last executing test programs: 10m3.552630255s ago: executing program 32 (id=1454): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8], 0x20}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4041}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r12, &(0x7f0000001740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r12, &(0x7f0000000380)={0x28, 0x0, r13, {{0x7, 0x7fffffffffffffff, 0x2}}}, 0x28) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) (async) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) syz_fuse_handle_req(r12, &(0x7f0000003780)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x130, 0x0, 0xffffffffffffffd0, {0x4995, 0x10007, 0x0, '\x00', {0x107fd, 0x7, 0x3, 0x3, r14, r15, 0xa000, '\x00', 0x7, 0x1000ff, 0x9, 0x7, {0x7fff, 0x1000}, {0xfffffffffffff28c, 0xfffffffe}, {0x83, 0x9}, {0x3ff, 0x923}, 0x4, 0x10000, 0x6, 0x8d}}}}) r16 = userfaultfd(0x80001) ioctl$UFFDIO_API(r16, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r16, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) 7m52.034687669s ago: executing program 33 (id=1937): openat$dlm_control(0xffffffffffffff9c, 0x0, 0xd70791c951ef244d, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@delalloc}, {@grpid}, {@dioread_nolock}, {@grpquota}, {@usrjquota}, {@grpquota}]}, 0x0, 0x580, &(0x7f0000000c80)="$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") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) shutdown(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019140)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xffff}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m10.644719982s ago: executing program 34 (id=2143): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8}]}, 0x34}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) 6m48.988878064s ago: executing program 35 (id=2224): syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="61124c000000ffc16113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000160700000fff07003506000002000000170600000ee50000bf250000000000003d350000000000006507000002000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff3d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa130c7267c2de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d726eae098804de25df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6aae6a2213f4bb7b72ee19baaa6496c921b500fab987b62bbfd769664875469f58151b5ba0e4b84ea6500aeae078084123b254aeed0055787c01db742ed418ff76ee08d6fe0cc780a1005da7b778501e12cd7a0bb3780196d1fb84e6c12dddc60addc75a1f880bd58e7d1056a4d177e0067aa7c5ec09e1b762390a4f38d15794e698611b97a1bc9bc62513ad5ba767998919ccb61028200000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 5m28.576268581s ago: executing program 3 (id=2599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000140)="f00fbabdfb5b00bad104edd8e866f3670f30baf80c66b8d020068866efbafc0c66b80058000066ef0f01cf0f01c4baf80c66b81ba93f8466efbafc0cec26f30f511d650f4c0c", 0x46}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m28.147059376s ago: executing program 3 (id=2601): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b80)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x20}, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}}, 0x44) 5m28.00345036s ago: executing program 3 (id=2603): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x80004}}, 0x2e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000000000850400000000000005"]) 5m27.77940865s ago: executing program 3 (id=2604): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) 5m27.568817607s ago: executing program 3 (id=2608): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x14, 0x0, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 5m27.330561567s ago: executing program 3 (id=2612): mkdir(&(0x7f00000001c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$adsp1(0xffffffffffffff9c, &(0x7f0000000e00), 0x4040, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 5m27.07848671s ago: executing program 36 (id=2612): mkdir(&(0x7f00000001c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$adsp1(0xffffffffffffff9c, &(0x7f0000000e00), 0x4040, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 5m15.77021996s ago: executing program 8 (id=2680): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000009f00)="0b032200e0ff25000200475400f6a13bb1000000080080354803218f69fb1e4c1df27f22e71c401826e0ca28b8371d250a5dd6b04fd225", 0x37, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 5m15.644602138s ago: executing program 8 (id=2682): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) 5m14.674432641s ago: executing program 8 (id=2697): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.kill\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x140, 0x10, 0x713, 0x70bd29, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x4e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x10, 0x60, "2104"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r6, 0x1000) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r7, 0x4004480d, 0x0) poll(&(0x7f0000000040)=[{r6, 0x1}, {r7, 0x1000}, {r6, 0x626}, {r7, 0xc20}, {r6}], 0x5, 0x101) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@multicast1, 0x3506, 0x0, 0x0, 0x7}}, 0xe8) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r8, 0x0, 0xc010) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x40000) close_range(r2, 0xffffffffffffffff, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r9, 0x3b83, 0x0) 5m13.125367677s ago: executing program 8 (id=2703): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x325099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m13.087107636s ago: executing program 8 (id=2704): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0xa002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r1, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x7}}}}, 0x36) 5m12.783047108s ago: executing program 8 (id=2706): mkdir(&(0x7f0000000140)='./file1\x00', 0x1bb) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x0, 0x7f, 0x3, 0xffffffffffffffff, 0x6}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$tun(r1, 0x0, 0x32) open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x41) 5m12.256684865s ago: executing program 37 (id=2706): mkdir(&(0x7f0000000140)='./file1\x00', 0x1bb) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x476, 0x0, 0x7f, 0x3, 0xffffffffffffffff, 0x6}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$tun(r1, 0x0, 0x32) open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x41) 4m31.539870354s ago: executing program 0 (id=3018): r0 = socket(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, {}, 0x4, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3505, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 4m30.49721857s ago: executing program 0 (id=3019): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)='i', 0x1}], 0x1}, 0x8010) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@qipcrtr, &(0x7f00000000c0)=0x80) r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="738fdf8959b8fa720137de6f39c0e2c600b5c37e3b80e487e26f6c2b0f269eeabf89f568a400f0184d39b30705ef68eb1f6cdf4ad80758adc61b1fe5890e4b147364cf96bd2880ebfdc8fce28bc14a64fc2f38700d31951af2717aa51ce26ec4986924163f379b262b5868c305ef41a62e3f2fb6cab5998c91c57525529086c8a7f3861d25c7596087bb98a7bbc4803cfabe30c01aaea1631b609f3bb9ee2b457760f69c375c50a0495542909caaf6e3306683b1cafc4fbbdc1a6e020b1fe25b790a1e34d3f9a4cf96d7d0943c39dfd6219e55e00eb18834737aa6c9164637d993994d908d851f237509ba7e", @ANYRES16, @ANYBLOB="23e474457b81e2982d9ed4e4bc0bd51657c977b9b6d67c0b1ecf02aaed96587ba8a6cad42803d63f1d8205920fef7a5eff97bc3b4107327d40ae6cc0abff85a12a120f6fa72a5b4d4745991df0dae873557179948013f67807d1466f11487c7a341f87c728fea2fd0be2567dad3f057e69dcd78ec25c838a03109ca9e9cbf14d2618fc350d5884f93063e61cd9b89cc30ea0ccc411b77e88d710e7072c43fc44c71fa59fd8b337954556f31762cb01ed258da0cc3bf17848228c29990c42af46dccebadc422c16f4a9367a8a96cc064daac81ec471c9ad1a145ad6675acd2441f96b3f40a56ebb16c39875951947b0e73e9fc3cd334f1ace"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002207000000ab0b9e23fa25"], 0x0}, 0x0) 4m26.975476766s ago: executing program 0 (id=3037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) 4m26.674765832s ago: executing program 0 (id=3038): r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (rerun: 64) setuid(0xee01) (async) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b22, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) ptrace(0x4207, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4m26.38321301s ago: executing program 0 (id=3039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e", 0x18, 0x24000801, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r4, 0x40184152, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) 4m25.723728026s ago: executing program 0 (id=3047): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000080)={0xa, 0x4e26, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f00000020c0)=""/171, 0x0) 4m25.297215462s ago: executing program 38 (id=3047): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000080)={0xa, 0x4e26, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f00000020c0)=""/171, 0x0) 2m45.34547586s ago: executing program 7 (id=3452): socket$inet(0x2, 0x2, 0x6a113fc2) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m42.285329895s ago: executing program 7 (id=3464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x0) 2m42.201990119s ago: executing program 7 (id=3466): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) (async) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)) (async) r1 = socket$netlink(0x10, 0x3, 0x0) close_range(r0, r1, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) (async) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000080)=@phonet={0x23, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="90a6da4a97f40946598a7610409dcec7e157f3ac456e3db4ef6ac8400ec6098122308a36fa86fa30638679050b1189fd2dcfe0ecabd25e5a27b6e7399d8fbdb9a8ac0d9fe9cfd8d09e417b5f13a12874483959d22de2a35aef102aff96173dc8338fc7e87332b954fd06fc2c5a125e8a87af25f0", 0x74}, {&(0x7f0000000280)="a0f011ddebb9bb7d73abc2f2b953d2ecc457d19b4ff6b4147766f417b459a5a1a9cd99871d0a0f27d348b0720e2edf8f21f8b4766454e396e15e332c4546d2e96fcd3bc7336427c685f2237306eb0d41c5b4dd", 0x53}, {&(0x7f0000000300)="9d52193d8e776f133399fd759cdb3f751d5a7a8dc34c0893af85b4171cc0a535a32b17e9c898f95ff1cf0185f24f0312e3b1fbb837a31bd9bae66859973d4ed416fd6d", 0x43}], 0x3}, 0x20000000) (async) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0}}, 0xc800) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) (rerun: 64) 2m42.113492523s ago: executing program 7 (id=3467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c1000000fff0000000000", 0x58}], 0x1) 2m42.089015132s ago: executing program 7 (id=3468): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="66de3d", @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303030313030303d30bb737365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="0000000056cc8ae96bb8283f176295aeeb4b686700", @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x14c) close_range(r0, r1, 0x0) r3 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file2\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00f6dcd5ab278a9c0344e2aaa3fd1650748a9c872b67afbad1fbb3f31a3b5a6d40611b1e02951cc0fe2010d0767822bd20f12f8a4c39"], 0x1, 0x58ed, &(0x7f0000010b40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f00000000c0)='@:(-\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x42) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0x0) 2m40.969862871s ago: executing program 7 (id=3470): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m25.88428113s ago: executing program 39 (id=3470): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m27.285496321s ago: executing program 1 (id=3806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x72, &(0x7f0000000580)=""/114, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 1m27.097160472s ago: executing program 1 (id=3809): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x147042, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x1f4, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x3000080, &(0x7f0000000280)=ANY=[], 0x1, 0x2e6, &(0x7f00000003c0)="$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") write$qrtrtun(r0, &(0x7f0000000240)="0bf6ff8c0add616783de67c8261711f5ccee08ba35314c7b85c820d5953f7bf227baf7244d86250b8c7b63f5e3c05a91d3ff392cf3de07f6e655612a404e240e8348ecad1b97f72f5732130346446562c2cf2dee3609323ec062c34926c833399889", 0x62) 1m25.390644107s ago: executing program 1 (id=3817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="8db42c43ffcf53c6", 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000180), 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) vmsplice(r7, &(0x7f0000000180)=[{&(0x7f0000000240)='C', 0x1}], 0x1, 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000101405002c077000fedbdf25"], 0x20}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x200, 0x4) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/56) 1m24.335632918s ago: executing program 1 (id=3821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4001af84, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) pipe2$9p(0x0, 0x0) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x2008000, &(0x7f0000000240)="1930f5962868c7edd2cfacadc04709032586aca6859bb5089f5a7b0c05e821cde624450e9e0441d5fdca4d0b4c9238825ee1594aa5df96fa7dea306f5ac171864a26e4fed46c5962f9112e4d3666a68542d81e9ecd65e0a1dd71f142c821e128e7ed6b", 0x63, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f00000004c0)="3917b4628d9b71fb7f51c2c6f2ebc0b3a5fd8949134913aad2e31ce76bf598d3d65601bd65107584eb4e76047be98430ad6c0769c06d032caff3f0d7a5e20b8d9b70701af25f809061b63a72a1189474447e91c38013e941f3615ca4f76d9e15bd7368239de2341eedc6bfbaf6772f30c1431d76cbb603789c877d910565a7156b01541a52c2ff1d0bce9e00f8c168f7ee7738139ea8bae86df1842695ca39eac81cc27c1c792d69") r4 = getpid() setpgid(r4, r3) setpgid(0x0, r2) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',\x00']) mkdir(0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x10028e8, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) socket$nl_route(0x10, 0x3, 0x0) 1m24.042697604s ago: executing program 1 (id=3824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) (fail_nth: 4) 1m23.95715174s ago: executing program 1 (id=3825): pipe2(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000000500010006000000050005000200000005000400000000000900280073797a31000d0000125e0300686173683a6e65800000000000000000"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xfffffffffffffdcf, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0xd6cd, 0x60000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010325bd7000fcffffff050000000800030043"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x2d0, 0x14, 0x824f141eff9c854a, 0x70bd2d, 0x25dfdbfe, {0x3, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "2b64ffa50b8123dc6b943fbaeb90bd2b0b897f180cd83b6dc1b8a4990d63cacdaba4c5f5e54b30aa844470f893931d043ff02b0c26ce85c95ef039f6548c797f7104adc3feedac8f252f856f3bdff1995f638eb0c76a97c22af165801b09f5722a0d517aaadb738b6c99f1a8f6b00d12a649fa0316a07ce1c6cceb230295e4216d75db4cf7b222c4d2c3307f54d5010ad803c207d7280bb306a746d733e0775e1e5557b41469e0cb0e3564ef9970c10482"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "ab531ff5c91d860877cf832a8ae252e1df20f5dcaca2db07ace6f4eb9733af0c97a0fc28aaa03b"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "99d12564e515e5f8acfdce632eeb1f9cf40fad4b54ba9a271b13e2f729cadbc17ff524531edc99c2fc660020c4ab377d1e9e84e211f12246fccef517214f11a23cecdd6657e2bf5a6a201bb5a89cc92634b389879c6582bffd06174663c28bab851160adcf12e822ae743e00250ffc87fa92d7ea58ab18f1f7bc7c108b4240f824128a9eac6ced16b7e0c4a7dcc095a9da2758b53f99bfbd630761ce641ca40f19e5d10f939b180121cc80f9df48b54a8dcf104ab48ad6afa316bc477715e72162389401cdda74"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "c5ae8bfafa"}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x20004}, 0x1) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r7, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r6, 0x100000001, 0x7, 0x7fffffffffffffff}) 1m23.343431565s ago: executing program 40 (id=3825): pipe2(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000000500010006000000050005000200000005000400000000000900280073797a31000d0000125e0300686173683a6e65800000000000000000"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xfffffffffffffdcf, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0xd6cd, 0x60000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010325bd7000fcffffff050000000800030043"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x2d0, 0x14, 0x824f141eff9c854a, 0x70bd2d, 0x25dfdbfe, {0x3, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "2b64ffa50b8123dc6b943fbaeb90bd2b0b897f180cd83b6dc1b8a4990d63cacdaba4c5f5e54b30aa844470f893931d043ff02b0c26ce85c95ef039f6548c797f7104adc3feedac8f252f856f3bdff1995f638eb0c76a97c22af165801b09f5722a0d517aaadb738b6c99f1a8f6b00d12a649fa0316a07ce1c6cceb230295e4216d75db4cf7b222c4d2c3307f54d5010ad803c207d7280bb306a746d733e0775e1e5557b41469e0cb0e3564ef9970c10482"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "ab531ff5c91d860877cf832a8ae252e1df20f5dcaca2db07ace6f4eb9733af0c97a0fc28aaa03b"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "99d12564e515e5f8acfdce632eeb1f9cf40fad4b54ba9a271b13e2f729cadbc17ff524531edc99c2fc660020c4ab377d1e9e84e211f12246fccef517214f11a23cecdd6657e2bf5a6a201bb5a89cc92634b389879c6582bffd06174663c28bab851160adcf12e822ae743e00250ffc87fa92d7ea58ab18f1f7bc7c108b4240f824128a9eac6ced16b7e0c4a7dcc095a9da2758b53f99bfbd630761ce641ca40f19e5d10f939b180121cc80f9df48b54a8dcf104ab48ad6afa316bc477715e72162389401cdda74"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "c5ae8bfafa"}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x20004}, 0x1) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r7, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r6, 0x100000001, 0x7, 0x7fffffffffffffff}) 11.982952175s ago: executing program 5 (id=4112): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = socket(0x11, 0xa, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffe1e, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r4 = socket(0x2, 0x80805, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff55) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0x7f9, 0xb2, "20ab9809006ea4a7446c180000cd681ec267a0", 0x7, 0x200008}) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x9e, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r1, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 8.495987044s ago: executing program 6 (id=4117): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prlimit64(r0, 0x6, 0x0, &(0x7f00000001c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) 7.931144132s ago: executing program 5 (id=4119): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000001c0)={0x0, 0xffffffffffffffcf, &(0x7f0000000000)={&(0x7f0000000040)="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", 0xfc}, 0x1, 0x0, 0x0, 0x24004040}, 0x4044014) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x142, 0x0) 7.915339496s ago: executing program 9 (id=4120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000500)={{r2}, "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"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x800000000000000) 7.719564735s ago: executing