last executing test programs: 15.198391724s ago: executing program 4 (id=241): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x9, 0x5, 0xcd41}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x9, 0x5, 0xcd41}}}, 0x90) (fail_nth: 1) 14.31934462s ago: executing program 4 (id=244): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f00000011c0)='./file1\x00', 0x800008, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'lzo'}}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x8, 0x3283, 0x9, 0x7, 0x7, 0x9, 0x7fff}, 0xc) 11.776434956s ago: executing program 4 (id=253): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0xe, 0x1, 0x2}}}}]}, 0x38}}, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r3) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r4, 0x531, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x7}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044005}, 0x20000040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000010c0)=[0x0], 0x0, 0x0, 0xf8, &(0x7f0000001140), 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000f00)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}], 0x0, 0x3c, 0x0, 0x0, 0x41000, 0x1, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000013c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x432d, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001480)=[{0x5, 0x4, 0xb, 0x2}], 0x10, 0xb}, 0x94) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x74, r4, 0x4, 0x70bd25, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_FAMILY={0x5, 0xd, 0x37}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4811}, 0x1) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}]) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) 11.775249306s ago: executing program 3 (id=254): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_GET_SECUREBITS(0x1b) 11.568769059s ago: executing program 3 (id=255): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) setgroups(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r7, 0xc008551b, &(0x7f0000000100)={0x1}) mkdirat(r6, &(0x7f0000000280)='./bus/file0\x00', 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r1, &(0x7f00000004c0)='./file0\x00', r1, &(0x7f00000000c0)='./bus/file0\x00', 0x4) write$P9_RSETATTR(r6, &(0x7f0000000200)={0x7, 0x1b, 0x1}, 0x7) sendmsg$xdp(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b7389201636f7a9c3e33a123a3f88519fb8ba6d4fb62b92a8a0eac65dc44328002a8155c6b38b196796f10079ec9f2da7776ff21ea0472a0c9f18cf7c5d1a6cbbf0421e4d376d38ac7ccb03fbf3e03cf8a1643cfe0bb61c6d67b2e55ba2f458ffc0f17a1c79e11e47a1956d687c2d25db41959973c71ed32208420eb1997628b97e40df7c9b80ac13702f3c9007548c379c5f14d9511978b65d58f4c62dace5b781698664277c1a5cefaa6f5ff3b35853bacc6ac6b7aec77f02a62a11e5e36542d8a37c41a6a01e8174802ae35630f70", 0xd0}], 0x1, 0x0, 0x0, 0x20004054}, 0x0) 8.169062122s ago: executing program 3 (id=261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x0) 7.860820417s ago: executing program 3 (id=262): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x4008032, 0xffffffffffffffff, 0xfffff000) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) connect$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x30c, 0x7, 0x1, 0xf4, 0x1, @broadcast}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xe, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "000000000c008000"}, 0x10}}, 0x40) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x9, &(0x7f0000001a40)=0x5, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 5.957767892s ago: executing program 2 (id=265): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) 5.818957824s ago: executing program 4 (id=267): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='b 8:', @ANYRESDEC=r0], 0x9) 5.176825796s ago: executing program 3 (id=268): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002440)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000600)='aa', 0x2}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000f40)='5', 0x1}], 0x1}}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) timer_create(0x2, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)=[@cpuid={0x14, 0x18, {0x101, 0x314}}, @uexit={0x0, 0x18, 0xd10d}, @uexit={0x0, 0x18, 0x4}, @wrmsr={0x1e, 0x20, {0x83c, 0x8}}, @rdmsr={0x32, 0x18, {0x2da}}, @wr_crn={0x46, 0x20, {0x8, 0x9}}, @wr_crn={0x46, 0x20, {0x0, 0x4}}, @cpuid={0x14, 0x18, {0xfffffffa, 0xffff}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x14, 0x18, {0x6, 0x5}}, @wrmsr={0x1e, 0x20, {0xb7c, 0x6}}], 0x128}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @ib_path={0x0, r7}}, 0x20) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x0, 0x8, 0x8, 0x8, 0x4c, 0x4, 0x6, 0x4, 0x1, 0xf, 0x1, 0x76}, {0xaf, 0x6, 0x6, 0x5, 0x2, 0x4, 0x9, 0x8, 0x9, 0xee, 0xfd, 0x4, 0x3}, {0x9, 0x6, 0x9, 0x1, 0xff, 0x63, 0x6, 0x5, 0x2, 0x9, 0x83, 0x1, 0x870}], 0xc2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.837215642s ago: executing program 2 (id=270): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0xa, @pix_mp={0x1ff, 0x0, 0x34324d59, 0x8, 0xc, [{0x7, 0x8}, {0x7, 0x3}, {0x91a, 0x5}, {0x7fffffff, 0x1}, {0xa, 0x3}, {0x8, 0x2}, {0x7fffffff, 0x74e5}, {0x18000008, 0x7}], 0x98, 0x8, 0x6, 0x2, 0x3}}) 4.836893942s ago: executing program 4 (id=271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000280)={[{@rodir}, {@numtail}, {@utf8no}, {@fat=@usefree}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@rodir}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8cb, &(0x7f0000000180)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@err_cont}, {@journal_async_commit}, {@localflocks}, {@intr}, {@dir_resv_level={'dir_resv_level', 0x3d, 0xfd}}]}, 0x9, 0x442b, &(0x7f0000004480)="$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") 4.095351366s ago: executing program 0 (id=273): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x30000011}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000014}) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}], 0x2, 0x8001, 0x0, 0x0) (fail_nth: 1) 3.843540951s ago: executing program 1 (id=274): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r5, r6], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r5, r8, 0xf8, 0x8, 0x7ff, 0x6, {0x8, 0x8, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0x7c0, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) mkdirat(r7, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x268, 0x311, 0x130, 0x268, 0x268, 0x460, 0x460, 0x268, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x108, 0x130, 0x0, {0x9401}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@unspec=@time={{0x38}, {0x0, 0xffffffff, 0x40000, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @mcast2, [0x0, 0xff, 0xffffff, 0xff], [0xff, 0xffffff00, 0xff000000], 'wg0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x2e, 0x2, 0x7, 0x8}, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 3.680441543s ago: executing program 2 (id=275): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x100}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0xe, 0x0, @void}}}}}}}, 0x0) 2.728252701s ago: executing program 0 (id=276): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 2.727547101s ago: executing program 1 (id=277): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x100}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0xe, 0x0, @void}}}}}}}, 0x0) (fail_nth: 1) 2.727082841s ago: executing program 2 (id=278): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 2.636710893s ago: executing program 3 (id=279): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) (async) r1 = syz_usb_connect(0x1, 0xecc, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x21, 0x42, 0x24, 0x20, 0x403, 0xcb08, 0xbfb2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeba, 0x3, 0x0, 0x0, 0x20, 0xb, [{{0x9, 0x4, 0x4d, 0x3, 0xc, 0x13, 0x75, 0x7, 0x4, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0xffff, 0x3}, {0x6, 0x24, 0x1a, 0x1000, 0x1}, [@mdlm_detail={0x99, 0x24, 0x13, 0x2, "7e116596683b012ace6ebcbaebcaa726b5aeb1ebb3d59c920eef074a78aaf87b4229833279ad60d87e0fdede02b3bc3e60ba69d938c519a8147c361f0c5b45731101ba1cc5a603b8fdaf968c7f6c557ec75c7e82fa52b94c89bbb85cc31ed25244968d92b073507178ef45bcb959d51949a86ffba36dc77c7e0100a8743a4e4a5b722dc28d66adbb5abd9d5d1751fb845ea611f50e"}, @acm={0x4, 0x24, 0x2, 0x8}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x2, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xff}, @generic={0x4f, 0xf, "5366ae4cefb293b800e595669547c4076834b0f5278a94500762f6d2a905fb339fd6ff02e5316845209a8de6d977cb8f317aa6af919ca626070a8ca72f6a58ba4d862cf231714186730e24ce44"}]}}, {{0x9, 0x5, 0xe64d48d332aeaa4b, 0x0, 0x3ff, 0x6, 0xfe, 0x5e, [@generic={0xe2, 0x22, "37d0108b3a2b9066763e4375c95a8e6c9cc3e7d417df24643391b379cf98b13a6589cb5cdc2bede15fbc1f5db40b2b13004c7ff0a8c428be3c37900afdaa12af7e565fe8cdcb6314d0a7731cf47a275671a99bf6d814f14926ea8f83a6d7ac50943b8b4d737b1d25c1591f36f6371d1e37eedf4db95bbf4f100770282245ace58660347173edc2db72554c39ad89f09fb38c9b7d6185e286b511f3e3388d562cb451294cbddf75d97a91f5b25156b97a697ff801e5694fc9f0969e50282ab23a6091bf04b2736f4d511e9059c0bee48cbccd5512d478dd53db0db1f33f12b936"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x5, 0xd, 0x6, [@generic={0xe2, 0x22, "30bcde7b130131da28f8b302820f300e77dbd4abb1ca855dda597ed39fbf05da12e47d674e6c2bc02a6dd34407d4a6300ae2ef980a15e4a923de2a81a465038879a610c8d01753272cb5756c43123e74158ac339c2f833250608361b622e92b8a6a46c89d65f24360b4d984e6c45cd61bb4eeccfaa47a9950d7caa99a68e7509f77f031395eac12be78708a8acc2371d4e9f17daa05a444a5d50e9b3ce5d09412dc6060247cffbbc181d8cc8e94fc17a7f03c7ea546552372f5ace9a47d5e9f58a8e75725ae8a9d1c64a9702a82fa8d8e9d5262c002c6a0bf5a68ea92adb88d5"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0xb7, 0x7, 0x0, [@generic={0x102, 0xc, "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"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x4, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf8, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x7, 0x80, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3b}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xfffb}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x7, 0xd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x69, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}, {{0x9, 0x5, 0x6, 0x0, 0xbb90a204b4f0e912, 0x3, 0x1, 0x2, [@generic={0x17, 0x5, "67cd278858ba4510ae2efa3b286f8144f24c394e8f"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x40, 0x94, 0x5, [@generic={0xd7, 0x22, "f48248da37cb84df4fe6cd17216321d3fac6de3388f7445bdbcb841c226419b988b77deeafd98d27d0987827abe884a9f9c0dd1e48d56331274465d7b2a12dd316d1a278928a869e9ca84540536a4cec5908621805684dda849897d7b36bafa8ccfe4bf3281b8fda2a09fc1b187ee1815989f937c6b8568858fd27d87b26a00225f540d1fa93d7c2af22ab4dc19ffe989cc70236a74b876168354693148fcf6857d6a69c790d318320c3a6f3d467a8a588e90287056b306d3d850b7e6149ba5f75ea1f7322051e641e51a40401ccf51bb9b3fd2711"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x660, 0x6, 0x5, 0x6, [@generic={0xb5, 0x21, "0198b221277e03e527368efa7d1ddbead654edf292570223b703a699c2adf8a86a83d9e6426257230811484767834a9b65ee3c58ef5af4d27f9dc1d27e1c9dd2fac4e8d15805c6cdc80183968c9da835bc591d24fee72f81d86e2acf4eff315df38be4974334629faae531322f5199627b020248aa045605471e61065e935884b18bfc86fcc5c4a8f25c1bfdbbcc0b54311f7d401f7241f967136a51f9bc4b456ba97da7803e6718860d9228cb8b67607db5ef"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x40, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x40, 0x2}, @generic={0x92, 0x23, "a5b1656e8c8cc831297046484120c4a1ef9c329e00639677cb94b9f132e77aca68d862226bb24fbee7b5c22d8a19d18f1661139bf470f052359daf91b202ad60b23188d61ba724c3826bc6597274722b2463b48e545ba05aab014a6730b6ebb96b19333d9251a8506a63a4bf0c579054e303326f27c5334af6546b219576ad149b1532e33b2cd1b6c9ab57fc81e724fc"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x1, 0x81, 0x39, [@uac_iso={0x7, 0x25, 0x1, 0x77843085dcf52bcb, 0x0, 0x9}, @generic={0xd6, 0xf, "736783a761389c25e7a3e642fe0f7864b743d690d7e4b8c7250da4d51a2e2f1ecff1c15b9d1598d7c464945db27a8ce3e551fc635a332fd756e9a4c3be443a3e0cd54292b887ede732e6f9174b45c2a7386adabdfa05b734efa792fb803a8b0f0f54a41ec7b5c97098babe2803337d6600733ae2567f0b012b149201f982bf371857a8a66359cb81ed484e617c81352ee6cf8ee5a0c24a5cc8e2510bd2088d1a1401b8bb0aba148ee8af68c9680ce0e91d1864c8e0a2cd873f8f96604482e63b0655262a6bcc0ca34c138b194f9456fe6d55ec4d"}]}}]}}, {{0x9, 0x4, 0x79, 0x40, 0x7, 0xcd, 0x1, 0x4c, 0x0, [@generic={0xbe, 0x6, "bf9a55fad3ef422150b3288561eb31dcd0be42776cd3b84f177211e6021a2d6342d9abb9b055121169d89467edbe491fe94447b97cbabd8bf5f2dd434b1fa9bf2fd2a02af4e277e41e779ad164e31896b4dbf39aff25deb90fceac2ceb229c554d4066c479a6245b4f25e153794f9263ae07b6c53fc672b966779a5249b225bf9b355e38823d942f0a94f32c6d66f7d49cede4e22817dc6d05dce742e0161f6a7e6592f21b6b798c0fd0a498dd125dee0b3a21329b9d725c5616c933"}], [{{0x9, 0x5, 0x6, 0x2, 0x10, 0x9, 0xf9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x76, 0xfff3}, @generic={0xd6, 0x1, "67d49b48e0a0ab6ef66b25d54d0e2a3abf2b78066f2d108294c9a01d8b2921f7886c24a146a9dcfa7e836168665123afa4115674c1ec94913fe21fa23fbfea403044e5076c82c9e725043b994a79921a5b44d19fc99f4c31a676173bdecd8459b9b42d6196d277ce25fba7d095fd5bd99169c3bd5a38e02accbc87c2073a1c36d462be801a7c829d02904b3062775757fbd9ca647c0774fff0cc1f2dcbf0d2fb55871679c8c77a1340c8380cbe99cabae228c2a0d0fef0ad0c4497be8bcbc30b753a50fcc96b067730575ccefd23383606835037"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x5, 0x4, 0x9f, [@generic={0x2a, 0xa, "6192bbaf30acae636e9dd35b534dc6f77439dd2862f5a163290126396435be9304273859ef8c4674"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0x2, 0x0, [@generic={0xb6, 0x10, "3def35b14daf54c2d123871d94b25050ff5c5482d2d9f69acc72b9e26d815a9e9d9dc9fe612977f7a4ce6a8ac7e6970d8dd2af2bbf1b6a157d6db04af193a551efafc5843c1f19a977fdd53a0d92f56e8e7c82201687cd79f5595e7e591d6767f191ae0868af307ab179eda633220e7465f8e1352008238f871977234cfd3226ea37db5d27ba7cf0153c8fdebfdda8f2ae17b048f8d23be288ba0e494467c820316aacdf5dda307ff93a4fc3234b480a7573dfa2"}, @generic={0xa4, 0xd, "dd8e71cd092634b4f28e9bb4ee4acd1f0bba856607ecf858ca0d20fb82e81b0b05b35cd67506e450567698f91d9cfb141128d23cc3fd5b95611f4828d304b447c41aa28bba2940b27be942f56a8c47b83e92f0ab8021969e19214a9ca271cff51400d7259d0d878f41fe52fc09fa823b7737217729c7bec187ce4d193d4daa64094a480073def65fcfd071dfd76902418ad4b24890af9a05b580052016f9c6bc5f12"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x1, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x5}, @generic={0x85, 