last executing test programs: 4m6.02531815s ago: executing program 3 (id=4): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140)="8469b66f", 0x20, 0x0, 0x0, 0x0) 4m5.275253794s ago: executing program 3 (id=6): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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") syz_clone(0x4000080, &(0x7f0000000040)="f65b006813f47c79ede9b08d6061467d6f9f132ead14b7655d6607ba9d2c93a992ec000476d48e276ac1a71fd351e0b17c", 0x31, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000400)="f56a30920f68df4b351f66c1bdf274b9ba0545d95d7238e6f788ce149e21d89a59d833a9c7ab148792728b7d5c9d44669a295fb51770721f1259c57326efc200c4276bb39dbe2fecf7cc88e07a738934213ecf5a6b4eeb2eaf8b26b4a01c04b807fcf60ccfce5b20bb38722db790c6685c60a5992ee6352ba8f65f3f561b87cfdededb6534a1d08e36465f9e0858db89b08d7a2c") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='freezer.self_freezing\x00', 0x275a, 0x0) r1 = fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$phonet(0x23, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001880)=ANY=[@ANYBLOB="140000001000010000890000000000000000000a50000000060a010400000000000000000200000024000480200001800b00010064796e7365740000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a17db14602a4dfceac490e6cc9699a7cc738f552b411482371efe97c108ca334930e91f395307bc3e1d12706c2ef241063df0b1d3001aa4ab530bd59fc738647c6352eb13ff16bd131f51c22f40654167f5d53087c09dbb4e0825390dcbd69c5a2791131edb0f3160e8c34fd513d43e5964819d64ad95f1626fb8c03209caa631486a9bfbe45f5cdf0e25f406e969307a65adbd971d113cdbb66cb97324bb4a464f75ba6a5e2746a8547f2cbbaacb825e7e8522f8264d294d4b2289b65d38268e11a5f05208444f747454e19d7e385f9f935b1efac123faddd9b41e8f955e9bdfc64789bc6b572eafa46c45b1c6c3751320b0ab4077df4786fe11ca7941fee8675122f36138e6b81cb3772d17a3756e223f0e80854c405ab69c878e25726d57302854c1faa145c17ac293c8cf18756d10b861502674fe33fb4e8385"], 0x78}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000300)='./bus\x00', 0x2000002, &(0x7f0000000100)=ANY=[], 0xfe, 0x60a1, &(0x7f00000076c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001780)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000017c0), 0x109482, 0x0) write$tun(r4, &(0x7f00000004c0)={@void, @val={0x1, 0x0, 0x9, 0x3ff, 0x6, 0x5}, @mpls={[{0x8e19, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x1}, {0x8f9}, {0xfff80}, {0x7, 0x0, 0x1}, {0x20, 0x0, 0x1}], @generic="3d07c693dae2c624aa749db9fa109cba194b36765e6aaf68a2fc2e9a5abd18ca751df72319127b6ca4bae5ce45742bc6479eb8be350b9a56a60787a25cc9f266863698a1ca6cbad6e64657fe49205f9adbbfb45c6ff64ccd42bd9116a04bf6d98da6cffed07b6b0e6bf3c2fdffcb0f5bce559be93756a1c7c57221ac4f86d693cd2cd4f26f0a254c2431e67e4f630b65cea4"}}, 0xb8) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0080, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f00000005c0)=0x3d3) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000001800)=ANY=[@ANYRES64=r1]) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='\\\x8b\x00', 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x300, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c558465406c7f306803d8a0f4bd0000000000d91c00000200"}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff65, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r7, 0x4b4b, &(0x7f0000000440)=""/252) write$UHID_INPUT(r0, &(0x7f0000000740)={0x8, {"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", 0x1000}}, 0x1006) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 4m1.1362473s ago: executing program 3 (id=15): syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000002100)=ANY=[], 0x3, 0x1a9, &(0x7f0000000300)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="20003300d0000000080211000001080211000000505050505050004008"], 0x3c}, 0x1, 0x0, 0x0, 0x40010c5}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0x25, 0x24, 0xf, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x7cef, 0x3d}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}}}]}}, 0x0) 3m59.581000668s ago: executing program 3 (id=18): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(r0, 0x0) ptrace$setregs(0xf, r0, 0xffffffffffffffff, &(0x7f00000001c0)) 3m56.915248624s ago: executing program 32 (id=18): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(r0, 0x0) ptrace$setregs(0xf, r0, 0xffffffffffffffff, &(0x7f00000001c0)) 2m56.763032435s ago: executing program 4 (id=154): r0 = socket(0x200000000000011, 0x2, 0xd) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) getsockopt$MRT6(r0, 0x29, 0x16e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000200)={0x53, 0xffffffffffffffff, 0x6, 0xff, @scatter={0x0, 0x0, 0xfffffffffffffffd}, &(0x7f0000000500)="0396d3af4848", 0x0, 0x10, 0x20, 0x1, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 2m55.32573258s ago: executing program 4 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0287c02, &(0x7f0000000000)={{0x80000000, 0x0, 0x6, [0x1]}, {}, 0x0, [0x0, 0x7]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@nolazytime}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000031401020073"], 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x40004000) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=ANY=[], 0x3c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x40042) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000000206030000000000000002000000000005000100070000000900020073797a310000000011000300686173683a69702c706f727400000000050005000a00000005000400010000000c0007"], 0x58}}, 0x0) getdents64(r2, 0xfffffffffffffffe, 0x29) 2m53.416316824s ago: executing program 4 (id=163): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 2m52.035524018s ago: executing program 4 (id=168): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1222, &(0x7f0000001580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) read$FUSE(r0, &(0x7f0000001500)={0x2020}, 0x2020) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='X', 0x5d, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r2, r3}, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x188, &(0x7f0000000140)=0x9, 0x0, 0x4) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x845, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c646973636172642c636865636b3d7374726963742c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d77696e39352c757365667265652c757466383d312c00f919a0fcc7601e2839a4cdeb811f202b12b52250986b6c58733273d7bcd7421b35fcf85c4503caace91f7a52eacc7502"], 0xf7, 0x274, &(0x7f0000000780)="$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") r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000600000000000000010000fa18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000882010002000000650b5000040000003f1280001000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0xfffffb43, 0x0, &(0x7f0000000140), 0x41000, 0xf, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r8, 0x0, 0x0, 0x0, 0x10, 0x240000, @void, @value}, 0x94) 2m48.284480588s ago: executing program 5 (id=175): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000540)={{0x3, 0x3, 0x6a, 0x1, 'syz0\x00', 0x7}, 0x1, [0x3, 0x8, 0x6, 0x2, 0xeb, 0x3, 0x3, 0x7, 0x9, 0x2, 0x9, 0x0, 0x2, 0xdce6, 0x10, 0x4, 0x7, 0xc0000, 0xb, 0x8, 0x5, 0x5, 0x8, 0xa00, 0x3, 0xc0, 0x8, 0x9, 0x4, 0x901, 0xc, 0x7, 0x7, 0x0, 0x2, 0x2, 0x4, 0xfffffffffffff0c2, 0x8000000000000004, 0x2, 0x4, 0x5, 0x1, 0x101, 0x9f, 0x0, 0xfffffffffffffff2, 0xfff, 0x6, 0x4, 0x5, 0xffffffff8b2d1d31, 0x3, 0xffffffff, 0x15, 0x10, 0x101, 0x1ff, 0x776060c, 0x9, 0x6, 0x8, 0x4, 0x3, 0x2, 0x0, 0xa, 0xacbc, 0x8001, 0x4000000000, 0x5, 0x80000000, 0x8, 0xfffffffffffffffb, 0x6, 0x7fff, 0x3, 0x7, 0x100, 0x8, 0x5, 0x888, 0x0, 0xfffffffffffffff8, 0x5, 0xffffffffffff6fcf, 0x401, 0x7, 0x9, 0x9, 0x80000000, 0xc2, 0xffffffff, 0x0, 0x9, 0x9, 0xfffffffffffffffe, 0x3, 0x9, 0x9, 0x200, 0x6, 0x6, 0x1ff, 0x1a, 0xcff6, 0x1, 0x100000000, 0xf9, 0x4, 0x5, 0x1ff, 0x7, 0x94, 0x6, 0x8, 0x200, 0x7, 0x1, 0x0, 0x6, 0x1, 0x2, 0x8, 0x9, 0x4, 0x7b75736a, 0xfffffffffffffffa]}) 2m47.067136024s ago: executing program 5 (id=176): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_generic(0x11, 0x3, 0x10) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) 2m43.356506072s ago: executing program 5 (id=180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10008011}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, 0x0, 0x9081) 2m42.955699609s ago: executing program 4 (id=181): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x2c, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x2c}}, 0x800) 2m40.32114651s ago: executing program 2 (id=184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x7f, 0x20000000, 0x2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2m39.973303478s ago: executing program 5 (id=185): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff7ffc}]}) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0xff64cd1d00000000, 0x0, 0x0, 0x2, 0x41, 0x2, 0x9797, 0xfffffffffffffffe, 0x201, 0x8, 0xa, 0x6, 0x2, 0x7f, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100, 0x80000001, 0x7, 0x2000000000, 0x0, 0x0, 0x3}) 2m39.343666909s ago: executing program 2 (id=188): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d650600000065722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32, @ANYRES16], 0x3, 0x2a1, &(0x7f0000000f40)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x4, 'syz0\x00'}, 0x5, 0x31, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0}) 2m39.251720633s ago: executing program 5 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0xfc}, 0x1, 0x0, 0x0, 0xffff, 0x2}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x4}, 0xffffffff, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x2, 0xb7, 0xae, 0xffffffff}}, 0xe8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x2, 0x2, 0x1, 0x2, 0x2, 0x80}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) 2m31.431245709s ago: executing program 5 (id=190): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000e8", @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x8020}, 0x200000c0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast1, 0x6}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x7ff, 0x0, "03880a17f2cd8bad"}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x80000000, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004cc, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x1ff, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m31.063506012s ago: executing program 2 (id=191): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x5, 0x0, 0x6270, 'syz0\x00'}, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m29.585664987s ago: executing program 4 (id=194): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = getpid() bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) gettid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xfffffffe, 0x4}, 0x1c) sendmmsg$sock(r1, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20020000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) getrlimit(0x6, &(0x7f0000000140)) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x80) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) 2m27.523584873s ago: executing program 2 (id=195): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x500, &(0x7f0000000b00)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0) 2m18.367426455s ago: executing program 2 (id=198): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000640)={0x0, 0xf, 0x4, "b6ab6fba"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m15.113620828s ago: executing program 33 (id=190): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000e8", @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x8020}, 0x200000c0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast1, 0x6}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x7ff, 0x0, "03880a17f2cd8bad"}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x80000000, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004cc, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x1ff, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m12.537172571s ago: executing program 34 (id=194): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = getpid() bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) gettid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xfffffffe, 0x4}, 0x1c) sendmmsg$sock(r1, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20020000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) getrlimit(0x6, &(0x7f0000000140)) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x80) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) 2m10.076826787s ago: executing program 2 (id=205): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m54.714844725s ago: executing program 35 (id=205): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 14.786214663s ago: executing program 8 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000001c000180060001"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (fail_nth: 5) 13.337925826s ago: executing program 8 (id=395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x20040011) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0xac, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x38, 0x3, "2e0385b5015af70c9f6fbdd61beffa9eb52ea0d3358be04fae16617e6066a6ff6593913e1fcc044f4c72b9ab983befe61f8e1f1b"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x845) 12.288577308s ago: executing program 8 (id=398): ioperm(0x0, 0x5, 0x4000000000000020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0, 0x5) 10.949762462s ago: executing program 7 (id=402): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x1a00040, &(0x7f00000001c0)=ANY=[@ANYBLOB="757466383d312c726f6469722c756e695f786c6174653d312c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d77696e39352c756e695f786c6174653d302c636865636b3d7374726963742c747a3d5554432c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c757466383d302c00d4c15a86ebd6334f4a1df54b0a3c95f0cac25b598d45372502aa1517fd41f9e70c3061bd26164a5576b4327116653b7918b8d63e78d8e4852fcbe3787cd92bbae373bea853fededf0cab4dd8265900"/230], 0x3, 0x365, &(0x7f0000001f80)="$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") ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 10.901925135s ago: executing program 8 (id=403): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) read$FUSE(r5, &(0x7f0000001bc0)={0x2020}, 0x2020) syz_usb_connect(0x3, 0x246, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0xc7, 0xf8, 0xc, 0xff, 0x1d6b, 0x10, 0xcaba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x234, 0x2, 0x4, 0xf9, 0x10, 0xaf, [{{0x9, 0x4, 0xe7, 0x9a, 0x1, 0x6f, 0x91, 0x51, 0x3, [@hid_hid={0x9, 0x21, 0x4cd, 0x36, 0x1, {0x22, 0x2232}}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "6f1446fe"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0xc370, 0x6, 0x8}, [@obex={0x5, 0x24, 0x15, 0x7}, @dmm={0x7, 0x24, 0x14, 0x8, 0xd}, @mbim_extended={0x8, 0x24, 0x1c, 0xe, 0x9, 0x4}, @mdlm_detail={0xa6, 0x24, 0x13, 0x3, "910fa41a99983936c14029b0375e26c73ccad7bea9068107df8a811255829940370013860a897f1613de8598c18ec267d8c9961c2e8d806864a1bde79b0fc1d9c871737c33c59282342cca0c9858004e253d2d0d6edcf1d3e863f0f97c7129f170fb42f82c54056cdd01346f4349bd022b61b53b5f37bb0d1ada419537fd80de11a4b95faf062de5d00a043340ec6df177b9d896dacd47c5d6c35fa593d27282d025"}, @country_functional={0xe, 0x24, 0x7, 0x40, 0x3, [0xfffb, 0xc73, 0xc8, 0x9]}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x6, 0x3c, 0x4}]}], [{{0x9, 0x5, 0xf, 0xa, 0x787, 0x85, 0x41, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}]}}]}}, {{0x9, 0x4, 0xf6, 0xb8, 0x7, 0xcc, 0x58, 0x92, 0xd, [], [{{0x9, 0x5, 0x80, 0x10, 0x8, 0x0, 0x7, 0x9}}, {{0x9, 0x5, 0x12, 0x0, 0x3ff, 0xff, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x9, 0x6, 0x81}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x1, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x6, 0x1f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x1, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x36, 0x2, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xfff2}, @generic={0x63, 0x22, "83a9771ab2c210e0a24118a623780121aebc6a9be2873f19a5341fcb5a9fbc82255ec2377406d662da9ff2e887bdaae644168d11a86f026d3d9c0f75fa8017a9aff124ac62883d48206dc4b7ca0bfecf29ff0a7a9f372ebf88d4c70eff26b84d00"}]}}, {{0x9, 0x5, 0x86, 0x3, 0x10, 0x53, 0x1, 0x35, [@generic={0x5f, 0x6, "65807c38f6c9eca07f21aeb587c68a0be42701d8df7563745b8a60b49f7dba897886f159b16715067b9789a8949165c35c4a6c394c2b4edf2d1f2819d4a3da47d872d5051dd58d491b7907fe5fce7b197bdedb235c5837d100b58ed9bb"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x6b, 0xb, 0xf, 0xff, 0x7}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x843}}]}) 9.42007987s ago: executing program 1 (id=406): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000341000/0x4000)=nil, 0x4000, 0x14) r4 = epoll_create1(0x0) r5 = openat$audio1(0xffffffffffffff9c, 0x0, 0xa0801, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x9, 0x6, 0x2, 0xd, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_nat_t_type={0x1, 0x14, 0x7f}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_x_nat_t_type={0x1, 0x14, 0xb}, @sadb_sa={0x2, 0x1, 0x4d3, 0xd, 0x2, 0xf0, 0x2, 0x40000000}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x68}}, 0x20008884) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) 8.195260973s ago: executing program 6 (id=409): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00=\x00\a'], 0x2c}}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000200)="a48a7ad07493ac6cc1079751b93f5e256cac33827d072d8e86078766e2c63a", 0x2}, 0x38) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.062206366s ago: executing program 7 (id=411): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x4, 0x50f, &(0x7f0000000c40)="$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") setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000180)=0x1, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$alg(r1, &(0x7f0000000240)=""/4096, 0xfffffdef) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9}) 6.835119721s ago: executing program 6 (id=412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000140)={0xa, 0x4e23, 0xaea9, @mcast2, 0x6}, 0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r2, &(0x7f0000000140)="8469b66f", 0x20, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 6.594930711s ago: executing program 0 (id=413): ioperm(0x0, 0x5, 0x4000000000000020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0, 0x5) 5.81176956s ago: executing program 0 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 