program 5 (id=4122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4) 7.611381669s ago: executing program 9 (id=4124): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 7.137369781s ago: executing program 6 (id=4125): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0xf5ff, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) r7 = syz_open_dev$vim2m(0x0, 0xf, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/228, 0xe4}], 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 6.936017683s ago: executing program 5 (id=4126): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x11, 0x2ff, &(0x7f0000000680)="$eJzs3U9rE0EYx/HfbNImtbGmf0TwWC3oRbRexEtE8hYE8SDaNkIxVNQK6sVUPIno3btvwRfhRfEN6MmD+ALa08rM/kk22c2msUka/H5A3Wzm2Xkmm919JiAjAP+tm/Ufn67+sn+MVFBBentd8iSVpaKk0zpTfrazu73bbGz1O1DBRejAl1EQaXrabO403L97yd02zkWEqvZVUZXOfRgN3/dv/Oza99ubUDKYGHf1p/CkUnh1uvfLY8+sv70h41pHnMe0Mfva13MtTDoPAMCkBI99+/zfCwp/u6MS1u+eJ62Fj/1j+fwf1v6kExg5v++7Hc9/N8vyjT2/p9xb7fmem8LZ971oljhIzzNdr2cVFJKJAtPkzSpdLt7cg+1m49Lmo+aWp9eqhTqarcQ9hOw3NCfb1ZS5aR8DjN2kVpRBWt6MHcN6Rv7LQ/bYR8/0LXFCzBfzzdw1VX3UVlz/FX1js3UJV7vOVJD/5ez+5l2UbaXwtlGr1Tx3oMii6+Rs8kzljLKcPiNR9MEuKvkDQTUvTxe11BUVjO5KakApjlpOjVqPXmX0tZKIsqOJv83ZWY6aeW9um1X90WfVO+p/z+a35hp4WVdm+6oxa8GF5j7xYDyz6d0V3TGrPU+Olu5UknviT7GUlfpB/3saBhCdw3fa0DUtPH3x8mGh2Ww8sRv3UzYeV+I9M2+k1Db/vmGK0tDharX3lOQ7PY2je+AIks/cuHikB7T3j9zG9iobywBH9U1wG/LGeZoOv1H/Oqovkl86DgM8OcEbFMapfdKHCu8u9TF9bN1lgvmfq+TDet8VCvavW6XsOj0qyNJKNle9h0f0bY0dz4DKifglt3UiWUbnzA3mwzomZR7X0mBzrnMXpPOD91gN85wO/qucBqau77rH7/8AAAAAAAAAAAAAAAAAAADT5vD/Q2Du0FGTHiMAAAAAAAAAAAAAAAAAAAAAANMuXv9X0fq/Gmz93+6lWML1f8vKWf93ozeHnvV/P+zItCTW/wVG628AAAD//+RRfuQ=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) dup2(r1, r1) r2 = syz_clone3(&(0x7f0000000440)={0x88000, &(0x7f0000000200)=0xffffffffffffffff, &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x13}, &(0x7f00000002c0)=""/3, 0x3, &(0x7f0000000300)=""/146, &(0x7f00000003c0)=[0x0], 0x1, {r1}}, 0x58) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x8, 0x2002) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r3, 0x5, &(0x7f0000000180)={0x2, 0x0, 0x0, 0xfffffffffffffff8, r4}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x3c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xb, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) 6.140834596s ago: executing program 6 (id=4128): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='syscall\x00') r3 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x2) inotify_init1(0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000002080)={0x2020}, 0x54) pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 5.621211429s ago: executing program 9 (id=4129): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x80000018}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x89f3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x10000, 0x1, 0x8000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1, 0x0, 0x0, 0x20000000}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, 0x0) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 4.441096658s ago: executing program 6 (id=4132): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback={0xffe0}}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10) 4.413335686s ago: executing program 5 (id=4133): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x23, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.379990886s ago: executing program 2 (id=4134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x1, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e0000001000000000000000100000000ac1414bb000000000000000000000000000000c1ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102000000000000000008000000080000fcfffffffe80000000000000000000000000002f0000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a00000000000100000000000000000000000000000001000004d43c00000000000000e00000010000000000000000000000000300000000010800090000000000000000040000fc000000000000000000000000000001000000003300000002000000fe80000000000000000000000000000f00000000010200000100"/372], 0x1bc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000480)={0x0, 0x62a}, &(0x7f0000000500)=0x8) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001040), &(0x7f0000001100)=0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0xfffffffd, 0x33565348, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.281444716s ago: executing program 6 (id=4135): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prlimit64(r0, 0x6, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) 4.281243291s ago: executing program 5 (id=4136): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@bridge_getlink={0x20, 0x12, 0x1, 0x20, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8000, 0x8400}}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000009c0)=ANY=[]) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r5) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010002104000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008"], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 4.234451801s ago: executing program 9 (id=4137): socket(0xa, 0x3, 0x3a) r0 = gettid() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) setuid(r1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x9e2, 0x9, {r0}, {r1}, 0xff4, 0x3}) 3.445175216s ago: executing program 4 (id=4138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x6983) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="44ffffff", @ANYRES16=r5, @ANYBLOB="010028b6296be141526b7e"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 3.361212192s ago: executing program 2 (id=4139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xc}, 0x48) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0xc040) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000020b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.195929364s ago: executing program 9 (id=4140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e", 0x18, 0x24000801, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r4, 0x40184152, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, 0x0, 0x4000) 2.450519771s ago: executing program 2 (id=4141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r1) socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x40, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x2080, 0x0) ioctl$COMEDI_CMDTEST(r2, 0x8050640a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffff, 0x1, 0x10000, 0x2, 0x6, 0x100, 0x3ffc, 0x80, 0x7fff, &(0x7f0000000080)=[0xfffffffa], 0x1, 0x0}) 1.125421854s ago: executing program 9 (id=4142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb0800450000000002907800000000e000000211009078e0000002000000027f0000010000000000000000"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000280)="360f01f0baf80c66b8fae78b8566efbafc0ced66b94a0300000f320fc7b9c68a3e64660f38827300673ee48b3e0f01cf0f01c56c0f01c5", 0x37}], 0x1, 0x8, &(0x7f0000000300)=[@cr0={0x0, 0xe001000c}], 0x1) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x10, 0xcd, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x8, 0xfb, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x9, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x0, 0xf5}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x10, 0x9, 0x10, 0x20, 0x5}, 0x60, &(0x7f0000000140)={0x5, 0xf, 0x60, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0xa3, 0x4, 0x7feffff, 0x1ef00, 0xf2f1, [0xff000f, 0xff00c0, 0xff00f0, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x3, 0x2}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x4, 0xff00, 0x5, [0xc000, 0x60, 0xc0, 0xff0000, 0xcf, 0xff00c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "b4880d57a9c32aa12e3d5283d36e6978"}]}, 0xa, [{0x37, &(0x7f00000000c0)=@string={0x37, 0x3, "972d36ca8d56695289fe4570d364a9f795940ece80af2401a5a42029122ba1042ab7db6e7afd51bdf57fd3a74517caef5c026a73d0"}}, {0xd6, &(0x7f0000000340)=@string={0xd6, 0x3, "16f2f4cbd8cf9efc5b7100a50114ec4511a3786a5565889cc0d665121cf8ac458dd490cdf9e459c803a09a7aabfe8b5d913b10eb91b8aa93ac4233c5cc881c1bcc449e7a07933f7dd7daed5a1d41dd1d4ac4d0549d18b6db4cce29d56a6893a7847c82ed60f489f89855b73aec9facf879b1c139fc3ece3fc2a428b97f79b0b45728053e00bbc0aa290885fa559a51513d3a5b88708b1e0321fd047c344c203af2135b02b5f7d9cfbe11c06790857129d22f92ef7ed6b715b6d4360f5773d809ef5c4820a77d27bc2a6ad4afff66da095b2835e8"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x282f}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc04}}, {0x5a, &(0x7f0000000440)=@string={0x5a, 0x3, "4e58637ed9a43b3af301c9ba016e95affe872776011dae98de8b9d07fe3a59abdc3fa41e73d44456d5936869f5978af25fdf88df92870cb86d91490aa6290add153307a964d03985c612aa1b32c0fbc08eb4334382eb4136"}}, {0x82, &(0x7f00000004c0)=@string={0x82, 0x3, "19ca34a34443fea100a57b8c15593b26af5e2b23784cc047641c349f91c810a52ad212511da846a65b5fb99078904a2dc1401ceb7a73295d1b497e6966aea030ac5d9f68389fd51ce501151ce6ae243a28719c2abae5fde901219523504190d000fb0d94679a9a5ba61c524016f37b1d1cbface86777e6b65cc6bc5e963c86aa"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3c01}}]}) syz_usb_control_io(r3, &(0x7f0000000a40)={0x2c, &(0x7f0000000740)={0x20, 0x10, 0xb1, {0xb1, 0x22, "22391db0e9be7b8c2248522810036c9c22d91a51f677b3a84ac32d313b4149dbca488e834739e39313aa5ea7fe834d0a7cf7a14642adce810adfe6872fb7292a6dde49e4100bfddd65aeb49dbe9eebe4b3b7ce6676dea6f025d6bc36ebb39bfd2e309540e0c109cc8d986a0927360eb813dfad05de927f0a2514f54e5b869579f1c15b516146420a32660ab26fd32883bb639e08a44764085d44111a081f8b14edd45ba7a60fa4779932e957f04cab"}}, &(0x7f0000000800)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}, &(0x7f0000000940)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0xb5, 0xf, 0x9, [0xc000, 0xc000, 0xf0, 0x3f00, 0x0, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "8ebc01957160245fd4632f41ee47cbad"}]}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x5, 0xfb, "791bea11", "de48188a"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x24, 0x1, 0x1, 0x6, 0x1, 0xb, 0x4}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a80)={0x40, 0xe, 0x61, "aa19287dde528153122a32d858809330c5050b02b3957dbd525f513234d247020ef2a977ccf79f2a3530c75aa2db3769e5d3fca268597308ad3d3bc9764eb37b69b9e6fb86aab6335c7ee6e1c6f0c0769402efedb1a15fe698e5bf81bd245409ed"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xc7}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000bc0)={0x20, 0x0, 0x8, {0x4, 0x20, [0xf0f0]}}, &(0x7f0000000c00)={0x40, 0x7, 0x2}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x90}, &(0x7f0000000c80)={0x40, 0xb, 0x2, 'cE'}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @random="b78e03c0aad5"}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "a8b0"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x87}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x2}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.053095692s ago: executing program 6 (id=4143): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) syz_usb_connect(0x1, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xe9, 0x58, 0x5b, 0x8, 0x1d19, 0x100, 0x7ae9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0x23, 0x7, 0x0, 0x71, 0xa3, 0x9a, 0x1}}]}}]}}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x34325852, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {0x0, 0x19c}, {0xfffffffc, 0x80001}]}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x3, 0x10, 0x400, 0x10, @empty, @empty, 0x40, 0x8000, 0xffffffc3, 0x4}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, r9, 0x25, 0x18, @val=@netfilter={0xf, 0x1, 0x6, 0x1}}, 0x20) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x300, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {0x0, 0xfffbff7f}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) shutdown(r10, 0x1) 1.052868093s ago: executing program 4 (id=4144): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0xfffffffe, 0x25dfdbfc, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x4}, {0x2}, 0x0, 0x0, 0x2}, [@tmpl={0x104, 0x5, [{{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in=@broadcast, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0xa, @in=@loopback, 0x0, 0x4, 0x2}]}]}, 0x1bc}}, 0x0) 990.445057ms ago: executing program 2 (id=4145): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000340000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 942.821107ms ago: executing program 2 (id=4146): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000001c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 837.367356ms ago: executing program 4 (id=4147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700000000000250000000e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x80400, 0x140) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700000000000250000000e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x80400, 0x140) (async) 664.687361ms ago: executing program 4 (id=4148): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018201800", @ANYRES32=r0, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x1b, &(0x7f0000001400)=""/223}, 0x94) 429.96022ms ago: executing program 4 (id=4149): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000190005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) 164.76251ms ago: executing program 4 (id=4150): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000080050e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 2 (id=4151): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @float={0x2, 0x0, 0x0, 0x10, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0xfffff, 0xb}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) kernel console output (not intermixed with test programs): ast mode [ 927.837353][T11480] usb 10-1: USB disconnect, device number 27 [ 928.687449][T17934] netlink: 216 bytes leftover after parsing attributes in process `syz.9.3542'. [ 928.747765][T17934] loop9: detected capacity change from 0 to 2048 [ 928.805253][T17934] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 928.982988][T17937] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3541'. [ 928.992215][T17937] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3541'. [ 929.001800][T17937] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3541'. [ 929.616870][T17942] fuse: Unknown parameter 'use00000000000000000000' [ 929.817228][ T93] usb 10-1: new low-speed USB device number 28 using dummy_hcd [ 929.999597][ T93] usb 10-1: config 2 has an invalid interface number: 35 but max is 0 [ 930.015529][ T93] usb 10-1: config 2 has no interface number 0 [ 930.097555][ T93] usb 10-1: config 2 interface 35 has no altsetting 0 [ 930.226799][ T93] usb 10-1: string descriptor 0 read error: -22 [ 930.311686][ T93] usb 10-1: New USB device found, idVendor=1d19, idProduct=0100, bcdDevice=7a.e9 [ 930.439145][ T93] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.584598][T17954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3549'. [ 930.695292][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 930.708879][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 930.722016][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 930.732076][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 930.740408][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 931.659006][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.665503][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.904090][T17955] chnl_net:caif_netlink_parms(): no params data found [ 932.140717][T17955] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.148244][T17955] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.155672][T17955] bridge_slave_0: entered allmulticast mode [ 932.169090][T17955] bridge_slave_0: entered promiscuous mode [ 932.182797][T17955] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.205545][T17955] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.221555][T17955] bridge_slave_1: entered allmulticast mode [ 932.235489][T17955] bridge_slave_1: entered promiscuous mode [ 932.395118][T17955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.418444][T17955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.561150][T17955] team0: Port device team_slave_0 added [ 932.576382][T17955] team0: Port device team_slave_1 added [ 932.672689][T17955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.691588][T17955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.775934][ T5932] usb 10-1: USB disconnect, device number 28 [ 932.789238][T17955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.831222][T17955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.838409][ T51] Bluetooth: hci4: command tx timeout [ 932.858648][T17984] fuse: Unknown parameter 'user_i00000000000000000000' [ 932.861731][T17955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.895612][T17955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.131493][T17955] hsr_slave_0: entered promiscuous mode [ 933.151020][T17955] hsr_slave_1: entered promiscuous mode [ 933.174332][T17955] debugfs: 'hsr0' already exists in 'hsr' [ 933.189055][T17955] Cannot create hsr debugfs directory [ 933.430715][T17987] loop9: detected capacity change from 0 to 764 [ 933.446794][T17987] iso9660: Unknown parameter '00000000000000000477L' [ 933.675966][T17991] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3558'. [ 933.727509][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 933.736083][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 934.056947][T17990] geneve2: entered promiscuous mode [ 934.077629][T17990] geneve2: entered allmulticast mode [ 934.436078][T18002] comedi comedi4: bad chanlist[0]=0xfffffffa chan=65530 range length=2 [ 934.720192][T18015] fuse: Unknown parameter 'user_i00000000000000000000' [ 935.018055][ T5872] Bluetooth: hci4: command tx timeout [ 935.074395][ C1] hrtimer: interrupt took 6690754 ns [ 936.262316][T11506] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 936.267071][ T56] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 936.607326][T11506] usb 5-1: Using ep0 maxpacket: 16 [ 936.620411][T11506] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 936.632464][T11506] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.647552][ T56] usb 2-1: Using ep0 maxpacket: 16 [ 936.654989][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.657224][T11506] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 936.675550][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.705991][ T56] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 936.719592][ T56] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 936.737704][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.738893][T11506] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 936.758589][T11480] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 936.777526][T11506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.784532][ T56] usb 2-1: config 0 descriptor?? [ 936.785572][T11506] usb 5-1: Product: syz [ 936.840215][T11506] usb 5-1: Manufacturer: syz [ 936.844887][T11506] usb 5-1: SerialNumber: syz [ 936.918371][T11480] usb 10-1: Using ep0 maxpacket: 8 [ 936.929541][T11480] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.949143][T17955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 936.956167][T11480] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.967192][T11480] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 936.991152][T17955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 