0x23, "85f42d255412328a78fc0a92be2ce14f29d854256e0743d19ca05e8f2f0d391187f6eb213ca735e4f1aa48c1b46203ec8454c80e3d99853789d105dabcab8322253059d4e9402a2cde987d5950454f621753642a252f5e4e5e58cc37fd783f31b8591d5e8f2293f18daa3103524280345a650546a1a2600309f7bad05533e7ee8beaad"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x2, 0x4, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6455}]}}, {{0x9, 0x5, 0x4, 0x0, 0x7b7, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0xa, 0x80}, @generic={0x4c, 0x4, "a2643c57b2b98d13d5319f494e990aec35955a75a4f3a991314b33effadfccccbfd6bdb754d646858e114b92f9bc0e892ba17878879a2aa457665ea2233668e8851261e94caa435da2a8"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x5, 0x0, 0x2, [@generic={0xb7, 0x31, "da8042e00851eac3c93decfdc47187e480c7768dc83ecfd8e5e8af699238e5c3b84732c259bb9411e1c72052aec3933cf3364666ab426c38f826b19c324d815c1ba317e67bec9c176e2423912c635447e7aa521f5929668e788ae194617c915cabd112c72c7e55df4dd8c08f6ab8e1aa9abeea1511ea5110cd647a0900a7e54713922b5c46d500da729ccce0c86efe1f6139ee4b32f79899fed14445805251ce0ae01702ea64b036a8195ce4471077b350db94c0e7"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x5}]}}]}}, {{0x9, 0x4, 0xcc, 0x81, 0x7, 0xa2, 0x15, 0xd, 0x8, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x2, 0xa1, 0x40, "869339185f4c"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x9, 0x0, "007173d0ef6eb9"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x86, 0x8, '1', "8c"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x3}]}], [{{0x9, 0x5, 0x8, 0x10, 0x40, 0x3, 0x40, 0x10, [@generic={0x77, 0x21, "1ff85c76cc0873a67e5946b240835660d3a78d303517745a946059c0daeec2158d1a73eb9902d849db1bb76a0a9ca171d67a4e411f5b66637d5fd3fcd391d714b08525ae69540db0e7001b0bdc42594e824a44ea35d50c5d8d9eb45cb4c73484cef415d526d4b457eb34cb949954a7a425d9b43a3b"}]}}, {{0x9, 0x5, 0x0, 0x6, 0x20, 0x2f, 0x7, 0x3, [@generic={0x54, 0x22, "8169ddc3fb6ab121732116ad0350babd880d819df8f14a9c0c1c986a251b4d259c5c7cfd4269bb0a7b291e30e19ef53a9c74ec9b8999d338928f7c85a6ba151f10b7f3c449971494df847d1d831defa9e3a1"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x29, 0x5, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x6, 0x5d, 0x8, [@generic={0xc0, 0x2, "0dbde2e8e214ff2eae103a55c37a2b7751b24234c11f1624b2a4d42cbfc68c008fac60cd829f395a5579258362cb4bcd7ffd04dd4d3e3599824cfe6c28256f933b6056c88c623d5fb01d194b5da47e3e855392c387f3f53f9246ca57d496ba2476a08b16247a2265fdd19fb7a5e2e699b9cf2f470a162c5b909f5dd336d9ab993c2b132dae9101a78f3b92abae873dfca84ca62d42d7c16ac858be58e0def5efdbebd8959945ac637eea3ff053f9ea73c910cb27ad9301c677e25b429d52"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0xdf, 0x6, 0x9, [@generic={0x8, 0xe, "361b1460b0de"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x5, 0x7e, 0x67, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0xa, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x6}]}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x200, 0x0, 0xfc, 0x4, 0x20, 0x3}, 0x29, &(0x7f0000000f80)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "a8ad082d2e05e07a7d0cfc0bb276f2d8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x3, 0x7}, @ptm_cap={0x3}]}, 0x2, [{0xd1, &(0x7f0000000fc0)=@string={0xd1, 0x3, "b517747a3215002560f5d6828e1cee2f4cb9e5bcfd20dac26731d16bf969897033e9dbd3d22a7ec5c9f255569c0a53a7ef2c64e5ee43e466245dff3b6f4794602f80ff29c43ca0ca7578e9bad6c188bc36359bdba1896322efb2174c0089488b3734e6c2f278da20365a981b16e10ea56eace4a7e242a74190a16a42a35005e3ffd7e9f163b7adcc99ccde5ba22e8a937a2c2d30f9adb815e52f0007fb581c4de1bfb7ef13907c77f1010dc313633523f190cfe9cc621e8289821b4c78a6f84494a5c260358b56373ff67df23dc193"}}, {0x1e, &(0x7f00000010c0)=@string={0x1e, 0x3, "e0b6a0cd1c9b698e5ba806e04a5bbbcf8f3e363f7d4d0680ac70f91a"}}]}) syz_usb_control_io$printer(r1, &(0x7f0000001240)={0x14, &(0x7f0000001140)={0x0, 0x4, 0xba, {0xba, 0x5, "0b5733c72111886e1b97660c8593757b46b7d24d68efabbf9c21eab03cadefd6dbf47867aca718be0f7e78993c414adafc41992cb20873b5a5dd2deb354f000a6d16a3d5413ccfd9ee6ecb631cda9627a6625a6c618f1503ff15bb0bfaf1a937cc176e90c79418f61842c6cbf493133629671b061bcde0db035dcf362a41be84addf126c37ae117b82799d4324fa07c5a57e36e8498b13fa6c7a93b431ff259d8e35e465eff0da254a99a709dc96a71918e26ea7c29aa9e3"}}, &(0x7f0000001200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f0000001480)={0x34, &(0x7f0000001280)={0x40, 0x6, 0x78, "3a609c8317f2d38461d4a58c8da917ecce955c13aa4cbb645c819def5fc07c0363f6b9f1f1107a9d908ab0efd8cee522c27dc5f780f6b573c747eb9207bd1316a0ddd07937debd80beb39388085c7b0cba2c45e4dd5e8f2f7afb711cdac47c9b68bd39b9a24dcecd1366bb2845d7bcef9ff9dec4d380f6ce"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001380)={0x20, 0x0, 0x78, {0x76, "d377179e9710b3e948ad3d90ae9b2194706d86ef0ad981a4d7f9293d631d88158e6b89fc49c8843b305464c6fc11fd394584e197d23059f9da8ad131ebe992cd55519ed36e7bbee8e4d8842987c4cf42728813018ce42651543ded355b3869d76dc911e08c3d969a315268cedb00dad4e682e3d0037c"}}, &(0x7f0000001400)={0x20, 0x1, 0x1, 0xc4}, &(0x7f0000001440)={0x20, 0x0, 0x1, 0x9}}) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000017c0)={r2, 0xe0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001540), &(0x7f0000001580)=[0x0, 0x0], 0x0, 0xca, &(0x7f00000015c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001600), &(0x7f0000001640), 0x8, 0x64, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000001800)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r3, &(0x7f0000001840)="829eb6913e45d048180c85682025a24807957572dc0c0453e3092fc5832ce8b94fbfd9a3f0473042a12f64b6b932e507a5166adcd145b5e40085ba2f77c06fdc23b9d6666e6ffc5f18458b2cc4", 0x4d, 0x10000, &(0x7f00000018c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001940)={0x7, &(0x7f0000001900)=[{0x40, 0x8, 0x1, 0x101}, {0x2, 0x9, 0x0, 0x1}, {0x2, 0x4, 0x9, 0x9}, {0x4, 0x7, 0xb0, 0x6}, {0x2, 0x2, 0x4, 0x80}, {0x8001, 0x1e, 0x2, 0xe630}, {0x400, 0xa, 0x7, 0x1}]}, 0x10) (async) syz_usb_connect$cdc_ecm(0x0, 0x86, &(0x7f0000001980)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0x3, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x5d, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0xf99d, 0xff, 0xff}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0xd, 0xfe, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x4}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x3, 0xbd}}, {{0x9, 0x5, 0x3, 0x2, 0x28, 0x8, 0x2, 0x3}}}}}]}}]}}, &(0x7f0000001dc0)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x240, 0xc, 0x40, 0x8, 0x8, 0x34}, 0x72, &(0x7f0000001a80)={0x5, 0xf, 0x72, 0x1, [@generic={0x6d, 0x10, 0x1, "acb5e27cf963533923bec0025d8e67fd293398b961955c06567d59af64b8d82f2b765cd107a8622e8330f6783b3c2abaaf69f1fae380518d757701a105682607b05ff056d7947ac8035ff6eaa2a57d3d7a985533a16a0e6c3c4b6439209411ed9c5990eacbf70489f332"}]}, 0x5, [{0xba, &(0x7f0000001b00)=@string={0xba, 0x3, "a4e21aeb8d30ee087f6f53779256ab6630827a015b2b2d6975f7afb3ff29f329fd3a868e8da1f49f9966140f16b0013d90d57bad72c2d0e543a2b9f3ed4c614a44dfaceae7ff36366bf3fc2584b6617aefc2707cd4b5b527fd16759da2da7b4b6ce86f0af2129a82a554334d9f5d1e69b05d6989e54d728a50519813948fc8f04eb2e75457d76fae9445cd22b8ed4ebfacf3aaca5222057199defe524da5caec2b8dbedb4bfdc5e2fd885db8457a6f57b28cf26c1badd246"}}, {0x5e, &(0x7f0000001bc0)=@string={0x5e, 0x3, "cbf9aaef368ceb91f8a7ff56ca3938527209aa82d3069ecee23a3ca8f43d6717c14bca099f1bbd0fde65cfbb29bdaa7dba4ccd05307de3cfa6d7f7a5b95b48783fc6ec3e270d7ed4cc3cf0e3116c749453d4e31b455a9682004c3d32"}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x380a}}, {0xef, &(0x7f0000001cc0)=@string={0xef, 0x3, "f055a20e978add3ff55ea374e69e4c4a36c99e2c689058647e68253f1ce09cc57fae1b4adb5992b1e78d20233122eb2bf4148a1a9ecbe86bb57a849ce1a4423ba2c284c784d2c8cbb18dd2a8f2b1d8dac7f407abab52b5f9197326e589702cd962132f29f0a8177f6a6fca1e663ff1e3631514367df7ea9e9b9b4d999931e61d2942ddd6db301329b8905856317bd688e90fadc2dcd52afec2e09976d39a03be909a89a1878b1982b01d383acd7e20a89907496e1c5e3e4c838870f4353115f9ce3b3764ebf880ec1b15216318888d7c2c1a39e5b876019deade792bad2d75ff69c000516ff1639bf9142737fa"}}]}) (async) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000001e40)={0x7, 0x0, 0x7}) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000026c0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002680)={&(0x7f0000001ec0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf}]}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x503, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x10c, 0x14, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0xe2, 0x8, "6713e6461511eb347195a83d6a03f309058b4b72f62b0d272b8cf9fc5e27ef868a0cce36508a5911dc1ab969915653ab0f1f501036b6f19c9963f2da9941ee83cfb0404c4cdc6566174e47ed5143a017433da0a986dd45f9fc96249c582cf76823169c1aac21802cfaa9b619cfc697431f760a4c5e922e7c8c0f5ca9553748aa70d955facc058c4792b08403cfc202adfdb2156694d64fb6880a0c9941a0a699cccb52d766939293e7993aeb06e56e518a74a1233ffd260293026a4199d96fd59f0d31a603d2ea1e3f93a12be914ca10065395a4b0b097fedd34181fe186"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELTABLE={0xb0, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x85, 0x6, "395629f2bd3164403ecf20bd44611c9dfafbe233717d6769c6d4a27c5ee675b5bba8b1cd148415e1d70dbec4da4c56f924615b4b3718a7ddd9db1c0455822530852dd3fe4eeb5a865d04a432c8c9d9c808809ffc06beefee2e7f906eeacd1f864706f94d0616fff4250c8f5b105c3a85aa28ddb9b73967dc06d45af304cd019314"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_DELSET={0x2a0, 0xb, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x35}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_EXPRESSIONS={0x15c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7ea}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8}]}}}, {0x54, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x18}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x64, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x77}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_DESC={0xf0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xec, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbd9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x204}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc5f8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x243}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}]}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x1f8, 0x18, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1bc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x784}, 0x1, 0x0, 0x0, 0x40}, 0x4040091) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000002700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xc, 0x95, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x16, 0x6, 0x3}}]}}}]}}]}}, &(0x7f0000002a40)={0xa, &(0x7f0000002740)={0xa, 0x6, 0x110, 0x8a, 0x5, 0x1, 0x8, 0x9}, 0xad, &(0x7f0000002780)={0x5, 0xf, 0xad, 0x1, [@generic={0xa8, 0x10, 0x4, "4d3da36753b3e4aca49c0ef8c7ec8ecdafa0b51351c109c70e614df2a55d596dafc7490fe4ccde8a3ac53df47b0f271d037f7435a0e25e3cb9bda9e1a69cb0bf2df26be77cc67b1c3d392846ff2ae0c13f6f88954f5af0c4bad667c31381a37c1da8c269fd3f8753bfda7482cce0b00cb040a721ad77e67b72a4ba47ddb248b63190b473f6bfb8d1e21ccf05685677ef56f5823e8cbfb2c439e6d02a5634848b989f3b60f7"}]}, 0x3, [{0x9f, &(0x7f0000002840)=@string={0x9f, 0x3, "bdaefff857d4c5d998c1e923ab13288d8ce61b19a9de8757282013ae68dbc5ee99c2c7a8c6e716f3672336d4cc89f3d4790d5b4041ed22ed1f2b9b5253a97965044fa09abdedcb751120bc80bb5dabfc4541a3470f36915bd4e81b3bdb81c67e76a8c063780a2c9a593d138376a2fe1dad80c684283989615efb8600a0ce69f37cae993cd42aa71e2c6fed74678be236d39fef8392c31f351d2544107e"}}, {0x4, &(0x7f0000002900)=@lang_id={0x4, 0x3, 0x408}}, {0xce, &(0x7f0000002940)=@string={0xce, 0x3, "7182c3cc1da1a2ae8075e5f2ee7b9ea281414f795da9bb4e2058a74202993c0d870c6198f674e0f8685b5a5fb92e33772fdc282e1a4275a566bfac765c0f0ff1ac690e577443534e17d6541aafaafe0d3299dd52ba2ac135dd4d440104de9bc9dcca118f88bc94df4194903a5599b9a91aa9694673b486c7f9805c91ee1594b0fcedb57556397ec5479322b64f79dd8bb7e53ba1b4b0fb6149b1f3ca7dc27b167b5d287802e2cc4ce2e63058a2a72c64d02646590c7df2d7cc32fded6749c90a0ae4bfbe8aca2688a5fd3eeb"}}]}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002c40)={'wg1\x00', 0x0}) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002d00)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x1de540, '\x00', 0x0, r2, 0x5, 0x4, 0x1}, 0x50) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002dc0)=@o_path={&(0x7f0000002d80)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e40)={0x11, 0xc, &(0x7f0000002a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xba}, [@call={0x85, 0x0, 0x0, 0x63}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000002b00)='syzkaller\x00', 0x452660b6, 0xd7, &(0x7f0000002b40)=""/215, 0x40f00, 0x1a, '\x00', r4, 0x0, r2, 0x8, &(0x7f0000002c80)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000002cc0)={0x2, 0x6, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002e00)=[r2, r5, r2, r6, r2, r2, r2, r2, r2], 0x0, 0x10, 0x9}, 0x94) (async, rerun: 64) r7 = add_key$keyring(&(0x7f0000002f00), &(0x7f0000002f40)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000002f80)='keyring\x00', &(0x7f0000002fc0)) (async, rerun: 32) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0xa100919}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x3}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x5c}}, 0x4000) (async, rerun: 64) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async, rerun: 64) execve(&(0x7f0000003240)='./file0\x00', &(0x7f00000032c0)={[&(0x7f0000003280)='\x00']}, &(0x7f0000003480)={[&(0x7f0000003300)='netpci0\x00', &(0x7f0000003340)='dynset\x00', &(0x7f0000003380)='-\x00', &(0x7f00000033c0)='\'&:#,\x00', &(0x7f0000003400)='builtin_trusted\x00', &(0x7f0000003440)='%-}\x00']}) (async, rerun: 32) ioctl$KVM_CAP_HYPERV_VP_INDEX(r2, 0x4068aea3, &(0x7f00000034c0)) (rerun: 32) r8 = accept4$packet(r2, &(0x7f0000003540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003580)=0x14, 0x0) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000003640)={0x9, &(0x7f00000035c0)=[{0x7, 0x4d, 0x6, 0x5}, {0x7f, 0x10, 0xfc, 0x800}, {0x9c62, 0x3, 0x6, 0x400}, {0xaedc, 0xd, 0x1}, {0x40, 0x0, 0x9}, {0x81, 0x4, 0x6, 0x9}, {0x7, 0x2, 0xc, 0x3}, {0x6, 0x4, 0x6, 0x5}, {0xe768, 0x9, 0xe, 0x62}]}, 0x10) (async) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) (async, rerun: 64) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000003680)='/dev/comedi2\x00', 0x2080, 0x0) (rerun: 