5.761446927s ago: executing program 6 (id=415): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) 5.601918809s ago: executing program 1 (id=416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x11, 0x0, 0x2) 4.822611531s ago: executing program 0 (id=417): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x18) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f0000000380)=ANY=[@ANYBLOB="666f7263652c6e6f6465636f6d706f73652cc91f382c6769643d0fe5c674b83d853ba8fe49dc000000000000000000", @ANYRESHEX=0xee01, @ANYBLOB="2c73657373696f6e3d3078303030303030303030303030303030312c747970653dcc0a2aa12c666f7263652c756d61736b3d30303030303030303030303030303030303030313633312c6e6f626172726965722c00"], 0x1, 0x6bc, &(0x7f0000002e80)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = socket$isdn(0x22, 0x3, 0x24) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000d6000000090000005700000000000200", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="060000000200000003000000000000000000befaeb60000000000000113920e6663b1ed0fde649fd28b4b19ee8441f883af05f92fce5b5f8a8aa21806bc425ec4fae636cb94b21c88298c2dbba7cf1eb7b45fc1b3635f644"], 0x50) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0xfffffddf, 0x200cc004, &(0x7f0000000280)={0xa, 0x4e20, 0x3, @empty, 0xbeef}, 0x55) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={&(0x7f0000000440)="0f5ccf202d8247a69a4361d4d1d3b69d467b1adc2788a5f9da62c740ae78424ab25aa26aefc9eb4b0b91bc304284307791e84dbb089c6203cd673036779fb54ba9a8792e4b040e8455f5df9b4e56d7c00b2ac0af65bd3b951fb3d36c132db4bdd3066259c85f1cbdc8d5610bb86963f9782d4067ce343b961d5db86071a941f1339220d498a93cb428c5a3f12f7779427e3dc6bca9b1", &(0x7f0000000500)=""/99, &(0x7f0000000580)="5df9eae185a2631c6b6cfbb73999253aa0133fd78c955abb1bc47f37aa76788b712e096a74710ec6c223b46209dd520d2465d7a02915e9ac13a172987496b307628d5a4421450438c3a1bf22044830b4c2c53c598785f12b12268d874316a80511dcdc6d255364d798c3b12156ac9b2ca9fd5207823abf3654f3e0a1c78471c43f3f40a86252961f7cb26251bb9f537f8d11e2bc238859d5c717030b323508ef0d4e8d8c892c902c922f8397746c7b44ba488bf80ee643fa487f4ab54f929d8927d9110a43eb93e973d07d9af9ba2ef2b006e8ef0f5aeff52830d9182ac39284a1fea6365f00cf489d0200b07d90f3c7", &(0x7f0000000680)="428d8a621195c2cfb839bc40c5ebfc05ea76d65b407928c8ce7df59aa819c726eb6b9057dfd595c5209a54c7b3ef0ca162da8de6075254f1a478b3ab052d9e6570afb07772d3b29e3df27e7a939388af975ce289232390b4e6c968b8310ada3f669071914f42", 0x5, 0x1}, 0x38) recvfrom$inet6(r5, 0x0, 0x0, 0x2003, 0x0, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x3c, 0x0, 0x4, 0x20, @rand_addr=' \x01\x00', @private0, 0x80, 0x7800, 0xd9f, 0xff}}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000005000000000000000400000003000000", @ANYRES32=r4, @ANYBLOB="1b1400"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0300000001000000040000000100"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000ba00000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r8}, 0x38) syz_usb_connect$cdc_ecm(0x1, 0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003020000082505a1a4400001020301090274000101001000090400000002060000052406000005240000000d240f010000000000000000001524120924a6"], &(0x7f0000001f00)={0x0, 0x0, 0xf, 0x0, 0x1, [{0x0, 0x0}]}) 4.674449305s ago: executing program 6 (id=418): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) writev(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f00000001c0)="6cc1ba40896ce938b2a89b4c2aa12b", 0xf}], 0x1) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000494}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00~', @ANYRES16=r3, @ANYBLOB="000428bd7000fcdbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0c009900e40000002b0000000b00ac00268ceb8a6d2bea00060014010600000006001000880400000600ab000a000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x80408c4) r6 = pidfd_getfd(r1, r0, 0x0) ioctl$SIOCGETVIFCNT(r6, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$BLKRRPART(r1, 0x125f, 0x0) 4.653844451s ago: executing program 8 (id=419): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x16d}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000680)="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", 0x104, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @empty, 0xe}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfc) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge\b\x00\x00\x00\x00\x00\x00\x00\x00']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x400}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x5, 0x0, 0xfffffffe}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001600010a030000000000000002000000d4fc00df13000a006e65746c696e6b5f65787461636b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000004) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x200, 0x31c, 0x1e, 0x9d7, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000480)={r5, 0x4}, &(0x7f00000004c0)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r7, 0x80c17a) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000200)="ac", 0xfffffdef}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000580)=ANY=[@ANYRESHEX=r6, @ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x470d, &(0x7f000000b800)="$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") symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.383198909s ago: executing program 1 (id=420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x20040011) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0xac, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x38, 0x3, "2e0385b5015af70c9f6fbdd61beffa9eb52ea0d3358be04fae16617e6066a6ff6593913e1fcc044f4c72b9ab983befe61f8e1f1b"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x845) 3.756038598s ago: executing program 6 (id=421): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x1a00040, &(0x7f00000001c0)=ANY=[@ANYBLOB="757466383d312c726f6469722c756e695f786c6174653d312c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d77696e39352c756e695f786c6174653d302c636865636b3d7374726963742c747a3d5554432c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c757466383d302c00d4c15a86ebd6334f4a1df54b0a3c95f0cac25b598d45372502aa1517fd41f9e70c3061bd26164a5576b4327116653b7918b8d63e78d8e4852fcbe3787cd92bbae373bea853fededf0cab4dd8265900"/230], 0x3, 0x365, &(0x7f0000001f80)="$eJzs3U9oI2UbAPAnO23SXdivPXywKAijN0HLtuJBTy1LFxZzUQn+OYjB7ao0caHBYPfQbL2IR8Gjnrx50IOHPYugiDcPXl1BVsWD7m3BxZEkk2TSpN16SFfd3+8wPHnf95n3menQzqTkzctrsXVxPi7dvHkjFhZKMbd2bi1ulWIpkhi4GpPKU9oAgH+HW1kWv2d9R0wpRTRPzrgsAGCGen//Xz1daHn7y8PGZ6U8SGZbFwAwO/nz/6HP8wsHdVyeSUkAwIxNvP//0Fh3efxf/XMe+wHgP+DZF158ar0a8UyaLkQ032nX2rV4ctS/filej0ZsxtlYjNsR/RuF7qbU256/UN04m6ZpJ35ailo3o12LaHbatf6dwnrSy6/ESizGUp6f321kWZac/6y6sZL2RMTVTm/+aJbatfk4lc///anYjNVI4/8T+REXqhurab6DWnOQ34nYG71v0a1/ORbj21ficjSiFN3cwW1NdWN3JU3PZdWx/HatEheHZ2Fh7/h+IgAAAAAAAAAAAAAAAAAAAAAA3AuW06Gl4fo32Wj9nuXlKf299XH6+fn6QHv99YGyShZZ9ttbj9beTWJsfaD96/O0a3Nx4u4eOgAAAAAAAAAAAAAAAAAAAPxjtHbKUW80NrdbO1e2ikFnu7VzIiK6LW98/ckXJ2NyzB2CuXyOQleaN13ZqmfJYHCWjI3Jg6Q7+aDl42vDiotjKsOj6LYk+athVmXYNaXC0w/++MGo5YFksOc/R2OSmMg60d1hsq+MYtD8X7+Iv3OiIj9TO6t3GHw9y7KD9rP70mRWlIrn58j1HB5k3eCrG6/d91jrzOO9ls+zvocfWXzu+vsf/bJVbwxmbjTK263b2VY9fz39Yjs4SArXTyn6Qal4Jcwdlr433lJPvvv1+fvf++Zos2fFljenjEn6h/Pp/q5yP+iWua/r5LS55qdc/DMIzny4Vr+2+8PPR80q/JKwUAcAAAAAAAAAAAAAAAAAAByLwmfFc/mHfed729L0rCeePp7qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB4jL7/vxDsTbQcJfijE5Ndlc3tVkT5bh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3uL8CAAD//yV5Zos=") ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 3.640420205s ago: executing program 1 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES8, @ANYRES8, @ANYRES8, @ANYRESHEX], 0xfe, 0x6241, &(0x7f000000ea80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000280)='[', 0x1, 0xb869) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 2.879730492s ago: executing program 7 (id=423): ptrace(0x10, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x23, 0x5, 0x2) bind$inet(r0, 0x0, 0x0) 2.079512284s ago: executing program 7 (id=424): ioperm(0x0, 0x5, 0x4000000000000020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0, 0x5) 1.757332334s ago: executing program 0 (id=425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000140)={0xa, 0x4e23, 0xaea9, @mcast2, 0x6}, 0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r2, &(0x7f0000000140)="8469b66f", 0x20, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1.231189944s ago: executing program 1 (id=426): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000341000/0x4000)=nil, 0x4000, 0x14) r4 = epoll_create1(0x0) r5 = openat$audio1(0xffffffffffffff9c, 0x0, 0xa0801, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x9, 0x6, 0x2, 0xd, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_nat_t_type={0x1, 0x14, 0x7f}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_x_nat_t_type={0x1, 0x14, 0xb}, @sadb_sa={0x2, 0x1, 0x4d3, 0xd, 0x2, 0xf0, 0x2, 0x40000000}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x68}}, 0x20008884) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) 1.161498359s ago: executing program 8 (id=427): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x7d}], 0x1}, 0x20004044) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x96, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x6, 0xd8, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x31, 0x2, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x3, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x9, 0x6, 0x5}, @country_functional={0x10, 0x24, 0x7, 0x81, 0x5, [0x2, 0x8f84, 0xffff, 0x7, 0xff8e]}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x8, 0x7f, 0x62, 0x3, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x1, 0xfa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x6, 0x3}}}}}}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x48, &(0x7f00000009c0)=@string={0x48, 0x3, "46188b3ba26ec6c73eb3debb58b0726bcb8811135d346058231783852887c51a23413c358194d0f1d1951a3536109c8dbeeafd2314457553dc933a3efb48ae6d09b1e485abc3"}}, {0x0, 0x0}, {0x83, &(0x7f0000000a80)=@string={0x83, 0x3, "5375120a315522fecdeceae3b34cd4bfdfc86483577cc5adf6594d69e28ada95a3b8428519d31e329fc2c0fbd8214ca0f862aa074011dd142cc3cb73b9101f67f72551a15c567569e200716738744c793dcd0fc73ec57658ce2acb5385669d67b108d7118afc0e6fe9d9b9854e2b11483c4e1c6a902bd52d9fda858a7d4749ed4c"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x44b}}, {0x3c, &(0x7f0000000b80)=@string={0x3c, 0x3, "7f39d71d1d3aababec7cd17067a44498433ff03b55d5be2a7ce6b149b4c250208a9bbe7100e3895fd25146635f6bd26ecaf6c957ab8d3f6e7e72"}}]}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 1.160492431s ago: executing program 7 (id=428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) shutdown(r0, 0x0) 870.378589ms ago: executing program 0 (id=429): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0xf0, 0x0) 731.727431ms ago: executing program 6 (id=430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x11, 0x0, 0x2) 409.267659ms ago: executing program 7 (id=431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_vif\x00') lseek(r1, 0x1895, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="626172726965722c63726561746f723d30c6da432c6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nls=cp869,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00cda88eef6460690a64e8746bfb2b58ce0f9934b742a306036dc0b12a28db4c7ec38aff23528c0cd914221851f22c6d7152cda8"], 0x1, 0x5c8, &(0x7f0000005440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000380)=""/55, 0x37) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) getdents64(r3, &(0x7f00000000c0)=""/154, 0x9a) unlinkat(r2, &(0x7f00000003c0)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xf}, {0xc}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c894}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003003e80060000000040c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) dup(r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x20108c2, &(0x7f0000000c00)=ANY=[@ANYBLOB='usrquota,iocharset=cp949,discard,integrity,quota,uid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB=',fsname=]}@}X}[-)+,fsname=obj_role,subj_user=,subj_role=*,fowner>', @ANYRESDEC, @ANYBLOB=',\x00'], 0xff, 0x6178, &(0x7f000000c680)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000100000000000000000000000000c124ba2b5f50987ead04dd4c1f9a9b846105feeaa859a9281038da603b7d4e7ef7a4f0e7d64f8b1dd565ca94bdb59077304b000c59ede1556c6159779d133856d0d19ba4e0759d7f17410424a5c05e2a0be4d878e568320303bfc5e6b65438ce27cc8a0dfa561f69e5b13c4120bd2b352f12743a49d9a050725969ecee489920bc089f"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x2) rmdir(&(0x7f0000000040)='./bus\x00') sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001400)=@newqdisc={0x17c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xff, 0xa00, 0x8001, 0x1, 0x4b4, 0xa}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x4, 0x2f, 0x9, 0x0, 0x0, 0xc, 0x4}}, {0xc, 0x2, [0x3, 0x80, 0x1, 0xc]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x1ff, 0x2, 0x8001, 0x3, 0x9}}, {0x16, 0x2, [0x3, 0x1, 0xcc9d, 0xbe59, 0x2, 0x3, 0xc, 0x4, 0x200]}}, {{0x1c, 0x1, {0x2b, 0xeb, 0x1000, 0x8, 0x0, 0x9, 0x7, 0x5}}, {0xe, 0x2, [0x101, 0xfe01, 0x2f45, 0x6, 0xa2]}}, {{0x1c, 0x1, {0x4, 0x8, 0x2, 0x9, 0x3, 0xe5, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xe9, 0x8, 0x90a, 0x9, 0x0, 0x0, 0x100, 0x5}}, {0xe, 0x2, [0x1000, 0x7, 0x9, 0x7e6d, 0xf5]}}, {{0x1c, 0x1, {0x7, 0x2, 0x8001, 0x5, 0x2, 0x1, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x1, 0x0, 0x0, 0x1, 0x8, 0x9, 0x5}}, {0xe, 0x2, [0x9, 0x1, 0x1, 0x800, 0xa]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x17c}}, 0x40010) 106.752407ms ago: executing program 0 (id=432): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x3, [0x8, 0xe74, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x0, 0xfffeffff, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0xfffffffe, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x3, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfd5], [0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="0a009e0008300000"], 0x24}}, 0x40084) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 0s ago: executing program 1 (id=433): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast1, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xb, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4001) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): unknown main item tag 0x6 [ 306.219787][ T5424] hid-generic 00C7:0001:0003.0002: unexpected long global item [ 306.223636][ T5818] Bluetooth: hci0: command tx timeout [ 306.321970][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.330269][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.432483][ T5424] hid-generic 00C7:0001:0003.0002: probe with driver hid-generic failed with error -22 [ 306.624644][ T6382] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 306.635606][ T6382] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 306.645449][ T6382] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.96: Failed to acquire dquot type 0 [ 306.858129][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.871165][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.922152][ T2075] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 307.159115][ T2075] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 307.167933][ T2075] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.182758][ T2075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 307.195468][ T2075] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 307.205634][ T2075] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.218860][ T2075] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.228129][ T2075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.276726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 307.350550][ T2075] usb 3-1: config 0 descriptor?? [ 307.543724][ T6407] 9pnet_fd: Insufficient options for proto=fd [ 307.843193][ T2075] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 307.931983][ T2075] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 308.595623][ T6412] loop5: detected capacity change from 0 to 2048 [ 308.694529][ T6416] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 308.942785][ T6414] loop0: detected capacity change from 0 to 40427 [ 308.965150][ T2075] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 309.019186][ T6414] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff [ 309.033847][ T6414] F2FS-fs (loop0): invalid crc value [ 309.069023][ T6401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.139530][ T6412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.369382][ T6426] capability: warning: `syz.1.107' uses deprecated v2 capabilities in a way that may be insecure [ 309.405459][ T6382] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 309.416374][ T6382] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 309.428486][ T6382] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.96: Failed to acquire dquot type 0 [ 309.441740][ T6414] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 309.498298][ T6414] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x356/0x3cd0 [ 309.510822][ T6414] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 309.615425][ T6414] syz.0.105: attempt to access beyond end of device [ 309.615425][ T6414] loop0: rw=2049, sector=77824, nr_sectors = 32 limit=40427 [ 309.684804][ T6401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.068580][ T6382] warning: `syz.2.