937.015609][T17955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 937.033090][T11480] usb 10-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 937.049032][T17955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 937.056305][ T56] usbhid 2-1:0.0: can't add hid device: -71 [ 937.062548][ T56] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 937.076938][T11480] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.080692][ T5872] Bluetooth: hci4: command tx timeout [ 937.106575][ T56] usb 2-1: USB disconnect, device number 27 [ 937.116736][T11480] usb 10-1: config 0 descriptor?? [ 937.269177][T11506] usb 5-1: 0:2 : does not exist [ 937.373241][T17955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.401847][T17955] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.416747][T14680] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.423962][T14680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.481529][T14680] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.488842][T14680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.566501][T11480] usbhid 10-1:0.0: can't add hid device: -71 [ 937.583161][T11480] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 937.625515][T11480] usb 10-1: USB disconnect, device number 29 [ 937.689240][T18020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.716667][T18020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.082912][T18062] fuse: Invalid rootmode [ 938.534007][T11506] usb 5-1: USB disconnect, device number 68 [ 938.543124][T17955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.823071][T18069] fuse: Unknown parameter 'user_i00000000000000000000' [ 939.157800][ T5872] Bluetooth: hci4: command tx timeout [ 939.215491][T17955] veth0_vlan: entered promiscuous mode [ 939.236572][T17955] veth1_vlan: entered promiscuous mode [ 939.353653][T17955] veth0_macvtap: entered promiscuous mode [ 939.364130][T17955] veth1_macvtap: entered promiscuous mode [ 939.384886][T17955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.431506][T17955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.456445][T14086] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.476457][T14086] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.506548][T14086] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.552453][T18087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3582'. [ 939.650506][T14086] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.931190][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.980706][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.110823][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.120717][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.730658][T18102] FAULT_INJECTION: forcing a failure. [ 940.730658][T18102] name failslab, interval 1, probability 0, space 0, times 0 [ 940.743882][T18102] CPU: 0 UID: 0 PID: 18102 Comm: syz.5.3587 Not tainted syzkaller #0 PREEMPT(full) [ 940.743908][T18102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 940.743920][T18102] Call Trace: [ 940.743927][T18102] [ 940.743935][T18102] dump_stack_lvl+0x189/0x250 [ 940.743962][T18102] ? __pfx____ratelimit+0x10/0x10 [ 940.743976][T18102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.743988][T18102] ? __pfx__printk+0x10/0x10 [ 940.744004][T18102] ? __pfx___might_resched+0x10/0x10 [ 940.744018][T18102] ? fs_reclaim_acquire+0x7d/0x100 [ 940.744035][T18102] should_fail_ex+0x414/0x560 [ 940.744049][T18102] should_failslab+0xa8/0x100 [ 940.744060][T18102] __kmalloc_noprof+0xcb/0x7f0 [ 940.744074][T18102] ? tomoyo_encode+0x28b/0x550 [ 940.744097][T18102] tomoyo_encode+0x28b/0x550 [ 940.744111][T18102] tomoyo_realpath_from_path+0x58d/0x5d0 [ 940.744123][T18102] ? tomoyo_domain+0xd9/0x130 [ 940.744136][T18102] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 940.744154][T18102] tomoyo_path_number_perm+0x1e8/0x5a0 [ 940.744170][T18102] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 940.744204][T18102] ? __fget_files+0x2a/0x420 [ 940.744216][T18102] ? __fget_files+0x3a0/0x420 [ 940.744224][T18102] ? __fget_files+0x2a/0x420 [ 940.744235][T18102] security_file_ioctl+0xcb/0x2d0 [ 940.744250][T18102] __se_sys_ioctl+0x47/0x170 [ 940.744265][T18102] do_syscall_64+0xfa/0xfa0 [ 940.744275][T18102] ? lockdep_hardirqs_on+0x9c/0x150 [ 940.744286][T18102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.744296][T18102] ? clear_bhb_loop+0x60/0xb0 [ 940.744308][T18102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.744318][T18102] RIP: 0033:0x7f3f2c98eba9 [ 940.744329][T18102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.744338][T18102] RSP: 002b:00007f3f2d76b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 940.744349][T18102] RAX: ffffffffffffffda RBX: 00007f3f2cbd5fa0 RCX: 00007f3f2c98eba9 [ 940.744357][T18102] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 940.744364][T18102] RBP: 00007f3f2d76b090 R08: 0000000000000000 R09: 0000000000000000 [ 940.744370][T18102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.744376][T18102] R13: 00007f3f2cbd6038 R14: 00007f3f2cbd5fa0 R15: 00007ffdcf3812d8 [ 940.744393][T18102] [ 940.744433][T18102] ERROR: Out of memory at tomoyo_realpath_from_path. [ 941.333451][T18107] fuse: Unknown parameter 'use00000000000000000000' [ 943.583926][T18134] loop5: detected capacity change from 0 to 2048 [ 943.587668][T18138] loop9: detected capacity change from 0 to 512 [ 943.617161][T18138] EXT4-fs (loop9): can't mount with both data=journal and dax [ 943.660029][T18134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.921370][T17955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.017862][T18152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3602'. [ 944.986738][T18180] loop9: detected capacity change from 0 to 1024 [ 945.038448][T18180] ext4: Bad value for 'barrier' [ 945.127358][ T6011] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 945.279559][ T6011] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 945.297225][ T6011] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 945.347446][ T6011] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 945.377364][ T6011] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 945.431434][ T6011] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 945.475142][ T6011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.535426][ T6011] usb 6-1: config 0 descriptor?? [ 945.728966][T13514] Allocator stuck? Waited for 30 seconds [ 945.729056][T13514] Allocator debug: [ 945.729067][T13514] capacity1536 [ 945.729076][T13514] reserved 31232 [ 945.729108][T13514] hidden 0 [ 945.729118][T13514] btree 0 [ 945.729127][T13514] data 0 [ 945.729136][T13514] cached 0 [ 945.729146][T13514] reserved 8 [ 945.729156][T13514] online_reserved 768 [ 945.729166][T13514] nr_inodes 0 [ 945.729176][T13514] [ 945.729200][T13514] freelist_wait waiting [ 945.729210][T13514] open buckets allocated1 [ 945.729220][T13514] open buckets total 1024 [ 945.729251][T13514] open_buckets_wait empty [ 945.729261][T13514] open_buckets_btree 0 [ 945.729271][T13514] open_buckets_user 0 [ 945.729281][T13514] btree reserve cache 0 [ 945.729290][T13514] [ 945.729299][T13514] Dev 0: [ 945.729308][T13514] buckets sectors fragmented [ 945.729319][T13514] free 0 0 0 [ 945.729330][T13514] sb 0 0 0 [ 945.729342][T13514] journal 0 0 0 [ 945.729353][T13514] btree 0 0 0 [ 945.729364][T13514] user 0 0 0 [ 945.729396][T13514] cached 0 0 0 [ 945.729407][T13514] parity 0 0 0 [ 945.729419][T13514] stripe 0 0 0 [ 945.729430][T13514] need_gc_gens 0 0 0 [ 945.729442][T13514] need_discard 0 0 0 [ 945.729453][T13514] unstriped 0 0 0 [ 945.729464][T13514] capacity 128 [ 945.729474][T13514] [ 945.729482][T13514] reserves: [ 945.729491][T13514] stripe 60 [ 945.729502][T13514] normal 58 [ 945.729531][T13514] copygc 56 [ 945.729541][T13514] btree 28 [ 945.729551][T13514] btree_copygc 0 [ 945.729561][T13514] reclaim 0 [ 945.729571][T13514] interior_updates 0 [ 945.729586][T13514] [ 945.729595][T13514] open buckets 0 [ 945.729605][T13514] buckets to invalidate 0 [ 945.729615][T13514] [ 945.729624][T13514] Copygc debug: [ 945.729633][T13514] running: 0 [ 945.729643][T13514] copygc_wait:0 [ 945.729672][T13514] copygc_wait_at:0 [ 945.729681][T13514] Currently waiting for:0 B [ 945.729691][T13514] Currently waiting since:640 KiB [ 945.729701][T13514] Currently calculated wait: [ 945.729711][T13514] loop7: 0 B [ 945.729720][T13514] [ 945.729729][T13514] Journal debug: [ 945.729739][T13514] flags: replay_done,running,may_skip_flush [ 945.729750][T13514] dirty journal entries: 2/32768 [ 945.729761][T13514] seq: 17 [ 945.729771][T13514] seq_ondisk: 17 [ 945.729781][T13514] last_seq: 16 [ 945.729811][T13514] last_seq_ondisk: 16 [ 945.729821][T13514] flushed_seq_ondisk: 17 [ 945.729831][T13514] watermark: stripe [ 945.729842][T13514] each entry reserved: 321 [ 945.729852][T13514] nr flush writes: 7 [ 945.729861][T13514] nr noflush writes: 0 [ 945.729871][T13514] average write size: 1.45 KiB [ 945.729881][T13514] free buf: 65536 [ 945.729891][T13514] nr direct reclaim: 0 [ 945.729901][T13514] nr background reclaim: 5 [ 945.729910][T13514] reclaim kicked: 0 [ 945.729921][T13514] reclaim runs in: 0 ms [ 945.729952][T13514] blocked: 0 [ 945.729962][T13514] current entry sectors: 256 [ 945.729972][T13514] current entry error: (No error) [ 945.729982][T13514] current entry: closed [ 945.729993][T13514] unwritten entries: [ 945.730002][T13514] last buf closed [ 945.730012][T13514] space: [ 945.730021][T13514] discarded 256:1536 [ 945.730031][T13514] clean ondisk 256:1536 [ 945.730041][T13514] clean 256:1536 [ 945.730052][T13514] total 256:2048 [ 945.730062][T13514] dev 0: [ 945.730091][T13514] durability 1: [ 945.730101][T13514] nr 8 [ 945.730111][T13514] bucket size 256 [ 945.730120][T13514] available 6:200 [ 945.730131][T13514] discard_idx 0 [ 945.730140][T13514] dirty_ondisk 0 (seq 17) [ 945.730151][T13514] dirty_idx 0 (seq 17) [ 945.730161][T13514] cur_idx 0 (seq 17) [ 945.730172][T13514] replicas want 1 need 1 [ 946.004660][ T6011] usbhid 6-1:0.0: can't add hid device: -71 [ 946.747894][ T6011] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 946.757370][T18180] loop9: detected capacity change from 0 to 32768 [ 946.764735][T18180] gfs2: Unknown parameter 'locBlflocks' [ 946.780638][ T6011] usb 6-1: USB disconnect, device number 7 [ 946.801731][T18196] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3617'. [ 946.878646][T18196] geneve2: entered promiscuous mode [ 946.905057][T18196] geneve2: entered allmulticast mode [ 946.988684][T11479] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 947.199006][T18202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3618'. [ 947.213948][T11479] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.275263][T11479] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 947.299088][T11479] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 947.351465][T11479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 947.392594][T11479] usb 2-1: SerialNumber: syz [ 947.801943][T11479] usb 2-1: 0:2 : does not exist [ 947.874093][T18204] geneve2: entered promiscuous mode [ 947.894826][T11479] usb 2-1: unit 5: unexpected type 0x03 [ 947.917205][T18204] geneve2: entered allmulticast mode [ 947.961023][T11479] usb 2-1: USB disconnect, device number 28 [ 948.443117][T18091] udevd[18091]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.399575][T18224] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3626'. [ 949.408791][T18224] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3626'. [ 951.421287][T11506] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 951.807668][T18237] No control pipe specified [ 952.612640][T18239] netlink: 'syz.2.3631': attribute type 10 has an invalid length. [ 952.659052][T11506] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 952.687086][T11506] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 952.764063][T11506] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 952.804064][T11506] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 952.832584][T11506] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 952.877350][T11506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.899489][T11506] usb 5-1: config 0 descriptor?? [ 953.641474][T18262] loop9: detected capacity change from 0 to 512 [ 953.653841][T11506] usbhid 5-1:0.0: can't add hid device: -71 [ 953.665503][T18262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 953.682663][T11506] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 953.701373][T18262] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 953.718166][T11506] usb 5-1: USB disconnect, device number 69 [ 953.840986][T18262] EXT4-fs (loop9): 1 truncate cleaned up [ 953.851374][T18262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 953.912827][T18262] EXT4-fs (loop9): shut down requested (1) [ 954.153033][T15173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.274933][T18277] loop5: detected capacity change from 0 to 128 [ 954.336424][T18277] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 954.473082][ T6053] Bluetooth: hci6: Frame reassembly failed (-84) [ 954.481772][T18281] FAULT_INJECTION: forcing a failure. [ 954.481772][T18281] name failslab, interval 1, probability 0, space 0, times 0 [ 954.525947][T18281] CPU: 0 UID: 0 PID: 18281 Comm: syz.9.3644 Not tainted syzkaller #0 PREEMPT(full) [ 954.525974][T18281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 954.525986][T18281] Call Trace: [ 954.525995][T18281] [ 954.526004][T18281] dump_stack_lvl+0x189/0x250 [ 954.526031][T18281] ? __pfx____ratelimit+0x10/0x10 [ 954.526051][T18281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 954.526073][T18281] ? __pfx__printk+0x10/0x10 [ 954.526104][T18281] ? __pfx___might_resched+0x10/0x10 [ 954.526128][T18281] ? fs_reclaim_acquire+0x7d/0x100 [ 954.526159][T18281] should_fail_ex+0x414/0x560 [ 954.526185][T18281] should_failslab+0xa8/0x100 [ 954.526205][T18281] __kmalloc_noprof+0xcb/0x7f0 [ 954.526230][T18281] ? tomoyo_encode+0x28b/0x550 [ 954.526257][T18281] tomoyo_encode+0x28b/0x550 [ 954.526283][T18281] tomoyo_realpath_from_path+0x58d/0x5d0 [ 954.526314][T18281] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 954.526341][T18281] tomoyo_path_number_perm+0x1e8/0x5a0 [ 954.526370][T18281] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 954.526438][T18281] ? __fget_files+0x2a/0x420 [ 954.526460][T18281] ? __fget_files+0x3a0/0x420 [ 954.526476][T18281] ? __fget_files+0x2a/0x420 [ 954.526498][T18281] security_file_ioctl+0xcb/0x2d0 [ 954.526526][T18281] __se_sys_ioctl+0x47/0x170 [ 954.526551][T18281] do_syscall_64+0xfa/0xfa0 [ 954.526578][T18281] ? lockdep_hardirqs_on+0x9c/0x150 [ 954.526598][T18281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.526616][T18281] ? clear_bhb_loop+0x60/0xb0 [ 954.526639][T18281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.526657][T18281] RIP: 0033:0x7f2c6b58eba9 [ 954.526675][T18281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 954.526691][T18281] RSP: 002b:00007f2c6c424038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 954.526712][T18281] RAX: ffffffffffffffda RBX: 00007f2c6b7d5fa0 RCX: 00007f2c6b58eba9 [ 954.526725][T18281] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 954.526737][T18281] RBP: 00007f2c6c424090 R08: 0000000000000000 R09: 0000000000000000 [ 954.526749][T18281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.526761][T18281] R13: 00007f2c6b7d6038 R14: 00007f2c6b7d5fa0 R15: 00007ffdfbf3ab58 [ 954.526795][T18281] [ 954.526814][T18281] ERROR: Out of memory at tomoyo_realpath_from_path. [ 954.934234][T18288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3648'. [ 954.971390][T18288] vlan2: entered promiscuous mode [ 954.976481][T18288] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 956.182127][T18304] fuse: Unknown parameter 'user_id00000000000000000000' [ 956.410233][T18307] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3655'. [ 956.531247][ T5872] Bluetooth: hci6: command 0x1003 tx timeout [ 956.538084][ T5868] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 956.541731][T18307] geneve2: entered promiscuous mode [ 956.550860][T18307] geneve2: entered allmulticast mode [ 957.225716][T11506] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 957.397326][T11506] usb 6-1: device descriptor read/64, error -71 [ 957.539061][T18324] fuse: Unknown parameter 'use00000000000000000000' [ 957.854680][T11506] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 957.997402][T11506] usb 6-1: device descriptor read/64, error -71 [ 958.155707][T11506] usb usb6-port1: attempt power cycle [ 958.330350][T11479] libceph: connect (1)[c::]:6789 error -101 [ 958.343732][T11479] libceph: mon0 (1)[c::]:6789 connect error [ 958.480913][T18327] ceph: No mds server is up or the cluster is laggy [ 958.562104][T18342] loop9: detected capacity change from 0 to 7 [ 958.577753][T18342] buffer_io_error: 9 callbacks suppressed [ 958.577771][T18342] Buffer I/O error on dev loop9, logical block 0, async page read [ 958.612079][T18342] Buffer I/O error on dev loop9, logical block 0, async page read [ 958.638095][T18342] Buffer I/O error on dev loop9, logical block 0, async page read [ 958.670416][T18342] Buffer I/O error on dev loop9, logical block 0, async page read [ 958.687088][T18342] Buffer I/O error on dev loop9, logical block 0, async page read [ 958.695111][T18342] Buffer I/O error on dev loop9, logical block 0, async page read [ 958.697289][T11506] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 958.703581][T18342] Buffer I/O error on dev loop9, logical block 0, async page read [ 958.719513][T18342] ldm_validate_partition_table(): Disk read failed. [ 958.726280][T18342] Buffer I/O error on dev loop9, logical block 0, async page read [ 958.734834][T18342] Buffer I/O error on dev loop9, logical block 0, async page read [ 958.738034][T11506] usb 6-1: device descriptor read/8, error -71 [ 958.743263][T18342] Buffer I/O error on dev loop9, logical block 0, async page read [ 958.764244][T18342] Dev loop9: unable to read RDB block 0 [ 958.776393][T18342] loop9: unable to read partition table [ 958.782372][T18342] loop9: partition table beyond EOD, truncated [ 958.807530][T18342] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 958.807530][T18342] ) failed (rc=-5) [ 958.858443][T18344] fuse: Unknown parameter 'user_id00000000000000000000' [ 959.008692][T11506] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 959.049069][T11506] usb 6-1: device descriptor read/8, error -71 [ 959.167485][T11506] usb usb6-port1: unable to enumerate USB device [ 959.592505][T18360] fuse: Unknown parameter 'user_i00000000000000000000' [ 959.901219][T18370] loop5: detected capacity change from 0 to 128 [ 959.966348][T18370] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 960.097296][T18370] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 960.114723][T18381] fuse: Bad value for 'fd' [ 960.725974][T17955] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 960.829802][T18389] fuse: Unknown parameter 'user_i00000000000000000000' [ 961.044803][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3685'. [ 961.195125][T18393] loop5: detected capacity change from 0 to 32768 [ 961.213342][T18395] batadv0: entered promiscuous mode [ 961.218995][T18395] vlan2: entered promiscuous mode [ 