x30/0x80 [ 480.713845][ T9629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 480.719778][ T9629] RIP: 0033:0x7fdf64496e99 [ 480.724215][ T9629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.743844][ T9629] RSP: 002b:00007fdf626ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 480.752279][ T9629] RAX: ffffffffffffffda RBX: 00007fdf6471f090 RCX: 00007fdf64496e99 [ 480.760270][ T9629] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000003 [ 480.768260][ T9629] RBP: 00007fdf6452ceaf R08: 0000000000000000 R09: 0000000000000000 [ 480.776270][ T9629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.784254][ T9629] R13: 00007fdf6471f128 R14: 00007fdf6471f090 R15: 00007ffc43cb9208 [ 480.792250][ T9629] [ 480.795300][ T9629] Modules linked in: [ 480.803865][ T4241] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 480.810521][ T9629] ---[ end trace 3e1e62612cac26d7 ]--- [ 480.817171][ T9602] ceph: No mds server is up or the cluster is laggy [ 480.820364][ T9629] RIP: 0010:svc_destroy+0x184/0x190 [ 480.829759][ T9629] Code: 5f 5d e9 ff ae c3 f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 66 43 c4 f8 e9 17 ff ff ff e8 ac 20 7f f8 <0f> 0b e8 a5 20 7f f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 480.850735][ T9629] RSP: 0018:ffffc90002effaa0 EFLAGS: 00010246 [ 480.857132][ T9629] RAX: ffffffff88f9e0d4 RBX: ffff8880629a4c50 RCX: 0000000000080000 [ 480.865918][ T9629] RDX: ffffc9000e329000 RSI: 000000000007ffff RDI: 0000000000080000 [ 480.874158][ T9629] RBP: 0000000000000001 R08: ffffffff901ee2cf R09: 1ffffffff203dc59 [ 480.882472][ T9629] R10: dffffc0000000000 R11: fffffbfff203dc5a R12: dffffc0000000000 [ 480.903300][ T9629] R13: ffff888023464000 R14: ffff8880629a4c68 R15: ffff8880760b9a80 [ 480.947539][ T9629] FS: 00007fdf626ce6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 480.956639][ T9629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.963388][ T9629] CR2: 00007f003aecf158 CR3: 0000000051c7f000 CR4: 00000000003506f0 [ 480.971881][ T9629] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 480.980021][ T9629] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 480.988050][ T9629] Kernel panic - not syncing: Fatal exception [ 480.994414][ T9629] Kernel Offset: disabled [ 480.998762][ T9629] Rebooting in 86400 seconds..