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 310.189362][ T6401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.207009][ T5861] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 310.507454][ T5800] syz-executor: attempt to access beyond end of device [ 310.507454][ T5800] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 310.522110][ T5800] CPU: 0 UID: 0 PID: 5800 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 310.522237][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.522320][ T5800] Call Trace: [ 310.522394][ T5800] [ 310.522444][ T5800] __dump_stack+0x26/0x30 [ 310.522617][ T5800] dump_stack_lvl+0x1df/0x270 [ 310.522794][ T5800] dump_stack+0x1e/0x25 [ 310.522949][ T5800] f2fs_handle_critical_error+0xa6f/0xc20 [ 310.523160][ T5800] f2fs_stop_checkpoint+0x60/0x70 [ 310.523344][ T5800] f2fs_write_end_io+0xd98/0x1e20 [ 310.523558][ T5800] ? f2fs_write_end_io+0xa61/0x1e20 [ 310.523747][ T5800] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 310.523914][ T5800] bio_endio+0xe08/0xf60 [ 310.524092][ T5800] submit_bio_noacct+0x214/0x2710 [ 310.524315][ T5800] submit_bio+0x5a9/0x5d0 [ 310.524493][ T5800] f2fs_submit_write_bio+0x92/0x250 [ 310.524656][ T5800] __submit_merged_bio+0x16f/0x6a0 [ 310.524809][ T5800] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 310.525026][ T5800] __submit_merged_write_cond+0x458/0x9a0 [ 310.525183][ T5800] f2fs_write_data_pages+0x509a/0x58e0 [ 310.525492][ T5800] ? kmsan_get_metadata+0x105/0x1b0 [ 310.525683][ T5800] ? kmsan_get_metadata+0x105/0x1b0 [ 310.525872][ T5800] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 310.526088][ T5800] ? folios_put_refs+0x1/0xb10 [ 310.526248][ T5800] ? filter_irq_stacks+0x13f/0x190 [ 310.526456][ T5800] ? kmsan_get_metadata+0x105/0x1b0 [ 310.526642][ T5800] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 310.526839][ T5800] ? kmsan_get_metadata+0x105/0x1b0 [ 310.527021][ T5800] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 310.527219][ T5800] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 310.527397][ T5800] do_writepages+0x448/0xcb0 [ 310.527585][ T5800] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 310.527791][ T5800] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 310.528007][ T5800] filemap_fdatawrite+0x207/0x260 [ 310.528236][ T5800] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 310.528454][ T5800] f2fs_write_checkpoint+0xfe2/0x2b00 [ 310.528777][ T5800] kill_f2fs_super+0x2ff/0x970 [ 310.528986][ T5800] ? __pfx_kill_f2fs_super+0x10/0x10 [ 310.529167][ T5800] deactivate_locked_super+0xcb/0x3c0 [ 310.529351][ T5800] deactivate_super+0x12f/0x140 [ 310.529508][ T5800] cleanup_mnt+0x6fb/0x780 [ 310.529694][ T5800] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 310.529893][ T5800] ? __pfx___cleanup_mnt+0x10/0x10 [ 310.530088][ T5800] __cleanup_mnt+0x22/0x30 [ 310.530274][ T5800] task_work_run+0x209/0x2b0 [ 310.530431][ T5800] resume_user_mode_work+0x105/0x160 [ 310.530580][ T5800] syscall_exit_to_user_mode+0x7b/0xb0 [ 310.530771][ T5800] do_syscall_64+0xe6/0x1b0 [ 310.530968][ T5800] ? irqentry_exit+0x16/0x60 [ 310.531148][ T5800] ? clear_bhb_loop+0x40/0x90 [ 310.531306][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.531461][ T5800] RIP: 0033:0x7fd78178fc97 [ 310.531564][ T5800] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 310.531680][ T5800] RSP: 002b:00007fff8519fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 310.531811][ T5800] RAX: 0000000000000000 RBX: 00007fd78181089d RCX: 00007fd78178fc97 [ 310.531902][ T5800] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8519fdb0 [ 310.531987][ T5800] RBP: 00007fff8519fdb0 R08: 0000000000000000 R09: 0000000000000000 [ 310.532070][ T5800] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff851a0e40 [ 310.532181][ T5800] R13: 00007fd78181089d R14: 000000000004b9fb R15: 00007fff851a0e80 [ 310.532318][ T5800] [ 310.890349][ T5800] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 310.945724][ T6401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.367826][ T6401] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.402382][ T6401] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.433388][ T6401] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.463451][ T6401] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.659514][ T6435] loop5: detected capacity change from 0 to 40427 [ 312.717454][ T6435] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3fffff [ 312.726640][ T6435] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x2 [ 312.735296][ T6435] F2FS-fs (loop5): Image doesn't support compression [ 312.743956][ T6435] F2FS-fs (loop5): Image doesn't support compression [ 312.778115][ T6435] F2FS-fs (loop5): invalid crc value [ 313.343922][ T5818] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 313.353063][ T5818] Bluetooth: hci3: Injecting HCI hardware error event [ 313.382872][ T5818] Bluetooth: hci3: hardware error 0x00 [ 313.768843][ T5807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.536489][ T6452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.779557][ T5424] usb 3-1: USB disconnect, device number 4 [ 315.505146][ T6462] 9pnet_fd: Insufficient options for proto=fd [ 315.532703][ T5818] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 315.544367][ T5424] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 315.782276][ T5424] usb 3-1: Using ep0 maxpacket: 32 [ 315.912845][ T5424] usb 3-1: unable to get BOS descriptor or descriptor too short [ 316.011758][ T5424] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 316.021299][ T5424] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 316.032794][ T5424] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 316.042171][ T5424] usb 3-1: config 128 has no interface number 0 [ 316.048712][ T5424] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 316.060862][ T5424] usb 3-1: config 128 interface 127 has no altsetting 0 [ 316.407935][ T5424] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 316.417424][ T5424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.426013][ T5424] usb 3-1: Product: syz [ 316.430412][ T5424] usb 3-1: Manufacturer: syz [ 316.435337][ T5424] usb 3-1: SerialNumber: syz [ 316.560235][ T6454] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.926525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 317.971864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 318.021865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 318.030467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 318.043688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 318.061868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 318.132701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 318.233538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 318.291893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 318.399014][ T6474] loop1: detected capacity change from 0 to 32768 [ 318.625806][ T5424] usb 3-1: USB disconnect, device number 5 [ 318.760533][ T6474] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 318.805973][ T6474] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 318.805973][ T6474] allowing incompatible features above 0.0: (unknown version) [ 318.836292][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.843178][ T6474] bcachefs (loop1): initializing new filesystem [ 318.856440][ T6474] bcachefs (loop1): going read-write [ 318.966850][ T6474] bcachefs (loop1): marking superblocks [ 319.032348][ T6474] bcachefs (loop1): initializing freespace [ 319.051459][ T6474] bcachefs (loop1): done initializing freespace [ 319.074588][ T6474] bcachefs (loop1): reading snapshots table [ 319.080928][ T6474] bcachefs (loop1): reading snapshots done [ 319.191404][ T6474] bcachefs (loop1): done starting filesystem [ 319.506929][ T6474] syz.1.120 (6474) used greatest stack depth: 960 bytes left [ 319.653955][ T5806] bcachefs (loop1): shutting down [ 319.659225][ T5806] bcachefs (loop1): going read-only [ 319.672671][ T5806] bcachefs (loop1): finished waiting for writes to stop [ 319.719957][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.784544][ T5806] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4 [ 320.323068][ T30] audit: type=1800 audit(1747704371.604:3): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.122" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 320.395333][ T5806] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 320.466205][ T5806] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 320.521324][ T5806] bcachefs (loop1): marking filesystem clean [ 320.722331][ T5854] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 320.866556][ T5806] bcachefs (loop1): shutdown complete [ 320.963056][ T5854] usb 6-1: device descriptor read/64, error -71 [ 321.252383][ T5854] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 321.442207][ T5854] usb 6-1: device descriptor read/64, error -71 [ 321.555800][ T5854] usb usb6-port1: attempt power cycle [ 321.674636][ T6512] loop2: detected capacity change from 0 to 256 [ 321.932224][ T5854] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 321.993707][ T6512] exFAT-fs (loop2): start_clu is invalid cluster(0x400) [ 322.053177][ T5854] usb 6-1: device descriptor read/8, error -71 [ 322.343931][ T5854] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 322.414416][ T5854] usb 6-1: device descriptor read/8, error -71 [ 322.533300][ T5854] usb usb6-port1: unable to enumerate USB device [ 322.623574][ T5861] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 322.872676][ T5861] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.883442][ T5861] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 322.902196][ T5861] usb 1-1: New USB device found, idVendor=2c42, idProduct=1608, bcdDevice=bd.4b [ 322.911550][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.029031][ T5861] usb 1-1: config 0 descriptor?? [ 323.085576][ T5861] f81232 1-1:0.0: f81534a converter detected [ 323.258140][ T6517] netlink: 'syz.0.129': attribute type 10 has an invalid length. [ 323.268275][ T6517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.129'. [ 323.277878][ T6517] batadv0: entered promiscuous mode [ 323.283675][ T6517] batadv0: entered allmulticast mode [ 323.295241][ T6517] bridge0: port 3(batadv0) entered blocking state [ 323.302919][ T6517] bridge0: port 3(batadv0) entered disabled state [ 323.319154][ T6517] bridge0: port 3(batadv0) entered blocking state [ 323.326183][ T6517] bridge0: port 3(batadv0) entered forwarding state [ 323.502760][ T5861] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 323.510215][ T5861] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 323.612818][ T5861] usb 1-1: USB disconnect, device number 7 [ 323.622042][ T5861] f81232 1-1:0.0: device disconnected [ 323.716212][ T4382] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 323.725942][ T4382] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 324.634076][ T6525] loop2: detected capacity change from 0 to 1024 [ 324.673359][ T6525] EXT4-fs: Ignoring removed oldalloc option [ 324.679656][ T6525] ext4: Unknown parameter 'euid<00000000000000000000' [ 325.134230][ T5854] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 325.363962][ T5854] usb 3-1: Using ep0 maxpacket: 8 [ 325.439712][ T5854] usb 3-1: config 128 has an invalid interface number: 139 but max is 1 [ 325.449270][ T5854] usb 3-1: config 128 has an invalid interface number: 142 but max is 1 [ 325.459115][ T5854] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 325.470466][ T5854] usb 3-1: config 128 has no interface number 0 [ 325.477176][ T5854] usb 3-1: config 128 has no interface number 1 [ 325.483796][ T5854] usb 3-1: config 128 interface 139 altsetting 10 has a duplicate endpoint with address 0xC, skipping [ 325.495202][ T5854] usb 3-1: config 128 interface 139 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 325.508364][ T5854] usb 3-1: config 128 interface 139 altsetting 10 has an endpoint descriptor with address 0x34, changing to 0x4 [ 325.521143][ T5854] usb 3-1: config 128 interface 139 altsetting 10 has a duplicate endpoint with address 0x4, skipping [ 325.532674][ T5854] usb 3-1: config 128 interface 139 altsetting 10 endpoint 0x2 has invalid maxpacket 951, setting to 64 [ 325.544293][ T5854] usb 3-1: config 128 interface 139 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 325.555871][ T5854] usb 3-1: config 128 interface 142 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 325.567437][ T5854] usb 3-1: config 128 interface 142 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 325.578941][ T5854] usb 3-1: config 128 interface 142 altsetting 7 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 325.591193][ T5854] usb 3-1: config 128 interface 142 altsetting 7 endpoint 0x83 has invalid maxpacket 65187, setting to 64 [ 325.604722][ T5854] usb 3-1: config 128 interface 142 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 325.616496][ T5854] usb 3-1: config 128 interface 142 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 325.627773][ T5854] usb 3-1: config 128 interface 142 altsetting 7 bulk endpoint 0xF has invalid maxpacket 16 [ 325.638322][ T5854] usb 3-1: config 128 interface 139 has no altsetting 0 [ 325.645623][ T5854] usb 3-1: config 128 interface 142 has no altsetting 0 [ 325.749651][ T6538] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 325.997574][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880277ff200: rx timeout, send abort [ 326.075624][ T5854] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a3a, bcdDevice=9c.a6 [ 326.085478][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.096406][ T5854] usb 3-1: Product: 冿ꀗ薾ꇀé‚দﱾë³ï½½ä¿â¶†è«¬éㄤࡱ洞☩駮辪䈨炄ê‚ᶋ둎鰸Ҽ낪ï¡ê“•ã¾žç‹šè’³è¨›à¹»ê³˜éº¸â¦°í•¯ì«”噄쿞耜漾鮶㓘랈幊뇥ᨈ↫㗹∼쥓ãµæ­ê‰æ痯侀䗼똙칤踣꿔䯲è䦙닼é‰ëŸ¹çƒŽê¹˜æŠµïµ‡æ«¤éµ‚æª¬í†‚ç…Ÿç¥«å„¤ì‚“á»ºî¬°á°¨äž§ï¯Šà½šæ±ƒèŽ™é¨™ã²–é‹¦ä©—ç„žá¢¦ê·¦é½šá®˜á¦‚é±½ì˜¹ë¥‡äµ [ 326.132522][ T5854] usb 3-1: Manufacturer: à „ [ 326.137378][ T5854] usb 3-1: SerialNumber: 㛈쎺钿鎘缫繵ȥ윶䤺꡹㷕å‰è·¶ï“šê½ƒî’£éŽªã­ªâ™ºïŽžä¥¶è¥±é›½ [ 326.498423][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119b1d000: rx timeout, send abort [ 326.510202][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880277ff200: abort rx timeout. Force session deactivation [ 326.775747][ T5854] usb 3-1: USB disconnect, device number 6 [ 327.007016][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119b1d000: abort rx timeout. Force session deactivation [ 327.902932][ T6559] loop4: detected capacity change from 0 to 256 [ 328.228972][ T6559] exFAT-fs (loop4): start_clu is invalid cluster(0x400) [ 328.232235][ T6562] netlink: 72 bytes leftover after parsing attributes in process `syz.2.142'. [ 328.714035][ T6566] loop1: detected capacity change from 0 to 1024 [ 328.756271][ T6566] EXT4-fs: Ignoring removed bh option [ 328.829393][ T6569] loop5: detected capacity change from 0 to 256 [ 328.912779][ T6566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 329.163267][ T6576] syz.0.145 uses obsolete (PF_INET,SOCK_PACKET) [ 329.483549][ T6569] FAT-fs (loop5): Directory bread(block 64) failed [ 329.490511][ T6569] FAT-fs (loop5): Directory bread(block 65) failed [ 329.500251][ T6569] FAT-fs (loop5): Directory bread(block 66) failed [ 329.507788][ T6569] FAT-fs (loop5): Directory bread(block 67) failed [ 329.514963][ T6569] FAT-fs (loop5): Directory bread(block 68) failed [ 329.521744][ T6569] FAT-fs (loop5): Directory bread(block 69) failed [ 329.528839][ T6569] FAT-fs (loop5): Directory bread(block 70) failed [ 329.536371][ T6569] FAT-fs (loop5): Directory bread(block 71) failed [ 329.538139][ T6576] loop0: detected capacity change from 0 to 1024 [ 329.543291][ T6569] FAT-fs (loop5): Directory bread(block 72) failed [ 329.556562][ T6569] FAT-fs (loop5): Directory bread(block 73) failed [ 329.791428][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 330.095956][ T6584] netlink: 165 bytes leftover after parsing attributes in process `syz.2.148'. [ 330.409314][ T6584] process 'syz.2.148' launched './file0' with NULL argv: empty string added [ 331.128698][ T6588] loop1: detected capacity change from 0 to 4096 [ 331.476299][ T6597] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.653613][ T6596] loop2: detected capacity change from 0 to 256 [ 331.678727][ T6591] loop5: detected capacity change from 0 to 4096 [ 331.709397][ T6596] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.720975][ T6596] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 331.896848][ T6600] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.963859][ T6591] FAULT_INJECTION: forcing a failure. [ 331.963859][ T6591] name failslab, interval 1, probability 0, space 0, times 0 [ 331.977253][ T6591] CPU: 1 UID: 0 PID: 6591 Comm: syz.5.150 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 331.977421][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.977541][ T6591] Call Trace: [ 331.977601][ T6591] [ 331.977651][ T6591] __dump_stack+0x26/0x30 [ 331.977826][ T6591] dump_stack_lvl+0x1df/0x270 [ 331.978009][ T6591] dump_stack+0x1e/0x25 [ 331.978204][ T6591] should_fail_ex+0x7dc/0x8a0 [ 331.978430][ T6591] should_failslab+0x15b/0x200 [ 331.978719][ T6591] kmem_cache_alloc_noprof+0xf0/0xec0 [ 331.978957][ T6591] ? getname_flags+0x102/0xac0 [ 331.979166][ T6591] ? kmsan_get_metadata+0x105/0x1b0 [ 331.979377][ T6591] getname_flags+0x102/0xac0 [ 331.979569][ T6591] ? kmsan_get_metadata+0x105/0x1b0 [ 331.979765][ T6591] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 331.980060][ T6591] user_path_at+0x45/0x3d0 [ 331.980260][ T6591] ? do_utimes+0x9b/0x480 [ 331.980439][ T6591] do_utimes+0x24c/0x480 [ 331.980609][ T6591] ? __x64_sys_utimes+0x8f/0x480 [ 331.980822][ T6591] __x64_sys_utimes+0x3ae/0x480 [ 331.981103][ T6591] ? kmsan_get_metadata+0x105/0x1b0 [ 331.981345][ T6591] ? kmsan_get_metadata+0x105/0x1b0 [ 331.981569][ T6591] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 331.981803][ T6591] x64_sys_call+0x39c7/0x3db0 [ 331.982036][ T6591] do_syscall_64+0xd9/0x1b0 [ 331.982272][ T6591] ? irqentry_exit+0x16/0x60 [ 331.982460][ T6591] ? clear_bhb_loop+0x40/0x90 [ 331.982612][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.982758][ T6591] RIP: 0033:0x7f363b78e969 [ 331.982871][ T6591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.982996][ T6591] RSP: 002b:00007f363c54f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 331.983148][ T6591] RAX: ffffffffffffffda RBX: 00007f363b9b5fa0 RCX: 00007f363b78e969 [ 331.983248][ T6591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000072c0 [ 331.983356][ T6591] RBP: 00007f363c54f090 R08: 0000000000000000 R09: 0000000000000000 [ 331.983443][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.983525][ T6591] R13: 0000000000000000 R14: 00007f363b9b5fa0 R15: 00007ffc66f46148 [ 331.983680][ T6591] [ 332.346942][ T6596] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 332.954934][ T6611] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 333.372781][ T5861] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 333.485724][ T6617] loop5: detected capacity change from 0 to 256 [ 333.602210][ T5861] usb 1-1: Using ep0 maxpacket: 32 [ 333.660467][ T5861] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 194, using maximum allowed: 30 [ 333.672500][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 333.779519][ T6617] exFAT-fs (loop5): start_clu is invalid cluster(0x400) [ 333.815477][ T5861] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 