961.664149][T18393] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=compression=zstd,erasure_code,wide_macs,nojournal_transaction_names [ 961.664165][T18393] allowing incompatible features above 0.0: (unknown version) [ 961.664171][T18393] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 961.699488][T18393] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 961.707807][T18393] bcachefs (loop5): recovering from clean shutdown, journal seq 14 [ 961.715807][T18393] bcachefs (loop5): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 961.715807][T18393] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 961.873546][T18393] bcachefs (loop5): accounting_read... done [ 961.898047][T18393] bcachefs (loop5): alloc_read... done [ 961.905490][T18393] bcachefs (loop5): snapshots_read... done [ 961.918237][T18393] bcachefs (loop5): check_allocations... [ 961.919326][T18393] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap [ 961.919338][T18393] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 18efb381d2ec84b2 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 961.965353][T18393] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap [ 961.965366][T18393] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq eb946090a3e301b5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 962.013947][T18393] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap [ 962.013959][T18393] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1b163e2cac54a139 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 962.046301][T18393] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap [ 962.046315][T18393] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c59150a5cc8748d6 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 962.077912][T18393] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap [ 962.077924][T18393] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2e86b5535b69cce2 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 962.103817][T18393] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap [ 962.103830][T18393] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq af1b2a109e85bae1 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 962.174639][T18393] done [ 962.192776][T18393] bcachefs (loop5): going read-write [ 962.255604][T18393] bcachefs (loop5): journal_replay... done [ 962.752919][T17901] udevd[17901]: incorrect bcachefs checksum on /dev/loop5 [ 962.791440][T18091] udevd[18091]: incorrect bcachefs checksum on /dev/loop5 [ 962.809164][T18393] bcachefs (loop5): check_extents_to_backpointers... [ 962.810500][T18393] bcachefs (loop5): scanning for missing backpointers in 6/128 buckets [ 962.829942][T18393] done [ 962.837212][T18393] bcachefs (loop5): check_inodes... done [ 962.846273][T18393] bcachefs (loop5): resume_logged_ops... done [ 962.859060][T18393] bcachefs (loop5): delete_dead_inodes... done [ 962.871800][T18421] fuse: Bad value for 'fd' [ 962.883305][T18393] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 962.893055][T18393] bcachefs (loop5): check_extents_to_backpointers... done [ 962.927265][T18393] bcachefs (loop5): check_inodes... done [ 962.937228][T18393] bcachefs (loop5): resume_logged_ops... done [ 962.948441][T18393] bcachefs (loop5): delete_dead_inodes... done [ 963.016241][T18393] bcachefs (loop5): done starting filesystem [ 963.181677][T18430] fuse: Unknown parameter 'user_i00000000000000000000' [ 964.010259][T18091] udevd[18091]: incorrect bcachefs checksum on /dev/loop5 [ 964.146783][T17955] bcachefs (loop5): shutting down [ 964.166816][T17955] bcachefs (loop5): going read-only [ 964.178066][T18441] netlink: 'syz.2.3697': attribute type 4 has an invalid length. [ 964.181959][T17955] bcachefs (loop5): finished waiting for writes to stop [ 964.224696][T17955] bcachefs (loop5): flushing journal and stopping allocators, journal seq 24 [ 964.282219][T18439] loop9: detected capacity change from 0 to 4096 [ 964.390217][T17955] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 24 [ 964.446866][T18439] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 964.473110][T18439] UDF-fs: Scanning with blocksize 512 failed [ 964.494306][T17955] bcachefs (loop5): clean shutdown complete, journal seq 25 [ 964.544263][T17955] bcachefs (loop5): marking filesystem clean [ 964.596529][T18439] UDF-fs: warning (device loop9): udf_fill_super: No partition found (2) [ 964.843531][T17955] bcachefs (loop5): shutdown complete [ 965.267529][T11506] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 965.342924][T18471] fuse: Bad value for 'fd' [ 965.448179][T11506] usb 5-1: Using ep0 maxpacket: 8 [ 965.478014][T11506] usb 5-1: unable to get BOS descriptor or descriptor too short [ 965.491616][T11506] usb 5-1: config 4 interface 0 has no altsetting 0 [ 965.566502][T18477] FAULT_INJECTION: forcing a failure. [ 965.566502][T18477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.567900][T11506] usb 5-1: string descriptor 0 read error: -22 [ 965.580926][T17104] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 965.594246][T18477] CPU: 1 UID: 0 PID: 18477 Comm: syz.2.3708 Not tainted syzkaller #0 PREEMPT(full) [ 965.594270][T18477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 965.594282][T18477] Call Trace: [ 965.594290][T18477] [ 965.594299][T18477] dump_stack_lvl+0x189/0x250 [ 965.594326][T18477] ? __pfx____ratelimit+0x10/0x10 [ 965.594346][T18477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 965.594367][T18477] ? __pfx__printk+0x10/0x10 [ 965.594391][T18477] ? __might_fault+0xb0/0x130 [ 965.594427][T18477] should_fail_ex+0x414/0x560 [ 965.594451][T18477] _copy_from_user+0x2d/0xb0 [ 965.594476][T18477] video_usercopy+0x346/0x1450 [ 965.594513][T18477] ? __pfx___video_do_ioctl+0x10/0x10 [ 965.594538][T18477] ? __pfx_video_usercopy+0x10/0x10 [ 965.594581][T18477] ? __fget_files+0x3a0/0x420 [ 965.594613][T18477] v4l2_ioctl+0x18d/0x1e0 [ 965.594638][T18477] ? __pfx_v4l2_ioctl+0x10/0x10 [ 965.594663][T18477] __se_sys_ioctl+0xfc/0x170 [ 965.594687][T18477] do_syscall_64+0xfa/0xfa0 [ 965.594706][T18477] ? lockdep_hardirqs_on+0x9c/0x150 [ 965.594726][T18477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.594745][T18477] ? clear_bhb_loop+0x60/0xb0 [ 965.594767][T18477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.594785][T18477] RIP: 0033:0x7f651618eba9 [ 965.594803][T18477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.594819][T18477] RSP: 002b:00007f6516f33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.594840][T18477] RAX: ffffffffffffffda RBX: 00007f65163d5fa0 RCX: 00007f651618eba9 [ 965.594853][T18477] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 965.594866][T18477] RBP: 00007f6516f33090 R08: 0000000000000000 R09: 0000000000000000 [ 965.594877][T18477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.594889][T18477] R13: 00007f65163d6038 R14: 00007f65163d5fa0 R15: 00007ffdab93c628 [ 965.594921][T18477] [ 965.599089][T11506] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 965.620450][T18479] fuse: Unknown parameter 'user_id00000000000000000000' [ 965.626496][T11506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.767298][T17104] usb 2-1: Using ep0 maxpacket: 16 [ 965.770756][ T5932] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 965.822781][T17104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.842337][T18482] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3710'. [ 965.855801][T17104] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 965.870174][T17104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.931795][T17104] usb 2-1: config 0 descriptor?? [ 965.967161][T11506] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 965.972958][T17104] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 965.985019][ T5946] libceph: connect (1)[c::]:6789 error -101 [ 965.995488][ T5946] libceph: mon0 (1)[c::]:6789 connect error [ 966.001565][ T5932] usb 6-1: device descriptor read/64, error -71 [ 966.024984][T18485] loop9: detected capacity change from 0 to 2048 [ 966.032433][T18483] ceph: No mds server is up or the cluster is laggy [ 966.044227][T11506] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 966.055874][T11506] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 966.063299][T11506] usb 5-1: media controller created [ 966.121268][T11506] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 966.208914][T18485] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.254918][ T5932] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 966.301446][T15173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.397564][ T5932] usb 6-1: device descriptor read/64, error -71 [ 966.436052][T11506] zl10353_read_register: readreg error (reg=127, ret==0) [ 966.437172][ T5872] Bluetooth: hci4: command tx timeout [ 966.684755][ T5932] usb usb6-port1: attempt power cycle [ 966.789548][T11506] usb 5-1: USB disconnect, device number 70 [ 967.016297][T18508] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3714'. [ 967.057325][ T5932] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 967.141166][ T5932] usb 6-1: device descriptor read/8, error -71 [ 967.813208][ T5932] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 967.838080][ T5932] usb 6-1: device descriptor read/8, error -71 [ 968.697401][ T5932] usb usb6-port1: unable to enumerate USB device [ 969.434081][ T6011] usb 2-1: USB disconnect, device number 29 [ 970.289978][T18526] FAULT_INJECTION: forcing a failure. [ 970.289978][T18526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.350573][T18526] CPU: 1 UID: 0 PID: 18526 Comm: syz.9.3720 Not tainted syzkaller #0 PREEMPT(full) [ 970.350590][T18526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 970.350597][T18526] Call Trace: [ 970.350602][T18526] [ 970.350607][T18526] dump_stack_lvl+0x189/0x250 [ 970.350626][T18526] ? __pfx____ratelimit+0x10/0x10 [ 970.350637][T18526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 970.350649][T18526] ? __pfx__printk+0x10/0x10 [ 970.350662][T18526] ? __might_fault+0xb0/0x130 [ 970.350683][T18526] should_fail_ex+0x414/0x560 [ 970.350697][T18526] _copy_from_iter+0x1de/0x1790 [ 970.350713][T18526] ? rcu_is_watching+0x15/0xb0 [ 970.350730][T18526] ? kmalloc_reserve+0xbd/0x290 [ 970.350742][T18526] ? __pfx__copy_from_iter+0x10/0x10 [ 970.350755][T18526] ? __build_skb_around+0x262/0x3f0 [ 970.350768][T18526] ? skb_put+0x11b/0x210 [ 970.350781][T18526] pfkey_sendmsg+0x230/0x1090 [ 970.350797][T18526] ? __pfx___might_resched+0x10/0x10 [ 970.350815][T18526] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 970.350830][T18526] ? aa_sk_perm+0x81e/0x950 [ 970.350843][T18526] ? __pfx_aa_sk_perm+0x10/0x10 [ 970.350851][T18526] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 970.350866][T18526] ? aa_sock_msg_perm+0xf1/0x1d0 [ 970.350878][T18526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 970.350889][T18526] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 970.350901][T18526] __sock_sendmsg+0x21c/0x270 [ 970.350918][T18526] ____sys_sendmsg+0x505/0x830 [ 970.350934][T18526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 970.350951][T18526] ? import_iovec+0x74/0xa0 [ 970.350965][T18526] ___sys_sendmsg+0x21f/0x2a0 [ 970.350979][T18526] ? __pfx____sys_sendmsg+0x10/0x10 [ 970.351010][T18526] ? __fget_files+0x2a/0x420 [ 970.351019][T18526] ? __fget_files+0x3a0/0x420 [ 970.351033][T18526] __x64_sys_sendmsg+0x19b/0x260 [ 970.351047][T18526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 970.351064][T18526] ? __pfx_ksys_write+0x10/0x10 [ 970.351083][T18526] ? do_syscall_64+0xbe/0xfa0 [ 970.351096][T18526] do_syscall_64+0xfa/0xfa0 [ 970.351106][T18526] ? lockdep_hardirqs_on+0x9c/0x150 [ 970.351117][T18526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.351127][T18526] ? clear_bhb_loop+0x60/0xb0 [ 970.351139][T18526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.351149][T18526] RIP: 0033:0x7f2c6b58eba9 [ 970.351165][T18526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.351174][T18526] RSP: 002b:00007f2c6c424038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.351186][T18526] RAX: ffffffffffffffda RBX: 00007f2c6b7d5fa0 RCX: 00007f2c6b58eba9 [ 970.351194][T18526] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 970.351201][T18526] RBP: 00007f2c6c424090 R08: 0000000000000000 R09: 0000000000000000 [ 970.351207][T18526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.351213][T18526] R13: 00007f2c6b7d6038 R14: 00007f2c6b7d5fa0 R15: 00007ffdfbf3ab58 [ 970.351230][T18526] [ 970.899349][T18535] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 971.132988][T18544] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3723'. [ 971.142516][T18544] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3723'. [ 971.977000][T18559] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3730'. [ 972.445035][T18559] geneve2: entered promiscuous mode [ 972.460673][T18559] geneve2: entered allmulticast mode [ 972.672852][ T56] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 972.723209][T18563] loop5: detected capacity change from 0 to 512 [ 972.741801][T18563] EXT4-fs: Ignoring removed i_version option [ 972.787555][T18563] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 972.816486][T18563] EXT4-fs (loop5): 1 truncate cleaned up [ 972.826680][T18563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 972.840357][ T56] usb 10-1: Using ep0 maxpacket: 16 [ 972.862218][ T56] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.884533][ T56] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.911605][ T56] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 973.084422][T18563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3732'. [ 973.098776][ T56] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.701109][ T56] usb 10-1: config 0 descriptor?? [ 973.804640][T17955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.036766][T18574] loop5: detected capacity change from 0 to 512 [ 974.278561][ T56] usbhid 10-1:0.0: can't add hid device: -71 [ 974.437222][ T56] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 974.573190][T18574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.592695][ T56] usb 10-1: USB disconnect, device number 30 [ 974.602246][T18574] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.996809][T17955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.156766][T18586] loop9: detected capacity change from 0 to 512 [ 975.288422][T18586] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.387269][T18586] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 975.571923][T18586] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3737: bg 0: block 64: padding at end of block bitmap is not set [ 975.629136][T18586] Quota error (device loop9): write_blk: dquota write failed [ 975.636711][T18586] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 975.647954][T18586] EXT4-fs error (device loop9): ext4_acquire_dquot:6943: comm syz.9.3737: Failed to acquire dquot type 1 [ 975.918389][T18598] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3742'. [ 975.964036][T15173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.987199][T18598] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3742'. [ 976.836437][T18607] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3745'. [ 977.204148][T18607] geneve2: entered promiscuous mode [ 977.209658][T18607] geneve2: entered allmulticast mode [ 977.378255][T18610] binder: BINDER_SET_CONTEXT_MGR already set [ 977.384256][T18610] binder: 18608:18610 ioctl 4018620d 200000004a80 returned -16 [ 977.610823][T18614] fuse: Bad value for 'fd' [ 978.148591][T18627] comedi comedi4: bad chanlist[0]=0xfffffffa chan=65530 range length=2 [ 978.691423][T18636] loop9: detected capacity change from 0 to 2048 [ 978.806815][T18642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3755'. [ 978.987898][T18636] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 979.127612][T18636] EXT4-fs error (device loop9): ext4_find_inline_data_nolock:169: inode #12: comm syz.9.3754: inline data xattr refers to an external xattr inode [ 979.163058][ T6011] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 979.378327][T18636] EXT4-fs (loop9): Remounting filesystem read-only [ 979.453645][T15173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.567319][ T6011] usb 6-1: Using ep0 maxpacket: 32 [ 979.574477][ T6011] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 979.601696][ T6011] usb 6-1: config 0 has no interface number 0 [ 979.644917][ T6011] usb 6-1: config 0 interface 12 has no altsetting 0 [ 979.693266][ T6011] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 979.704878][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.729790][ T6011] usb 6-1: Product: syz [ 979.744579][ T6011] usb 6-1: Manufacturer: syz [ 979.754753][ T6011] usb 6-1: SerialNumber: syz [ 979.807745][ T6011] usb 6-1: config 0 descriptor?? [ 979.847844][ T6011] f81534 6-1:0.12: required endpoints missing [ 979.937497][T18652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3759'. [ 979.968911][T18652] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3759'. [ 979.982294][T18652] bridge0: port 4(macvlan1) entered blocking state [ 979.990382][T18652] bridge0: port 4(macvlan1) entered disabled state [ 979.997622][T18652] macvlan1: entered allmulticast mode [ 980.003219][T18652] veth1_vlan: entered allmulticast mode [ 980.011997][T18652] macvlan1: entered promiscuous mode [ 980.028623][T18652] bridge0: port 4(macvlan1) entered blocking state [ 980.035372][T18652] bridge0: port 4(macvlan1) entered forwarding state [ 980.054879][T18652] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3759'. [ 980.087230][T17104] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 980.138632][T18654] fuse: Bad value for 'fd' [ 980.166288][T18656] syzkaller1: entered promiscuous mode [ 980.172581][T18656] syzkaller1: entered allmulticast mode [ 980.240198][T17104] usb 10-1: Using ep0 maxpacket: 8 [ 980.251678][T17104] usb 10-1: config 15 has an invalid interface number: 161 but max is 0 [ 980.261280][T17104] usb 10-1: config 15 has no interface number 0 [ 980.268033][T17104] usb 10-1: config 15 interface 161 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 980.283998][T17104] usb 10-1: config 15 interface 161 altsetting 8 bulk endpoint 0x7 has invalid maxpacket 64 [ 980.300619][T17104] usb 10-1: config 15 interface 161 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 980.313596][T17104] usb 10-1: config 15 interface 161 altsetting 8 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 980.335702][T17104] usb 10-1: config 15 interface 161 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 980.352438][T17104] usb 10-1: config 15 interface 161 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1023 [ 980.366718][T17104] usb 10-1: config 15 interface 161 altsetting 8 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 980.387267][T17104] usb 10-1: config 15 interface 161 has no altsetting 0 [ 980.403970][T17104] usb 10-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=de.ec [ 980.413609][T17104] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.424844][T17104] usb 10-1: Product: 㵩兾蚍絬텆夙龃永ꎒໞ貌㢍ꩿ闈ꠂễ妎ბ赛澰홏ᦕꖗ恸憒萌鐈ᣧ뙙姭뒜౞갈捻㋬꽁璩睇⤲浪䶯ᴁ铭ロ᧺龉굂㘑↛竔捆팞餖ꜝ簐ၒ瞈흠ꊙ⬄ↂ蠐鬁촙Ძ赲˵對엚웕䖆輵뜣좇⧫薉מּᡃ 씹╼䎠ﺁ뙳띛픜轟噇닕 [ 980.458960][T17104] usb 10-1: Manufacturer:  [ 980.463672][T17104] usb 10-1: SerialNumber: ሥ [ 980.478816][T18650] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 980.486868][T18650] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 