64) ioctl$COMEDI_POLL(r9, 0x640f) 2.292696049s ago: executing program 2 (id=280): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) (fail_nth: 1) 2.292370499s ago: executing program 0 (id=281): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) 1.501057713s ago: executing program 2 (id=282): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000600)={0x0, 0x8, 0x4, {0x1, @pix={0xccb4, 0xffffffff, 0x31364d4e, 0x0, 0x7, 0xfffff800, 0xa, 0xfeedcafe, 0x1, 0x1, 0x3, 0x3}}}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@mac={{0x30}, {@random="16f9a936c886"}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x3}, 0x8) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x80000000000005d, 0x3) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x20108c0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32=0x0], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r4, r5, 0x0, 0x20fffe82) mount(&(0x7f0000000440)=@nullb, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='fusectl\x00', 0x40, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x54e, @remote}, 0x1c) 1.496635813s ago: executing program 1 (id=283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 1.395658625s ago: executing program 1 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'multiq3\x00', [0x30, 0xe, 0x8, 0xfffffffb, 0x1000, 0x101, 0x6623, 0x6, 0x5c8be781, 0x8, 0xfffffffa, 0x2, 0xfffffffe, 0x8, 0x6, 0x7, 0x1, 0x7, 0x4, 0xa261, 0x10, 0x5, 0x9, 0x9, 0x5, 0x4, 0x1, 0xc005, 0x59, 0x7, 0x4]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc2ed000e, &(0x7f0000000200), 0xfe, 0x477, &(0x7f0000000d40)="$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") open(0x0, 0x0, 0x1) pipe2$watch_queue(0x0, 0x80) syz_open_dev$sndpcmc(0x0, 0xb, 0x2) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) unshare(0x0) sendfile(0xffffffffffffffff, r7, &(0x7f0000000400)=0xfffffffffffffffd, 0xffff) 1.344468726s ago: executing program 0 (id=285): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0xa, @pix_mp={0x1ff, 0x0, 0x34324d59, 0x8, 0xc, [{0x7, 0x8}, {0x7, 0x3}, {0x91a, 0x5}, {0x7fffffff, 0x1}, {0xa, 0x3}, {0x8, 0x2}, {0x7fffffff, 0x74e5}, {0x18000008, 0x7}], 0x98, 0x8, 0x6, 0x2, 0x3}}) 973.275383ms ago: executing program 4 (id=286): ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$eJzs3T9oHmUcB/Df3fu+xiQvEnURxD8gIhoIcRNc4qIQkBBEBBUiIi5KIsQEt8TJxUFnLZm6hNKtaceSJXRpKXRK2wzpUmhDh4YO7XDlfS+BJG/6J33f3pXc5wPH3SV393uO3Pe5G3L3BFBZQxExFhG1iBiOiEZEJHs3eDefhnZWl/rXpiKy7Ks7SXu7fD23u99gRCxGxCcRsZom8Us9Yn7lu81761988Pdc4/2TK9/2F3qSO7Y2N77cPjHx15nxj+cvXbk1kcRYNPedV+8lh/ysnkS89jyKvSCSetkt4GlM/nH6aiv3r0fEe+38NyKN/I/3z+xLq4346P9H7fvv7ctvFtlWoPeyrNG6By5mQOWkEdGMJB2JiHw5TUdG8mf4a7WB9NeZ2d+Hf56Zm/6p7J4K6JVmxMbn5/rODh7I/81ann/g+Grl/+vJ5eut5e1a2a0BCvFWPmvlf/iHhQ9D/qFy5B+qS/6huo6Yf//RAceI+z9U12Py/3JZbQKK0Zn/RtlNAgri+R8qKcuyTP6hwuQfqmtv/gGAasn6yn4DGShL2f0PAAAAAAAAAAAAAAAAAADQaal/bWp3Kqrmhf8itj7LRxfprF9rj0e8+znygbvJvkFIkh4MSvL9O10eoEunSn77+pUb5da/+Ha59RemIxb/jIjRer3z+kt2rr9n9+oTft/4scsCR5QcWP/0m2LrH/Rgudz64+sR51v9z+hh/U8ab7Tnh/c/zR58Mf23+10eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMI8DAAA//84UXFU") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000012000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 141.540328ms ago: executing program 0 (id=287): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x8916}], 0x2, 0x0, 0x0) 140.992428ms ago: executing program 1 (id=288): r0 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x218002, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000080)={0xa, 0x4e22, 0x97, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000000c0)="dee51cb7ace72bc4cf53e328da6d24a97a4b6ac3d90a6f6f87a2c029e376e5df21a62cb85c362f23a4b43b3b0cb13c231cc1d8e1f0baaa2d32e037125a8c397c9bc4fadccd519ffe8f9c455f", 0x4c}, {&(0x7f0000000140)="8a43506b020000000000000054f935229d22d00f94278647a4ae8b192f42c590e5541e91cab86709fa3e1cbc56b46cbced698f897809d5e01079dd36a63bd1104d411ea5e11aead71893a50300000000000000ea81ec97e5821c9befc20ec43b6019801262d8ecc71841131063e3e7c719bfe491b28272455c7f61aef0ad1962bbf882e12cf211c0742311c9db17436cfdd06d2dbda730d3fa1803e7d8397168ec6de2ba20ed6c1b0bd68201f92b", 0xbb}, {&(0x7f0000000200)="80cf1886b919a982911ee5078057229bfcdb170f6dcc95a1c4762573c69918f83c6df792cb079dbf92588172c884", 0x36}, {&(0x7f0000000240)="5befd8495523901c149788f07a703844512e90292528c6a4b2e9452108086905e31060ed89df05fca6a1", 0x2a}, {&(0x7f0000000280)="fea060c704b33ef7c2ab19a2f24815d28b79f7e7ab", 0x15}, {&(0x7f00000002c0)="c6a8d08b0829d015cd9da6eafbcfca0cfc", 0x11}, {&(0x7f0000000380)="e7e79e985feb54089e04857ba8e18a26cde7de96cf84092e994d747aea91694bd0b06016343edca6f7da4a1906dbcb6f8fb0c4479c2ceee587e0334d0a9dcef699b2c5a3022c02ab7c750e5489c4bcced7c72ae441ec9d74054d3521267d8274132f717e56e836ba26bba153d39ca5ea89ed6f1bebe67a05ae2480cb92b3d065233dcd12ea3e8ad6949dcfda1376ce53936aaf5d009a1760b4dead73b6e3f9bb2831ce83ded578f3f3d091704a27dde8e6211669f27ca5a726576409218274520096ea4e2c35b0e5e213d8746bb320176c56ebdcc848aa267134b8ef7a0473e73cbeb321f7c34523", 0xf7}, {&(0x7f0000000480)="93706b52e14d26924741f71f3da579981529d657d43e3a3853dc1c8aaaa1aad48dda75de0327499ef672bd55cbc32daa045d61e63c10a81234d4e600566eb9074ebfff3d6c4d80c4c755b0cdba5a93e31271ab60c11289bad2d00071b84ce1b0d26ab8cffb820581178497135a917025b47edd9c038bfec1feff4cf2154d633a8ee557fbf68a353a79e83d", 0x8b}], 0x8, 0x0, 0xff5a}, 0x40000) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x7, 0x0}, 0x1}, {{0x0, 0x0, 0x0, 0x59}, 0x3e}], 0x2, 0x0, 0x0) 90.033859ms ago: executing program 1 (id=289): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003700)=ANY=[@ANYBLOB="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"/2542], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 0s ago: executing program 0 (id=290): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): 335.121135][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.121818][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.168092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 335.198960][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 335.225016][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 335.309934][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.336638][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.372000][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 335.399935][ T4310] EXT4-fs (loop1): unmounting filesystem. [ 335.698951][ T4450] FAULT_INJECTION: forcing a failure. [ 335.698951][ T4450] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 335.787027][ T4450] CPU: 1 PID: 4450 Comm: syz.3.4 Not tainted syzkaller #0 [ 335.794263][ T4450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.804568][ T4450] Call Trace: [ 335.807896][ T4450] [ 335.810872][ T4450] dump_stack_lvl+0x168/0x22e [ 335.815619][ T4450] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 335.821322][ T4450] ? show_regs_print_info+0x12/0x12 [ 335.826584][ T4450] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 335.832325][ T4450] should_fail_ex+0x399/0x4d0 [ 335.837065][ T4450] _copy_to_user+0x2c/0x130 [ 335.841683][ T4450] simple_read_from_buffer+0xe3/0x150 [ 335.847124][ T4450] proc_fail_nth_read+0x19a/0x210 [ 335.852206][ T4450] ? proc_fault_inject_write+0x2f0/0x2f0 [ 335.857912][ T4450] ? fsnotify_perm+0x248/0x550 [ 335.862827][ T4450] ? proc_fault_inject_write+0x2f0/0x2f0 [ 335.868603][ T4450] vfs_read+0x2c0/0x920 [ 335.872835][ T4450] ? kernel_read+0x1e0/0x1e0 [ 335.877489][ T4450] ? __fget_files+0x28/0x4d0 [ 335.882369][ T4450] ? __fget_files+0x44a/0x4d0 [ 335.887384][ T4450] ? __fdget_pos+0x2ae/0x360 [ 335.892116][ T4450] ? ksys_read+0x71/0x240 [ 335.896863][ T4450] ksys_read+0x143/0x240 [ 335.901601][ T4450] ? vfs_write+0x960/0x960 [ 335.906232][ T4450] ? lockdep_hardirqs_on+0x94/0x140 [ 335.911916][ T4450] do_syscall_64+0x4c/0xa0 [ 335.916478][ T4450] ? clear_bhb_loop+0x60/0xb0 [ 335.921307][ T4450] ? clear_bhb_loop+0x60/0xb0 [ 335.926476][ T4450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.932806][ T4450] RIP: 0033:0x7f320818d5fc [ 335.937304][ T4450] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 335.957331][ T4450] RSP: 002b:00007f3209086030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.965806][ T4450] RAX: ffffffffffffffda RBX: 00007f32083c6090 RCX: 00007f320818d5fc [ 335.973998][ T4450] RDX: 000000000000000f RSI: 00007f32090860a0 RDI: 0000000000000004 [ 335.982449][ T4450] RBP: 00007f3209086090 R08: 0000000000000000 R09: 0000000000000000 [ 335.990635][ T4450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.998909][ T4450] R13: 00007f32083c6128 R14: 00007f32083c6090 R15: 00007ffc31a21f88 [ 336.007089][ T4450] [ 336.047167][ T4453] loop2: detected capacity change from 0 to 4096 [ 336.098325][ T4453] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 336.350622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 336.384211][ T4453] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 336.445420][ T4453] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 336.528102][ T4453] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 336.580735][ T4453] ntfs: volume version 3.1. [ 336.889448][ T4444] loop4: detected capacity change from 0 to 32768 [ 336.983424][ T4444] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4444) [ 337.012444][ T4465] FAULT_INJECTION: forcing a failure. [ 337.012444][ T4465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.068117][ T4465] CPU: 1 PID: 4465 Comm: syz.0.8 Not tainted syzkaller #0 [ 337.075331][ T4465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.085693][ T4465] Call Trace: [ 337.089341][ T4465] [ 337.092348][ T4465] dump_stack_lvl+0x168/0x22e [ 337.097507][ T4465] ? show_regs_print_info+0x12/0x12 [ 337.102947][ T4465] ? load_image+0x3b0/0x3b0 [ 337.107761][ T4465] ? __lock_acquire+0x7c50/0x7c50 [ 337.112923][ T4465] ? verify_lock_unused+0x140/0x140 [ 337.118257][ T4465] should_fail_ex+0x399/0x4d0 [ 337.123504][ T4465] _copy_from_user+0x2c/0x170 [ 337.129274][ T4465] ___sys_sendmsg+0x155/0x290 [ 337.134300][ T4465] ? __sys_sendmsg+0x270/0x270 [ 337.139981][ T4465] ? __lock_acquire+0x7c50/0x7c50 [ 337.146297][ T4465] ? __fdget+0x17c/0x200 [ 337.150869][ T4465] __se_sys_sendmsg+0x19e/0x270 [ 337.156000][ T4465] ? __x64_sys_sendmsg+0x80/0x80 [ 337.161336][ T4465] ? lockdep_hardirqs_on+0x94/0x140 [ 337.166571][ T4465] do_syscall_64+0x4c/0xa0 [ 337.171052][ T4465] ? clear_bhb_loop+0x60/0xb0 [ 337.175946][ T4465] ? clear_bhb_loop+0x60/0xb0 [ 337.180848][ T4465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.187653][ T4465] RIP: 0033:0x7f728cf8ebe9 [ 337.192180][ T4465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.212094][ T4465] RSP: 002b:00007f728de50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.220657][ T4465] RAX: ffffffffffffffda RBX: 00007f728d1c6090 RCX: 00007f728cf8ebe9 [ 337.228834][ T4465] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 337.237244][ T4465] RBP: 00007f728de50090 R08: 0000000000000000 R09: 0000000000000000 [ 337.245796][ T4465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.254070][ T4465] R13: 00007f728d1c6128 R14: 00007f728d1c6090 R15: 00007ffcf5105e78 [ 337.262458][ T4465] [ 337.299222][ T4444] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 337.325241][ T4444] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 337.366978][ T4444] BTRFS info (device loop4): enabling auto defrag [ 337.382741][ T4444] BTRFS info (device loop4): doing ref verification [ 337.394270][ T4444] BTRFS info (device loop4): use no compression [ 337.408895][ T4444] BTRFS info (device loop4): force clearing of disk cache [ 337.427559][ T4444] BTRFS info (device loop4): turning on async discard [ 337.454704][ T4444] BTRFS info (device loop4): max_inline at 4096 [ 337.472972][ T4444] BTRFS info (device loop4): disabling free space tree [ 337.665346][ T4309] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 338.094365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 338.102723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 338.111103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 338.119453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 338.127702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 338.136129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 338.144363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 338.415283][ T4486] loop1: detected capacity change from 0 to 65536 [ 338.896926][ T4444] BTRFS error (device loop4): open_ctree failed: -22 [ 339.239936][ T4486] XFS (loop1): Mounting V5 Filesystem [ 339.356937][ T4486] XFS (loop1): Ending clean mount [ 339.364196][ T4486] XFS (loop1): Unmounting Filesystem [ 339.922942][ T4511] process 'syz.1.11' launched './file0' with NULL argv: empty string added [ 339.953753][ T4298] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 340.347406][ T4425] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (4425) [ 340.564076][ T4298] usb 3-1: Using ep0 maxpacket: 16 [ 340.579346][ T4298] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 340.622885][ T4298] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 340.648921][ T4514] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 340.661080][ T4298] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 341.426522][ T4298] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 341.506216][ T4298] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 341.653647][ T4298] usb 3-1: config 1 interface 0 has no altsetting 0 [ 341.685625][ T4519] loop0: detected capacity change from 0 to 1024 [ 341.776386][ T4519] EXT4-fs: Ignoring removed bh option [ 341.817115][ T4526] FAULT_INJECTION: forcing a failure. [ 341.817115][ T4526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.831600][ T4526] CPU: 0 PID: 4526 Comm: syz.4.16 Not tainted syzkaller #0 [ 341.839177][ T4526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.849610][ T4526] Call Trace: [ 341.852949][ T4526] [ 341.856251][ T4526] dump_stack_lvl+0x168/0x22e [ 341.862201][ T4526] ? show_regs_print_info+0x12/0x12 [ 341.867734][ T4526] ? load_image+0x3b0/0x3b0 [ 341.872369][ T4526] ? __lock_acquire+0x7c50/0x7c50 [ 341.877594][ T4526] ? trace_contention_end+0x5f/0x170 [ 341.883009][ T4526] should_fail_ex+0x399/0x4d0 [ 341.887943][ T4526] _copy_from_user+0x2c/0x170 [ 341.892748][ T4526] iovec_from_user+0x143/0x360 [ 341.897544][ T4526] __import_iovec+0x6d/0x500 [ 341.902246][ T4526] ? __fget_files+0x44a/0x4d0 [ 341.906961][ T4526] import_iovec+0x6f/0xa0 [ 341.911368][ T4526] do_writev+0x205/0x410 [ 341.915655][ T4526] ? __kasan_check_write+0x2/0x10 [ 341.920723][ T4526] ? do_readv+0x3e0/0x3e0 [ 341.925151][ T4526] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 341.931401][ T4526] ? lock_chain_count+0x20/0x20 [ 341.936293][ T4526] ? lockdep_hardirqs_on+0x94/0x140 [ 341.941534][ T4526] do_syscall_64+0x4c/0xa0 [ 341.946001][ T4526] ? clear_bhb_loop+0x60/0xb0 [ 341.950900][ T4526] ? clear_bhb_loop+0x60/0xb0 [ 341.955720][ T4526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.961744][ T4526] RIP: 0033:0x7f91ec78ebe9 [ 341.966358][ T4526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.986693][ T4526] RSP: 002b:00007f91ed6b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 341.995131][ T4526] RAX: ffffffffffffffda RBX: 00007f91ec9c6090 RCX: 00007f91ec78ebe9 [ 342.003152][ T4526] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 342.011582][ T4526] RBP: 00007f91ed6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 342.019581][ T4526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.027656][ T4526] R13: 00007f91ec9c6128 R14: 00007f91ec9c6090 R15: 00007fff4dd46ce8 [ 342.035688][ T4526] [ 342.503865][ T4298] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 342.555299][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.615134][ T4519] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e118, mo2=0000] [ 342.649890][ T4519] System zones: 0-1, 3-12 [ 342.665555][ T4298] usb 3-1: can't set config #1, error -71 [ 342.687449][ T4509] [U] ^G„ [ 342.701789][ T4298] usb 3-1: USB disconnect, device number 2 [ 342.781011][ T4519] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #3: block 1: comm syz.0.15: lblock 1 mapped to illegal pblock 1 (length 1) [ 342.851460][ T4519] Quota error (device loop0): write_blk: dquota write failed [ 342.883688][ T4519] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 342.954659][ T4519] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.15: Failed to acquire dquot type 0 [ 342.974984][ T4519] EXT4-fs error (device loop0): ext4_free_blocks:6205: comm syz.0.15: Freeing blocks not in datazone - block = 0, count = 4096 [ 343.180652][ T4519] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.15: Invalid inode bitmap blk 0 in block_group 0 [ 343.196202][ T4330] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 343.258446][ T4542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19'. [ 343.325137][ T4543] loop2: detected capacity change from 0 to 256 [ 343.349863][ T4543] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 343.931210][ T4519] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 344.077579][ T4519] EXT4-fs (loop0): 1 orphan inode deleted [ 344.183202][ T4550] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 344.371206][ T4519] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 344.381211][ T4330] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 344.389945][ T4330] EXT4-fs error (device loop0): ext4_release_dquot:6852: comm kworker/u4:0: Failed to release dquot type 0 [ 345.467820][ T4308] EXT4-fs (loop0): unmounting filesystem. [ 345.475022][ T4558] loop2: detected capacity change from 0 to 2048 [ 345.563890][ T4558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 345.817580][ T4309] EXT4-fs (loop2): unmounting filesystem. [ 345.833969][ T4566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 345.838524][ T4564] loop0: detected capacity change from 0 to 2048 [ 345.854887][ T4548] loop1: detected capacity change from 0 to 1024 [ 345.862012][ T4567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 345.984379][ T4548] ======================================================= [ 345.984379][ T4548] WARNING: The mand mount option has been deprecated and [ 345.984379][ T4548] and is ignored by this kernel. Remove the mand [ 345.984379][ T4548] option from the mount to silence this warning. [ 345.984379][ T4548] ======================================================= [ 346.076978][ T4573] FAULT_INJECTION: forcing a failure. [ 346.076978][ T4573] name failslab, interval 1, probability 0, space 0, times 1 [ 346.092153][ T4564] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 346.151379][ T4573] CPU: 1 PID: 4573 Comm: syz.2.25 Not tainted syzkaller #0 [ 346.158885][ T4573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.169011][ T4573] Call Trace: [ 346.172327][ T4573] [ 346.175486][ T4573] dump_stack_lvl+0x168/0x22e [ 346.180226][ T4573] ? show_regs_print_info+0x12/0x12 [ 346.185570][ T4573] ? load_image+0x3b0/0x3b0 [ 346.190255][ T4573] ? __might_sleep+0xd0/0xd0 [ 346.194906][ T4573] ? __lock_acquire+0x7c50/0x7c50 [ 346.199996][ T4573] should_fail_ex+0x399/0x4d0 [ 346.204984][ T4573] should_failslab+0x5/0x20 [ 346.209544][ T4573] slab_pre_alloc_hook+0x59/0x310 [ 346.214669][ T4573] ? read_lock_is_recursive+0x10/0x10 [ 346.220103][ T4573] ? drm_atomic_state_alloc+0xa4/0xf0 [ 346.225726][ T4573] __kmem_cache_alloc_node+0x4f/0x260 [ 346.231160][ T4573] ? drm_atomic_state_alloc+0xa4/0xf0 [ 346.236680][ T4573] kmalloc_trace+0x26/0xe0 [ 346.241188][ T4573] drm_atomic_state_alloc+0xa4/0xf0 [ 346.246621][ T4573] drm_client_modeset_commit_atomic+0xe5/0x760 [ 346.253082][ T4573] ? rcu_is_watching+0x11/0xa0 [ 346.257876][ T4573] ? trace_contention_end+0x5f/0x170 [ 346.263367][ T4573] ? __mutex_lock+0x19e/0xaf0 [ 346.268183][ T4573] ? drm_client_modeset_check+0x180/0x180 [ 346.274219][ T4573] ? drm_master_internal_acquire+0x1c/0x70 [ 346.280139][ T4573] ? mutex_lock_nested+0x10/0x10 [ 346.285174][ T4573] ? mutex_lock_nested+0x10/0x10 [ 346.290136][ T4573] ? drm_client_dev_restore+0xa9/0x270 [ 346.295715][ T4573] ? mutex_lock_nested+0x10/0x10 [ 346.300762][ T4573] drm_client_modeset_commit_locked+0xc7/0x4c0 [ 346.306950][ T4573] drm_client_modeset_commit+0x46/0x70 [ 346.312445][ T4573] drm_fbdev_client_restore+0xb5/0x150 [ 346.317933][ T4573] drm_client_dev_restore+0x134/0x270 [ 346.323326][ T4573] drm_release+0x41a/0x5d0 [ 346.327803][ T4573] ? drm_lastclose+0xa0/0xa0 [ 346.332534][ T4573] __fput+0x22c/0x920 [ 346.336997][ T4573] task_work_run+0x1ca/0x250 [ 346.341807][ T4573] ? task_work_cancel+0x230/0x230 [ 346.346888][ T4573] ? __close_range+0x1c5/0x730 [ 346.351696][ T4573] ? exit_to_user_mode_loop+0x3b/0x110 [ 346.357229][ T4573] exit_to_user_mode_loop+0xe6/0x110 [ 346.362717][ T4573] exit_to_user_mode_prepare+0xb1/0x140 [ 346.368328][ T4573] syscall_exit_to_user_mode+0x16/0x40 [ 346.373925][ T4573] do_syscall_64+0x58/0xa0 [ 346.378392][ T4573] ? clear_bhb_loop+0x60/0xb0 [ 346.383120][ T4573] ? clear_bhb_loop+0x60/0xb0 [ 346.388040][ T4573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.394243][ T4573] RIP: 0033:0x7fa0da98ebe9 [ 346.398901][ T4573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.418967][ T4573] RSP: 002b:00007fa0db81d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 346.427763][ T4573] RAX: 0000000000000000 RBX: 00007fa0dabc5fa0 RCX: 00007fa0da98ebe9 [ 346.435778][ T4573] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 346.443945][ T4573] RBP: 00007fa0db81d090 R08: 0000000000000000 R09: 0000000000000000 [ 346.452027][ T4573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.460479][ T4573] R13: 00007fa0dabc6038 R14: 00007fa0dabc5fa0 R15: 00007ffe69bd9ce8 [ 346.468588][ T4573] [ 346.572170][ T4308] EXT4-fs (loop0): unmounting filesystem. [ 346.581987][ T4548] EXT4-fs: Ignoring removed nobh option [ 346.592914][ T4548] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 346.762527][ T4548] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 347.094126][ T4566] loop4: detected capacity change from 0 to 32768 [ 347.223580][ T4570] loop3: detected capacity change from 0 to 40427 [ 347.238904][ T4566] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 347.251064][ T4566] XFS (loop4): Mounting V5 Filesystem [ 347.359396][ T4570] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 347.390896][ T4566] XFS (loop4): Ending clean mount [ 347.392480][ T4570] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 347.430650][ T4570] F2FS-fs (loop3): invalid crc value [ 347.436645][ T4566] XFS (loop4): Quotacheck needed: Please wait. [ 347.611981][ T4595] block device autoloading is deprecated and will be removed. [ 347.692669][ T4570] F2FS-fs (loop3): Found nat_bits in checkpoint [ 347.786387][ T4566] XFS (loop4): Quotacheck: Done. [ 348.035100][ T4570] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 348.063604][ T4570] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 348.180206][ T4602] FAULT_INJECTION: forcing a failure. [ 348.180206][ T4602] name failslab, interval 1, probability 0, space 0, times 0 [ 348.234047][ T4602] CPU: 1 PID: 4602 Comm: syz.0.30 Not tainted syzkaller #0 [ 348.242991][ T4602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 348.256147][ T4602] Call Trace: [ 348.259681][ T4602] [ 348.262754][ T4602] dump_stack_lvl+0x168/0x22e [ 348.268680][ T4602] ? show_regs_print_info+0x12/0x12 [ 348.275357][ T4602] ? load_image+0x3b0/0x3b0 [ 348.281124][ T4602] ? __might_sleep+0xd0/0xd0 [ 348.286430][ T4602] ? __lock_acquire+0x7c50/0x7c50 [ 348.292256][ T4602] should_fail_ex+0x399/0x4d0 [ 348.297562][ T4602] should_failslab+0x5/0x20 [ 348.302413][ T4602] slab_pre_alloc_hook+0x59/0x310 [ 348.307782][ T4602] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 348.313571][ T4602] __kmem_cache_alloc_node+0x4f/0x260 [ 348.319096][ T4602] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 348.325960][ T4602] __kmalloc+0xa0/0x240 [ 348.330470][ T4602] tomoyo_realpath_from_path+0xdf/0x5d0 [ 348.336186][ T4602] tomoyo_path_number_perm+0x1e3/0x600 [ 348.342550][ T4602] ? tomoyo_path_number_perm+0x1b6/0x600 [ 348.350255][ T4602] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 348.356341][ T4602] ? ksys_write+0x1bd/0x240 [ 348.361886][ T4602] ? common_file_perm+0x171/0x1c0 [ 348.367765][ T4602] ? __fget_files+0x28/0x4d0 [ 348.372570][ T4602] security_file_ioctl+0x6c/0xa0 [ 348.377579][ T4602] __se_sys_ioctl+0x48/0x170 [ 348.382556][ T4602] do_syscall_64+0x4c/0xa0 [ 348.387190][ T4602] ? clear_bhb_loop+0x60/0xb0 [ 348.391997][ T4602] ? clear_bhb_loop+0x60/0xb0 [ 348.396916][ T4602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.403058][ T4602] RIP: 0033:0x7f728cf8ebe9 [ 348.407504][ T4602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.427311][ T4602] RSP: 002b:00007f728de71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.436034][ T4602] RAX: ffffffffffffffda RBX: 00007f728d1c5fa0 RCX: 00007f728cf8ebe9 [ 348.444137][ T4602] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 348.452940][ T4602] RBP: 00007f728de71090 R08: 0000000000000000 R09: 0000000000000000 [ 348.461399][ T4602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.469850][ T4602] R13: 00007f728d1c6038 R14: 00007f728d1c5fa0 R15: 00007ffcf5105e78 [ 348.477871][ T4602] [ 348.494288][ T4602] ERROR: Out of memory at tomoyo_realpath_from_path. [ 348.559063][ T4320] XFS (loop4): Unmounting Filesystem [ 348.715208][ T4582] loop2: detected capacity change from 0 to 1024 [ 348.794531][ T4582] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 348.803886][ T4582] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.936671][ T4607] delete_channel: no stack [ 349.180777][ T4309] EXT4-fs (loop2): unmounting filesystem. [ 349.238724][ T4605] loop1: detected capacity change from 0 to 32768 [ 349.290771][ T4612] loop0: detected capacity change from 0 to 4096 [ 349.317618][ T4612] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 349.329887][ T4612] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 349.343341][ T4612] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 349.345148][ T4605] XFS: noikeep mount option is deprecated. [ 349.355637][ T4612] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 349.374110][ T4612] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 349.394088][ T4612] ntfs: volume version 3.1. [ 349.401730][ T4612] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 349.413342][ T4612] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 349.425192][ T4612] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 349.441188][ T4612] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 349.451303][ T4612] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 349.496525][ T4612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 349.497075][ T4605] XFS (loop1): Mounting V5 Filesystem [ 349.531651][ T4621] FAULT_INJECTION: forcing a failure. [ 349.531651][ T4621] name failslab, interval 1, probability 0, space 0, times 0 [ 349.564090][ T4621] CPU: 1 PID: 4621 Comm: syz.4.32 Not tainted syzkaller #0 [ 349.571410][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.581780][ T4621] Call Trace: [ 349.585108][ T4621] [ 349.588067][ T4621] dump_stack_lvl+0x168/0x22e [ 349.592863][ T4621] ? show_regs_print_info+0x12/0x12 [ 349.598093][ T4621] ? load_image+0x3b0/0x3b0 [ 349.602778][ T4621] ? __might_sleep+0xd0/0xd0 [ 349.607660][ T4621] ? __lock_acquire+0x7c50/0x7c50 [ 349.612716][ T4621] should_fail_ex+0x399/0x4d0 [ 349.618133][ T4621] should_failslab+0x5/0x20 [ 349.622862][ T4621] slab_pre_alloc_hook+0x59/0x310 [ 349.628672][ T4621] kmem_cache_alloc+0x56/0x2f0 [ 349.633846][ T4621] ? flock_lock_inode+0x222/0x1860 [ 349.639183][ T4621] flock_lock_inode+0x222/0x1860 [ 349.644339][ T4621] ? aa_file_perm+0x3ef/0xec0 [ 349.649324][ T4621] ? check_conflicting_open+0x230/0x230 [ 349.655415][ T4621] locks_lock_inode_wait+0x109/0x460 [ 349.661452][ T4621] ? fcntl_setlease+0x330/0x330 [ 349.666962][ T4621] ? lockdep_softirqs_off+0x420/0x420 [ 349.672639][ T4621] ? __fget_files+0x44a/0x4d0 [ 349.677696][ T4621] ? end_current_label_crit_section+0x14b/0x170 [ 349.683979][ T4621] ? common_file_perm+0x171/0x1c0 [ 349.689384][ T4621] ? bpf_lsm_file_lock+0x5/0x10 [ 349.694516][ T4621] __se_sys_flock+0x44d/0x530 [ 349.699330][ T4621] ? __x64_sys_flock+0x60/0x60 [ 349.704117][ T4621] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 349.709969][ T4621] ? lock_chain_count+0x20/0x20 [ 349.714967][ T4621] ? lockdep_hardirqs_on+0x94/0x140 [ 349.720458][ T4621] do_syscall_64+0x4c/0xa0 [ 349.725022][ T4621] ? clear_bhb_loop+0x60/0xb0 [ 349.729826][ T4621] ? clear_bhb_loop+0x60/0xb0 [ 349.734614][ T4621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.740545][ T4621] RIP: 0033:0x7f91ec78ebe9 [ 349.744987][ T4621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.765550][ T4621] RSP: 