333.825189][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.833672][ T5861] usb 1-1: Product: syz [ 333.838067][ T5861] usb 1-1: Manufacturer: syz [ 333.843073][ T5861] usb 1-1: SerialNumber: syz [ 333.940632][ T5861] usb 1-1: config 0 descriptor?? [ 334.075892][ T6623] loop4: detected capacity change from 0 to 1024 [ 334.130373][ T6623] EXT4-fs: Ignoring removed bh option [ 334.316733][ T6623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 334.333497][ T5861] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 334.364308][ T3642] usb 1-1: Failed to submit usb control message: -71 [ 334.371742][ T3642] usb 1-1: unable to send the bmi data to the device: -71 [ 334.379480][ T3642] usb 1-1: unable to get target info from device [ 334.386313][ T3642] usb 1-1: could not get target info (-71) [ 334.392589][ T3642] usb 1-1: could not probe fw (-71) [ 334.399880][ T5861] usb 1-1: USB disconnect, device number 8 [ 334.771211][ T6635] loop1: detected capacity change from 0 to 512 [ 335.166009][ T6635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.179584][ T6635] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.251019][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 335.823897][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.156216][ T6657] loop5: detected capacity change from 0 to 1024 [ 336.448521][ T6660] input: syz0 as /devices/virtual/input/input8 [ 336.555372][ T6664] input: syz0 as /devices/virtual/input/input9 [ 336.631195][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 336.774574][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 338.728247][ T6671] loop4: detected capacity change from 0 to 8192 [ 339.049507][ T6671] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 347.405978][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.412891][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 348.753861][ T6734] Bluetooth: MGMT ver 1.23 [ 349.468493][ T6742] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 349.524613][ T6738] loop0: detected capacity change from 0 to 2048 [ 349.635728][ T6746] loop2: detected capacity change from 0 to 128 [ 350.143989][ T6746] vfat: Unknown parameter 'shortname' [ 351.136852][ T6738] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 351.149996][ T6738] UDF-fs: Scanning with blocksize 512 failed [ 357.311227][ T6738] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.133781][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 366.140134][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 366.148582][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 368.024635][ T6772] loop2: detected capacity change from 0 to 512 [ 368.082178][ T6770] loop4: detected capacity change from 0 to 2048 [ 368.152188][ T6772] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 368.316841][ T6770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.489001][ T6772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 368.502262][ T6772] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.083012][ T5807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 374.318401][ T5861] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 374.569498][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 374.609011][ T5861] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 374.617469][ T5861] usb 3-1: config 0 has no interface number 0 [ 374.876085][ T5861] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 374.885595][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.894063][ T5861] usb 3-1: Product: syz [ 374.898490][ T5861] usb 3-1: Manufacturer: syz [ 374.903617][ T5861] usb 3-1: SerialNumber: syz [ 375.253897][ T5861] usb 3-1: config 0 descriptor?? [ 375.280751][ T5861] smsc95xx v2.0.0 [ 376.584939][ T5861] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 376.596264][ T5861] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 376.906717][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.023067][ T30] audit: type=1326 audit(1747704940.875:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f071d38e969 code=0x7ffc0000 [ 377.046520][ T30] audit: type=1326 audit(1747704940.925:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f071d32ab39 code=0x7ffc0000 [ 377.069226][ T30] audit: type=1326 audit(1747704940.925:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f071d32ab39 code=0x7ffc0000 [ 377.091661][ T30] audit: type=1326 audit(1747704940.925:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f071d32ab39 code=0x7ffc0000 [ 377.114290][ T30] audit: type=1326 audit(1747704940.925:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f071d32ab39 code=0x7ffc0000 [ 377.138734][ T30] audit: type=1326 audit(1747704940.925:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f071d32ab39 code=0x7ffc0000 [ 377.161975][ T30] audit: type=1326 audit(1747704940.925:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f071d32ab39 code=0x7ffc0000 [ 377.366673][ T30] audit: type=1326 audit(1747704941.094:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f071d32ab39 code=0x7ffc0000 [ 377.389472][ T30] audit: type=1326 audit(1747704941.144:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f071d32ab39 code=0x7ffc0000 [ 377.412251][ T30] audit: type=1326 audit(1747704941.144:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f071d32ab39 code=0x7ffc0000 [ 377.463780][ T5861] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 377.476037][ T5861] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 377.536453][ T6806] loop0: detected capacity change from 0 to 2048 [ 377.600765][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.612789][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.656196][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.689522][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.698812][ T5861] usb 3-1: USB disconnect, device number 7 [ 377.727991][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.088658][ T6806] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 378.096643][ T6806] UDF-fs: Scanning with blocksize 512 failed [ 378.248742][ T6806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.416658][ T5805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.428678][ T5805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.439165][ T5805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.453810][ T5805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.473198][ T5805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.815424][ T5805] Bluetooth: hci5: command tx timeout [ 380.625014][ T5805] Bluetooth: hci6: command tx timeout [ 381.916113][ T5805] Bluetooth: hci5: command tx timeout [ 382.699085][ T5805] Bluetooth: hci6: command tx timeout [ 382.925631][ T6808] chnl_net:caif_netlink_parms(): no params data found [ 383.497368][ T6839] loop1: detected capacity change from 0 to 2048 [ 383.585660][ T6841] loop0: detected capacity change from 0 to 512 [ 383.740593][ T6841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.985403][ T5805] Bluetooth: hci5: command tx timeout [ 384.087055][ T6839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.315646][ T6839] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 384.378980][ T6812] chnl_net:caif_netlink_parms(): no params data found [ 384.430798][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.503964][ T6839] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 384.517679][ T6839] EXT4-fs (loop1): This should not happen!! Data will be lost [ 384.517679][ T6839] [ 384.530858][ T6839] EXT4-fs (loop1): Total free blocks count 0 [ 384.538120][ T6839] EXT4-fs (loop1): Free/Dirty block details [ 384.544251][ T6839] EXT4-fs (loop1): free_blocks=2415919504 [ 384.550249][ T6839] EXT4-fs (loop1): dirty_blocks=48 [ 384.555490][ T6839] EXT4-fs (loop1): Block reservation details [ 384.561826][ T6839] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 384.668996][ T6853] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 384.786891][ T5805] Bluetooth: hci6: command tx timeout [ 385.251824][ T5861] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 385.379073][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.386457][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.396106][ T6808] bridge_slave_0: entered allmulticast mode [ 385.404674][ T6808] bridge_slave_0: entered promiscuous mode [ 385.465006][ T5861] usb 1-1: Using ep0 maxpacket: 32 [ 385.534974][ T5861] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.545607][ T5861] usb 1-1: config 0 has no interfaces? [ 385.604176][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.613259][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.621099][ T6808] bridge_slave_1: entered allmulticast mode [ 385.629998][ T6808] bridge_slave_1: entered promiscuous mode [ 385.700274][ T5861] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 385.710014][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.718285][ T5861] usb 1-1: Product: syz [ 385.722900][ T5861] usb 1-1: Manufacturer: syz [ 385.727741][ T5861] usb 1-1: SerialNumber: syz [ 385.885464][ T5861] usb 1-1: config 0 descriptor?? [ 386.072615][ T5805] Bluetooth: hci5: command tx timeout [ 386.206666][ T5861] usb 1-1: USB disconnect, device number 9 [ 386.434554][ T6808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.731310][ T6865] loop1: detected capacity change from 0 to 256 [ 386.759129][ T6808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.884620][ T5805] Bluetooth: hci6: command tx timeout [ 386.909075][ T3806] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.920019][ T3806] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.155124][ T6865] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 387.448734][ T3806] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.459895][ T3806] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.655063][ T6870] loop0: detected capacity change from 0 to 128 [ 387.868741][ T6808] team0: Port device team_slave_0 added [ 387.990175][ T6870] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 387.993626][ T3806] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.998674][ T6870] FAT-fs (loop0): Filesystem has been set read-only [ 388.012672][ T3806] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.015850][ T6870] syz.0.211: attempt to access beyond end of device [ 388.015850][ T6870] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 388.045620][ T6870] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 388.053826][ T6870] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 388.277845][ T6870] syz.0.211: attempt to access beyond end of device [ 388.277845][ T6870] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 388.292446][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 388.292519][ T30] audit: type=1800 audit(1747704952.149:74): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.211" name="file2" dev="loop0" ino=1048622 res=0 errno=0 [ 388.441014][ T6808] team0: Port device team_slave_1 added [ 388.513745][ T3806] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.524842][ T3806] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.675262][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.683106][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.694771][ T6812] bridge_slave_0: entered allmulticast mode [ 388.707633][ T6812] bridge_slave_0: entered promiscuous mode [ 389.076980][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.084344][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.111105][ T6808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.153859][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.161645][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.191635][ T6812] bridge_slave_1: entered allmulticast mode [ 389.201379][ T6812] bridge_slave_1: entered promiscuous mode [ 389.448125][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.455425][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.485998][ T6808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.743420][ T6812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.019902][ T6812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.065744][ T3806] bridge_slave_1: left allmulticast mode [ 390.074323][ T3806] bridge_slave_1: left promiscuous mode [ 390.081990][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.253598][ T3806] bridge_slave_0: left allmulticast mode [ 390.259524][ T3806] bridge_slave_0: left promiscuous mode [ 390.266299][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.775225][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.866118][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.909719][ T3806] bond0 (unregistering): Released all slaves [ 391.540451][ T6812] team0: Port device team_slave_0 added [ 391.680578][ T6808] hsr_slave_0: entered promiscuous mode [ 391.689665][ T6808] hsr_slave_1: entered promiscuous mode [ 391.697783][ T6808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.705475][ T6808] Cannot create hsr debugfs directory [ 391.771549][ T6812] team0: Port device team_slave_1 added [ 392.324989][ T3806] hsr_slave_0: left promiscuous mode [ 392.370515][ T3806] hsr_slave_1: left promiscuous mode [ 392.378477][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.386112][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.469726][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.477942][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.646335][ T3806] veth1_macvtap: left promiscuous mode [ 392.652373][ T3806] veth0_macvtap: left promiscuous mode [ 392.658575][ T3806] veth1_vlan: left promiscuous mode [ 392.664211][ T3806] veth0_vlan: left promiscuous mode [ 392.963667][ T2075] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 393.439874][ T2075] usb 1-1: Using ep0 maxpacket: 16 [ 393.491782][ T2075] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.502347][ T2075] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 393.513695][ T2075] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 393.523869][ T2075] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 393.716272][ T2075] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 393.725840][ T2075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.734604][ T2075] usb 1-1: Product: syz [ 393.739022][ T2075] usb 1-1: Manufacturer: syz [ 393.743973][ T2075] usb 1-1: SerialNumber: syz [ 394.182934][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 394.405054][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 396.699308][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.706651][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.733291][ T6812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.682450][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.689896][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.717830][ T6812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.350653][ T2075] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 398.556668][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 398.596382][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 398.614583][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 398.853251][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 398.868534][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.252377][ T6812] hsr_slave_0: entered promiscuous mode [ 399.262975][ T6812] hsr_slave_1: entered promiscuous mode [ 399.271809][ T6812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.279719][ T6812] Cannot create hsr debugfs directory [ 399.878597][ T2075] usb 1-1: USB disconnect, device number 10 [ 400.005245][ T3806] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.095422][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.407567][ T3806] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.629390][ T3806] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.780577][ T3806] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.076492][ T5818] Bluetooth: hci1: command tx timeout [ 401.863887][ T3806] bridge_slave_1: left allmulticast mode [ 401.871303][ T3806] bridge_slave_1: left promiscuous mode [ 401.878540][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.987120][ T3806] bridge_slave_0: left allmulticast mode [ 401.993860][ T3806] bridge_slave_0: left promiscuous mode [ 402.000452][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.795906][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.846184][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.872708][ T3806] bond0 (unregistering): Released all slaves [ 403.144403][ T5818] Bluetooth: hci1: command tx timeout [ 403.146942][ T6808] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 403.277197][ T6808] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 403.499647][ T6808] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 403.780082][ T6808] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 404.007701][ T6917] chnl_net:caif_netlink_parms(): no params data found [ 404.177996][ T3806] hsr_slave_0: left promiscuous mode [ 404.205359][ T3806] hsr_slave_1: left promiscuous mode [ 404.213635][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.224482][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.267229][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.275220][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.008160][ T6954] loop0: detected capacity change from 0 to 40427 [ 405.043136][ T6954] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff [ 405.056502][ T6954] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x2 [ 405.064825][ T6954] F2FS-fs (loop0): Image doesn't support compression [ 405.072556][ T6954] F2FS-fs (loop0): Image doesn't support compression [ 405.226658][ T5818] Bluetooth: hci1: command tx timeout [ 405.236550][ T6954] F2FS-fs (loop0): invalid crc value [ 405.637058][ T6954] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 405.804699][ T5818] Bluetooth: latency 28524 > 499 [ 406.022132][ T3806] veth1_macvtap: left promiscuous mode [ 406.028038][ T3806] veth0_macvtap: left promiscuous mode [ 406.033990][ T3806] veth1_vlan: left promiscuous mode [ 406.039811][ T3806] veth0_vlan: left promiscuous mode [ 406.064832][ T5800] syz-executor: attempt to access beyond end of device [ 406.064832][ T5800] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 406.082984][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 406.083130][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 406.083213][ T5800] Call Trace: [ 406.083266][ T5800] [ 406.083317][ T5800] __dump_stack+0x26/0x30 [ 406.083491][ T5800] dump_stack_lvl+0x1df/0x270 [ 406.083681][ T5800] dump_stack+0x1e/0x25 [ 406.083849][ T5800] f2fs_handle_critical_error+0xa6f/0xc20 [ 406.084043][ T5800] f2fs_stop_checkpoint+0x60/0x70 [ 406.084203][ T5800] f2fs_write_end_io+0xd98/0x1e20 [ 406.084389][ T5800] ? f2fs_write_end_io+0xa61/0x1e20 [ 406.084561][ T5800] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 406.084725][ T5800] bio_endio+0xe08/0xf60 [ 406.084892][ T5800] submit_bio_noacct+0x214/0x2710 [ 406.085106][ T5800] submit_bio+0x5a9/0x5d0 [ 406.085273][ T5800] f2fs_submit_write_bio+0x92/0x250 [ 406.085422][ T5800] __submit_merged_bio+0x16f/0x6a0 [ 406.085567][ T5800] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 406.085772][ T5800] __submit_merged_write_cond+0x458/0x9a0 [ 406.085940][ T5800] f2fs_write_data_pages+0x509a/0x58e0 [ 406.086231][ T5800] ? kmsan_get_metadata+0x105/0x1b0 [ 406.086411][ T5800] ? kmsan_get_metadata+0x105/0x1b0 [ 406.086584][ T5800] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 406.086775][ T5800] ? folios_put_refs+0x1/0xb10 [ 406.086923][ T5800] ? filter_irq_stacks+0x13f/0x190 [ 406.087114][ T5800] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 406.087290][ T5800] ? kmsan_get_metadata+0x105/0x1b0 [ 406.087469][ T5800] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 406.087655][ T5800] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 406.087822][ T5800] do_writepages+0x448/0xcb0 [ 406.087999][ T5800] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 406.088196][ T5800] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 406.088404][ T5800] filemap_fdatawrite+0x207/0x260 [ 406.088619][ T5800] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 406.088855][ T5800] f2fs_write_checkpoint+0xfe2/0x2b00 [ 406.089178][ T5800] kill_f2fs_super+0x2ff/0x970 [ 406.089383][ T5800] ? __pfx_kill_f2fs_super+0x10/0x10 [ 406.089567][ T5800] deactivate_locked_super+0xcb/0x3c0 [ 406.089746][ T5800] deactivate_super+0x12f/0x140 [ 406.089903][ T5800] cleanup_mnt+0x6fb/0x780 [ 406.090092][ T5800] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 406.090272][ T5800] ? __pfx___cleanup_mnt+0x10/0x10 [ 406.090452][ T5800] __cleanup_mnt+0x22/0x30 [ 406.090643][ T5800] task_work_run+0x209/0x2b0 [ 406.090826][ T5800] resume_user_mode_work+0x105/0x160 [ 406.090972][ T5800] syscall_exit_to_user_mode+0x7b/0xb0 [ 406.091160][ T5800] do_syscall_64+0xe6/0x1b0 [ 406.091343][ T5800] ? irqentry_exit+0x16/0x60 [ 406.091508][ T5800] ? clear_bhb_loop+0x40/0x90 [ 406.091661][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.091816][ T5800] RIP: 0033:0x7fd78178fc97 [ 406.091919][ T5800] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 406.092034][ T5800] RSP: 002b:00007fff8519fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 406.092170][ T5800] RAX: 0000000000000000 RBX: 00007fd78181089d RCX: 00007fd78178fc97 [ 406.092252][ T5800] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8519fdb0 [ 406.092336][ T5800] RBP: 00007fff8519fdb0 R08: 0000000000000000 R09: 0000000000000000 [ 406.092454][ T5800] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff851a0e40 [ 406.092549][ T5800] R13: 00007fd78181089d R14: 0000000000062ed0 R15: 00007fff851a0e80 [ 406.092679][ T5800] [ 406.444918][ T5800] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 407.302424][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 407.319470][ T5818] Bluetooth: hci1: command tx timeout [ 408.120149][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 408.187977][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 409.213216][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 409.221135][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.387278][ T6812] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 409.390268][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 409.545749][ T6812] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 409.685594][ T6812] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 409.789765][ T3806] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.817840][ T6978] input: syz0 as /devices/virtual/input/input10 [ 409.907111][ T6812] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 410.005009][ T3806] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.183021][ T3806] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.327202][ T3806] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.666538][ T6808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.118890][ T6917] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.126836][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.135269][ T6917] bridge_slave_0: entered allmulticast mode [ 411.144901][ T6917] bridge_slave_0: entered promiscuous mode [ 411.313794][ T6917] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.321679][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.329444][ T6917] bridge_slave_1: entered allmulticast mode [ 411.429482][ T6917] bridge_slave_1: entered promiscuous mode [ 411.481014][ T3806] bridge_slave_1: left allmulticast mode [ 411.486925][ T3806] bridge_slave_1: left promiscuous mode [ 411.494130][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.540216][ T3806] bridge_slave_0: left allmulticast mode [ 411.546355][ T3806] bridge_slave_0: left promiscuous mode [ 411.553712][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.134065][ T3806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.168461][ T3806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.192634][ T3806] bond0 (unregistering): Released all slaves [ 412.318352][ T6808] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.471073][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.478656][ T3642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.679995][ T6917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.713961][ T6917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.926583][ T3847] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.934222][ T3847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.463457][ T6917] team0: Port device team_slave_0 added [ 413.721433][ T6917] team0: Port device team_slave_1 added [ 414.020350][ T7004] loop1: detected capacity change from 0 to 128 [ 414.116199][ T3806] hsr_slave_0: left promiscuous mode [ 414.152350][ T3806] hsr_slave_1: left promiscuous mode [ 414.160560][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.170638][ T7007] loop0: detected capacity change from 0 to 1024 [ 414.178643][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.233536][ T3806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.241377][ T3806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.291717][ T7004] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 414.300519][ T7004] System zones: 1-3, 19-19, 35-36 [ 414.346017][ T3806] veth1_macvtap: left promiscuous mode [ 414.351823][ T3806] veth0_macvtap: left promiscuous mode [ 414.358211][ T3806] veth1_vlan: left promiscuous mode [ 414.364905][ T3806] veth0_vlan: left promiscuous mode [ 414.667890][ T7004] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 414.725545][ T7004] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 415.053203][ T5818] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 415.060308][ T5818] Bluetooth: hci2: unexpected event for opcode 0x203e [ 415.163649][ T7007] EXT4-fs: Ignoring removed orlov option [ 415.170242][ T7007] journal_path: Non-blockdev passed as './file0' [ 415.177216][ T7007] EXT4-fs: error: could not find journal device path [ 415.291241][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 415.393595][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 415.622885][ T5861] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 415.966429][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.973949][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.000620][ T6917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.073458][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 416.085753][ T5861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.096475][ T5861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.176233][ T5861] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.185870][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.194396][ T5861] usb 2-1: Product: syz [ 416.198804][ T5861] usb 2-1: Manufacturer: syz [ 416.203806][ T5861] usb 2-1: SerialNumber: syz [ 416.290871][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.298552][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.325350][ T6917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.434577][ T6812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.787911][ T6812] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.370544][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.378200][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.420445][ T6917] hsr_slave_0: entered promiscuous mode [ 417.430667][ T6917] hsr_slave_1: entered promiscuous mode [ 417.439267][ T6917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.447196][ T6917] Cannot create hsr debugfs directory [ 417.527525][ T5861] usb 2-1: 0:2 : does not exist [ 417.573189][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.580872][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.674998][ T5806] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.714913][ T5861] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 418.001642][ T5861] usb 2-1: USB disconnect, device number 5 [ 418.532631][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.408791][ T6808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.769372][ T6917] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 419.859895][ T6917] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 420.008430][ T6917] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 420.123873][ T6917] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 420.326015][ T5861] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 420.522586][ T6812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.525283][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 420.599062][ T5861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 420.608683][ T5861] usb 2-1: config 0 interface 0 has no altsetting 1 [ 420.776046][ T5861] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 420.786656][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 420.796181][ T5861] usb 2-1: SerialNumber: syz [ 420.896582][ T5861] usb 2-1: config 0 descriptor?? [ 420.989775][ T5861] usb-storage 2-1:0.0: USB Mass Storage device detected [ 421.058721][ T5861] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 421.527885][ T6917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.581329][ T7049] loop1: detected capacity change from 0 to 2048 [ 421.770144][ T6917] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.912048][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.919741][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.051658][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.059338][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.131928][ T7068] input: syz0 as /devices/virtual/input/input11 [ 422.260366][ T7049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.350909][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 422.709611][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 422.914118][ T7049] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20) [ 422.921058][ T7049] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 422.930063][ T7049] vhci_hcd vhci_hcd.0: Device attached [ 423.034521][ T6808] veth0_vlan: entered promiscuous mode [ 423.035131][ T7079] vhci_hcd: connection closed [ 423.058823][ T12] vhci_hcd: stop threads [ 423.068278][ T12] vhci_hcd: release socket [ 423.072912][ T12] vhci_hcd: disconnect device [ 423.162498][ T5860] usb 2-1: USB disconnect, device number 6 [ 423.184174][ T6808] veth1_vlan: entered promiscuous mode [ 423.624719][ T6808] veth0_macvtap: entered promiscuous mode [ 423.742668][ T6808] veth1_macvtap: entered promiscuous mode [ 424.014849][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.128621][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.233864][ T6808] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.243317][ T6808] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.252572][ T6808] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.262011][ T6808] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.286369][ T6812] veth0_vlan: entered promiscuous mode [ 424.393274][ T6812] veth1_vlan: entered promiscuous mode [ 424.553218][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.752220][ T6917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.787168][ T6812] veth0_macvtap: entered promiscuous mode [ 424.883995][ T6812] veth1_macvtap: entered promiscuous mode [ 425.187207][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.283977][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.420451][ T6812] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.429662][ T6812] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.439011][ T6812] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.448171][ T6812] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.839539][ T6917] veth0_vlan: entered promiscuous mode [ 428.003500][ T6917] veth1_vlan: entered promiscuous mode [ 428.505495][ T6917] veth0_macvtap: entered promiscuous mode [ 428.579234][ T7147] input: syz0 as /devices/virtual/input/input12 [ 428.626568][ T6917] veth1_macvtap: entered promiscuous mode [ 428.698110][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 428.878494][ T6917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.032035][ T6917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.134966][ T6917] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.144179][ T6917] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.153454][ T6917] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.162726][ T6917] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.349627][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.358058][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.708309][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.716402][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.775385][ T7210] loop0: detected capacity change from 0 to 4096 [ 433.942140][ T7210] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 434.041433][ T7210] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 434.259992][ T7210] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 434.263487][ T7222] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 434.359878][ T7210] Remounting filesystem read-only [ 434.468437][ T4052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.476606][ T4052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.734380][ T7226] input: syz0 as /devices/virtual/input/input13 [ 434.911286][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.920167][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.160261][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.176124][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.193839][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.253170][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.338577][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 437.294143][ T7250] loop1: detected capacity change from 0 to 256 [ 437.674652][ T7248] loop0: detected capacity change from 0 to 32768 [ 437.801547][ T7248] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 438.390614][ T7250] exFAT-fs (loop1): start_clu is invalid cluster(0x400) [ 438.422773][ T7248] XFS (loop0): Ending clean mount [ 438.431506][ T7248] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0xaf/0x2d0, xfs_finobt block 0x20 [ 438.443229][ T7248] XFS (loop0): Unmount and run xfs_repair [ 438.449268][ T7248] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 438.456935][ T7248] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 438.457352][ T5818] Bluetooth: hci3: command tx timeout [ 438.467912][ T7248] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 438.468029][ T7248] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 438.468225][ T7248] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 438.468341][ T7248] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 438.468452][ T7248] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 438.468572][ T7248] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 438.468685][ T7248] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 438.468796][ T7248] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x20 len 8 error 74 [ 438.469734][ T7248] XFS (loop0): Failed to initialize disk quotas, err -117. [ 438.726331][ T7248] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 438.736444][ T7248] netlink: 32 bytes leftover after parsing attributes in process `syz.0.266'. [ 438.954704][ T5800] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 439.019073][ T5800] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 439.705499][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.713805][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.756743][ T7239] chnl_net:caif_netlink_parms(): no params data found [ 440.066677][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.074942][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.521688][ T5818] Bluetooth: hci3: command tx timeout [ 440.564706][ T4335] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.846640][ T4335] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.109268][ T4335] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.374961][ T4335] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.323314][ T4335] bridge_slave_1: left allmulticast mode [ 442.329744][ T4335] bridge_slave_1: left promiscuous mode [ 442.336478][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.576997][ T4335] bridge_slave_0: left allmulticast mode [ 442.585407][ T4335] bridge_slave_0: left promiscuous mode [ 442.594787][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.602149][ T5818] Bluetooth: hci3: command tx timeout [ 443.339621][ T11] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 443.559479][ T11] usb 9-1: Using ep0 maxpacket: 32 [ 443.611754][ T11] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 443.621086][ T11] usb 9-1: config 0 interface 0 has no altsetting 1 [ 443.695023][ T11] usb 9-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 443.704932][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 