981.050488][T18650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.213519][T18650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.596740][T18650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.621208][T18650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.676472][T17104] usb 10-1: USB disconnect, device number 31 [ 981.708374][T18686] fuse: Unknown parameter '0x0000000000000003' [ 981.765869][T11479] usb 6-1: USB disconnect, device number 16 [ 982.194743][T18697] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3775'. [ 982.607697][ T5932] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 982.634440][T18704] loop9: detected capacity change from 0 to 512 [ 982.757607][T18704] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.777139][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 982.810410][ T5932] usb 2-1: no configurations [ 982.828735][ T5932] usb 2-1: can't read configurations, error -22 [ 982.836568][T18704] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.895806][T18704] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3779: bg 0: block 64: padding at end of block bitmap is not set [ 982.911523][T18704] Quota error (device loop9): write_blk: dquota write failed [ 982.919306][T18704] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 982.929886][T18704] EXT4-fs error (device loop9): ext4_acquire_dquot:6943: comm syz.9.3779: Failed to acquire dquot type 1 [ 982.987197][ T5932] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 983.237804][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 983.298688][ T5932] usb 2-1: no configurations [ 983.311018][ T5932] usb 2-1: can't read configurations, error -22 [ 983.325994][T15173] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.347556][ T5932] usb usb2-port1: attempt power cycle [ 983.501699][T18712] loop9: detected capacity change from 0 to 1024 [ 983.707381][ T5932] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 983.738464][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 983.757508][ T5932] usb 2-1: no configurations [ 983.762155][ T5932] usb 2-1: can't read configurations, error -22 [ 983.941983][ T5932] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 984.039176][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 984.132043][ T5932] usb 2-1: no configurations [ 984.154683][ T5932] usb 2-1: can't read configurations, error -22 [ 984.258050][T18726] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3785'. [ 984.641038][ T5932] usb usb2-port1: unable to enumerate USB device [ 984.895768][T18735] fuse: Unknown parameter '0x0000000000000003' [ 985.087164][ T93] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 985.238814][ T93] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 985.253492][ T93] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 985.265395][ T93] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 985.281019][ T93] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 985.295973][ T93] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 985.305453][ T93] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.338786][ T93] usb 10-1: config 0 descriptor?? [ 985.946160][T18750] FAULT_INJECTION: forcing a failure. [ 985.946160][T18750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.017034][T18750] CPU: 1 UID: 0 PID: 18750 Comm: syz.2.3794 Not tainted syzkaller #0 PREEMPT(full) [ 986.017069][T18750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 986.017081][T18750] Call Trace: [ 986.017090][T18750] [ 986.017103][T18750] dump_stack_lvl+0x189/0x250 [ 986.017132][T18750] ? __pfx____ratelimit+0x10/0x10 [ 986.017154][T18750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 986.017176][T18750] ? __pfx__printk+0x10/0x10 [ 986.017202][T18750] ? __might_fault+0xb0/0x130 [ 986.017238][T18750] should_fail_ex+0x414/0x560 [ 986.017265][T18750] _copy_from_user+0x2d/0xb0 [ 986.017291][T18750] ___sys_sendmsg+0x158/0x2a0 [ 986.017319][T18750] ? __pfx____sys_sendmsg+0x10/0x10 [ 986.017378][T18750] ? __fget_files+0x2a/0x420 [ 986.017395][T18750] ? __fget_files+0x3a0/0x420 [ 986.017423][T18750] __x64_sys_sendmsg+0x19b/0x260 [ 986.017450][T18750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 986.017497][T18750] do_syscall_64+0xfa/0xfa0 [ 986.017516][T18750] ? lockdep_hardirqs_on+0x9c/0x150 [ 986.017537][T18750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.017555][T18750] ? clear_bhb_loop+0x60/0xb0 [ 986.017579][T18750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.017598][T18750] RIP: 0033:0x7f651618eba9 [ 986.017616][T18750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.017632][T18750] RSP: 002b:00007f6516f33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 986.017654][T18750] RAX: ffffffffffffffda RBX: 00007f65163d5fa0 RCX: 00007f651618eba9 [ 986.017668][T18750] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 986.017682][T18750] RBP: 00007f6516f33090 R08: 0000000000000000 R09: 0000000000000000 [ 986.017694][T18750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.017705][T18750] R13: 00007f65163d6038 R14: 00007f65163d5fa0 R15: 00007ffdab93c628 [ 986.017737][T18750] [ 986.321751][ T93] usbhid 10-1:0.0: can't add hid device: -71 [ 986.327985][ T93] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 986.355277][ T93] usb 10-1: USB disconnect, device number 32 [ 986.492300][T18747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3793'. [ 986.506164][T18747] bond0: ARP target 170.170.170.170 is already present [ 986.516245][T18747] bond0: option arp_ip_target: invalid value (2863311530) [ 987.525368][T18761] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3798'. [ 987.565279][T18761] geneve2: entered promiscuous mode [ 987.570728][T18761] geneve2: entered allmulticast mode [ 988.035882][T18757] loop9: detected capacity change from 0 to 40427 [ 988.051618][T18757] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 988.078797][T18757] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 988.119497][T18757] F2FS-fs (loop9): invalid crc value [ 988.347735][T18779] comedi comedi4: bad chanlist[0]=0xfffffffa chan=65530 range length=2 [ 988.501911][T18783] veth2: entered promiscuous mode [ 988.534830][T18757] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 988.543789][T18783] veth2: entered allmulticast mode [ 988.591106][T18757] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 988.624360][T18790] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3810'. [ 988.627395][T18757] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 988.645734][T18790] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3810'. [ 988.666646][T18790] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 990.229725][T18809] netlink: 236 bytes leftover after parsing attributes in process `syz.9.3813'. [ 990.485832][T18817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3817'. [ 991.315966][T18822] netlink: 'syz.2.3819': attribute type 23 has an invalid length. [ 991.957258][T11479] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 992.187109][T11479] usb 10-1: Using ep0 maxpacket: 8 [ 992.253204][T11479] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.269232][T11479] usb 10-1: config 0 has no interfaces? [ 992.302555][T11479] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 992.323677][T11479] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.343629][T11479] usb 10-1: Product: syz [ 992.358175][T11479] usb 10-1: Manufacturer: syz [ 992.384324][T11479] usb 10-1: SerialNumber: syz [ 992.416548][T11479] usb 10-1: config 0 descriptor?? [ 992.664540][T11479] usb 10-1: USB disconnect, device number 33 [ 992.803946][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 992.820265][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 992.830399][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 992.844782][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 992.859383][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 993.105694][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.112484][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.206556][T18846] chnl_net:caif_netlink_parms(): no params data found [ 993.528368][T18866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3838'. [ 993.969844][T18862] loop9: detected capacity change from 0 to 8192 [ 993.981882][T18862] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 994.057467][ T93] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 994.081222][T18873] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3839'. [ 994.101054][T18873] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 994.130744][T18846] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.138415][T18846] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.147443][T18846] bridge_slave_0: entered allmulticast mode [ 994.162061][T18846] bridge_slave_0: entered promiscuous mode [ 994.189928][T18846] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.210105][ T93] usb 6-1: Using ep0 maxpacket: 32 [ 994.226564][ T93] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 994.227903][T18846] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.258153][ T93] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 994.276000][T18846] bridge_slave_1: entered allmulticast mode [ 994.282829][ T93] usb 6-1: config 0 interface 0 has no altsetting 0 [ 994.288963][T18846] bridge_slave_1: entered promiscuous mode [ 994.317348][ T93] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 994.333733][ T93] usb 6-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 994.359852][ T93] usb 6-1: Product: syz [ 994.374313][ T93] usb 6-1: Manufacturer: syz [ 994.385921][ T93] usb 6-1: SerialNumber: syz [ 994.424679][ T93] usb 6-1: config 0 descriptor?? [ 994.822807][T18846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.839563][T18846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.905936][ T93] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 994.947677][ T5872] Bluetooth: hci0: command tx timeout [ 995.029813][T18846] team0: Port device team_slave_0 added [ 995.046787][T18846] team0: Port device team_slave_1 added [ 995.102934][T18846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.111173][T18846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.535375][T18846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.564165][ T93] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 995.578381][ T93] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 995.614159][T18846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.723849][T18846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.822199][ T93] usb 6-1: USB disconnect, device number 17 [ 995.923989][T18846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.013480][ T5932] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 996.497038][ T5932] usb 10-1: Using ep0 maxpacket: 16 [ 996.517503][ T5932] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 996.542972][T18846] hsr_slave_0: entered promiscuous mode [ 996.553509][ T5932] usb 10-1: config 0 has no interface number 0 [ 996.565502][ T5932] usb 10-1: config 0 interface 51 has no altsetting 0 [ 996.569772][T18846] hsr_slave_1: entered promiscuous mode [ 996.578868][ T5932] usb 10-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.d5 [ 996.583575][T18846] debugfs: 'hsr0' already exists in 'hsr' [ 996.617113][T18846] Cannot create hsr debugfs directory [ 996.623871][ T5932] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.640190][ T5932] usb 10-1: Product: syz [ 996.650148][ T5932] usb 10-1: Manufacturer: syz [ 996.660014][ T5932] usb 10-1: SerialNumber: syz [ 996.685269][ T5932] usb 10-1: config 0 descriptor?? [ 996.694348][ T5932] usb 10-1: bad CDC descriptors [ 996.997214][ T5872] Bluetooth: hci0: command tx timeout [ 997.941683][ T5932] usb 10-1: USB disconnect, device number 34 [ 998.343248][T18919] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3851'. [ 998.762649][T18919] geneve2: entered promiscuous mode [ 998.770804][T18919] geneve2: entered allmulticast mode [ 999.077152][ T5872] Bluetooth: hci0: command tx timeout [ 999.119521][T18846] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 999.136348][T18846] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 999.147687][ T980] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 999.154017][T18846] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 999.182335][T18846] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 999.191459][T18930] netlink: 14212 bytes leftover after parsing attributes in process `syz.9.3856'. [ 999.525508][T18846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.575027][T18846] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.665788][ T980] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 999.707480][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 999.729501][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.736730][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.787344][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 999.806003][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.813227][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.848280][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 999.915698][ T980] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 999.946026][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.982660][ T980] usb 5-1: config 0 descriptor?? [ 1001.179048][ T5872] Bluetooth: hci0: command tx timeout [ 1001.200221][ T980] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1001.208012][ T980] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1001.215544][ T980] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1001.223602][ T980] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1001.238168][ T980] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1001.245697][ T980] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1001.261557][ T980] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1001.271561][ T980] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1001.281260][ T980] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1001.292613][ T980] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1001.335192][ T980] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1001.364454][T18846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.389045][ T980] usb 5-1: USB disconnect, device number 71 [ 1001.544482][T18967] fido_id[18967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1002.164152][T18846] veth0_vlan: entered promiscuous mode [ 1002.185874][T18846] veth1_vlan: entered promiscuous mode [ 1002.256468][T18846] veth0_macvtap: entered promiscuous mode [ 1002.275923][T18846] veth1_macvtap: entered promiscuous mode [ 1002.322697][T18846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.349834][T18846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.374313][ T2907] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.403087][ T2907] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.458464][ T2907] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.525437][ T2907] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.561883][T18990] loop9: detected capacity change from 0 to 32768 [ 1002.655066][T18990] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=compression=zstd,erasure_code,wide_macs,nojournal_transaction_names [ 1002.655089][T18990] allowing incompatible features above 0.0: (unknown version) [ 1002.655102][T18990] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1002.668695][T18990] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0 [ 1002.668824][T18990] bcachefs (loop9): recovering from clean shutdown, journal seq 14 [ 1002.668950][T18990] bcachefs (loop9): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 1002.668950][T18990] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 1002.746159][T18990] bcachefs (loop9): accounting_read... done [ 1002.798635][T18990] bcachefs (loop9): alloc_read... done [ 1002.807432][T18990] bcachefs (loop9): snapshots_read... done [ 1002.820418][T18990] bcachefs (loop9): check_allocations... [ 1002.822302][T18990] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 1002.822323][T18990] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 18efb381d2ec84b2 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 1002.857972][T18990] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 1002.857993][T18990] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq eb946090a3e301b5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 1002.885345][T18990] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 1002.885366][T18990] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1b163e2cac54a139 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 1002.912232][T18990] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 1002.912252][T18990] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c59150a5cc8748d6 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 1002.943558][T18990] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 1002.943580][T18990] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2e86b5535b69cce2 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 1002.970628][T18990] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 1002.970649][T18990] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq af1b2a109e85bae1 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 1003.000501][T18990] done [ 1003.007710][T18990] bcachefs (loop9): going read-write [ 1003.026673][T18990] bcachefs (loop9): journal_replay... [ 1003.050932][ T3161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.081730][ T3161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.116021][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.155054][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.186222][T18990] done [ 1003.190873][T18990] bcachefs (loop9): check_extents_to_backpointers... [ 1003.192199][T18990] bcachefs (loop9): scanning for missing backpointers in 6/128 buckets [ 1003.210819][T18990] done [ 1003.220720][T18990] bcachefs (loop9): check_inodes... done [ 1003.228202][T18990] bcachefs (loop9): resume_logged_ops... done [ 1003.235371][T19005] FAULT_INJECTION: forcing a failure. [ 1003.235371][T19005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.235607][T18990] bcachefs (loop9): delete_dead_inodes... [ 1003.249408][T19005] CPU: 0 UID: 0 PID: 19005 Comm: syz.2.3872 Not tainted syzkaller #0 PREEMPT(full) [ 1003.249444][T19005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1003.249455][T19005] Call Trace: [ 1003.249463][T19005] [ 1003.249471][T19005] dump_stack_lvl+0x189/0x250 [ 1003.249498][T19005] ? __pfx____ratelimit+0x10/0x10 [ 1003.249518][T19005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1003.249539][T19005] ? __pfx__printk+0x10/0x10 [ 1003.249581][T19005] should_fail_ex+0x414/0x560 [ 1003.249605][T19005] _copy_to_user+0x31/0xb0 [ 1003.249630][T19005] video_usercopy+0xe32/0x1450 [ 1003.249667][T19005] ? __pfx___video_do_ioctl+0x10/0x10 [ 1003.249692][T19005] ? __pfx_video_usercopy+0x10/0x10 [ 1003.249730][T19005] ? __fget_files+0x3a0/0x420 [ 1003.249751][T19005] v4l2_ioctl+0x18d/0x1e0 [ 1003.249773][T19005] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1003.249795][T19005] __se_sys_ioctl+0xfc/0x170 [ 1003.249820][T19005] do_syscall_64+0xfa/0xfa0 [ 1003.249838][T19005] ? lockdep_hardirqs_on+0x9c/0x150 [ 1003.249858][T19005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.249877][T19005] ? clear_bhb_loop+0x60/0xb0 [ 1003.249899][T19005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.249917][T19005] RIP: 0033:0x7f651618eba9 [ 1003.249935][T19005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.249952][T19005] RSP: 002b:00007f6516f33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1003.249971][T19005] RAX: ffffffffffffffda RBX: 00007f65163d5fa0 RCX: 00007f651618eba9 [ 1003.249985][T19005] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1003.249997][T19005] RBP: 00007f6516f33090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.250009][T19005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.250021][T19005] R13: 00007f65163d6038 R14: 00007f65163d5fa0 R15: 00007ffdab93c628 [ 1003.250053][T19005] [ 1003.252872][T18990] done [ 1003.472262][T18990] bcachefs (loop9): Fixed errors, running fsck a second time to verify fs is clean [ 1003.481799][T18990] bcachefs (loop9): check_extents_to_backpointers... done [ 1003.498224][T18990] bcachefs (loop9): check_inodes... done [ 1003.505910][T18990] bcachefs (loop9): resume_logged_ops... done [ 1003.513156][T18990] bcachefs (loop9): delete_dead_inodes... done [ 1003.523522][T18990] bcachefs (loop9): done starting filesystem [ 1003.676622][T15173] bcachefs (loop9): shutting down [ 1003.715601][T15173] bcachefs (loop9): going read-only [ 1003.724220][T15173] bcachefs (loop9): finished waiting for writes to stop [ 1003.747942][T15173] bcachefs (loop9): flushing journal and stopping allocators, journal seq 24 [ 1003.800213][T15173] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 24 [ 1003.852558][T15173] bcachefs (loop9): clean shutdown complete, journal seq 25 [ 1003.901906][T15173] bcachefs (loop9): marking filesystem clean [ 1004.022080][T15173] bcachefs (loop9): shutdown complete [ 1004.297224][ T6011] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1004.685836][ T6011] usb 6-1: Using ep0 maxpacket: 32 [ 1004.850018][ T6011] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1004.883418][ T6011] usb 6-1: config 0 has no interface number 0 [ 1004.941976][ T6011] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1006.357297][T19033] loop6: detected capacity change from 0 to 32768 [ 1006.365097][ T6011] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1006.386028][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.394417][ T6011] usb 6-1: Product: syz [ 1006.406546][ T6011] usb 6-1: Manufacturer: syz [ 1006.411236][ T6011] usb 6-1: SerialNumber: syz [ 1006.426501][ T6011] usb 6-1: config 0 descriptor?? [ 1006.480601][T19033] JBD2: Ignoring recovery information on journal [ 1006.520368][ T6011] f81534 6-1:0.12: required endpoints missing [ 1006.575080][T19033] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1006.745821][T18846] ocfs2: Unmounting device (7,6) on (node local) [ 1007.819738][ T980] usb 6-1: USB disconnect, device number 18 [ 1007.917499][T11506] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1007.962737][T19061] debugfs: '!' already exists in 'ieee80211' [ 1008.238512][T11506] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1008.251106][T11506] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1008.258169][T19064] FAULT_INJECTION: forcing a failure. [ 1008.258169][T19064] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.275016][T19064] CPU: 1 UID: 0 PID: 19064 Comm: syz.2.3889 Not tainted syzkaller #0 PREEMPT(full) [ 1008.275050][T19064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1008.275061][T19064] Call Trace: [ 1008.275069][T19064] [ 1008.275079][T19064] dump_stack_lvl+0x189/0x250 [ 1008.275105][T19064] ? __pfx____ratelimit+0x10/0x10 [ 1008.275122][T19064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1008.275141][T19064] ? __pfx__printk+0x10/0x10 [ 1008.275164][T19064] ? __pfx___might_resched+0x10/0x10 [ 1008.275186][T19064] ? fs_reclaim_acquire+0x7d/0x100 [ 1008.275216][T19064] should_fail_ex+0x414/0x560 [ 1008.275239][T19064] should_failslab+0xa8/0x100 [ 1008.275258][T19064] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1008.275281][T19064] ? skb_clone+0x212/0x3a0 [ 1008.275309][T19064] skb_clone+0x212/0x3a0 [ 1008.275335][T19064] pfkey_sendmsg+0x44b/0x1090 [ 1008.275374][T19064] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1008.275421][T19064] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1008.275440][T19064] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1008.275458][T19064] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1008.275478][T19064] __sock_sendmsg+0x21c/0x270 [ 1008.275506][T19064] ____sys_sendmsg+0x505/0x830 [ 1008.275533][T19064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1008.275566][T19064] ? import_iovec+0x74/0xa0 [ 1008.275592][T19064] ___sys_sendmsg+0x21f/0x2a0 [ 1008.275615][T19064] ? __pfx____sys_sendmsg+0x10/0x10 [ 1008.275676][T19064] ? __fget_files+0x2a/0x420 [ 1008.275693][T19064] ? __fget_files+0x3a0/0x420 [ 1008.275721][T19064] __x64_sys_sendmsg+0x19b/0x260 [ 1008.275746][T19064] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1008.275778][T19064] ? __pfx_ksys_write+0x10/0x10 [ 1008.275806][T19064] ? do_syscall_64+0xbe/0xfa0 [ 1008.275831][T19064] do_syscall_64+0xfa/0xfa0 [ 1008.275848][T19064] ? lockdep_hardirqs_on+0x9c/0x150 [ 1008.275868][T19064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.275886][T19064] ? clear_bhb_loop+0x60/0xb0 [ 1008.275907][T19064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.275924][T19064] RIP: 0033:0x7f651618eba9 [ 1008.275946][T19064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.275962][T19064] RSP: 002b:00007f6516f33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1008.275982][T19064] RAX: ffffffffffffffda RBX: 00007f65163d5fa0 RCX: 00007f651618eba9 [ 1008.275996][T19064] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1008.276008][T19064] RBP: 00007f6516f33090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.276020][T19064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.276038][T19064] R13: 00007f65163d6038 R14: 00007f65163d5fa0 R15: 00007ffdab93c628 [ 1008.276072][T19064] [ 1008.567010][T11506] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1008.576859][T11506] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1008.615355][T11506] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1008.627517][T11506] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.638883][T11506] usb 10-1: config 0 descriptor?? [ 1008.994426][T19074] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095516 [ 1009.035209][T19074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3892'. [ 1009.083273][T11506] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1009.096996][T11506] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1009.104607][T11506] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1009.113583][T11506] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1009.121950][T11506] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1009.129842][T11506] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1009.138884][T11506] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1009.146434][T11506] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1009.154365][T11506] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1009.163120][T11506] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1009.183460][T11506] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1009.339612][T11479] usb 10-1: USB disconnect, device number 35 [ 1009.433212][T19069] loop6: detected capacity change from 0 to 32768 [ 1009.441156][T19069] btrfs: Bad value for 'max_inline' [ 1010.347721][T19098] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3899'. [ 1010.377840][T19098] netlink: 164 bytes leftover after parsing attributes in process `syz.9.3899'. [ 1010.382901][T19100] syzkaller1: entered promiscuous mode [ 1010.407505][T19100] syzkaller1: entered allmulticast mode [ 1012.101002][T19137] comedi comedi4: bad chanlist[0]=0xfffffffa chan=65530 range length=2 [ 1012.257104][ T93] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1012.410443][ T93] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1012.430472][ T93] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1012.454552][ T93] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1012.475900][ T93] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1012.512967][ T93] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1012.523525][ T93] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.541415][ T93] usb 7-1: config 0 descriptor?? [ 1013.060857][T11506] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1013.155126][T19152] loop9: detected capacity change from 0 to 128 [ 1013.227436][T11506] usb 5-1: Using ep0 maxpacket: 32 [ 1013.252472][T11506] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1013.296080][ T93] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1013.297394][T11506] usb 5-1: config 0 has no interface number 0 [ 1013.350786][T11506] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1013.392251][T11506] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1013.417064][T11506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.445723][T11506] usb 5-1: Product: syz [ 1013.456685][T19156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3920'. [ 1013.466438][T11506] usb 5-1: Manufacturer: syz [ 1013.485242][T11506] usb 5-1: SerialNumber: syz [ 1013.540986][T11506] usb 5-1: config 0 descriptor?? [ 1013.583146][ T980] usb 7-1: USB disconnect, device number 3 [ 1013.602522][T11506] f81534 5-1:0.12: required endpoints missing [ 1013.659299][T19156] geneve2: entered promiscuous mode [ 1013.753086][T19156] geneve2: entered allmulticast mode [ 1013.976864][T19160] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3921'. [ 1014.163555][T19160] geneve2: entered promiscuous mode [ 1014.207027][T19160] geneve2: entered allmulticast mode [ 1015.165739][T19172] loop9: detected capacity change from 0 to 2048 [ 1015.193338][T19172] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=18576, location=18576 [ 1015.241950][T19172] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1015.675440][T11479] usb 5-1: USB disconnect, device number 72 [ 1016.887922][T19198] loop9: detected capacity change from 0 to 2048 [ 1016.934787][T19201] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1017.060299][T19198] NILFS (loop9): failed to count free inodes: err=-34 [ 1017.068952][T19198] NILFS (loop9): failed to count free inodes: err=-34 [ 1017.113356][T19198] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=255 [ 1017.163849][T19206] netlink: 'syz.9.3934': attribute type 6 has an invalid length. [ 1017.274752][T19198] Remounting filesystem read-only [ 1017.280533][T19198] NILFS error (device loop9): nilfs_readdir: bad page in #2 [ 1017.392651][T19210] Malformed UNC in devname [ 1017.392651][T19210] [ 1017.400094][T19210] CIFS: VFS: Malformed UNC in devname [ 1019.178958][T19212] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3937'. [ 1019.741899][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3941'. [ 1019.832123][T19219] netlink: 660 bytes leftover after parsing attributes in process `syz.4.3941'. [ 1020.127205][ T5932] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1020.280501][ T5932] usb 10-1: Using ep0 maxpacket: 32 [ 1020.301396][ T5932] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1020.923271][ T5932] usb 10-1: config 0 has no interface number 0 [ 1020.948106][ T5932] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1020.980673][ T5932] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1021.017266][ T5932] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.045929][ T5932] usb 10-1: Product: syz [ 1021.081988][ T5932] usb 10-1: Manufacturer: syz [ 1021.105825][ T5932] usb 10-1: SerialNumber: syz [ 1021.142630][ T5932] usb 10-1: config 0 descriptor?? [ 1021.174047][ T5932] f81534 10-1:0.12: required endpoints missing [ 1022.195446][T19263] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3957'. [ 1022.210808][T19263] geneve2: entered promiscuous mode [ 1022.216075][T19263] geneve2: entered allmulticast mode [ 1022.834775][T19265] loop6: detected capacity change from 0 to 32768 [ 1022.855503][T19265] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1022.885189][T19265] XFS (loop6): Ending clean mount [ 1022.947806][ T980] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1023.016432][T18846] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1023.104149][ T5932] usb 10-1: USB disconnect, device number 36 [ 1023.118413][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 1023.128865][ T980] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1023.148950][ T980] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1023.160103][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.183315][ T980] usb 5-1: Product: syz [ 1023.188156][ T980] usb 5-1: Manufacturer: syz [ 1023.193005][ T980] usb 5-1: SerialNumber: syz [ 1023.201043][ T980] usb 5-1: config 0 descriptor?? [ 1023.615784][ T980] usb 5-1: USB disconnect, device number 73 [ 1025.262108][T19315] fuse: Unknown parameter 'fd0x0000000000000004' [ 1025.939415][T11479] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1026.439126][T11479] usb 7-1: Using ep0 maxpacket: 32 [ 1026.447574][T11479] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1026.455692][T11479] usb 7-1: config 0 has no interface number 0 [ 1026.487099][T11479] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1026.495996][T19313] loop9: detected capacity change from 0 to 32768 [ 1026.511862][T11479] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1026.533275][T11479] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.559431][T11479] usb 7-1: Product: syz [ 1026.578504][T11479] usb 7-1: Manufacturer: syz [ 1026.583179][T11479] usb 7-1: SerialNumber: syz [ 1026.597665][T11479] usb 7-1: config 0 descriptor?? [ 1026.602932][T19313] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1026.603087][T19330] FAULT_INJECTION: forcing a failure. [ 1026.603087][T19330] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.627416][T19330] CPU: 0 UID: 0 PID: 19330 Comm: syz.5.3975 Not tainted syzkaller #0 PREEMPT(full) [ 1026.627442][T19330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1026.627454][T19330] Call Trace: [ 1026.627462][T19330] [ 1026.627471][T19330] dump_stack_lvl+0x189/0x250 [ 1026.627497][T19330] ? __pfx____ratelimit+0x10/0x10 [ 1026.627518][T19330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1026.627539][T19330] ? __pfx__printk+0x10/0x10 [ 1026.627569][T19330] ? __pfx___might_resched+0x10/0x10 [ 1026.627593][T19330] ? fs_reclaim_acquire+0x7d/0x100 [ 1026.627624][T19330] should_fail_ex+0x414/0x560 [ 1026.627649][T19330] should_failslab+0xa8/0x100 [ 1026.627669][T19330] __kmalloc_noprof+0xcb/0x7f0 [ 1026.627692][T19330] ? tomoyo_encode+0x28b/0x550 [ 1026.627718][T19330] tomoyo_encode+0x28b/0x550 [ 1026.627744][T19330] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1026.627767][T19330] ? tomoyo_domain+0xd9/0x130 [ 1026.627793][T19330] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1026.627819][T19330] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1026.627847][T19330] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1026.627912][T19330] ? __fget_files+0x2a/0x420 [ 1026.627934][T19330] ? __fget_files+0x3a0/0x420 [ 1026.627950][T19330] ? __fget_files+0x2a/0x420 [ 1026.627971][T19330] security_file_ioctl+0xcb/0x2d0 [ 1026.627998][T19330] __se_sys_ioctl+0x47/0x170 [ 1026.628022][T19330] do_syscall_64+0xfa/0xfa0 [ 1026.628041][T19330] ? lockdep_hardirqs_on+0x9c/0x150 [ 1026.628060][T19330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.628078][T19330] ? clear_bhb_loop+0x60/0xb0 [ 1026.628100][T19330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.628118][T19330] RIP: 0033:0x7f3f2c98eba9 [ 1026.628135][T19330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.628150][T19330] RSP: 002b:00007f3f2d74a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1026.628176][T19330] RAX: ffffffffffffffda RBX: 00007f3f2cbd6090 RCX: 00007f3f2c98eba9 [ 1026.628190][T19330] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1026.628201][T19330] RBP: 00007f3f2d74a090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.628212][T19330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.628224][T19330] R13: 00007f3f2cbd6128 R14: 00007f3f2cbd6090 R15: 00007ffdcf3812d8 [ 1026.628256][T19330] [ 1026.628278][T19330] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1026.631863][T11479] f81534 7-1:0.12: required endpoints missing [ 1027.100459][ T980] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1027.267571][ T980] usb 10-1: Using ep0 maxpacket: 8 [ 1027.299348][ T980] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1027.350170][ T980] usb 10-1: config 0 has no interface number 0 [ 1027.366429][T19338] fuse: Unknown parameter 'fd0x0000000000000004' [ 1027.369748][ T980] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1027.425783][ T980] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1027.452682][ T980] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1027.497049][ T980] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1027.570886][ T980] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1027.601669][ T980] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.631748][ T980] usb 10-1: config 0 descriptor?? [ 1027.786858][ T980] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1027.899006][ T980] usb 10-1: USB disconnect, device number 37 [ 1027.915597][ T980] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1028.547305][T15173] ocfs2: Unmounting device (7,9) on (node local) [ 1028.887969][ T980] usb 7-1: USB disconnect, device number 4 [ 1029.643872][T19355] fuse: Unknown parameter 'fd0x0000000000000004' [ 1029.984172][T19363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3984'. [ 1030.667508][T19372] netlink: 'syz.6.3990': attribute type 1 has an invalid length. [ 1030.675664][T19372] netlink: 'syz.6.3990': attribute type 2 has an invalid length. [ 1030.954086][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3990'. [ 1030.963327][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3990'. [ 1030.972545][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3990'. [ 1031.386130][T19388] loop9: detected capacity change from 0 to 1024 [ 1031.605576][T19391] loop6: detected capacity change from 0 to 512 [ 1032.371108][T19391] EXT4-fs: Ignoring removed nobh option [ 1032.428587][T19391] EXT4-fs (loop6): unsupported inode size: 71 [ 1032.434718][T19391] EXT4-fs (loop6): blocksize: 1024 [ 1032.507315][T19395] fuse: Unknown parameter 'fd0x0000000000000004' [ 1032.917486][T11480] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1033.186990][T11480] usb 6-1: Using ep0 maxpacket: 16 [ 1033.246155][T11480] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1033.347043][ T980] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1033.403913][T11480] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1033.423448][T11480] usb 6-1: Product: syz [ 1033.447018][T11480] usb 6-1: Manufacturer: syz [ 1033.451664][T11480] usb 6-1: SerialNumber: syz [ 1033.472432][T11480] usb 6-1: config 0 descriptor?? [ 1033.497387][T19411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4002'. [ 1033.532322][ T980] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1033.557153][ T980] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1033.610479][ T980] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1033.643950][ T980] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1033.685012][ T980] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1033.727950][ T5932] usb 6-1: USB disconnect, device number 19 [ 1033.776754][ T980] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.816355][ T980] usb 10-1: config 0 descriptor?? [ 1034.058495][ T980] usbhid 10-1:0.0: can't add hid device: -71 [ 1034.067506][ T980] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1034.129847][ T980] usb 10-1: USB disconnect, device number 38 [ 1034.768065][T19439] FAULT_INJECTION: forcing a failure. [ 1034.768065][T19439] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.791679][T19439] CPU: 1 UID: 0 PID: 19439 Comm: syz.4.4013 Not tainted syzkaller #0 PREEMPT(full) [ 1034.791707][T19439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1034.791719][T19439] Call Trace: [ 1034.791728][T19439] [ 1034.791737][T19439] dump_stack_lvl+0x189/0x250 [ 1034.791766][T19439] ? __pfx____ratelimit+0x10/0x10 [ 1034.791786][T19439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1034.791807][T19439] ? __pfx__printk+0x10/0x10 [ 1034.791838][T19439] ? __pfx___might_resched+0x10/0x10 [ 1034.791862][T19439] ? fs_reclaim_acquire+0x7d/0x100 [ 1034.791893][T19439] should_fail_ex+0x414/0x560 [ 1034.791918][T19439] should_failslab+0xa8/0x100 [ 1034.791938][T19439] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1034.791963][T19439] ? __alloc_skb+0x112/0x2d0 [ 1034.791989][T19439] __alloc_skb+0x112/0x2d0 [ 1034.792014][T19439] pfkey_sendmsg+0xca5/0x1090 [ 1034.792052][T19439] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1034.792100][T19439] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1034.792122][T19439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1034.792142][T19439] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1034.792164][T19439] __sock_sendmsg+0x21c/0x270 [ 1034.792193][T19439] ____sys_sendmsg+0x505/0x830 [ 1034.792223][T19439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1034.792255][T19439] ? import_iovec+0x74/0xa0 [ 1034.792284][T19439] ___sys_sendmsg+0x21f/0x2a0 [ 1034.792310][T19439] ? __pfx____sys_sendmsg+0x10/0x10 [ 1034.792369][T19439] ? __fget_files+0x2a/0x420 [ 1034.792386][T19439] ? __fget_files+0x3a0/0x420 [ 1034.792414][T19439] __x64_sys_sendmsg+0x19b/0x260 [ 1034.792449][T19439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1034.792482][T19439] ? __pfx_ksys_write+0x10/0x10 [ 1034.792510][T19439] ? do_syscall_64+0xbe/0xfa0 [ 1034.792534][T19439] do_syscall_64+0xfa/0xfa0 [ 1034.792552][T19439] ? lockdep_hardirqs_on+0x9c/0x150 [ 1034.792572][T19439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.792591][T19439] ? clear_bhb_loop+0x60/0xb0 [ 1034.792613][T19439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.792631][T19439] RIP: 0033:0x7f327558eba9 [ 1034.792648][T19439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.792664][T19439] RSP: 002b:00007f32764a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1034.792684][T19439] RAX: ffffffffffffffda RBX: 00007f32757d5fa0 RCX: 00007f327558eba9 [ 1034.792697][T19439] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1034.792709][T19439] RBP: 00007f32764a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.792721][T19439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.792732][T19439] R13: 00007f32757d6038 R14: 00007f32757d5fa0 R15: 00007ffdba009d68 [ 1034.792764][T19439] [ 1035.061215][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.823666][T19452] loop6: detected capacity change from 0 to 4096 [ 1036.962076][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4018'. [ 1037.127123][ T30] audit: type=1804 audit(1757771203.585:1203): pid=19452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4019" name="/newroot/29/file0" dev="fuse" ino=1 res=1 errno=0 [ 1040.321790][T19492] loop9: detected capacity change from 0 to 32768 [ 1040.375698][T19492] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4029 (19492) [ 1040.400130][T19498] overlayfs: failed to resolve './file0': -2 [ 1040.423603][T19492] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1040.667385][T19492] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 1040.896171][T19492] BTRFS info (device loop9): enabling ssd optimizations [ 1040.909564][T19492] BTRFS info (device loop9): enabling free space tree [ 1040.925067][T19492] BTRFS info (device loop9): force zlib compression, level 3 [ 1041.053724][T19523] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4032'. [ 1041.065753][T19523] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4032'. [ 1041.075538][T19523] bridge0: port 3(macvlan1) entered blocking state [ 1041.082954][T19523] bridge0: port 3(macvlan1) entered disabled state [ 1041.244234][T19523] macvlan1: entered allmulticast mode [ 1041.288225][T19523] veth1_vlan: entered allmulticast mode [ 1041.312250][T19523] macvlan1: entered promiscuous mode [ 1041.325151][T19523] bridge0: port 3(macvlan1) entered blocking state [ 1041.331871][T19523] bridge0: port 3(macvlan1) entered forwarding state [ 1041.430402][T19523] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4032'. [ 1041.612499][T15173] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1042.209561][T19534] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4034'. [ 1042.274948][T19534] geneve2: entered promiscuous mode [ 1042.290992][T19534] geneve2: entered allmulticast mode [ 1043.973210][T19542] loop6: detected capacity change from 0 to 32768 [ 1043.985106][T19542] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section members_v2: section too small (1240 > 152) [ 1043.985106][T19542] members_v2 (size 152): [ 1043.985106][T19542] nr_devices mismatch: have 1 entries, should be 9Device:0 [ 1043.985106][T19542] Label: (none) [ 1043.985106][T19542] UUID: 7af6772b-00de-4159-84cd-1faead05aceb [ 1043.985106][T19542] Size: 16777216 [ 1043.985106][T19542] read errors: 0 [ 1043.985106][T19542] write errors: 0 [ 1043.985106][T19542] checksum errors: 0 [ 1043.985106][T19542] seqread iops: 0 [ 1043.985106][T19542] seqwrite iops: 0 [ 1043.985106][T19542] randread iops: 0 [ 1043.985106][T19542] randwrite iops: 0 [ 1043.985106][T19542] Bucket size: 131072 [ 1043.985106][T19542] First bucket: 0 [ 1043.985106][T19542] Buckets: 128 [ 1043.985106][T19542] Last mount: 1714681267 [ 1043.985106][T19542] Last superblock write: 42 [ 1043.985106][T19542] State: rw [ 1043.985106][T19542] Data allowed: journal,btree,user [ 1043.985106][T19542] Has data: (none) [ 1043.985106][T19542] Btree allocated bitmap blocksize:256 [ 1043.985106][T19542] Btree allocated bitmap: 0000000000000000000001000010000010011000000000000000000000000000 [ 1043.985106][T19542] D [ 1043.985220][T19542] bcachefs: bch2_fs_get_tree() error: invalid_sb_members [ 1044.496674][T19557] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4044'. [ 1045.216770][T19557] geneve2: entered promiscuous mode [ 1045.317111][T19557] geneve2: entered allmulticast mode [ 1045.775456][ T93] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1046.017271][ T93] usb 5-1: Using ep0 maxpacket: 16 [ 1046.029773][ T93] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.050666][ T93] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1046.525824][ T93] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1046.554481][ T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.593190][ T93] usb 5-1: Product: syz [ 1046.621563][ T93] usb 5-1: Manufacturer: syz [ 1046.637122][ T93] usb 5-1: SerialNumber: syz [ 1046.666645][T19566] loop6: detected capacity change from 0 to 32768 [ 1046.694641][T19566] ocfs2: Unknown parameter 'heartota' [ 1046.897441][ T93] usb 5-1: 0:2 : does not exist [ 1047.633874][T19566] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 1047.681611][T19566] loop6: detected capacity change from 0 to 4096 [ 1047.688677][T19566] ntfs3: Unknown parameter '.' [ 1047.714508][ T93] usb 5-1: USB disconnect, device number 74 [ 1048.642444][T19597] netlink: 'syz.9.4058': attribute type 1 has an invalid length. [ 1048.688620][T19597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1048.719369][T19597] bond1: (slave geneve2): making interface the new active one [ 1048.728732][T19597] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1049.172634][T19617] netlink: 'syz.4.4065': attribute type 23 has an invalid length. [ 1049.280087][T19600] syzkaller1: entered promiscuous mode [ 1049.285605][T19600] syzkaller1: entered allmulticast mode [ 1049.308488][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4060'. [ 1049.332796][T19622] bridge0: entered promiscuous mode [ 1049.340706][T19622] bridge0: port 3(macsec1) entered blocking state [ 1049.348252][T19622] bridge0: port 3(macsec1) entered disabled state [ 1049.355028][T19622] macsec1: entered allmulticast mode [ 1049.360494][T19622] bridge0: entered allmulticast mode [ 1049.368048][T19622] macsec1: left allmulticast mode [ 1049.373184][T19622] bridge0: left allmulticast mode [ 1049.382793][T19624] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4066'. [ 1049.397841][T19622] bridge0: left promiscuous mode [ 1051.555212][T19638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.644163][T19637] loop9: detected capacity change from 0 to 256 [ 1051.798418][T19637] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d) [ 1051.928862][ T30] audit: type=1800 audit(1757771218.415:1204): pid=19637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4071" name="file1" dev="loop9" ino=1048692 res=0 errno=0 [ 1051.954214][T19642] loop6: detected capacity change from 0 to 4096 [ 1052.064866][T19642] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1052.943019][T19656] tmpfs: Bad value for 'huge' [ 1052.966652][T19656] loop6: detected capacity change from 0 to 16 [ 1052.977843][T19656] erofs: Unknown parameter '.' [ 1054.477062][T11479] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1054.503771][T19662] loop6: detected capacity change from 0 to 8192 [ 1054.521340][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.527965][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.620470][T19662] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1054.659010][T11479] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1054.701339][T11479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1054.747275][T11479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1054.787219][T11479] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1054.813220][T11479] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1054.838100][T11479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.876259][T11479] usb 5-1: config 0 descriptor?? [ 1054.974314][ T30] audit: type=1804 audit(1757771221.445:1205): pid=19667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4081" name="/newroot/195/file0" dev="fuse" ino=1 res=1 errno=0 [ 1055.054445][T19653] loop9: detected capacity change from 0 to 32768 [ 1055.118474][T19653] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1055.256593][T19653] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop9": -EINTR [ 1055.259272][T19653] XFS (loop9): log mount failed [ 1055.502292][T11479] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 1055.627826][T11479] hid_parser_main: 5 callbacks suppressed [ 1055.627927][T11479] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1055.689387][T11479] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1055.731311][T11479] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1055.786260][T11479] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1055.808282][T11479] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1055.872761][T11479] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1055.917977][T11479] usb 5-1: USB disconnect, device number 75 [ 1056.130622][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4087'. [ 1056.170873][T19688] vlan2: entered promiscuous mode [ 1056.186270][T19688] bond0: entered promiscuous mode [ 1056.196408][T19688] bond_slave_0: entered promiscuous mode [ 1056.206758][T19688] bond_slave_1: entered promiscuous mode [ 1056.433595][T19692] FAULT_INJECTION: forcing a failure. [ 1056.433595][T19692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.494561][T19692] CPU: 0 UID: 0 PID: 19692 Comm: syz.4.4089 Not tainted syzkaller #0 PREEMPT(full) [ 1056.494589][T19692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1056.494601][T19692] Call Trace: [ 1056.494609][T19692] [ 1056.494618][T19692] dump_stack_lvl+0x189/0x250 [ 1056.494645][T19692] ? __pfx____ratelimit+0x10/0x10 [ 1056.494665][T19692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1056.494687][T19692] ? __pfx__printk+0x10/0x10 [ 1056.494711][T19692] ? __might_fault+0xb0/0x130 [ 1056.494748][T19692] should_fail_ex+0x414/0x560 [ 1056.494772][T19692] _copy_from_user+0x2d/0xb0 [ 1056.494797][T19692] iommufd_fops_ioctl+0x411/0x580 [ 1056.494827][T19692] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1056.494863][T19692] ? __fget_files+0x3a0/0x420 [ 1056.494880][T19692] ? __fget_files+0x2a/0x420 [ 1056.494900][T19692] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1056.494922][T19692] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1056.494944][T19692] __se_sys_ioctl+0xfc/0x170 [ 1056.494970][T19692] do_syscall_64+0xfa/0xfa0 [ 1056.494989][T19692] ? lockdep_hardirqs_on+0x9c/0x150 [ 1056.495009][T19692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.495027][T19692] ? clear_bhb_loop+0x60/0xb0 [ 1056.495050][T19692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.495067][T19692] RIP: 0033:0x7f327558eba9 [ 1056.495085][T19692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.495101][T19692] RSP: 002b:00007f32764a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1056.495122][T19692] RAX: ffffffffffffffda RBX: 00007f32757d5fa0 RCX: 00007f327558eba9 [ 1056.495136][T19692] RDX: 0000200000000280 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 1056.495148][T19692] RBP: 00007f32764a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.495160][T19692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.495172][T19692] R13: 00007f32757d6038 R14: 00007f32757d5fa0 R15: 00007ffdba009d68 [ 1056.495204][T19692] [ 1056.498231][T19690] loop9: detected capacity change from 0 to 32768 [ 1056.601180][T19682] loop6: detected capacity change from 0 to 32768 [ 1056.626848][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4091'. [ 1056.708881][T19682] btrfs: Bad value for 'max_inline' [ 1056.822048][T19690] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=compression=zstd,erasure_code,wide_macs,nojournal_transaction_names [ 1056.822070][T19690] allowing incompatible features above 0.0: (unknown version) [ 1056.822081][T19690] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1056.858198][T19690] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0 [ 1056.866474][T19690] bcachefs (loop9): recovering from clean shutdown, journal seq 14 [ 1056.874634][T19690] bcachefs (loop9): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 1056.874634][T19690] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 1056.919618][T19707] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4093'. [ 1056.965793][T19690] bcachefs (loop9): accounting_read... done [ 1056.984241][T19690] bcachefs (loop9): alloc_read... done [ 1056.995572][T19690] bcachefs (loop9): snapshots_read... done [ 1057.002999][T19690] bcachefs (loop9): check_allocations... [ 1057.005870][T19690] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 1057.005891][T19690] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 18efb381d2ec84b2 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 1057.037454][T19690] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 1057.037474][T19690] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq eb946090a3e301b5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 1057.062930][T19690] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 1057.062951][T19690] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1b163e2cac54a139 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 1057.089136][T19690] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 1057.089155][T19690] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c59150a5cc8748d6 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 1057.113951][T19690] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 1057.113970][T19690] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2e86b5535b69cce2 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 1057.139176][T19690] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 1057.139195][T19690] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq af1b2a109e85bae1 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 1057.169419][T19690] done [ 1057.176092][T19690] bcachefs (loop9): going read-write [ 1057.196656][T19690] bcachefs (loop9): journal_replay... done [ 1057.604624][T19690] bcachefs (loop9): check_extents_to_backpointers... [ 1057.605455][T19690] bcachefs (loop9): scanning for missing backpointers in 6/128 buckets [ 1057.631234][T19690] done [ 1057.649222][T19690] bcachefs (loop9): check_inodes... done [ 1057.656672][T19690] bcachefs (loop9): resume_logged_ops... done [ 1057.668815][T19690] bcachefs (loop9): delete_dead_inodes... done [ 1057.726428][T19690] bcachefs (loop9): Fixed errors, running fsck a second time to verify fs is clean [ 1057.735857][T19690] bcachefs (loop9): check_extents_to_backpointers... done [ 1057.752566][T19690] bcachefs (loop9): check_inodes... done [ 1057.760555][T19690] bcachefs (loop9): resume_logged_ops... done [ 1057.769112][T19690] bcachefs (loop9): delete_dead_inodes... done [ 1057.825282][T19690] bcachefs (loop9): done starting filesystem [ 1058.932520][T15173] bcachefs (loop9): shutting down [ 1058.954263][T15173] bcachefs (loop9): going read-only [ 1059.041958][T15173] bcachefs (loop9): finished waiting for writes to stop [ 1059.077528][T15173] bcachefs (loop9): flushing journal and stopping allocators, journal seq 24 [ 1059.096528][T19722] loop6: detected capacity change from 0 to 512 [ 1059.159640][T15173] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 25 [ 1059.167715][T19722] EXT4-fs: Ignoring removed i_version option [ 1059.175943][T19722] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1059.199331][T19722] EXT4-fs (loop6): 1 truncate cleaned up [ 1059.269719][T15173] bcachefs (loop9): clean shutdown complete, journal seq 26 [ 1059.299809][T15173] bcachefs (loop9): marking filesystem clean [ 1059.667854][T19722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1059.737437][T15173] bcachefs (loop9): shutdown complete [ 1059.885031][T18846] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.142158][T19733] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4099'. [ 1061.025109][T19733] geneve2: entered promiscuous mode [ 1061.033452][T19733] geneve2: entered allmulticast mode [ 1062.797188][ T980] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1062.955765][T19753] loop9: detected capacity change from 0 to 32768 [ 1063.045669][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 1063.444783][ T980] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.492906][ T980] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1063.502895][ T980] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1063.514124][ T980] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1063.528858][ T980] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1063.550188][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1063.577548][ T980] usb 5-1: SerialNumber: syz [ 1063.591156][T19756] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1063.607222][T19756] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1063.629007][ T980] hub 5-1:1.0: bad descriptor, ignoring hub [ 1063.634961][ T980] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1063.680965][T19768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4112'. [ 1063.850286][T19756] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1065.625752][T19756] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1066.075917][T19771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.137442][T19771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.039140][T19771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.115816][T19771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.264891][ T980] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1067.571008][T19794] FAULT_INJECTION: forcing a failure. [ 1067.571008][T19794] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.624791][T19794] CPU: 1 UID: 0 PID: 19794 Comm: syz.4.4118 Not tainted syzkaller #0 PREEMPT(full) [ 1067.624820][T19794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1067.624832][T19794] Call Trace: [ 1067.624840][T19794] [ 1067.624849][T19794] dump_stack_lvl+0x189/0x250 [ 1067.624881][T19794] ? __pfx____ratelimit+0x10/0x10 [ 1067.624902][T19794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1067.624924][T19794] ? __pfx__printk+0x10/0x10 [ 1067.624955][T19794] ? __pfx___might_resched+0x10/0x10 [ 1067.624977][T19794] ? fs_reclaim_acquire+0x7d/0x100 [ 1067.625008][T19794] should_fail_ex+0x414/0x560 [ 1067.625035][T19794] should_failslab+0xa8/0x100 [ 1067.625055][T19794] __kmalloc_noprof+0xcb/0x7f0 [ 1067.625079][T19794] ? tomoyo_encode+0x28b/0x550 [ 1067.625104][T19794] tomoyo_encode+0x28b/0x550 [ 1067.625131][T19794] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1067.625154][T19794] ? tomoyo_domain+0xd9/0x130 [ 1067.625184][T19794] tomoyo_path_perm+0x213/0x4b0 [ 1067.625210][T19794] ? tomoyo_path_perm+0x1e3/0x4b0 [ 1067.625234][T19794] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1067.625295][T19794] ? mnt_get_write_access+0x66/0x280 [ 1067.625330][T19794] security_path_truncate+0x15a/0x330 [ 1067.625353][T19794] vfs_truncate+0x44a/0x520 [ 1067.625384][T19794] ? __pfx_vfs_truncate+0x10/0x10 [ 1067.625418][T19794] do_sys_truncate+0xdb/0x190 [ 1067.625441][T19794] ? __pfx_do_sys_truncate+0x10/0x10 [ 1067.625465][T19794] ? __pfx_ksys_write+0x10/0x10 [ 1067.625504][T19794] __x64_sys_truncate+0x5b/0x70 [ 1067.625530][T19794] do_syscall_64+0xfa/0xfa0 [ 1067.625549][T19794] ? lockdep_hardirqs_on+0x9c/0x150 [ 1067.625570][T19794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.625588][T19794] ? clear_bhb_loop+0x60/0xb0 [ 1067.625610][T19794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.625628][T19794] RIP: 0033:0x7f327558eba9 [ 1067.625644][T19794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.625659][T19794] RSP: 002b:00007f32764a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1067.625679][T19794] RAX: ffffffffffffffda RBX: 00007f32757d5fa0 RCX: 00007f327558eba9 [ 1067.625693][T19794] RDX: 0000000000000000 RSI: 0000000000206b12 RDI: 0000200000000240 [ 1067.625704][T19794] RBP: 00007f32764a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.625715][T19794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.625726][T19794] R13: 00007f32757d6038 R14: 00007f32757d5fa0 R15: 00007ffdba009d68 [ 1067.625755][T19794] [ 1067.625804][T19794] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1067.631137][ T980] usb 5-1: USB disconnect, device number 76 [ 1067.902102][ T980] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 1068.006179][T19803] FAULT_INJECTION: forcing a failure. [ 1068.006179][T19803] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.021519][T19803] CPU: 0 UID: 0 PID: 19803 Comm: syz.5.4122 Not tainted syzkaller #0 PREEMPT(full) [ 1068.021546][T19803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1068.021558][T19803] Call Trace: [ 1068.021566][T19803] [ 1068.021576][T19803] dump_stack_lvl+0x189/0x250 [ 1068.021603][T19803] ? __pfx____ratelimit+0x10/0x10 [ 1068.021624][T19803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1068.021645][T19803] ? __pfx__printk+0x10/0x10 [ 1068.021675][T19803] ? __pfx___might_resched+0x10/0x10 [ 1068.021698][T19803] ? fs_reclaim_acquire+0x7d/0x100 [ 1068.021739][T19803] should_fail_ex+0x414/0x560 [ 1068.021764][T19803] should_failslab+0xa8/0x100 [ 1068.021783][T19803] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1068.021808][T19803] ? dup_task_struct+0x52/0x830 [ 1068.021842][T19803] dup_task_struct+0x52/0x830 [ 1068.021867][T19803] ? lockdep_hardirqs_on+0x9c/0x150 [ 1068.021891][T19803] copy_process+0x54b/0x3c00 [ 1068.021946][T19803] ? __pfx_copy_process+0x10/0x10 [ 1068.021981][T19803] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1068.022000][T19803] vhost_task_create+0x1c4/0x290 [ 1068.022018][T19803] ? arch_stack_walk+0xfc/0x150 [ 1068.022037][T19803] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1068.022060][T19803] ? __pfx_vhost_task_create+0x10/0x10 [ 1068.022087][T19803] ? __pfx_vhost_task_fn+0x10/0x10 [ 1068.022128][T19803] kvm_mmu_post_init_vm+0x14c/0x300 [ 1068.022155][T19803] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1068.022185][T19803] ? __mutex_trylock_common+0x153/0x260 [ 1068.022207][T19803] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1068.022226][T19803] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1068.022253][T19803] ? rcu_is_watching+0x15/0xb0 [ 1068.022279][T19803] ? trace_contention_end+0x39/0x120 [ 1068.022297][T19803] ? look_up_lock_class+0x74/0x170 [ 1068.022320][T19803] ? register_lock_class+0x51/0x320 [ 1068.022350][T19803] ? __lock_acquire+0xab9/0xd20 [ 1068.022405][T19803] kvm_vcpu_ioctl+0x95c/0xe90 [ 1068.022435][T19803] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1068.022483][T19803] ? __fget_files+0x2a/0x420 [ 1068.022507][T19803] ? __fget_files+0x3a0/0x420 [ 1068.022523][T19803] ? __fget_files+0x2a/0x420 [ 1068.022544][T19803] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1068.022566][T19803] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1068.022589][T19803] __se_sys_ioctl+0xfc/0x170 [ 1068.022614][T19803] do_syscall_64+0xfa/0xfa0 [ 1068.022632][T19803] ? lockdep_hardirqs_on+0x9c/0x150 [ 1068.022649][T19803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.022666][T19803] ? clear_bhb_loop+0x60/0xb0 [ 1068.022687][T19803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.022703][T19803] RIP: 0033:0x7f3f2c98eba9 [ 1068.022728][T19803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1068.022742][T19803] RSP: 002b:00007f3f2d76b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1068.022762][T19803] RAX: ffffffffffffffda RBX: 00007f3f2cbd5fa0 RCX: 00007f3f2c98eba9 [ 1068.022775][T19803] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1068.022786][T19803] RBP: 00007f3f2d76b090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.022797][T19803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.022808][T19803] R13: 00007f3f2cbd6038 R14: 00007f3f2cbd5fa0 R15: 00007ffdcf3812d8 [ 1068.022838][T19803] [ 1068.730433][T19815] fuse: Invalid rootmode [ 1069.544136][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4126'. [ 1072.274167][T19856] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4136'. [ 1074.470916][ T5871] kernel write not supported for file bpf-prog (pid: 5871 comm: kworker/1:3) [ 1074.488517][T19869] comedi comedi4: bad chanlist[0]=0xfffffffa chan=65530 range length=2 [ 1074.573645][T19856] geneve2: entered promiscuous mode [ 1074.583380][T19856] geneve2: entered allmulticast mode [ 1074.803514][T19888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4147'. [ 1074.857465][ T5946] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 1075.050471][ T5946] usb 7-1: config 2 has an invalid interface number: 35 but max is 0 [ 1075.061996][ T5946] usb 7-1: config 2 has no interface number 0 [ 1075.100838][ T5946] usb 7-1: config 2 interface 35 has no altsetting 0 [ 1075.122186][ T980] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1075.199215][ T5946] usb 7-1: string descriptor 0 read error: -22 [ 1075.205994][ T5946] usb 7-1: New USB device found, idVendor=1d19, idProduct=0100, bcdDevice=7a.e9 [ 1075.221546][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.372467][ T980] usb 10-1: Using ep0 maxpacket: 16 [ 1075.421838][ T980] usb 10-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.474909][ T980] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1075.575099][T19900] netlink: 'syz.4.4150': attribute type 10 has an invalid length. [ 1075.626776][ T980] usb 10-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.40 [ 1075.688460][ T980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.285214][ T31] INFO: task bch-reclaim/loo:17716 blocked for more than 143 seconds. [ 1076.294275][ T31] Not tainted syzkaller #0 [ 1076.299333][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1076.308573][ T980] usb 10-1: Product: ⠯ [ 1076.313498][ T980] usb 10-1: Manufacturer: 쯴쿘ﲞ煛ꔀᐁ䗬ꌑ橸敕鲈훀ብ䖬풍춐졙ꀃ窚ﺫ嶋㮑뢑鎪䊬씳裌ᬜ䓌窞錇紿嫭䄝ᷝ쑊哐ᢝ칌픩桪ꞓ粄喘㪷鿬녹㧁㻼㿎꓂뤨祿뒰⡗㸅묀ꫀࠩ徭驕兑㨽衛議̞ﴡ簄䰴㨠Ᏺɛ쿙ᆾ柀薐⥱⿒홾ᖷ풶༶獗৘峯⁈綧밧横꿔替৚⡛ [ 1076.345328][ T31] task:bch-reclaim/loo state:D stack:26280 pid:17716 tgid:17716 ppid:2 task_flags:0x200840 flags:0x00004000 [ 1076.357920][ T31] Call Trace: [ 1076.361417][ T31] [ 1076.364562][ T31] __schedule+0x1798/0x4cc0 [ 1076.369514][ T31] ? __lock_acquire+0xab9/0xd20 [ 1076.374515][ T31] ? __lock_acquire+0xab9/0xd20 [ 1076.379852][ T980] usb 10-1: SerialNumber: ఄ [ 1076.385033][ T31] ? __pfx___schedule+0x10/0x10 [ 1076.394502][ T31] ? schedule+0x91/0x360 [ 1076.404626][ T31] schedule+0x165/0x360 [ 1076.409531][ T31] schedule_preempt_disabled+0x13/0x30 [ 1076.415755][ T31] __mutex_lock+0x7e6/0x1350 [ 1076.438056][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1076.451427][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1076.465353][ T31] ? btree_write_buffer_flush_seq+0x18bd/0x1a40 [ 1076.482590][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1076.499681][ T31] ? __pfx_bch2_next_write_buffer_flush_journal_buf+0x10/0x10 [ 1076.507670][ T31] ? bch2_trans_unlock+0x491/0x580 [ 1076.514386][ T31] btree_write_buffer_flush_seq+0x18bd/0x1a40 [ 1076.521779][ T31] ? look_up_lock_class+0x74/0x170 [ 1076.527596][ T31] ? register_lock_class+0x51/0x320 [ 1076.533136][ T31] ? __mutex_trylock_common+0x153/0x260 [ 1076.540748][ T31] ? __lock_acquire+0xab9/0xd20 [ 1076.547436][ T31] ? __bch2_trans_get+0x7f4/0xd80 [ 1076.553418][ T31] ? __pfx_btree_write_buffer_flush_seq+0x10/0x10 [ 1076.560624][ T31] ? __bch2_trans_get+0x9c2/0xd80 [ 1076.566135][ T31] bch2_btree_write_buffer_journal_flush+0x69/0xb0 [ 1076.574298][ T31] ? __pfx_bch2_btree_write_buffer_journal_flush+0x10/0x10 [ 1076.581859][ T31] journal_flush_pins+0x8e3/0xe90 [ 1076.588312][ T31] __bch2_journal_reclaim+0x910/0xed0 [ 1076.594495][ T31] bch2_journal_reclaim_thread+0x177/0x4f0 [ 1076.624501][ T31] ? bch2_journal_reclaim_thread+0x223/0x4f0 [ 1076.648907][ T31] kthread+0x711/0x8a0 [ 1076.653785][ T31] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 1076.660908][ T31] ? __pfx_kthread+0x10/0x10 [ 1076.665975][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1076.672229][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1076.678454][ T31] ? __pfx_kthread+0x10/0x10 [ 1076.683740][ T31] ret_from_fork+0x4bc/0x870 [ 1076.689005][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1076.695292][ T31] ? __switch_to_asm+0x39/0x70 [ 1076.700513][ T31] ? __switch_to_asm+0x33/0x70 [ 1076.705746][ T31] ? __pfx_kthread+0x10/0x10 [ 1076.710581][ T31] ret_from_fork_asm+0x1a/0x30 [ 1076.716233][ T31] [ 1076.722645][ T31] [ 1076.722645][ T31] Showing all locks held in the system: [ 1076.730760][ T31] 2 locks held by kworker/u8:1/13: [ 1076.736862][ T31] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1076.753533][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1076.763662][ T31] 1 lock held by khungtaskd/31: [ 1076.768978][ T31] #0: ffffffff8e33c820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1076.779468][ T31] 5 locks held by kworker/0:2/980: [ 1076.785232][ T31] #0: ffff888143eb6148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1076.798150][ T31] #1: ffffc90003e67ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1076.811868][ T31] #2: ffff8880285df198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1076.825231][ T31] #3: ffff8880587b9198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1076.837748][ T31] #4: ffff8880212c4a78 (&(&priv->bus_notifier)->rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1076.855927][ T31] 2 locks held by getty/5622: [ 1076.864331][ T31] #0: ffff888033e880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1076.878105][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1076.892653][ T31] 5 locks held by syz-executor/13514: [ 1076.899515][ T31] #0: ffff88806a74c0e0 (&type->s_umount_key#95){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1076.913538][ T31] #1: ffff888041800278 (&c->state_lock){++++}-{4:4}, at: __bch2_fs_stop+0xf8/0x900 [ 1076.926659][ T31] #2: ffff888041804740 (&wb->flushing.lock){+.+.}-{4:4}, at: btree_write_buffer_flush_seq+0x18bd/0x1a40 [ 1076.943360][ T31] #3: ffff888041804398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0xaf/0x220 [ 1076.958133][ T31] #4: ffff888041826710 (&c->gc_lock){++++}-{4:4}, at: bch2_btree_update_start+0x542/0x1de0 [ 1076.975789][ T31] 3 locks held by bch-reclaim/loo/17716: [ 1076.984316][ T31] #0: ffff88804184af68 (&j->reclaim_lock){+.+.}-{4:4}, at: bch2_journal_reclaim_thread+0x16b/0x4f0 [ 1076.999056][ T31] #1: ffff888041804398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7f4/0xd80 [ 1077.012857][ T31] #2: ffff888041804740 (&wb->flushing.lock){+.+.}-{4:4}, at: btree_write_buffer_flush_seq+0x18bd/0x1a40 [ 1077.029758][ T31] 1 lock held by syz.6.4143/19873: [ 1077.035085][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1077.047478][ T31] 1 lock held by syz.9.4142/19876: [ 1077.053091][ T31] #0: ffff8880657400b0 (&vcpu->mutex){+.+.}-{4:4}, at: kvm_vcpu_ioctl+0x22e/0xe90 [ 1077.065958][ T31] 1 lock held by syz.9.4142/19880: [ 1077.072710][ T31] 1 lock held by syz.9.4142/19884: [ 1077.086107][ T31] #0: ffff8880657400b0 (&vcpu->mutex){+.+.}-{4:4}, at: kvm_vcpu_ioctl+0x22e/0xe90 [ 1077.098511][ T31] [ 1077.100959][ T31] ============================================= [ 1077.100959][ T31] [ 1077.115546][ T31] NMI backtrace for cpu 0 [ 1077.115569][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1077.115589][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1077.115598][ T31] Call Trace: [ 1077.115605][ T31] [ 1077.115617][ T31] dump_stack_lvl+0x189/0x250 [ 1077.115650][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1077.115673][ T31] ? __pfx__printk+0x10/0x10 [ 1077.115709][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1077.115738][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1077.115764][ T31] ? __pfx__printk+0x10/0x10 [ 1077.115793][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1077.115822][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1077.115851][ T31] watchdog+0xf60/0xfa0 [ 1077.115881][ T31] ? watchdog+0x1e2/0xfa0 [ 1077.115911][ T31] kthread+0x711/0x8a0 [ 1077.115945][ T31] ? __pfx_watchdog+0x10/0x10 [ 1077.115966][ T31] ? __pfx_kthread+0x10/0x10 [ 1077.115988][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1077.116006][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1077.116024][ T31] ? __pfx_kthread+0x10/0x10 [ 1077.116046][ T31] ret_from_fork+0x4bc/0x870 [ 1077.116077][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1077.116111][ T31] ? __switch_to_asm+0x39/0x70 [ 1077.116134][ T31] ? __switch_to_asm+0x33/0x70 [ 1077.116156][ T31] ? __pfx_kthread+0x10/0x10 [ 1077.116178][ T31] ret_from_fork_asm+0x1a/0x30 [ 1077.116219][ T31] [ 1077.116268][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1077.264373][ C1] NMI backtrace for cpu 1 [ 1077.264392][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1077.264410][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1077.264420][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1077.264444][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 2b 25 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1077.264458][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 1077.264473][ C1] RAX: 22b1ab88afb72900 RBX: ffffffff81968208 RCX: 22b1ab88afb72900 [ 1077.264486][ C1] RDX: 0000000000000001 RSI: ffffffff8dbbd648 RDI: ffffffff8c036f00 [ 1077.264498][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 1077.264511][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fc3f330 [ 1077.264522][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a55b58 [ 1077.264533][ C1] FS: 0000000000000000(0000) GS:ffff888125ae8000(0000) knlGS:0000000000000000 [ 1077.264547][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1077.264558][ C1] CR2: 000000000000000b CR3: 000000002f4e6000 CR4: 00000000003526f0 [ 1077.264572][ C1] Call Trace: [ 1077.264581][ C1] [ 1077.264588][ C1] default_idle+0x13/0x20 [ 1077.264607][ C1] default_idle_call+0x74/0xb0 [ 1077.264630][ C1] do_idle+0x1e8/0x510 [ 1077.264654][ C1] ? __pfx_do_idle+0x10/0x10 [ 1077.264683][ C1] cpu_startup_entry+0x44/0x60 [ 1077.264703][ C1] start_secondary+0x101/0x110 [ 1077.264723][ C1] common_startup_64+0x13e/0x147 [ 1077.264749][ C1] [ 1077.451743][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1077.458629][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1077.467731][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1077.477782][ T31] Call Trace: [ 1077.481054][ T31] [ 1077.483972][ T31] dump_stack_lvl+0x99/0x250 [ 1077.488557][ T31] ? __asan_memcpy+0x40/0x70 [ 1077.493147][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1077.498333][ T31] ? __pfx__printk+0x10/0x10 [ 1077.502923][ T31] vpanic+0x237/0x6d0 [ 1077.506894][ T31] ? __pfx_vpanic+0x10/0x10 [ 1077.511391][ T31] ? kasan_check_range+0x1d4/0x2c0 [ 1077.516493][ T31] panic+0xb9/0xc0 [ 1077.520201][ T31] ? __pfx_panic+0x10/0x10 [ 1077.524613][ T31] ? __pfx_panic+0x10/0x10 [ 1077.529017][ T31] watchdog+0xf9f/0xfa0 [ 1077.533175][ T31] ? watchdog+0x1e2/0xfa0 [ 1077.537511][ T31] kthread+0x711/0x8a0 [ 1077.541575][ T31] ? __pfx_watchdog+0x10/0x10 [ 1077.546242][ T31] ? __pfx_kthread+0x10/0x10 [ 1077.550821][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1077.556008][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1077.561193][ T31] ? __pfx_kthread+0x10/0x10 [ 1077.565794][ T31] ret_from_fork+0x4bc/0x870 [ 1077.570387][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1077.575493][ T31] ? __switch_to_asm+0x39/0x70 [ 1077.580243][ T31] ? __switch_to_asm+0x33/0x70 [ 1077.585085][ T31] ? __pfx_kthread+0x10/0x10 [ 1077.589671][ T31] ret_from_fork_asm+0x1a/0x30 [ 1077.594440][ T31] [ 1077.597724][ T31] Kernel Offset: disabled [ 1077.602040][ T31] Rebooting in 86400 seconds..