002b:00007f91ed6d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 349.774204][ T4621] RAX: ffffffffffffffda RBX: 00007f91ec9c5fa0 RCX: 00007f91ec78ebe9 [ 349.782324][ T4621] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 349.790412][ T4621] RBP: 00007f91ed6d8090 R08: 0000000000000000 R09: 0000000000000000 [ 349.798525][ T4621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.806702][ T4621] R13: 00007f91ec9c6038 R14: 00007f91ec9c5fa0 R15: 00007fff4dd46ce8 [ 349.815091][ T4621] [ 350.101815][ T4605] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 350.210943][ T4629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.36'. [ 350.298461][ T4605] XFS (loop1): Starting recovery (logdev: internal) [ 350.477933][ T4605] XFS (loop1): Ending recovery (logdev: internal) [ 350.791298][ T4605] XFS (loop1): Metadata corruption detected at xfs_btree_lookup_get_block+0x512/0x640, xfs_bnobt block 0x8 [ 350.799316][ T4634] loop4: detected capacity change from 0 to 2048 [ 350.837061][ T4605] XFS (loop1): Unmount and run xfs_repair [ 350.863486][ T4640] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 350.917714][ T4634] NILFS (loop4): invalid segment: Inconsistency found [ 350.929482][ T4605] syz.1.31 (4605) used greatest stack depth: 20352 bytes left [ 350.954091][ T4634] NILFS (loop4): trying rollback from an earlier position [ 350.999410][ T4634] NILFS (loop4): recovery complete [ 351.006007][ T4642] loop0: detected capacity change from 0 to 2048 [ 351.058352][ T4644] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 351.079495][ T4642] NILFS (loop0): unrecognized mount option "˜†g[ñ" [ 351.101626][ T4310] XFS (loop1): Unmounting Filesystem [ 351.281933][ T4641] loop2: detected capacity change from 0 to 8192 [ 351.357866][ T4641] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 351.380386][ T4641] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 351.513315][ T4641] REISERFS (device loop2): using ordered data mode [ 351.583409][ T4641] reiserfs: using flush barriers [ 351.866664][ T4641] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 352.063384][ T4641] REISERFS (device loop2): checking transaction log (loop2) [ 352.220380][ T4641] REISERFS (device loop2): Using rupasov hash to sort names [ 352.278449][ T4641] REISERFS (device loop2): using 3.5.x disk format [ 352.326360][ T4641] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 352.359935][ T4653] loop0: detected capacity change from 0 to 1024 [ 352.385395][ T4654] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 352.430298][ T4653] EXT4-fs: Ignoring removed bh option [ 352.441348][ T4641] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 352.491047][ T4653] EXT4-fs: Ignoring removed nobh option [ 352.500029][ T4641] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 352.533923][ T4653] EXT4-fs: Ignoring removed bh option [ 352.554781][ T4653] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 352.614221][ T4641] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 352.685168][ T4641] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 352.729125][ T4641] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 352.760822][ T4659] loop3: detected capacity change from 0 to 1024 [ 352.771653][ T4653] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 352.776144][ T4659] EXT4-fs: Ignoring removed bh option [ 352.792633][ T4659] EXT4-fs: Ignoring removed bh option [ 352.812357][ T4659] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 352.865571][ T4641] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 353.029608][ T4659] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 354.965237][ T4662] loop4: detected capacity change from 0 to 32768 [ 355.514169][ T4662] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 355.518724][ T4662] XFS (loop4): Mounting V5 Filesystem [ 356.911166][ T4662] XFS (loop4): Ending clean mount [ 356.978973][ T4662] XFS (loop4): Quotacheck needed: Please wait. [ 358.213547][ T4662] XFS (loop4): Quotacheck: Done. [ 358.321902][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 358.322036][ T27] audit: type=1804 audit(1757286599.733:2): pid=4662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.44" name="/newroot/7/file0/file1" dev="loop4" ino=6150 res=1 errno=0 [ 359.806847][ T4308] EXT4-fs (loop0): unmounting filesystem. [ 360.796383][ T4687] loop1: detected capacity change from 0 to 2048 [ 360.820351][ T4687] NILFS (loop1): invalid segment: Inconsistency found [ 360.867762][ T4687] NILFS (loop1): trying rollback from an earlier position [ 360.910817][ T4687] NILFS (loop1): recovery complete [ 360.926275][ T4690] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 360.971852][ T4320] XFS (loop4): Unmounting Filesystem [ 361.223682][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 362.193383][ T4699] loop0: detected capacity change from 0 to 32768 [ 362.249383][ T4699] (syz.0.51,4699,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 362.289125][ T4699] (syz.0.51,4699,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 362.374045][ T4699] JBD2: Ignoring recovery information on journal [ 362.418334][ T4699] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 362.437102][ T4699] (syz.0.51,4699,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 362.628666][ T4706] loop2: detected capacity change from 0 to 512 [ 362.682830][ T4308] ocfs2: Unmounting device (7,0) on (node local) [ 362.735356][ T4706] EXT4-fs: Ignoring removed mblk_io_submit option [ 362.742684][ T4706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 362.865897][ T4706] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 362.876330][ T4706] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 362.953173][ T4715] FAULT_INJECTION: forcing a failure. [ 362.953173][ T4715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.000155][ T4717] FAULT_INJECTION: forcing a failure. [ 363.000155][ T4717] name failslab, interval 1, probability 0, space 0, times 0 [ 363.013829][ T4717] CPU: 1 PID: 4717 Comm: syz.1.52 Not tainted syzkaller #0 [ 363.022114][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.032696][ T4717] Call Trace: [ 363.036030][ T4717] [ 363.039011][ T4717] dump_stack_lvl+0x168/0x22e [ 363.044199][ T4717] ? show_regs_print_info+0x12/0x12 [ 363.049471][ T4717] ? load_image+0x3b0/0x3b0 [ 363.054382][ T4717] ? __might_sleep+0xd0/0xd0 [ 363.059155][ T4717] ? __lock_acquire+0x7c50/0x7c50 [ 363.064767][ T4717] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 363.070628][ T4717] should_fail_ex+0x399/0x4d0 [ 363.075883][ T4717] should_failslab+0x5/0x20 [ 363.080635][ T4717] slab_pre_alloc_hook+0x59/0x310 [ 363.086152][ T4717] kmem_cache_alloc+0x56/0x2f0 [ 363.091248][ T4717] ? getname_flags+0xb7/0x500 [ 363.096174][ T4717] getname_flags+0xb7/0x500 [ 363.101255][ T4717] __x64_sys_execve+0x74/0xa0 [ 363.106241][ T4717] do_syscall_64+0x4c/0xa0 [ 363.111045][ T4717] ? clear_bhb_loop+0x60/0xb0 [ 363.116233][ T4717] ? clear_bhb_loop+0x60/0xb0 [ 363.120943][ T4717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.126912][ T4717] RIP: 0033:0x7f3fa458ebe9 [ 363.131783][ T4717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.153082][ T4717] RSP: 002b:00007f3fa5375038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 363.162065][ T4717] RAX: ffffffffffffffda RBX: 00007f3fa47c6180 RCX: 00007f3fa458ebe9 [ 363.170413][ T4717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 363.179033][ T4717] RBP: 00007f3fa5375090 R08: 0000000000000000 R09: 0000000000000000 [ 363.187199][ T4717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.195812][ T4717] R13: 00007f3fa47c6218 R14: 00007f3fa47c6180 R15: 00007ffef05e1478 [ 363.204547][ T4717] [ 363.219369][ T4721] FAULT_INJECTION: forcing a failure. [ 363.219369][ T4721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.239564][ T4715] CPU: 0 PID: 4715 Comm: syz.4.56 Not tainted syzkaller #0 [ 363.239912][ T4706] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.53: Allocating blocks 41-42 which overlap fs metadata [ 363.247376][ T4715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.247394][ T4715] Call Trace: [ 363.247404][ T4715] [ 363.247413][ T4715] dump_stack_lvl+0x168/0x22e [ 363.247444][ T4715] ? show_regs_print_info+0x12/0x12 [ 363.247466][ T4715] ? load_image+0x3b0/0x3b0 [ 363.247497][ T4715] ? __lock_acquire+0x7c50/0x7c50 [ 363.247530][ T4715] should_fail_ex+0x399/0x4d0 [ 363.247560][ T4715] _copy_from_user+0x2c/0x170 [ 363.308997][ T4715] __sys_bpf+0x265/0x6d0 [ 363.313584][ T4715] ? bpf_link_show_fdinfo+0x340/0x340 [ 363.319496][ T4715] ? lock_chain_count+0x20/0x20 [ 363.324750][ T4715] __x64_sys_bpf+0x78/0x90 [ 363.330945][ T4715] do_syscall_64+0x4c/0xa0 [ 363.336633][ T4715] ? clear_bhb_loop+0x60/0xb0 [ 363.341968][ T4715] ? clear_bhb_loop+0x60/0xb0 [ 363.346867][ T4715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.353467][ T4715] RIP: 0033:0x7f91ec78ebe9 [ 363.358500][ T4715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.380977][ T4715] RSP: 002b:00007f91ed6d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.390305][ T4715] RAX: ffffffffffffffda RBX: 00007f91ec9c5fa0 RCX: 00007f91ec78ebe9 [ 363.398914][ T4715] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 363.408136][ T4715] RBP: 00007f91ed6d8090 R08: 0000000000000000 R09: 0000000000000000 [ 363.417021][ T4715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.425340][ T4715] R13: 00007f91ec9c6038 R14: 00007f91ec9c5fa0 R15: 00007fff4dd46ce8 [ 363.435406][ T4715] [ 363.438826][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.450353][ T4721] CPU: 1 PID: 4721 Comm: syz.0.55 Not tainted syzkaller #0 [ 363.457807][ T4721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.468040][ T4721] Call Trace: [ 363.471384][ T4721] [ 363.474704][ T4721] dump_stack_lvl+0x168/0x22e [ 363.480062][ T4721] ? show_regs_print_info+0x12/0x12 [ 363.485953][ T4721] ? load_image+0x3b0/0x3b0 [ 363.490952][ T4721] ? __lock_acquire+0x7c50/0x7c50 [ 363.496277][ T4721] should_fail_ex+0x399/0x4d0 [ 363.501108][ T4721] _copy_from_user+0x2c/0x170 [ 363.505927][ T4721] __sys_bpf+0x265/0x6d0 [ 363.510318][ T4721] ? bpf_link_show_fdinfo+0x340/0x340 [ 363.515756][ T4721] ? lock_chain_count+0x20/0x20 [ 363.520687][ T4721] __x64_sys_bpf+0x78/0x90 [ 363.525365][ T4721] do_syscall_64+0x4c/0xa0 [ 363.529833][ T4721] ? clear_bhb_loop+0x60/0xb0 [ 363.534907][ T4721] ? clear_bhb_loop+0x60/0xb0 [ 363.539741][ T4721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.545870][ T4721] RIP: 0033:0x7f728cf8ebe9 [ 363.550357][ T4721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.571722][ T4721] RSP: 002b:00007f728de71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.576659][ T4706] Quota error (device loop2): write_blk: dquota write failed [ 363.581006][ T4721] RAX: ffffffffffffffda RBX: 00007f728d1c5fa0 RCX: 00007f728cf8ebe9 [ 363.597300][ T4721] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 363.605424][ T4721] RBP: 00007f728de71090 R08: 0000000000000000 R09: 0000000000000000 [ 363.613630][ T4721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.622949][ T4721] R13: 00007f728d1c6038 R14: 00007f728d1c5fa0 R15: 00007ffcf5105e78 [ 363.631881][ T4721] [ 363.690271][ T4706] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 363.725066][ T4706] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 363.753916][ T4706] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.53: Failed to acquire dquot type 1 [ 363.774902][ T4706] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 363.810008][ T4706] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #12: comm syz.2.53: corrupted inode contents [ 363.837750][ T4706] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #12: comm syz.2.53: mark_inode_dirty error [ 363.875297][ T4706] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #12: comm syz.2.53: corrupted inode contents [ 363.892965][ T4706] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.53: mark_inode_dirty error [ 363.919711][ T4706] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #12: comm syz.2.53: corrupted inode contents [ 363.943443][ T4706] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 363.952925][ T4706] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #12: comm syz.2.53: corrupted inode contents [ 363.970609][ T4706] EXT4-fs error (device loop2): ext4_truncate:4312: inode #12: comm syz.2.53: mark_inode_dirty error [ 364.003468][ T4706] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 364.090463][ T4706] EXT4-fs (loop2): 1 truncate cleaned up [ 364.132212][ T4706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 364.223183][ T4706] EXT4-fs (loop2): unmounting filesystem. [ 365.145338][ T4732] binder: 4731:4732 ioctl 810c5701 200000000000 returned -22 [ 365.868872][ T4736] loop0: detected capacity change from 0 to 4096 [ 365.908344][ T4736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 366.464395][ T27] audit: type=1800 audit(1757286607.873:3): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.61" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 366.676184][ T4751] FAULT_INJECTION: forcing a failure. [ 366.676184][ T4751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.757494][ T4751] CPU: 0 PID: 4751 Comm: syz.4.64 Not tainted syzkaller #0 [ 366.764947][ T4751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.775284][ T4751] Call Trace: [ 366.778695][ T4751] [ 366.781663][ T4751] dump_stack_lvl+0x168/0x22e [ 366.786543][ T4751] ? show_regs_print_info+0x12/0x12 [ 366.791770][ T4751] ? load_image+0x3b0/0x3b0 [ 366.796307][ T4751] ? __lock_acquire+0x7c50/0x7c50 [ 366.801356][ T4751] ? snprintf+0xd7/0x120 [ 366.805624][ T4751] should_fail_ex+0x399/0x4d0 [ 366.810389][ T4751] _copy_to_user+0x2c/0x130 [ 366.815105][ T4751] simple_read_from_buffer+0xe3/0x150 [ 366.820799][ T4751] proc_fail_nth_read+0x19a/0x210 [ 366.826047][ T4751] ? proc_fault_inject_write+0x2f0/0x2f0 [ 366.831744][ T4751] ? fsnotify_perm+0x248/0x550 [ 366.836545][ T4751] ? proc_fault_inject_write+0x2f0/0x2f0 [ 366.842600][ T4751] vfs_read+0x2c0/0x920 [ 366.846837][ T4751] ? kernel_read+0x1e0/0x1e0 [ 366.851464][ T4751] ? __fget_files+0x28/0x4d0 [ 366.856184][ T4751] ? __fget_files+0x44a/0x4d0 [ 366.860917][ T4751] ? __fdget_pos+0x2ae/0x360 [ 366.865556][ T4751] ? ksys_read+0x71/0x240 [ 366.869913][ T4751] ksys_read+0x143/0x240 [ 366.874188][ T4751] ? vfs_write+0x960/0x960 [ 366.878625][ T4751] ? lockdep_hardirqs_on+0x94/0x140 [ 366.883882][ T4751] do_syscall_64+0x4c/0xa0 [ 366.888330][ T4751] ? clear_bhb_loop+0x60/0xb0 [ 366.893028][ T4751] ? clear_bhb_loop+0x60/0xb0 [ 366.897723][ T4751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.903638][ T4751] RIP: 0033:0x7f91ec78d5fc [ 366.908080][ T4751] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 366.928262][ T4751] RSP: 002b:00007f91ed6d8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 366.936800][ T4751] RAX: ffffffffffffffda RBX: 00007f91ec9c5fa0 RCX: 00007f91ec78d5fc [ 366.944965][ T4751] RDX: 000000000000000f RSI: 00007f91ed6d80a0 RDI: 0000000000000003 [ 366.952946][ T4751] RBP: 00007f91ed6d8090 R08: 0000000000000000 R09: 0000000000000000 [ 366.961034][ T4751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.969208][ T4751] R13: 00007f91ec9c6038 R14: 00007f91ec9c5fa0 R15: 00007fff4dd46ce8 [ 366.977620][ T4751] [ 367.013228][ T4744] loop2: detected capacity change from 0 to 8192 [ 367.040663][ T4744] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 367.064077][ T4744] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 367.142492][ T4744] REISERFS (device loop2): using ordered data mode [ 367.150495][ T4757] loop4: detected capacity change from 0 to 1024 [ 367.194588][ T4757] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 367.203506][ T4757] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.224870][ T4744] reiserfs: using flush barriers [ 367.245765][ T4757] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.66: Freeing blocks not in datazone - block = 0, count = 16 [ 367.281834][ T4744] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 367.364814][ T4762] x_tables: duplicate underflow at hook 3 [ 367.394194][ T4757] EXT4-fs (loop4): Remounting filesystem read-only [ 367.440411][ T4744] REISERFS (device loop2): checking transaction log (loop2) [ 367.529539][ T4744] REISERFS (device loop2): Using r5 hash to sort names [ 367.566321][ T4308] EXT4-fs (loop0): unmounting filesystem. [ 367.580080][ T4744] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 368.148322][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 368.171673][ T4771] netlink: 228 bytes leftover after parsing attributes in process `syz.0.67'. [ 369.688649][ T4789] loop3: detected capacity change from 0 to 1024 [ 369.924834][ T4789] EXT4-fs: Ignoring removed bh option [ 370.099268][ T4789] EXT4-fs: Ignoring removed nobh option [ 370.133970][ T4789] EXT4-fs: Ignoring removed bh option [ 370.193971][ T4789] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 370.473158][ T4809] netlink: 48 bytes leftover after parsing attributes in process `syz.4.75'. [ 370.501286][ T4789] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 373.173424][ T4819] sched: RT throttling activated [ 375.431439][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 375.623845][ T4370] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 376.551184][ T4370] usb 2-1: Using ep0 maxpacket: 32 [ 376.764899][ T4370] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 376.837815][ T4370] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 376.857519][ T4370] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 378.318198][ T4852] loop0: detected capacity change from 0 to 32768 [ 378.803568][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.810578][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.039669][ T4370] usb 2-1: config 1 has no interface number 0 [ 379.049138][ T4370] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 379.070565][ T4370] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 379.100081][ T4851] virtio-fs: tag not found [ 379.130257][ T4370] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 379.149604][ T4317] Bluetooth: Wrong link type (-22) [ 379.174101][ T4370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.201012][ T4370] usb 2-1: can't set config #1, error -71 [ 379.210655][ T4370] usb 2-1: USB disconnect, device number 2 [ 380.127428][ T4865] loop1: detected capacity change from 0 to 4096 [ 380.140868][ T4869] netlink: 48 bytes leftover after parsing attributes in process `syz.0.93'. [ 380.142677][ T4865] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 380.161871][ T4865] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 380.177492][ T4865] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 380.189699][ T4865] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 380.203047][ T4865] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 380.215829][ T4865] ntfs: volume version 3.1. [ 380.222214][ T4865] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 380.233846][ T4865] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 380.245611][ T4865] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 380.274638][ T4865] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 380.285269][ T4865] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 380.338331][ T4868] loop3: detected capacity change from 0 to 4096 [ 380.352426][ T4868] ntfs: volume version 3.1. [ 380.390567][ T4868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 382.028625][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 382.072348][ T4892] loop2: detected capacity change from 0 to 128 [ 382.263898][ T4422] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 382.933954][ T4422] usb 1-1: Using ep0 maxpacket: 32 [ 382.945481][ T4422] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 383.035790][ T4422] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 383.061528][ T4422] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 383.079349][ T4422] usb 1-1: config 1 has no interface number 0 [ 383.086316][ T4422] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 383.104760][ T4422] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 383.120962][ T4422] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 383.146563][ T4422] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 383.154834][ T4901] loop1: detected capacity change from 0 to 4096 [ 383.163034][ T4422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.184908][ T4901] ntfs: volume version 3.1. [ 383.322818][ T4422] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 383.362498][ T4903] FAULT_INJECTION: forcing a failure. [ 383.362498][ T4903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.393959][ T4903] CPU: 0 PID: 4903 Comm: syz.1.108 Not tainted syzkaller #0 [ 383.402307][ T4903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.413412][ T4903] Call Trace: [ 383.417362][ T4903] [ 383.421713][ T4903] dump_stack_lvl+0x168/0x22e [ 383.426889][ T4903] ? show_regs_print_info+0x12/0x12 [ 383.433373][ T4903] ? load_image+0x3b0/0x3b0 [ 383.439313][ T4903] ? __lock_acquire+0x7c50/0x7c50 [ 383.445005][ T4903] ? verify_lock_unused+0x140/0x140 [ 383.451253][ T4903] should_fail_ex+0x399/0x4d0 [ 383.456428][ T4903] _copy_from_user+0x2c/0x170 [ 383.461242][ T4903] ___sys_sendmsg+0x155/0x290 [ 383.466170][ T4903] ? __sys_sendmsg+0x270/0x270 [ 383.471935][ T4903] ? __lock_acquire+0x7c50/0x7c50 [ 383.477840][ T4903] ? __fdget+0x17c/0x200 [ 383.482770][ T4903] __se_sys_sendmsg+0x19e/0x270 [ 383.488298][ T4903] ? __x64_sys_sendmsg+0x80/0x80 [ 383.493500][ T4903] ? lockdep_hardirqs_on+0x94/0x140 [ 383.499292][ T4903] do_syscall_64+0x4c/0xa0 [ 383.503917][ T4903] ? clear_bhb_loop+0x60/0xb0 [ 383.508750][ T4903] ? clear_bhb_loop+0x60/0xb0 [ 383.513679][ T4903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.521549][ T4903] RIP: 0033:0x7f3fa458ebe9 [ 383.526692][ T4903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.548875][ T4903] RSP: 002b:00007f3fa53b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.558558][ T4903] RAX: ffffffffffffffda RBX: 00007f3fa47c5fa0 RCX: 00007f3fa458ebe9 [ 383.567527][ T4903] RDX: 00000000200080c0 RSI: 00002000000001c0 RDI: 0000000000000003 [ 383.576464][ T4903] RBP: 00007f3fa53b7090 R08: 0000000000000000 R09: 0000000000000000 [ 383.585226][ T4903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.594357][ T4903] R13: 00007f3fa47c6038 R14: 00007f3fa47c5fa0 R15: 00007ffef05e1478 [ 383.604511][ T4903] [ 383.625051][ T4905] netlink: 36 bytes leftover after parsing attributes in process `syz.2.107'. [ 383.627610][ T4422] snd_usb_pod 1-1:1.1: cannot start listening: -90 [ 383.752181][ T4422] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 383.761555][ T4422] snd_usb_pod: probe of 1-1:1.1 failed with error -90 [ 383.894524][ T4298] usb 1-1: USB disconnect, device number 2 [ 383.957025][ T4911] netlink: 48 bytes leftover after parsing attributes in process `syz.3.109'. [ 385.435798][ T4913] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.445901][ T4913] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.519532][ T4931] netlink: 56 bytes leftover after parsing attributes in process `syz.2.114'. [ 386.515722][ T4942] loop2: detected capacity change from 0 to 4096 [ 386.549284][ T4942] __ntfs_error: 32 callbacks suppressed [ 386.549305][ T4942] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 386.567732][ T4942] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 386.583422][ T4942] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 386.595350][ T4942] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 386.608710][ T4942] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 386.621368][ T4942] ntfs: volume version 3.1. [ 386.632440][ T4942] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 386.643889][ T4942] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 386.647638][ T4946] FAULT_INJECTION: forcing a failure. [ 386.647638][ T4946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.656591][ T4942] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 386.658091][ T4942] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 386.680156][ T4946] CPU: 1 PID: 4946 Comm: syz.3.120 Not tainted syzkaller #0 [ 386.685593][ T4942] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 386.695600][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.695619][ T4946] Call Trace: [ 386.695627][ T4946] [ 386.695636][ T4946] dump_stack_lvl+0x168/0x22e [ 386.695669][ T4946] ? show_regs_print_info+0x12/0x12 [ 386.743610][ T4946] ? load_image+0x3b0/0x3b0 [ 386.748272][ T4946] ? __lock_acquire+0x7c50/0x7c50 [ 386.753529][ T4946] ? verify_lock_unused+0x140/0x140 [ 386.758789][ T4946] should_fail_ex+0x399/0x4d0 [ 386.763707][ T4946] _copy_from_user+0x2c/0x170 [ 386.768535][ T4946] ___sys_sendmsg+0x155/0x290 [ 386.773275][ T4946] ? __sys_sendmsg+0x270/0x270 [ 386.778117][ T4946] ? __lock_acquire+0x7c50/0x7c50 [ 386.783223][ T4946] ? __fdget+0x17c/0x200 [ 386.787541][ T4946] __se_sys_sendmsg+0x19e/0x270 [ 386.792624][ T4946] ? __x64_sys_sendmsg+0x80/0x80 [ 386.797641][ T4946] ? lockdep_hardirqs_on+0x94/0x140 [ 386.802998][ T4946] do_syscall_64+0x4c/0xa0 [ 386.807470][ T4946] ? clear_bhb_loop+0x60/0xb0 [ 386.812190][ T4946] ? clear_bhb_loop+0x60/0xb0 [ 386.816921][ T4946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.823089][ T4946] RIP: 0033:0x7f320818ebe9 [ 386.827566][ T4946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.847316][ T4946] RSP: 002b:00007f32090a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.855881][ T4946] RAX: ffffffffffffffda RBX: 00007f32083c5fa0 RCX: 00007f320818ebe9 [ 386.863995][ T4946] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 386.872289][ T4946] RBP: 00007f32090a7090 R08: 0000000000000000 R09: 0000000000000000 [ 386.880319][ T4946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.888351][ T4946] R13: 00007f32083c6038 R14: 00007f32083c5fa0 R15: 00007ffc31a21f88 [ 386.896394][ T4946] [ 386.899578][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.209600][ T4949] netlink: 56 bytes leftover after parsing attributes in process `syz.3.121'. [ 388.221957][ T4962] loop3: detected capacity change from 0 to 1024 [ 388.250152][ T4962] EXT4-fs: Ignoring removed bh option [ 388.371510][ T4962] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e118, mo2=0000] [ 388.383951][ T4962] System zones: 0-1, 3-12 [ 388.420417][ T4962] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #3: block 1: comm syz.3.124: lblock 1 mapped to illegal pblock 1 (length 1) [ 388.519062][ T4962] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.124: Failed to acquire dquot type 0 [ 388.543668][ T4962] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.124: Freeing blocks not in datazone - block = 0, count = 4096 [ 388.596438][ T4962] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.124: Invalid inode bitmap blk 0 in block_group 0 [ 388.665752][ T4396] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 388.711659][ T4396] EXT4-fs error (device loop3): ext4_release_dquot:6852: comm kworker/u4:6: Failed to release dquot type 0 [ 388.725328][ T4962] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 388.739927][ T4962] EXT4-fs (loop3): 1 orphan inode deleted [ 388.761322][ T4962] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 388.800283][ T4913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.842206][ T4913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.850877][ T4961] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.124: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 388.983910][ T4298] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 389.184797][ T4298] usb 3-1: Using ep0 maxpacket: 32 [ 389.196632][ T4298] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 389.208787][ T4913] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.239758][ T4913] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.246208][ T4298] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 389.273827][ T4913] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.288004][ T4298] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 389.297207][ T4298] usb 3-1: config 1 has no interface number 0 [ 389.303715][ T4298] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 389.315128][ T4298] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 389.325246][ T4298] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 389.338983][ T4298] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 389.348348][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.364149][ T4298] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 389.372768][ T4913] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.608751][ T4982] netlink: 48 bytes leftover after parsing attributes in process `syz.4.127'. [ 389.620995][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 389.684903][ T4298] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 389.691712][ T4298] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 389.730629][ T4298] snd_usb_pod: probe of 3-1:1.1 failed with error -90 [ 390.547092][ T4923] usb 3-1: USB disconnect, device number 3 [ 390.723028][ T4989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'. [ 390.818138][ T4994] loop2: detected capacity change from 0 to 4096 [ 390.853241][ T4994] ntfs: volume version 3.1. [ 390.981909][ T4298] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 391.098328][ T4999] FAULT_INJECTION: forcing a failure. [ 391.098328][ T4999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.209118][ T4999] CPU: 0 PID: 4999 Comm: syz.2.135 Not tainted syzkaller #0 [ 391.216696][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.227315][ T4999] Call Trace: [ 391.230994][ T4999] [ 391.233969][ T4999] dump_stack_lvl+0x168/0x22e [ 391.238792][ T4999] ? show_regs_print_info+0x12/0x12 [ 391.244137][ T4999] ? load_image+0x3b0/0x3b0 [ 391.249010][ T4999] ? __lock_acquire+0x7c50/0x7c50 [ 391.254122][ T4999] ? verify_lock_unused+0x140/0x140 [ 391.259484][ T4999] should_fail_ex+0x399/0x4d0 [ 391.264226][ T4999] _copy_from_user+0x2c/0x170 [ 391.268987][ T4999] ___sys_sendmsg+0x155/0x290 [ 391.273904][ T4999] ? __sys_sendmsg+0x270/0x270 [ 391.278734][ T4999] ? __lock_acquire+0x7c50/0x7c50 [ 391.283820][ T4999] ? __fdget+0x17c/0x200 [ 391.288208][ T4999] __se_sys_sendmsg+0x19e/0x270 [ 391.293103][ T4999] ? __x64_sys_sendmsg+0x80/0x80 [ 391.298224][ T4999] ? lockdep_hardirqs_on+0x94/0x140 [ 391.303556][ T4999] do_syscall_64+0x4c/0xa0 [ 391.308200][ T4999] ? clear_bhb_loop+0x60/0xb0 [ 391.313123][ T4999] ? clear_bhb_loop+0x60/0xb0 [ 391.318050][ T4999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.324095][ T4999] RIP: 0033:0x7fa0da98ebe9 [ 391.328640][ T4999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.348386][ T4999] RSP: 002b:00007fa0db81d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.356831][ T4999] RAX: ffffffffffffffda RBX: 00007fa0dabc5fa0 RCX: 00007fa0da98ebe9 [ 391.364919][ T4999] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 391.373529][ T4999] RBP: 00007fa0db81d090 R08: 0000000000000000 R09: 0000000000000000 [ 391.381661][ T4999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.389897][ T4999] R13: 00007fa0dabc6038 R14: 00007fa0dabc5fa0 R15: 00007ffe69bd9ce8 [ 391.398595][ T4999] [ 391.401779][ T4298] usb 2-1: Using ep0 maxpacket: 32 [ 391.409023][ T4390] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 391.472375][ T4298] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=20.b0 [ 391.502732][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.623843][ T4390] usb 5-1: Using ep0 maxpacket: 32 [ 391.635098][ T4390] usb 5-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 391.728649][ T4298] usb 2-1: Product: syz [ 391.823547][ T4298] usb 2-1: Manufacturer: syz [ 391.888857][ T4390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.941167][ T4298] usb 2-1: SerialNumber: syz [ 392.094492][ T4298] usb 2-1: config 0 descriptor?? [ 392.106301][ T4390] usb 5-1: config 0 descriptor?? [ 392.156544][ T4298] usb 2-1: ucan: probing device on interface #0 [ 392.171820][ T4390] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 392.203877][ T4298] usb 2-1: ucan: invalid endpoint configuration [ 392.248227][ T4390] gspca_mr97310a: reg write [21] error -22 [ 392.285526][ T4298] usb 2-1: ucan: probe failed; try to update the device firmware [ 392.293960][ T4390] mr97310a: probe of 5-1:0.0 failed with error -22 [ 392.352623][ T4298] usb 2-1: USB disconnect, device number 3 [ 392.756031][ T4497] usb 5-1: USB disconnect, device number 2 [ 393.704494][ T5021] loop1: detected capacity change from 0 to 1024 [ 393.714216][ T5021] EXT4-fs: Ignoring removed bh option [ 393.767133][ T5021] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e118, mo2=0000] [ 393.784080][ T5021] System zones: 0-1, 3-12 [ 393.807795][ T5025] loop3: detected capacity change from 0 to 16 [ 393.838571][ T5021] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #3: block 1: comm syz.1.141: lblock 1 mapped to illegal pblock 1 (length 1) [ 393.853543][ T5021] __quota_error: 21 callbacks suppressed [ 393.853601][ T5021] Quota error (device loop1): write_blk: dquota write failed [ 393.867729][ T5021] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 393.878425][ T5021] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.141: Failed to acquire dquot type 0 [ 394.000454][ T5021] EXT4-fs error (device loop1): ext4_free_blocks:6205: comm syz.1.141: Freeing blocks not in datazone - block = 0, count = 4096 [ 394.021455][ T5021] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.141: Invalid inode bitmap blk 0 in block_group 0 [ 394.039000][ T5021] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 394.051468][ T5021] EXT4-fs (loop1): 1 orphan inode deleted [ 394.058283][ T5021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 394.098869][ T5021] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.141: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 394.216636][ T4402] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 394.387032][ T5025] erofs: (device loop3): mounted with root inode @ nid 36. [ 394.391844][ T4402] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 394.453990][ T4402] EXT4-fs error (device loop1): ext4_release_dquot:6852: comm kworker/u4:7: Failed to release dquot type 0 [ 394.499969][ T4310] EXT4-fs (loop1): unmounting filesystem. [ 394.533595][ T5032] netlink: 48 bytes leftover after parsing attributes in process `syz.4.142'. [ 394.872572][ T4390] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 394.981435][ T5038] loop2: detected capacity change from 0 to 4096 [ 395.066918][ T5038] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 395.080102][ T5038] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 395.096922][ T4497] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 395.120259][ T5038] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 395.132737][ T5038] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 395.145941][ T5038] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 395.159145][ T4390] usb 1-1: Using ep0 maxpacket: 32 [ 395.174604][ T5038] ntfs: volume version 3.1. [ 395.192044][ T5038] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 395.204113][ T5038] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 395.367525][ T4390] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 395.492295][ T4390] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 395.510653][ T4390] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 395.520284][ T4390] usb 1-1: config 1 has no interface number 0 [ 395.527104][ T4390] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.574023][ T4390] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.586215][ T4497] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 395.604738][ T4497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.621142][ T4390] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 395.650071][ T4497] usb 4-1: config 0 descriptor?? [ 395.669787][ T4390] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 395.689867][ T4390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.717764][ T4390] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 395.920755][ T4390] snd_usb_pod 1-1:1.1: cannot start listening: -90 [ 395.934886][ T4390] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 395.957995][ T4390] snd_usb_pod: probe of 1-1:1.1 failed with error -90 [ 395.969267][ T5044] loop4: detected capacity change from 0 to 128 [ 396.255854][ T4497] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 396.265770][ T4363] usb 1-1: USB disconnect, device number 3 [ 396.276484][ T4497] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 396.290781][ T4497] [drm:udl_init] *ERROR* Selecting channel failed [ 396.555660][ T4497] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 396.627152][ T4497] [drm] Initialized udl on minor 2 [ 396.686784][ T4497] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 396.753708][ T4497] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 396.843206][ T4497] usb 4-1: USB disconnect, device number 2 [ 396.978195][ T5050] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 397.027028][ T4390] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 397.038209][ T4390] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 397.062812][ T4390] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 397.074452][ T5050] FAT-fs (loop4): Filesystem has been set read-only [ 397.167307][ T5044] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 397.260133][ T5058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.151'. [ 397.421992][ T5065] FAULT_INJECTION: forcing a failure. [ 397.421992][ T5065] name failslab, interval 1, probability 0, space 0, times 0 [ 397.477129][ T5065] CPU: 1 PID: 5065 Comm: syz.1.154 Not tainted syzkaller #0 [ 397.484602][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.494875][ T5065] Call Trace: [ 397.498304][ T5065] [ 397.501538][ T5065] dump_stack_lvl+0x168/0x22e [ 397.506273][ T5065] ? show_regs_print_info+0x12/0x12 [ 397.511522][ T5065] ? load_image+0x3b0/0x3b0 [ 397.516438][ T5065] ? __might_sleep+0xd0/0xd0 [ 397.521219][ T5065] ? __lock_acquire+0x7c50/0x7c50 [ 397.526367][ T5065] should_fail_ex+0x399/0x4d0 [ 397.531392][ T5065] should_failslab+0x5/0x20 [ 397.536490][ T5065] slab_pre_alloc_hook+0x59/0x310 [ 397.541737][ T5065] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 397.547671][ T5065] __kmem_cache_alloc_node+0x4f/0x260 [ 397.553184][ T5065] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 397.559179][ T5065] __kmalloc+0xa0/0x240 [ 397.563399][ T5065] tomoyo_realpath_from_path+0xdf/0x5d0 [ 397.569165][ T5065] tomoyo_path_number_perm+0x1e3/0x600 [ 397.574825][ T5065] ? tomoyo_path_number_perm+0x1b6/0x600 [ 397.580520][ T5065] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 397.586028][ T5065] ? ksys_write+0x1bd/0x240 [ 397.591284][ T5065] ? common_file_perm+0x171/0x1c0 [ 397.596390][ T5065] ? __fget_files+0x28/0x4d0 [ 397.601114][ T5065] security_file_ioctl+0x6c/0xa0 [ 397.606294][ T5065] __se_sys_ioctl+0x48/0x170 [ 397.610953][ T5065] do_syscall_64+0x4c/0xa0 [ 397.615450][ T5065] ? clear_bhb_loop+0x60/0xb0 [ 397.620249][ T5065] ? clear_bhb_loop+0x60/0xb0 [ 397.625139][ T5065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.631347][ T5065] RIP: 0033:0x7f3fa458ebe9 [ 397.635978][ T5065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.655797][ T5065] RSP: 002b:00007f3fa53b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.664316][ T5065] RAX: ffffffffffffffda RBX: 00007f3fa47c5fa0 RCX: 00007f3fa458ebe9 [ 397.672494][ T5065] RDX: 00002000000000c0 RSI: 00000000c018aa06 RDI: 0000000000000003 [ 397.680580][ T5065] RBP: 00007f3fa53b7090 R08: 0000000000000000 R09: 0000000000000000 [ 397.689018][ T5065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.697452][ T5065] R13: 00007f3fa47c6038 R14: 00007f3fa47c5fa0 R15: 00007ffef05e1478 [ 397.705717][ T5065] [ 397.909704][ T5065] ERROR: Out of memory at tomoyo_realpath_from_path. [ 397.929557][ T5075] loop3: detected capacity change from 0 to 4096 [ 397.961197][ T5075] ntfs: volume version 3.1. [ 400.288244][ T4923] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 400.484029][ T4923] usb 2-1: Using ep0 maxpacket: 32 [ 400.492047][ T4923] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 400.522515][ T4923] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 400.559705][ T4923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 400.589391][ T4923] usb 2-1: config 1 has no interface number 0 [ 400.608092][ T4923] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.691791][ T5096] FAULT_INJECTION: forcing a failure. [ 400.691791][ T5096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.694630][ T4923] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 400.705840][ T5096] CPU: 1 PID: 5096 Comm: syz.3.165 Not tainted syzkaller #0 [ 400.726295][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.734497][ T4923] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 400.736810][ T5096] Call Trace: [ 400.736822][ T5096] [ 400.746670][ T4923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.749892][ T5096] dump_stack_lvl+0x168/0x22e [ 400.766292][ T5096] ? show_regs_print_info+0x12/0x12 [ 400.769681][ T4923] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 400.771795][ T5096] ? load_image+0x3b0/0x3b0 [ 400.783163][ T5096] ? __lock_acquire+0x7c50/0x7c50 [ 400.788460][ T5096] should_fail_ex+0x399/0x4d0 [ 400.793260][ T5096] _copy_from_user+0x2c/0x170 [ 400.798184][ T5096] core_sys_select+0x4d0/0x8b0 [ 400.803401][ T5096] ? poll_select_set_timeout+0x150/0x150 [ 400.809656][ T5096] ? sigprocmask+0x190/0x190 [ 400.815208][ T5096] ? do_sys_openat2+0x1fe/0x490 [ 400.820547][ T5096] __se_sys_pselect6+0x2ed/0x3a0 [ 400.826074][ T5096] ? __x64_sys_pselect6+0xf0/0xf0 [ 400.831850][ T5096] ? __x64_sys_pselect6+0x1d/0xf0 [ 400.837562][ T5096] do_syscall_64+0x4c/0xa0 [ 400.842740][ T5096] ? clear_bhb_loop+0x60/0xb0 [ 400.848775][ T5096] ? clear_bhb_loop+0x60/0xb0 [ 400.853590][ T5096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.861128][ T5096] RIP: 0033:0x7f320818ebe9 [ 400.866049][ T5096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.886662][ T5096] RSP: 002b:00007f32090a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 400.896176][ T5096] RAX: ffffffffffffffda RBX: 00007f32083c5fa0 RCX: 00007f320818ebe9 [ 400.904612][ T5096] RDX: 00002000000013c0 RSI: 0000200000001380 RDI: 0000000000000040 [ 400.912990][ T5096] RBP: 00007f32090a7090 R08: 0000000000000000 R09: 0000000000000000 [ 400.921278][ T5096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.929447][ T5096] R13: 00007f32083c6038 R14: 00007f32083c5fa0 R15: 00007ffc31a21f88 [ 400.937626][ T5096] [ 400.976192][ T4923] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 401.419362][ T4923] usb 2-1: USB disconnect, device number 4 [ 401.426744][ T4923] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 401.652032][ T5070] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.661008][ T5070] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.912848][ T5110] FAULT_INJECTION: forcing a