443.713445][ T11] usb 9-1: SerialNumber: syz [ 443.882622][ T11] usb 9-1: config 0 descriptor?? [ 444.004166][ T11] usb-storage 9-1:0.0: USB Mass Storage device detected [ 444.067392][ T11] usb-storage 9-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 444.184064][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.281879][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.345265][ T4335] bond0 (unregistering): Released all slaves [ 444.651438][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.659176][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.666970][ T7239] bridge_slave_0: entered allmulticast mode [ 444.676797][ T7239] bridge_slave_0: entered promiscuous mode [ 444.681502][ T7304] loop8: detected capacity change from 0 to 2048 [ 444.697524][ T5818] Bluetooth: hci3: command tx timeout [ 444.723766][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.731940][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.739957][ T7239] bridge_slave_1: entered allmulticast mode [ 444.749761][ T7239] bridge_slave_1: entered promiscuous mode [ 444.906717][ T7304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.072540][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.8.275'. [ 445.216110][ T5424] usb 9-1: USB disconnect, device number 2 [ 445.529606][ T7239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.829439][ T7239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.955396][ T4335] hsr_slave_0: left promiscuous mode [ 445.970428][ T4335] hsr_slave_1: left promiscuous mode [ 445.978657][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.986653][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.061679][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.070046][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.205805][ T4335] veth1_macvtap: left promiscuous mode [ 446.217561][ T4335] veth0_macvtap: left promiscuous mode [ 446.225772][ T4335] veth1_vlan: left promiscuous mode [ 446.231501][ T4335] veth0_vlan: left promiscuous mode [ 446.247639][ T6917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.801821][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 447.805292][ T7343] loop0: detected capacity change from 0 to 1024 [ 447.871276][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 447.891752][ T7343] EXT4-fs: Ignoring removed bh option [ 448.278891][ T7343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 448.556708][ T7353] loop7: detected capacity change from 0 to 256 [ 448.986529][ T7239] team0: Port device team_slave_0 added [ 449.157700][ T7239] team0: Port device team_slave_1 added [ 449.160142][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 449.564352][ T7353] FAT-fs (loop7): Directory bread(block 64) failed [ 449.571674][ T7353] FAT-fs (loop7): Directory bread(block 65) failed [ 449.578573][ T7353] FAT-fs (loop7): Directory bread(block 66) failed [ 449.585580][ T7353] FAT-fs (loop7): Directory bread(block 67) failed [ 449.592919][ T7353] FAT-fs (loop7): Directory bread(block 68) failed [ 449.599858][ T7353] FAT-fs (loop7): Directory bread(block 69) failed [ 449.606886][ T7353] FAT-fs (loop7): Directory bread(block 70) failed [ 449.613912][ T7353] FAT-fs (loop7): Directory bread(block 71) failed [ 449.621164][ T7353] FAT-fs (loop7): Directory bread(block 72) failed [ 449.629965][ T7353] FAT-fs (loop7): Directory bread(block 73) failed [ 449.679623][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.686819][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.713641][ T7239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.987916][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.999919][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.026717][ T7239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.172686][ T7360] loop1: detected capacity change from 0 to 256 [ 450.347331][ T7364] input: syz0 as /devices/virtual/input/input14 [ 450.381893][ T7360] exFAT-fs (loop1): start_clu is invalid cluster(0x400) [ 450.567088][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.8.288'. [ 450.772721][ T7239] hsr_slave_0: entered promiscuous mode [ 450.783187][ T7239] hsr_slave_1: entered promiscuous mode [ 450.792610][ T7239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.802605][ T7239] Cannot create hsr debugfs directory [ 452.367842][ T7382] loop0: detected capacity change from 0 to 1024 [ 452.462427][ T7382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 452.661752][ T7382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.246445][ T7239] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 453.357465][ T7392] loop8: detected capacity change from 0 to 1024 [ 453.398457][ T7239] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 453.431925][ T7392] EXT4-fs: Ignoring removed bh option [ 453.457845][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.492698][ T7239] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 453.572394][ T7392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 453.591010][ T7239] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 454.190506][ T6917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 454.345271][ T5861] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 454.560119][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 454.623876][ T5861] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 454.633487][ T5861] usb 2-1: config 0 interface 0 has no altsetting 1 [ 454.676720][ T5861] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 454.686632][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 454.695161][ T5861] usb 2-1: SerialNumber: syz [ 454.728925][ T7239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.768221][ T5861] usb 2-1: config 0 descriptor?? [ 454.815919][ T5861] usb-storage 2-1:0.0: USB Mass Storage device detected [ 454.922813][ T5861] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 454.946020][ T7239] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.983799][ T4052] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.991472][ T4052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.209430][ T4052] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.217108][ T4052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.538114][ T7404] loop1: detected capacity change from 0 to 2048 [ 455.726800][ T30] audit: type=1800 audit(1747705019.507:75): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.298" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 455.913948][ T7404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.989637][ T5861] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 456.131287][ T5424] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 456.141003][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 456.228276][ T5861] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.240556][ T5861] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 456.262043][ T5861] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.272439][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 456.281089][ T5861] usb 1-1: SerialNumber: syz [ 456.309675][ T5424] usb 9-1: device descriptor read/64, error -71 [ 456.384708][ T2026] usb 2-1: USB disconnect, device number 7 [ 456.550910][ T5424] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 456.751038][ T5424] usb 9-1: device descriptor read/64, error -71 [ 456.867288][ T5424] usb usb9-port1: attempt power cycle [ 457.312124][ T5424] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 457.378850][ T5424] usb 9-1: device descriptor read/8, error -71 [ 457.382871][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.629751][ T5424] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 457.741178][ T5424] usb 9-1: device descriptor read/8, error -71 [ 457.910708][ T5424] usb usb9-port1: unable to enumerate USB device [ 458.819166][ T7239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.951181][ T5818] Bluetooth: latency 28524 > 499 [ 460.324418][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.334905][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.515219][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.526083][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.000629][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 461.007960][ T5424] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 461.055259][ T7455] loop8: detected capacity change from 0 to 1024 [ 461.088241][ T7455] EXT4-fs: Ignoring removed bh option [ 461.225592][ T5424] usb 2-1: Using ep0 maxpacket: 8 [ 461.273162][ T5424] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.293062][ T7455] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 461.331017][ T5424] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 461.340954][ T5424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.349389][ T5424] usb 2-1: Product: syz [ 461.354240][ T5424] usb 2-1: Manufacturer: syz [ 461.359264][ T5424] usb 2-1: SerialNumber: syz [ 461.433596][ T5861] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 461.489109][ T5424] usb 2-1: config 0 descriptor?? [ 461.538150][ T5424] comedi comedi0: Wrong number of endpoints [ 461.544510][ T5424] dt9812 2-1:0.0: driver 'dt9812' failed to auto-configure device. [ 462.013483][ T6917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 462.439285][ T5424] usb 2-1: USB disconnect, device number 8 [ 463.202834][ T7239] veth0_vlan: entered promiscuous mode [ 463.327739][ T7483] netlink: 72 bytes leftover after parsing attributes in process `syz.7.310'. [ 463.334074][ T7239] veth1_vlan: entered promiscuous mode [ 463.710081][ T7239] veth0_macvtap: entered promiscuous mode [ 463.767658][ T7239] veth1_macvtap: entered promiscuous mode [ 464.198921][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.221235][ T30] audit: type=1800 audit(1747705028.027:76): pid=7488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.313" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 464.343481][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.491310][ T7239] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.501063][ T7239] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.510271][ T7239] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.519306][ T7239] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.534212][ T7493] input: syz0 as /devices/virtual/input/input15 [ 464.745009][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 465.305833][ T7501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.316670][ T7501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.328003][ T7498] overlayfs: conflicting options: userxattr,redirect_dir=on [ 465.948170][ T7509] FAULT_INJECTION: forcing a failure. [ 465.948170][ T7509] name failslab, interval 1, probability 0, space 0, times 0 [ 465.961566][ T7509] CPU: 0 UID: 0 PID: 7509 Comm: syz.1.319 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 465.961697][ T7509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.961773][ T7509] Call Trace: [ 465.961820][ T7509] [ 465.961865][ T7509] __dump_stack+0x26/0x30 [ 465.962018][ T7509] dump_stack_lvl+0x1df/0x270 [ 465.962192][ T7509] dump_stack+0x1e/0x25 [ 465.962338][ T7509] should_fail_ex+0x7dc/0x8a0 [ 465.962537][ T7509] should_failslab+0x15b/0x200 [ 465.962750][ T7509] __kmalloc_noprof+0x182/0x1310 [ 465.962904][ T7509] ? tomoyo_encode+0x626/0xa10 [ 465.963038][ T7509] ? prepend_path+0xff2/0x10c0 [ 465.963232][ T7509] ? kmsan_get_metadata+0x105/0x1b0 [ 465.963432][ T7509] ? kmsan_get_metadata+0x105/0x1b0 [ 465.963669][ T7509] tomoyo_encode+0x626/0xa10 [ 465.963829][ T7509] tomoyo_realpath_from_path+0x92e/0x9f0 [ 465.964004][ T7509] tomoyo_path_number_perm+0x1d0/0x7d0 [ 465.964182][ T7509] ? stack_depot_save_flags+0x35/0x7c0 [ 465.964335][ T7509] ? kmsan_get_metadata+0x105/0x1b0 [ 465.964514][ T7509] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 465.964739][ T7509] tomoyo_file_ioctl+0x3d/0x50 [ 465.964877][ T7509] security_file_ioctl+0x141/0x590 [ 465.965036][ T7509] __se_sys_ioctl+0xbb/0x400 [ 465.965192][ T7509] __x64_sys_ioctl+0x97/0xe0 [ 465.965343][ T7509] x64_sys_call+0x1ebe/0x3db0 [ 465.965512][ T7509] do_syscall_64+0xd9/0x1b0 [ 465.965726][ T7509] ? irqentry_exit+0x16/0x60 [ 465.965907][ T7509] ? clear_bhb_loop+0x40/0x90 [ 465.966058][ T7509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.966229][ T7509] RIP: 0033:0x7f071d38e969 [ 465.966350][ T7509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.966470][ T7509] RSP: 002b:00007f071e250038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.966610][ T7509] RAX: ffffffffffffffda RBX: 00007f071d5b5fa0 RCX: 00007f071d38e969 [ 465.966717][ T7509] RDX: 0000000000000000 RSI: 00000000000007a4 RDI: 0000000000000003 [ 465.966804][ T7509] RBP: 00007f071e250090 R08: 0000000000000000 R09: 0000000000000000 [ 465.966894][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.966982][ T7509] R13: 0000000000000000 R14: 00007f071d5b5fa0 R15: 00007ffe502d78a8 [ 465.967121][ T7509] [ 465.967225][ T7509] ERROR: Out of memory at tomoyo_realpath_from_path. [ 466.168742][ T7507] loop8: detected capacity change from 0 to 1024 [ 466.275775][ T7507] EXT4-fs: Ignoring removed bh option [ 466.492415][ T7507] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 467.026353][ T6917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 467.113709][ T7521] loop1: detected capacity change from 0 to 1024 [ 467.176427][ T7525] FAULT_INJECTION: forcing a failure. [ 467.176427][ T7525] name failslab, interval 1, probability 0, space 0, times 0 [ 467.189698][ T7525] CPU: 0 UID: 0 PID: 7525 Comm: syz.0.322 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 467.189834][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.189911][ T7525] Call Trace: [ 467.189970][ T7525] [ 467.190014][ T7525] __dump_stack+0x26/0x30 [ 467.190174][ T7525] dump_stack_lvl+0x1df/0x270 [ 467.190339][ T7525] dump_stack+0x1e/0x25 [ 467.190480][ T7525] should_fail_ex+0x7dc/0x8a0 [ 467.190650][ T7525] should_failslab+0x15b/0x200 [ 467.190842][ T7525] kmem_cache_alloc_noprof+0xf0/0xec0 [ 467.190994][ T7525] ? fuse_get_req+0xcfa/0x1960 [ 467.191144][ T7525] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 467.191318][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.191514][ T7525] fuse_get_req+0xcfa/0x1960 [ 467.191674][ T7525] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 467.191849][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.192091][ T7525] __fuse_simple_request+0x418/0x2940 [ 467.192257][ T7525] ? stack_depot_save_flags+0x60f/0x7c0 [ 467.192430][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.192631][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.192845][ T7525] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 467.193066][ T7525] fuse_do_getattr+0x34a/0xa20 [ 467.193359][ T7525] fuse_update_get_attr+0x444/0x1c00 [ 467.193576][ T7525] ? __rcu_read_unlock+0x6d/0xd0 [ 467.193767][ T7525] ? is_module_text_address+0x1f4/0x240 [ 467.193956][ T7525] ? kernel_text_address+0x10e/0x1a0 [ 467.194119][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.194322][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.194503][ T7525] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 467.194699][ T7525] ? __rcu_read_unlock+0x6d/0xd0 [ 467.194867][ T7525] ? aa_file_perm+0x24c/0x18d0 [ 467.195068][ T7525] ? aa_file_perm+0x378/0x18d0 [ 467.195245][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.195426][ T7525] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 467.195626][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.195854][ T7525] fuse_update_attributes+0x4a/0x60 [ 467.196052][ T7525] fuse_file_write_iter+0x7e5/0x1c30 [ 467.196216][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.196418][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.196596][ T7525] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 467.196785][ T7525] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 467.196937][ T7525] aio_write+0x701/0xa00 [ 467.197132][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.197322][ T7525] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 467.197503][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.197694][ T7525] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 467.197903][ T7525] io_submit_one+0x25da/0x3420 [ 467.198076][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.198304][ T7525] __se_sys_io_submit+0x27c/0x6a0 [ 467.198440][ T7525] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 467.198625][ T7525] ? kmsan_get_metadata+0x105/0x1b0 [ 467.198839][ T7525] __x64_sys_io_submit+0x97/0xe0 [ 467.198994][ T7525] x64_sys_call+0x12c8/0x3db0 [ 467.199176][ T7525] do_syscall_64+0xd9/0x1b0 [ 467.199368][ T7525] ? irqentry_exit+0x16/0x60 [ 467.199539][ T7525] ? clear_bhb_loop+0x40/0x90 [ 467.199680][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.199818][ T7525] RIP: 0033:0x7fd78178e969 [ 467.199915][ T7525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.200035][ T7525] RSP: 002b:00007fd782538038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 467.200157][ T7525] RAX: ffffffffffffffda RBX: 00007fd7819b5fa0 RCX: 00007fd78178e969 [ 467.200254][ T7525] RDX: 0000200000000700 RSI: 0000000000000001 RDI: 00007fd7824f6000 [ 467.200341][ T7525] RBP: 00007fd782538090 R08: 0000000000000000 R09: 0000000000000000 [ 467.200421][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.200498][ T7525] R13: 0000000000000000 R14: 00007fd7819b5fa0 R15: 00007fff851a0a68 [ 467.200615][ T7525] [ 467.816498][ T7521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.877491][ T7520] loop7: detected capacity change from 0 to 64 [ 468.035256][ T7521] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 468.456939][ T30] audit: type=1800 audit(1747705032.227:77): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.320" name="file1" dev="loop7" ino=18 res=0 errno=0 [ 468.868726][ T7533] loop8: detected capacity change from 0 to 32768 [ 468.878532][ T7533] btrfs: Unknown parameter 'fragment' [ 470.535287][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.649306][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.657316][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.770257][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 471.040851][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 471.118408][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.132154][ T9] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 471.143337][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.317674][ T9] usb 8-1: config 0 descriptor?? [ 472.029722][ T9] uclogic 0003:28BD:0042.0004: interface is invalid, ignoring [ 472.373260][ T5861] usb 8-1: USB disconnect, device number 2 [ 472.679036][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.690209][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.788277][ T7580] FAULT_INJECTION: forcing a failure. [ 472.788277][ T7580] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 472.802656][ T7580] CPU: 1 UID: 0 PID: 7580 Comm: syz.0.330 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 472.802801][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.802888][ T7580] Call Trace: [ 472.802939][ T7580] [ 472.802989][ T7580] __dump_stack+0x26/0x30 [ 472.803166][ T7580] dump_stack_lvl+0x1df/0x270 [ 472.803352][ T7580] dump_stack+0x1e/0x25 [ 472.803519][ T7580] should_fail_ex+0x7dc/0x8a0 [ 472.803705][ T7580] should_fail+0x2a/0x40 [ 472.803865][ T7580] should_fail_usercopy+0x2e/0x40 [ 472.804027][ T7580] _copy_from_user+0x33/0x100 [ 472.804181][ T7580] kstrtouint_from_user+0x75/0x140 [ 472.804374][ T7580] ? proc_fail_nth_write+0x43/0x300 [ 472.804515][ T7580] ? vfs_write+0x463/0x1560 [ 472.804687][ T7580] proc_fail_nth_write+0x61/0x300 [ 472.804825][ T7580] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 472.805032][ T7580] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 472.805176][ T7580] vfs_write+0x463/0x1560 [ 472.805341][ T7580] ? stack_depot_save_flags+0x35/0x7c0 [ 472.805497][ T7580] ? kmsan_get_metadata+0x105/0x1b0 [ 472.805691][ T7580] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 472.805902][ T7580] __x64_sys_write+0x1fb/0x4d0 [ 472.806090][ T7580] x64_sys_call+0x38c3/0x3db0 [ 472.806274][ T7580] do_syscall_64+0xd9/0x1b0 [ 472.806460][ T7580] ? irqentry_exit+0x16/0x60 [ 472.806614][ T7580] ? clear_bhb_loop+0x40/0x90 [ 472.806757][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.806895][ T7580] RIP: 0033:0x7fd78178d41f [ 472.806992][ T7580] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 472.807105][ T7580] RSP: 002b:00007fd782538030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 472.807250][ T7580] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd78178d41f [ 472.807345][ T7580] RDX: 0000000000000001 RSI: 00007fd7825380a0 RDI: 0000000000000004 [ 472.807437][ T7580] RBP: 00007fd782538090 R08: 0000000000000000 R09: 0000000000000000 [ 472.807525][ T7580] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 472.807609][ T7580] R13: 0000000000000000 R14: 00007fd7819b5fa0 R15: 00007fff851a0a68 [ 472.807734][ T7580] [ 472.880202][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 473.185695][ T7583] loop1: detected capacity change from 0 to 1024 [ 473.271751][ T7586] /dev/nullb0: Can't open blockdev [ 473.286808][ T7583] EXT4-fs: Ignoring removed bh option [ 473.396253][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 473.404914][ T9] usb 9-1: config 0 has no interface number 0 [ 473.437645][ T9] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 473.447234][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.455999][ T9] usb 9-1: Product: syz [ 473.460509][ T9] usb 9-1: Manufacturer: syz [ 473.465345][ T9] usb 9-1: SerialNumber: syz [ 473.515705][ T7583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 473.542299][ T7586] loop0: detected capacity change from 0 to 2048 [ 473.681771][ T7586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.713061][ T9] usb 9-1: config 0 descriptor?? [ 473.937822][ T9] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 473.937880][ T7586] EXT4-fs (loop0): shut down requested (0) [ 474.028899][ T9] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 474.043749][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 474.052960][ T9] usb 9-1: media controller created [ 474.124119][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.135195][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.243501][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.371232][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 475.089527][ T7605] loop1: detected capacity change from 0 to 256 [ 475.197476][ T7605] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 475.213480][ T7605] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 475.314506][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 475.392955][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.439217][ T7605] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 476.265620][ T9] usb 9-1: USB disconnect, device number 7 [ 476.465180][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.474374][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.707420][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.716706][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.026250][ T30] audit: type=1800 audit(1747705040.787:78): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.336" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 477.052084][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.062256][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.292641][ T7642] loop6: detected capacity change from 0 to 1024 [ 480.391887][ T7642] EXT4-fs: Ignoring removed bh option [ 480.611234][ T7642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 481.733435][ T7239] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 481.897365][ T7662] FAULT_INJECTION: forcing a failure. [ 481.897365][ T7662] name failslab, interval 1, probability 0, space 0, times 0 [ 481.912934][ T7662] CPU: 1 UID: 0 PID: 7662 Comm: syz.8.348 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 481.913082][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.913169][ T7662] Call Trace: [ 481.913221][ T7662] [ 481.913275][ T7662] __dump_stack+0x26/0x30 [ 481.913449][ T7662] dump_stack_lvl+0x1df/0x270 [ 481.913651][ T7662] dump_stack+0x1e/0x25 [ 481.913808][ T7662] should_fail_ex+0x7dc/0x8a0 [ 481.913986][ T7662] should_failslab+0x15b/0x200 [ 481.914188][ T7662] kmem_cache_alloc_noprof+0xf0/0xec0 [ 481.914341][ T7662] ? skb_clone+0x3ca/0x580 [ 481.914523][ T7662] ? kmsan_get_metadata+0x105/0x1b0 [ 481.914734][ T7662] skb_clone+0x3ca/0x580 [ 481.914921][ T7662] __netlink_deliver_tap+0x695/0xdd0 [ 481.915115][ T7662] ? kmsan_get_metadata+0x105/0x1b0 [ 481.915319][ T7662] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 481.915528][ T7662] netlink_unicast+0x118a/0x1290 [ 481.915720][ T7662] netlink_sendmsg+0x10b3/0x1250 [ 481.915923][ T7662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.916096][ T7662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.916273][ T7662] __sock_sendmsg+0x333/0x3d0 [ 481.916416][ T7662] ____sys_sendmsg+0x7e0/0xd80 [ 481.916625][ T7662] ___sys_sendmsg+0x271/0x3b0 [ 481.916829][ T7662] ? __rcu_read_unlock+0x6d/0xd0 [ 481.917011][ T7662] ? __fget_files+0x3b4/0x4a0 [ 481.917193][ T7662] ? __fget_files+0x3b9/0x4a0 [ 481.917387][ T7662] ? kmsan_get_metadata+0x105/0x1b0 [ 481.917566][ T7662] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 481.917768][ T7662] __x64_sys_sendmsg+0x211/0x3e0 [ 481.917976][ T7662] ? kmsan_get_metadata+0x105/0x1b0 [ 481.918183][ T7662] x64_sys_call+0x32fb/0x3db0 [ 481.918365][ T7662] do_syscall_64+0xd9/0x1b0 [ 481.918551][ T7662] ? irqentry_exit+0x16/0x60 [ 481.918730][ T7662] ? clear_bhb_loop+0x40/0x90 [ 481.918870][ T7662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.919011][ T7662] RIP: 0033:0x7f42c5d8e969 [ 481.919109][ T7662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.919223][ T7662] RSP: 002b:00007f42c6cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.919345][ T7662] RAX: ffffffffffffffda RBX: 00007f42c5fb5fa0 RCX: 00007f42c5d8e969 [ 481.919441][ T7662] RDX: 0000000000004050 RSI: 0000200000000280 RDI: 0000000000000003 [ 481.919526][ T7662] RBP: 00007f42c6cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 481.919607][ T7662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.919691][ T7662] R13: 0000000000000000 R14: 00007f42c5fb5fa0 R15: 00007fffa07dc9b8 [ 481.919808][ T7662] [ 482.283388][ T7659] loop1: detected capacity change from 0 to 32768 [ 482.486594][ T7659] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 482.532498][ T7659] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #75: fs_generation is 3 [ 482.547851][ T7659] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 482.558046][ T7659] OCFS2: File system is now read-only. [ 482.563838][ T7659] (syz.1.349,7659,0):ocfs2_read_locked_inode:535 ERROR: status = -30 [ 482.574117][ T7659] (syz.1.349,7659,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 482.584900][ T7659] (syz.1.349,7659,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=10, slot=0 [ 482.595601][ T7659] (syz.1.349,7659,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 482.608319][ T7659] (syz.1.349,7659,0):ocfs2_mount_volume:1758 ERROR: status = -30 [ 482.618655][ T7659] (syz.1.349,7659,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 482.831396][ T7668] x_tables: unsorted entry at hook 3 [ 483.162592][ T7673] FAULT_INJECTION: forcing a failure. [ 483.162592][ T7673] name failslab, interval 1, probability 0, space 0, times 0 [ 483.175813][ T7673] CPU: 0 UID: 0 PID: 7673 Comm: syz.6.351 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 483.175957][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.176043][ T7673] Call Trace: [ 483.176091][ T7673] [ 483.176139][ T7673] __dump_stack+0x26/0x30 [ 483.176312][ T7673] dump_stack_lvl+0x1df/0x270 [ 483.176493][ T7673] dump_stack+0x1e/0x25 [ 483.176659][ T7673] should_fail_ex+0x7dc/0x8a0 [ 483.176857][ T7673] should_failslab+0x15b/0x200 [ 483.177089][ T7673] kmem_cache_alloc_noprof+0xf0/0xec0 [ 483.177252][ T7673] ? skb_clone+0x3ca/0x580 [ 483.177441][ T7673] ? kmsan_get_metadata+0x105/0x1b0 [ 483.177662][ T7673] skb_clone+0x3ca/0x580 [ 483.177856][ T7673] __netlink_deliver_tap+0x695/0xdd0 [ 483.178055][ T7673] ? kmsan_get_metadata+0x105/0x1b0 [ 483.178265][ T7673] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 483.178483][ T7673] netlink_unicast+0x118a/0x1290 [ 483.178682][ T7673] netlink_sendmsg+0x10b3/0x1250 [ 483.178901][ T7673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.179070][ T7673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.179246][ T7673] __sock_sendmsg+0x333/0x3d0 [ 483.179391][ T7673] ____sys_sendmsg+0x7e0/0xd80 [ 483.179604][ T7673] ___sys_sendmsg+0x271/0x3b0 [ 483.179805][ T7673] ? __rcu_read_unlock+0x6d/0xd0 [ 483.179988][ T7673] ? __fget_files+0x3b4/0x4a0 [ 483.180164][ T7673] ? __fget_files+0x3b9/0x4a0 [ 483.180340][ T7673] ? kmsan_get_metadata+0x105/0x1b0 [ 483.180535][ T7673] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 483.180744][ T7673] __x64_sys_sendmsg+0x211/0x3e0 [ 483.180931][ T7673] ? kmsan_get_metadata+0x105/0x1b0 [ 483.181137][ T7673] x64_sys_call+0x32fb/0x3db0 [ 483.181319][ T7673] do_syscall_64+0xd9/0x1b0 [ 483.181502][ T7673] ? irqentry_exit+0x16/0x60 [ 483.181705][ T7673] ? clear_bhb_loop+0x40/0x90 [ 483.181859][ T7673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.182013][ T7673] RIP: 0033:0x7f02d318e969 [ 483.182119][ T7673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.182237][ T7673] RSP: 002b:00007f02d3f21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.182360][ T7673] RAX: ffffffffffffffda RBX: 00007f02d33b5fa0 RCX: 00007f02d318e969 [ 483.182463][ T7673] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 483.182546][ T7673] RBP: 00007f02d3f21090 R08: 0000000000000000 R09: 0000000000000000 [ 483.182633][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.182718][ T7673] R13: 0000000000000000 R14: 00007f02d33b5fa0 R15: 00007ffe7b8ae998 [ 483.182834][ T7673] [ 485.686675][ T7703] FAULT_INJECTION: forcing a failure. [ 485.686675][ T7703] name failslab, interval 1, probability 0, space 0, times 0 [ 485.699765][ T7703] CPU: 0 UID: 0 PID: 7703 Comm: syz.8.363 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 485.699911][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.699997][ T7703] Call Trace: [ 485.700049][ T7703] [ 485.700103][ T7703] __dump_stack+0x26/0x30 [ 485.700278][ T7703] dump_stack_lvl+0x1df/0x270 [ 485.700464][ T7703] dump_stack+0x1e/0x25 [ 485.700630][ T7703] should_fail_ex+0x7dc/0x8a0 [ 485.700814][ T7703] should_failslab+0x15b/0x200 [ 485.701028][ T7703] kmem_cache_alloc_noprof+0xf0/0xec0 [ 485.701188][ T7703] ? skb_clone+0x3ca/0x580 [ 485.701376][ T7703] ? kmsan_get_metadata+0x105/0x1b0 [ 485.701599][ T7703] skb_clone+0x3ca/0x580 [ 485.701789][ T7703] __netlink_deliver_tap+0x695/0xdd0 [ 485.701987][ T7703] ? kmsan_get_metadata+0x105/0x1b0 [ 485.702194][ T7703] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 485.702413][ T7703] netlink_unicast+0x118a/0x1290 [ 485.702611][ T7703] netlink_sendmsg+0x10b3/0x1250 [ 485.702822][ T7703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.703000][ T7703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.703181][ T7703] __sock_sendmsg+0x333/0x3d0 [ 485.703332][ T7703] ____sys_sendmsg+0x7e0/0xd80 [ 485.703554][ T7703] ___sys_sendmsg+0x271/0x3b0 [ 485.703760][ T7703] ? __rcu_read_unlock+0x6d/0xd0 [ 485.703948][ T7703] ? __fget_files+0x3b4/0x4a0 [ 485.704133][ T7703] ? __fget_files+0x3b9/0x4a0 [ 485.704329][ T7703] ? kmsan_get_metadata+0x105/0x1b0 [ 485.704526][ T7703] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 485.704734][ T7703] __x64_sys_sendmsg+0x211/0x3e0 [ 485.704934][ T7703] ? kmsan_get_metadata+0x105/0x1b0 [ 485.705149][ T7703] x64_sys_call+0x32fb/0x3db0 [ 485.705336][ T7703] do_syscall_64+0xd9/0x1b0 [ 485.705533][ T7703] ? irqentry_exit+0x16/0x60 [ 485.705707][ T7703] ? clear_bhb_loop+0x40/0x90 [ 485.705862][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.706017][ T7703] RIP: 0033:0x7f42c5d8e969 [ 485.706125][ T7703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.706250][ T7703] RSP: 002b:00007f42c6cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.706387][ T7703] RAX: ffffffffffffffda RBX: 00007f42c5fb5fa0 RCX: 00007f42c5d8e969 [ 485.706485][ T7703] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 485.706587][ T7703] RBP: 00007f42c6cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 485.706678][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.706760][ T7703] R13: 0000000000000000 R14: 00007f42c5fb5fa0 R15: 00007fffa07dc9b8 [ 485.706874][ T7703] [ 486.877350][ T7710] loop1: detected capacity change from 0 to 512 [ 487.036300][ T7710] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 487.117804][ T7710] EXT4-fs (loop1): invalid journal inode [ 488.172931][ T7730] FAULT_INJECTION: forcing a failure. [ 488.172931][ T7730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.187886][ T7730] CPU: 1 UID: 0 PID: 7730 Comm: syz.6.371 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 488.188037][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 488.188119][ T7730] Call Trace: [ 488.188170][ T7730] [ 488.188219][ T7730] __dump_stack+0x26/0x30 [ 488.188389][ T7730] dump_stack_lvl+0x1df/0x270 [ 488.188563][ T7730] dump_stack+0x1e/0x25 [ 488.188719][ T7730] should_fail_ex+0x7dc/0x8a0 [ 488.188892][ T7730] should_fail+0x2a/0x40 [ 488.189049][ T7730] should_fail_usercopy+0x2e/0x40 [ 488.189215][ T7730] _copy_to_user+0x35/0x120 [ 488.189365][ T7730] simple_read_from_buffer+0x1b2/0x340 [ 488.189556][ T7730] proc_fail_nth_read+0x1d2/0x2c0 [ 488.189702][ T7730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 488.189845][ T7730] vfs_read+0x279/0xef0 [ 488.189998][ T7730] ? stack_depot_save_flags+0x35/0x7c0 [ 488.190200][ T7730] ? kmsan_get_metadata+0x105/0x1b0 [ 488.190404][ T7730] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 488.190636][ T7730] __x64_sys_read+0x1fb/0x4d0 [ 488.190822][ T7730] x64_sys_call+0x39db/0x3db0 [ 488.191001][ T7730] do_syscall_64+0xd9/0x1b0 [ 488.191191][ T7730] ? irqentry_exit+0x16/0x60 [ 488.191354][ T7730] ? clear_bhb_loop+0x40/0x90 [ 488.191505][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.191650][ T7730] RIP: 0033:0x7f02d318d37c [ 488.191754][ T7730] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 488.191875][ T7730] RSP: 002b:00007f02d0ff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.192002][ T7730] RAX: ffffffffffffffda RBX: 00007f02d33b6080 RCX: 00007f02d318d37c [ 488.192107][ T7730] RDX: 000000000000000f RSI: 00007f02d0ff60a0 RDI: 0000000000000004 [ 488.192192][ T7730] RBP: 00007f02d0ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 488.192273][ T7730] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 488.192364][ T7730] R13: 0000000000000000 R14: 00007f02d33b6080 R15: 00007ffe7b8ae998 [ 488.192504][ T7730] [ 488.569275][ T7725] netlink: 72 bytes leftover after parsing attributes in process `syz.1.370'. [ 489.705268][ T7748] input: syz0 as /devices/virtual/input/input16 [ 491.172220][ T7768] netlink: 80 bytes leftover after parsing attributes in process `syz.0.380'. [ 491.184220][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.380'. [ 491.194182][ T7768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.380'. [ 492.071407][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 492.312088][ T7781] loop8: detected capacity change from 0 to 256 [ 492.346102][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 492.468138][ T9] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 492.476882][ T9] usb 8-1: can't read configurations, error -22 [ 492.615699][ T7784] netlink: 72 bytes leftover after parsing attributes in process `syz.0.387'. [ 492.748373][ T7781] FAT-fs (loop8): Directory bread(block 64) failed [ 492.755683][ T7781] FAT-fs (loop8): Directory bread(block 65) failed [ 492.763026][ T7781] FAT-fs (loop8): Directory bread(block 66) failed [ 492.769947][ T7781] FAT-fs (loop8): Directory bread(block 67) failed [ 492.776892][ T7781] FAT-fs (loop8): Directory bread(block 68) failed [ 492.783949][ T7781] FAT-fs (loop8): Directory bread(block 69) failed [ 492.790982][ T7781] FAT-fs (loop8): Directory bread(block 70) failed [ 492.797777][ T7781] FAT-fs (loop8): Directory bread(block 71) failed [ 492.804853][ T7781] FAT-fs (loop8): Directory bread(block 72) failed [ 492.811873][ T7781] FAT-fs (loop8): Directory bread(block 73) failed [ 492.844404][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 493.110826][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 493.125233][ T9] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 493.134375][ T9] usb 8-1: can't read configurations, error -22 [ 493.153236][ T9] usb usb8-port1: attempt power cycle [ 493.521758][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 493.655946][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 493.781736][ T9] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 493.790259][ T9] usb 8-1: can't read configurations, error -22 [ 493.833977][ T7798] input: syz0 as /devices/virtual/input/input17 [ 493.990224][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 494.001095][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 494.141524][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 494.230308][ T9] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 494.238674][ T9] usb 8-1: can't read configurations, error -22 [ 494.334767][ T9] usb usb8-port1: unable to enumerate USB device [ 494.527714][ T7802] FAULT_INJECTION: forcing a failure. [ 494.527714][ T7802] name failslab, interval 1, probability 0, space 0, times 0 [ 494.541059][ T7802] CPU: 1 UID: 0 PID: 7802 Comm: syz.8.392 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 494.541204][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.541288][ T7802] Call Trace: [ 494.541338][ T7802] [ 494.541387][ T7802] __dump_stack+0x26/0x30 [ 494.541573][ T7802] dump_stack_lvl+0x1df/0x270 [ 494.541747][ T7802] dump_stack+0x1e/0x25 [ 494.541900][ T7802] should_fail_ex+0x7dc/0x8a0 [ 494.542129][ T7802] should_failslab+0x15b/0x200 [ 494.542342][ T7802] kmem_cache_alloc_noprof+0xf0/0xec0 [ 494.542509][ T7802] ? skb_clone+0x3ca/0x580 [ 494.542702][ T7802] ? kmsan_get_metadata+0x105/0x1b0 [ 494.542919][ T7802] skb_clone+0x3ca/0x580 [ 494.543110][ T7802] __netlink_deliver_tap+0x695/0xdd0 [ 494.543311][ T7802] ? kmsan_get_metadata+0x105/0x1b0 [ 494.543522][ T7802] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 494.543754][ T7802] netlink_unicast+0x118a/0x1290 [ 494.543940][ T7802] netlink_sendmsg+0x10b3/0x1250 [ 494.544144][ T7802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.544316][ T7802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.544491][ T7802] __sock_sendmsg+0x333/0x3d0 [ 494.544644][ T7802] ____sys_sendmsg+0x7e0/0xd80 [ 494.544854][ T7802] ___sys_sendmsg+0x271/0x3b0 [ 494.545052][ T7802] ? __rcu_read_unlock+0x6d/0xd0 [ 494.545234][ T7802] ? __fget_files+0x3b4/0x4a0 [ 494.545413][ T7802] ? __fget_files+0x3b9/0x4a0 [ 494.545607][ T7802] ? kmsan_get_metadata+0x105/0x1b0 [ 494.545796][ T7802] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 494.546006][ T7802] __x64_sys_sendmsg+0x211/0x3e0 [ 494.546197][ T7802] ? kmsan_get_metadata+0x105/0x1b0 [ 494.546403][ T7802] x64_sys_call+0x32fb/0x3db0 [ 494.546607][ T7802] do_syscall_64+0xd9/0x1b0 [ 494.546803][ T7802] ? irqentry_exit+0x16/0x60 [ 494.546976][ T7802] ? clear_bhb_loop+0x40/0x90 [ 494.547134][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.547289][ T7802] RIP: 0033:0x7f42c5d8e969 [ 494.547398][ T7802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.547526][ T7802] RSP: 002b:00007f42c6cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.547667][ T7802] RAX: ffffffffffffffda RBX: 00007f42c5fb5fa0 RCX: 00007f42c5d8e969 [ 494.547772][ T7802] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000003 [ 494.547864][ T7802] RBP: 00007f42c6cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 494.547955][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.548041][ T7802] R13: 0000000000000000 R14: 00007f42c5fb5fa0 R15: 00007fffa07dc9b8 [ 494.548169][ T7802] [ 494.548315][ T7802] netlink: 16 bytes leftover after parsing attributes in process `syz.8.392'. [ 494.843147][ T7802] netlink: 16 bytes leftover after parsing attributes in process `syz.8.392'. [ 496.372095][ T7821] FAULT_INJECTION: forcing a failure. [ 496.372095][ T7821] name failslab, interval 1, probability 0, space 0, times 0 [ 496.386180][ T7821] CPU: 1 UID: 0 PID: 7821 Comm: syz.0.397 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 496.386321][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.386400][ T7821] Call Trace: [ 496.386453][ T7821] [ 496.386498][ T7821] __dump_stack+0x26/0x30 [ 496.386669][ T7821] dump_stack_lvl+0x1df/0x270 [ 496.386836][ T7821] dump_stack+0x1e/0x25 [ 496.386989][ T7821] should_fail_ex+0x7dc/0x8a0 [ 496.387157][ T7821] should_failslab+0x15b/0x200 [ 496.387356][ T7821] kmem_cache_alloc_node_noprof+0xf3/0xf00 [ 496.387519][ T7821] ? __alloc_skb+0x1e0/0x7d0 [ 496.387676][ T7821] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 496.387861][ T7821] ? kmsan_get_metadata+0x105/0x1b0 [ 496.388052][ T7821] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 496.388258][ T7821] __alloc_skb+0x1e0/0x7d0 [ 496.388430][ T7821] __ip6_append_data+0x4f4e/0x6ea0 [ 496.388627][ T7821] ? kmsan_get_metadata+0x20/0x1b0 [ 496.388811][ T7821] ? ip6_pol_route+0x9a5/0x1eb0 [ 496.389013][ T7821] ? __pfx_raw6_getfrag+0x10/0x10 [ 496.389333][ T7821] ip6_append_data+0x352/0x4e0 [ 496.389522][ T7821] ? __pfx_raw6_getfrag+0x10/0x10 [ 496.389730][ T7821] rawv6_sendmsg+0x28d6/0x2df0 [ 496.389928][ T7821] ? stack_depot_save_flags+0x35/0x7c0 [ 496.390081][ T7821] ? kmsan_get_metadata+0x105/0x1b0 [ 496.390359][ T7821] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 496.390550][ T7821] inet_sendmsg+0x26c/0x2a0 [ 496.390728][ T7821] __sock_sendmsg+0x278/0x3d0 [ 496.390895][ T7821] ____sys_sendmsg+0x893/0xd80 [ 496.391121][ T7821] ___sys_sendmsg+0x271/0x3b0 [ 496.391332][ T7821] ? stack_depot_save_flags+0x35/0x7c0 [ 496.391513][ T7821] ? kmsan_get_metadata+0x105/0x1b0 [ 496.391719][ T7821] ? kmsan_internal_check_memory+0xa3/0x570 [ 496.391915][ T7821] ? kmsan_get_metadata+0x105/0x1b0 [ 496.392120][ T7821] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 496.392318][ T7821] ? __cond_resched+0x15/0x130 [ 496.392504][ T7821] __sys_sendmmsg+0x2dc/0x7d0 [ 496.392690][ T7821] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 496.392886][ T7821] ? vfs_write+0x1342/0x1560 [ 496.393055][ T7821] ? kmsan_get_metadata+0x105/0x1b0 [ 496.393310][ T7821] __x64_sys_sendmmsg+0xc6/0x150 [ 496.393513][ T7821] x64_sys_call+0x3ce7/0x3db0 [ 496.393716][ T7821] do_syscall_64+0xd9/0x1b0 [ 496.393905][ T7821] ? irqentry_exit+0x16/0x60 [ 496.394097][ T7821] ? clear_bhb_loop+0x40/0x90 [ 496.394272][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.394421][ T7821] RIP: 0033:0x7fd78178e969 [ 496.394525][ T7821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.394653][ T7821] RSP: 002b:00007fd782538038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 496.394789][ T7821] RAX: ffffffffffffffda RBX: 00007fd7819b5fa0 RCX: 00007fd78178e969 [ 496.394889][ T7821] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 496.394977][ T7821] RBP: 00007fd782538090 R08: 0000000000000000 R09: 0000000000000000 [ 496.395064][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.395146][ T7821] R13: 0000000000000000 R14: 00007fd7819b5fa0 R15: 00007fff851a0a68 [ 496.395274][ T7821] [ 498.212433][ T7831] loop0: detected capacity change from 0 to 1024 [ 498.262867][ T7831] EXT4-fs: Ignoring removed bh option [ 498.584498][ T7831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 498.630251][ T7841] loop7: detected capacity change from 0 to 256 [ 498.738631][ T30] audit: type=1800 audit(1747705062.547:79): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.403" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 499.163771][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 499.390253][ T9] usb 9-1: device descriptor read/64, error -71 [ 499.512019][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 499.752286][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 499.947958][ T7841] FAT-fs (loop7): Directory bread(block 64) failed [ 499.955522][ T7841] FAT-fs (loop7): Directory bread(block 65) failed [ 499.962920][ T7841] FAT-fs (loop7): Directory bread(block 66) failed [ 499.969729][ T7841] FAT-fs (loop7): Directory bread(block 67) failed [ 499.970534][ T9] usb 9-1: device descriptor read/64, error -71 [ 499.976821][ T7841] FAT-fs (loop7): Directory bread(block 68) failed [ 499.992102][ T7841] FAT-fs (loop7): Directory bread(block 69) failed [ 499.999043][ T7841] FAT-fs (loop7): Directory bread(block 70) failed [ 500.006381][ T7841] FAT-fs (loop7): Directory bread(block 71) failed [ 500.015783][ T7841] FAT-fs (loop7): Directory bread(block 72) failed [ 500.023296][ T7841] FAT-fs (loop7): Directory bread(block 73) failed [ 500.109075][ T9] usb usb9-port1: attempt power cycle [ 500.520193][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 500.673706][ T9] usb 9-1: device descriptor read/8, error -71 [ 500.970680][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 501.017065][ T9] usb 9-1: device descriptor read/8, error -71 [ 501.170348][ T9] usb usb9-port1: unable to enumerate USB device [ 503.080076][ T7877] loop7: detected capacity change from 0 to 512 [ 503.401347][ T5805] Bluetooth: hci6: command 0x0406 tx timeout [ 504.264240][ T7877] EXT4-fs (loop7): 1 orphan inode deleted [ 504.272795][ T7877] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.295035][ T3806] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 504.305908][ T3806] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 504.348110][ T7877] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.472470][ T7890] loop0: detected capacity change from 0 to 1024 [ 504.541653][ T7890] hfsplus: Unknown parameter 'É8' [ 504.611794][ T7895] tmpfs: Unknown parameter 'huge' [ 504.712270][ T7895] netlink: 'syz.8.419': attribute type 10 has an invalid length. [ 505.065153][ T7900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.075476][ T7900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.508514][ T7895] loop8: detected capacity change from 0 to 32768 [ 505.588845][ T7895] (syz.8.419,7895,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 505.624494][ T7895] (syz.8.419,7895,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 505.657197][ T7902] loop6: detected capacity change from 0 to 256 [ 505.707788][ T6812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.756031][ T7895] JBD2: Ignoring recovery information on journal [ 506.024053][ T7895] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 506.687559][ T7895] (syz.8.419,7895,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0x8a715327. Applying ECC. [ 506.701704][ T7895] (syz.8.419,7895,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x1cec3d0f, computed 0x9e78a67 [ 506.708032][ T7906] loop1: detected capacity change from 0 to 32768 [ 506.714466][ T7895] (syz.8.419,7895,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 506.729782][ T7895] (syz.8.419,7895,0):ocfs2_quota_read:201 ERROR: status = -5 [ 506.737602][ T7895] Quota error (device loop8): find_tree_dqentry: Can't read quota tree block 4 [ 506.747178][ T7895] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 506.756990][ T7895] (syz.8.419,7895,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 506.765397][ T7895] (syz.8.419,7895,0):ocfs2_symlink:1891 ERROR: status = -5 [ 506.776288][ T7895] (syz.8.419,7895,0):ocfs2_symlink:2077 ERROR: status = -5 [ 506.884931][ T7902] FAT-fs (loop6): Directory bread(block 64) failed [ 506.892117][ T7902] FAT-fs (loop6): Directory bread(block 65) failed [ 506.899042][ T7902] FAT-fs (loop6): Directory bread(block 66) failed [ 506.906016][ T7902] FAT-fs (loop6): Directory bread(block 67) failed [ 506.913120][ T7902] FAT-fs (loop6): Directory bread(block 68) failed [ 506.920073][ T7902] FAT-fs (loop6): Directory bread(block 69) failed [ 506.926997][ T7902] FAT-fs (loop6): Directory bread(block 70) failed [ 506.933916][ T7902] FAT-fs (loop6): Directory bread(block 71) failed [ 506.941012][ T7902] FAT-fs (loop6): Directory bread(block 72) failed [ 506.947770][ T7902] FAT-fs (loop6): Directory bread(block 73) failed [ 507.388980][ T5806] non-latin1 character 0x2e66 found in JFS file name [ 507.396664][ T5806] mount with iocharset=utf8 to access [ 507.475380][ T6917] ocfs2: Unmounting device (7,8) on (node local) [ 508.154881][ T1297] ERROR: (device loop1): diWrite: ixpxd invalid [ 508.154881][ T1297] [ 508.172106][ T4052] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.250144][ T1297] ERROR: (device loop1): remounting filesystem as read-only [ 508.257862][ T1297] ERROR: (device loop1): txAbort: [ 508.257862][ T1297] [ 508.265888][ T1297] jfs_write_inode: jfs_commit_inode failed! [ 508.455085][ T4052] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.647252][ T4052] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.837117][ T7929] input: syz0 as /devices/virtual/input/input18 [ 508.865679][ T7926] loop7: detected capacity change from 0 to 1024 [ 508.896982][ T4052] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.043757][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 510.832388][ T7926] ===================================================== [ 510.841669][ T7926] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x1195/0x13d0 [ 510.849464][ T7926] hfsplus_delete_cat+0x1195/0x13d0 [ 510.855165][ T7926] hfsplus_rmdir+0x13c/0x310 [ 510.860112][ T7926] vfs_rmdir+0x5b6/0x800 [ 510.867219][ T7926] do_rmdir+0x87b/0xf30 [ 510.872596][ T7926] __x64_sys_rmdir+0x71/0xb0 [ 510.877431][ T7926] x64_sys_call+0x353f/0x3db0 [ 510.882476][ T7926] do_syscall_64+0xd9/0x1b0 [ 510.887860][ T7926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.894119][ T7926] [ 510.896548][ T7926] Uninit was stored to memory at: [ 510.902074][ T7926] hfsplus_create_cat+0x18fb/0x1910 [ 510.907478][ T7926] hfsplus_mknod+0x208/0x560 [ 510.912431][ T7926] hfsplus_mkdir+0x5a/0x80 [ 510.917056][ T7926] vfs_mkdir+0x4ea/0x850 [ 510.922924][ T7926] do_mkdirat+0x41a/0xf30 [ 510.927483][ T7926] __x64_sys_mkdir+0x9a/0xf0 [ 510.934708][ T7926] x64_sys_call+0x29b6/0x3db0 [ 510.939627][ T7926] do_syscall_64+0xd9/0x1b0 [ 510.946100][ T7926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.952637][ T7926] [ 510.955080][ T7926] Uninit was created at: [ 510.959619][ T7926] __alloc_frozen_pages_noprof+0x689/0xf00 [ 510.968759][ T7926] alloc_pages_mpol+0x328/0x860 [ 510.974803][ T7926] alloc_frozen_pages_noprof+0xf7/0x200 [ 510.980751][ T7926] allocate_slab+0x24d/0x1210 [ 510.985686][ T7926] ___slab_alloc+0xfec/0x3480 [ 510.991009][ T7926] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 510.997049][ T7926] hfsplus_alloc_inode+0x5a/0xd0 [ 511.002463][ T7926] alloc_inode+0x87/0x4a0 [ 511.007023][ T7926] iget_locked+0x239/0x12d0 [ 511.011870][ T7926] hfsplus_iget+0x5c/0xb80 [ 511.016532][ T7926] hfsplus_btree_open+0x132/0x1c90 [ 511.022161][ T7926] hfsplus_fill_super+0x1161/0x2740 [ 511.027625][ T7926] get_tree_bdev_flags+0x6e6/0x920 [ 511.033084][ T7926] get_tree_bdev+0x38/0x50 [ 511.037728][ T7926] hfsplus_get_tree+0x35/0x40 [ 511.042861][ T7926] vfs_get_tree+0xb3/0x5c0 [ 511.049038][ T7926] do_new_mount+0x738/0x1610 [ 511.054267][ T7926] path_mount+0x6db/0x1e90 [ 511.058881][ T7926] __se_sys_mount+0x6eb/0x7d0 [ 511.063909][ T7926] __x64_sys_mount+0xe4/0x150 [ 511.071588][ T7926] x64_sys_call+0xfa7/0x3db0 [ 511.076427][ T7926] do_syscall_64+0xd9/0x1b0 [ 511.082208][ T7926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.088320][ T7926] [ 511.090896][ T7926] CPU: 1 UID: 0 PID: 7926 Comm: syz.7.431 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 511.101596][ T7926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.111984][ T7926] ===================================================== [ 511.119057][ T7926] Disabling lock debugging due to kernel taint [ 511.125528][ T7926] Kernel panic - not syncing: kmsan.panic set ... [ 511.132124][ T7926] CPU: 1 UID: 0 PID: 7926 Comm: syz.7.431 Tainted: G B 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 511.144182][ T7926] Tainted: [B]=BAD_PAGE [ 511.148476][ T7926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.158705][ T7926] Call Trace: [ 511.162119][ T7926] [ 511.165186][ T7926] __dump_stack+0x26/0x30 [ 511.169762][ T7926] dump_stack_lvl+0x53/0x270 [ 511.174588][ T7926] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 511.180684][ T7926] dump_stack+0x1e/0x25 [ 511.185123][ T7926] panic+0x4bd/0xd50 [ 511.189365][ T7926] kmsan_report+0x29d/0x2a0 [ 511.194164][ T7926] ? __msan_warning+0x96/0x120 [ 511.199177][ T7926] ? hfsplus_delete_cat+0x1195/0x13d0 [ 511.204785][ T7926] ? hfsplus_rmdir+0x13c/0x310 [ 511.209763][ T7926] ? vfs_rmdir+0x5b6/0x800 [ 511.214398][ T7926] ? do_rmdir+0x87b/0xf30 [ 511.218935][ T7926] ? __x64_sys_rmdir+0x71/0xb0 [ 511.223944][ T7926] ? x64_sys_call+0x353f/0x3db0 [ 511.229038][ T7926] ? do_syscall_64+0xd9/0x1b0 [ 511.233976][ T7926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.240298][ T7926] ? hfsplus_bnode_read+0x2d3/0x350 [ 511.245757][ T7926] ? kmsan_get_metadata+0x105/0x1b0 [ 511.251220][ T7926] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 511.257337][ T7926] ? hfsplus_bnode_dump+0x50a/0x560 [ 511.262780][ T7926] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 511.268863][ T7926] ? kmsan_get_metadata+0x105/0x1b0 [ 511.274339][ T7926] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 511.280401][ T7926] ? hfsplus_brec_remove+0x92f/0xa60 [ 511.285944][ T7926] ? kmsan_get_metadata+0x105/0x1b0 [ 511.291438][ T7926] __msan_warning+0x96/0x120 [ 511.296281][ T7926] hfsplus_delete_cat+0x1195/0x13d0 [ 511.301716][ T7926] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 511.307822][ T7926] ? kmsan_get_metadata+0x105/0x1b0 [ 511.313452][ T7926] hfsplus_rmdir+0x13c/0x310 [ 511.318308][ T7926] ? __pfx_hfsplus_rmdir+0x10/0x10 [ 511.323663][ T7926] vfs_rmdir+0x5b6/0x800 [ 511.328121][ T7926] do_rmdir+0x87b/0xf30 [ 511.332525][ T7926] __x64_sys_rmdir+0x71/0xb0 [ 511.337314][ T7926] x64_sys_call+0x353f/0x3db0 [ 511.342205][ T7926] do_syscall_64+0xd9/0x1b0 [ 511.346951][ T7926] ? irqentry_exit+0x16/0x60 [ 511.351729][ T7926] ? clear_bhb_loop+0x40/0x90 [ 511.356592][ T7926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.362664][ T7926] RIP: 0033:0x7f670878e969 [ 511.367233][ T7926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.387044][ T7926] RSP: 002b:00007f67096b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 511.395653][ T7926] RAX: ffffffffffffffda RBX: 00007f67089b5fa0 RCX: 00007f670878e969 [ 511.403786][ T7926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 511.411910][ T7926] RBP: 00007f6708810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 511.420022][ T7926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.428129][ T7926] R13: 0000000000000000 R14: 00007f67089b5fa0 R15: 00007ffc4c962798 [ 511.436299][ T7926] [ 511.439752][ T7926] Kernel Offset: disabled [ 511.444177][ T7926] Rebooting in 86400 seconds..