failure. [ 401.912848][ T5110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.962908][ T5110] CPU: 1 PID: 5110 Comm: syz.1.168 Not tainted syzkaller #0 [ 401.970289][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.980400][ T5110] Call Trace: [ 401.983725][ T5110] [ 401.986793][ T5110] dump_stack_lvl+0x168/0x22e [ 401.991539][ T5110] ? show_regs_print_info+0x12/0x12 [ 401.996885][ T5110] ? load_image+0x3b0/0x3b0 [ 402.001466][ T5110] ? __lock_acquire+0x7c50/0x7c50 [ 402.006556][ T5110] ? mark_lock+0x94/0x320 [ 402.010971][ T5110] should_fail_ex+0x399/0x4d0 [ 402.015820][ T5110] _copy_from_user+0x2c/0x170 [ 402.020708][ T5110] sctp_getsockopt_scheduler+0xb2/0x4c0 [ 402.026856][ T5110] ? sctp_getsockopt_enable_strreset+0x4d0/0x4d0 [ 402.033400][ T5110] ? lock_sock_nested+0x66/0x100 [ 402.038506][ T5110] sctp_getsockopt+0x221/0x8a0 [ 402.043501][ T5110] ? sock_recv_errqueue+0x4d0/0x4d0 [ 402.048952][ T5110] __sys_getsockopt+0x1b0/0x230 [ 402.054232][ T5110] __x64_sys_getsockopt+0xb1/0xc0 [ 402.059679][ T5110] do_syscall_64+0x4c/0xa0 [ 402.064150][ T5110] ? clear_bhb_loop+0x60/0xb0 [ 402.068867][ T5110] ? clear_bhb_loop+0x60/0xb0 [ 402.073943][ T5110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.080267][ T5110] RIP: 0033:0x7f3fa458ebe9 [ 402.085692][ T5110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.106247][ T5110] RSP: 002b:00007f3fa53b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 402.114799][ T5110] RAX: ffffffffffffffda RBX: 00007f3fa47c5fa0 RCX: 00007f3fa458ebe9 [ 402.122805][ T5110] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000003 [ 402.130892][ T5110] RBP: 00007f3fa53b7090 R08: 0000200000000000 R09: 0000000000000000 [ 402.138940][ T5110] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000001 [ 402.147116][ T5110] R13: 00007f3fa47c6038 R14: 00007f3fa47c5fa0 R15: 00007ffef05e1478 [ 402.155512][ T5110] [ 402.680555][ T5070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.770045][ T5070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.425903][ T5070] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.436614][ T5070] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.448466][ T5070] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.459257][ T5070] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.543155][ T5076] netlink: 48 bytes leftover after parsing attributes in process `syz.4.156'. [ 403.559096][ T5106] netlink: 'syz.2.167': attribute type 1 has an invalid length. [ 403.633250][ T5112] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 403.739003][ T5114] device gretap1 entered promiscuous mode [ 404.012842][ T5135] sctp: [Deprecated]: syz.4.175 (pid 5135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.012842][ T5135] Use struct sctp_sack_info instead [ 405.164977][ T5144] netlink: 'syz.4.175': attribute type 10 has an invalid length. [ 405.276458][ T5155] loop3: detected capacity change from 0 to 164 [ 405.328809][ T5156] netlink: 48 bytes leftover after parsing attributes in process `syz.1.182'. [ 405.347698][ T5135] netlink: 'syz.4.175': attribute type 39 has an invalid length. [ 405.391217][ T5135] device veth0_macvtap left promiscuous mode [ 405.403945][ T4974] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 405.584042][ T4926] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 405.603988][ T4974] usb 3-1: Using ep0 maxpacket: 32 [ 405.611594][ T4974] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 405.631308][ T4974] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 405.651650][ T4974] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 405.673853][ T4974] usb 3-1: config 1 has no interface number 0 [ 405.688242][ T4974] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 405.712218][ T4974] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 405.739932][ T4974] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 405.759536][ T4974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.773872][ T4926] usb 1-1: Using ep0 maxpacket: 32 [ 405.781811][ T4926] usb 1-1: unable to get BOS descriptor or descriptor too short [ 405.805744][ T4926] usb 1-1: config 8 has an invalid interface number: 59 but max is 0 [ 405.818965][ T4974] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 405.823928][ T4926] usb 1-1: config 8 has no interface number 0 [ 405.832044][ T4926] usb 1-1: config 8 interface 59 has no altsetting 0 [ 405.858165][ T4926] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 405.871374][ T4926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.015074][ T4974] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 406.068259][ T4926] usb 1-1: Product: syz [ 406.072539][ T4926] usb 1-1: Manufacturer: syz [ 406.077534][ T4926] usb 1-1: SerialNumber: syz [ 406.189009][ T5160] loop4: detected capacity change from 0 to 16 [ 406.202220][ T5160] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 406.252615][ T4363] usb 3-1: USB disconnect, device number 4 [ 406.298958][ T4363] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 406.436713][ T5158] overlayfs: upper fs is r/o, try multi-lower layers mount [ 406.613989][ T4926] usb 1-1: USB disconnect, device number 4 [ 407.033244][ T4318] rock: directory entry would overflow storage [ 407.085929][ T4318] rock: sig=0x4f50, size=4, remaining=3 [ 407.092170][ T4318] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 407.331415][ T4318] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 408.200124][ T5186] loop2: detected capacity change from 0 to 1024 [ 408.431139][ T5186] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 128: 0xc1 != 0xdb [ 409.398326][ T5186] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.619639][ T5198] netlink: 48 bytes leftover after parsing attributes in process `syz.4.195'. [ 409.769791][ T5204] FAULT_INJECTION: forcing a failure. [ 409.769791][ T5204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.784471][ T5204] CPU: 0 PID: 5204 Comm: syz.2.198 Not tainted syzkaller #0 [ 409.792163][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.802358][ T5204] Call Trace: [ 409.805687][ T5204] [ 409.808665][ T5204] dump_stack_lvl+0x168/0x22e [ 409.813581][ T5204] ? show_regs_print_info+0x12/0x12 [ 409.818881][ T5204] ? load_image+0x3b0/0x3b0 [ 409.823623][ T5204] ? __lock_acquire+0x7c50/0x7c50 [ 409.828734][ T5204] ? mark_lock+0x94/0x320 [ 409.833129][ T5204] should_fail_ex+0x399/0x4d0 [ 409.837871][ T5204] _copy_from_user+0x2c/0x170 [ 409.842735][ T5204] sctp_getsockopt_scheduler_value+0xaf/0x450 [ 409.849055][ T5204] ? sctp_getsockopt_scheduler+0x4c0/0x4c0 [ 409.855009][ T5204] ? lock_sock_nested+0x66/0x100 [ 409.860008][ T5204] sctp_getsockopt+0x1c1/0x8a0 [ 409.864875][ T5204] ? sock_recv_errqueue+0x4d0/0x4d0 [ 409.870136][ T5204] __sys_getsockopt+0x1b0/0x230 [ 409.875277][ T5204] __x64_sys_getsockopt+0xb1/0xc0 [ 409.880553][ T5204] do_syscall_64+0x4c/0xa0 [ 409.885231][ T5204] ? clear_bhb_loop+0x60/0xb0 [ 409.890289][ T5204] ? clear_bhb_loop+0x60/0xb0 [ 409.895474][ T5204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.901796][ T5204] RIP: 0033:0x7fa0da98ebe9 [ 409.908392][ T5204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.930051][ T5204] RSP: 002b:00007fa0db81d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 409.941215][ T5204] RAX: ffffffffffffffda RBX: 00007fa0dabc5fa0 RCX: 00007fa0da98ebe9 [ 409.949578][ T5204] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003 [ 409.959011][ T5204] RBP: 00007fa0db81d090 R08: 0000200000000140 R09: 0000000000000000 [ 409.967710][ T5204] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 409.975986][ T5204] R13: 00007fa0dabc6038 R14: 00007fa0dabc5fa0 R15: 00007ffe69bd9ce8 [ 409.984186][ T5204] [ 410.057346][ T4926] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 410.254124][ T4926] usb 2-1: Using ep0 maxpacket: 32 [ 410.272508][ T4926] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 410.292953][ T4926] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 410.321864][ T4926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 410.341153][ T4926] usb 2-1: config 1 has no interface number 0 [ 410.347888][ T4926] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 410.359882][ T4926] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 410.373464][ T4926] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 410.389852][ T4926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.430532][ T4926] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 410.606259][ T5213] program syz.4.201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.631297][ T4926] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 410.781580][ T5202] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.789519][ T5202] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.880234][ T4926] usb 2-1: USB disconnect, device number 5 [ 410.890830][ T4926] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 410.963834][ T4363] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 411.179111][ T4363] usb 5-1: Using ep0 maxpacket: 8 [ 411.187588][ T4363] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.206442][ T4363] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 411.220712][ T4363] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 411.237783][ T4363] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.253427][ T4363] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 411.269315][ T4363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.513453][ T4363] usb 5-1: GET_CAPABILITIES returned 0 [ 411.519623][ T4363] usbtmc 5-1:16.0: can't read capabilities [ 411.758358][ T4929] usb 5-1: USB disconnect, device number 3 [ 411.848837][ T5202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.888587][ T5202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.818345][ T5202] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.842719][ T5231] FAULT_INJECTION: forcing a failure. [ 412.842719][ T5231] name failslab, interval 1, probability 0, space 0, times 0 [ 412.865221][ T5202] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.892192][ T5202] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.907815][ T5231] CPU: 0 PID: 5231 Comm: syz.1.207 Not tainted syzkaller #0 [ 412.915301][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.926532][ T5231] Call Trace: [ 412.930301][ T5231] [ 412.933284][ T5231] dump_stack_lvl+0x168/0x22e [ 412.938014][ T5231] ? show_regs_print_info+0x12/0x12 [ 412.943261][ T5231] ? load_image+0x3b0/0x3b0 [ 412.947926][ T5231] ? __might_sleep+0xd0/0xd0 [ 412.952835][ T5231] ? __lock_acquire+0x7c50/0x7c50 [ 412.958131][ T5231] should_fail_ex+0x399/0x4d0 [ 412.963066][ T5231] should_failslab+0x5/0x20 [ 412.967804][ T5231] slab_pre_alloc_hook+0x59/0x310 [ 412.973015][ T5231] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 412.979262][ T5231] __kmem_cache_alloc_node+0x4f/0x260 [ 412.984890][ T5231] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 412.992522][ T5231] __kmalloc+0xa0/0x240 [ 412.996947][ T5231] tomoyo_realpath_from_path+0xdf/0x5d0 [ 413.002577][ T5231] tomoyo_path_number_perm+0x1e3/0x600 [ 413.008192][ T5231] ? tomoyo_path_number_perm+0x1b6/0x600 [ 413.014616][ T5231] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 413.021014][ T5231] ? ksys_write+0x1bd/0x240 [ 413.024432][ T5202] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.025563][ T5231] ? common_file_perm+0x171/0x1c0 [ 413.039708][ T5231] ? __fget_files+0x28/0x4d0 [ 413.044535][ T5231] security_file_ioctl+0x6c/0xa0 [ 413.049546][ T5231] __se_sys_ioctl+0x48/0x170 [ 413.054209][ T5231] do_syscall_64+0x4c/0xa0 [ 413.058656][ T5231] ? clear_bhb_loop+0x60/0xb0 [ 413.063461][ T5231] ? clear_bhb_loop+0x60/0xb0 [ 413.068340][ T5231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.074274][ T5231] RIP: 0033:0x7f3fa458ebe9 [ 413.079419][ T5231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.099515][ T5231] RSP: 002b:00007f3fa53b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.108071][ T5231] RAX: ffffffffffffffda RBX: 00007f3fa47c5fa0 RCX: 00007f3fa458ebe9 [ 413.116465][ T5231] RDX: ffffffffffffffff RSI: 0000000000005423 RDI: 0000000000000003 [ 413.124833][ T5231] RBP: 00007f3fa53b7090 R08: 0000000000000000 R09: 0000000000000000 [ 413.133178][ T5231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.141211][ T5231] R13: 00007f3fa47c6038 R14: 00007f3fa47c5fa0 R15: 00007ffef05e1478 [ 413.149725][ T5231] [ 413.173508][ T5231] ERROR: Out of memory at tomoyo_realpath_from_path. [ 413.885846][ T5210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.200'. [ 413.915854][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 414.928782][ T5247] netlink: 48 bytes leftover after parsing attributes in process `syz.3.211'. [ 415.197322][ T5253] xt_CT: No such helper "snmp_trap" [ 415.471160][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 415.661799][ T26] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 415.732506][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.980440][ T26] usb 5-1: config 0 descriptor?? [ 416.231674][ T26] gspca_main: spca508-2.14.0 probing 8086:0110 [ 416.452680][ T5267] FAULT_INJECTION: forcing a failure. [ 416.452680][ T5267] name failslab, interval 1, probability 0, space 0, times 0 [ 416.502323][ T5267] CPU: 0 PID: 5267 Comm: syz.0.219 Not tainted syzkaller #0 [ 416.510310][ T5267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.520536][ T5267] Call Trace: [ 416.523875][ T5267] [ 416.526938][ T5267] dump_stack_lvl+0x168/0x22e [ 416.531681][ T5267] ? show_regs_print_info+0x12/0x12 [ 416.536923][ T5267] ? load_image+0x3b0/0x3b0 [ 416.542268][ T5267] ? __might_sleep+0xd0/0xd0 [ 416.546931][ T5267] ? __lock_acquire+0x7c50/0x7c50 [ 416.552022][ T5267] ? aa_file_perm+0x3ef/0xec0 [ 416.557122][ T5267] should_fail_ex+0x399/0x4d0 [ 416.561861][ T5267] should_failslab+0x5/0x20 [ 416.566417][ T5267] slab_pre_alloc_hook+0x59/0x310 [ 416.571483][ T5267] ? kernfs_fop_write_iter+0x155/0x4c0 [ 416.577257][ T5267] __kmem_cache_alloc_node+0x4f/0x260 [ 416.582771][ T5267] ? kernfs_fop_write_iter+0x155/0x4c0 [ 416.588308][ T5267] __kmalloc+0xa0/0x240 [ 416.592513][ T5267] kernfs_fop_write_iter+0x155/0x4c0 [ 416.595071][ T26] gspca_spca508: reg_read err -32 [ 416.598015][ T5267] vfs_write+0x44c/0x960 [ 416.607353][ T5267] ? file_end_write+0x250/0x250 [ 416.612267][ T5267] ? __fget_files+0x44a/0x4d0 [ 416.617261][ T5267] ? __fdget_pos+0x2ae/0x360 [ 416.621907][ T5267] ? ksys_write+0x71/0x240 [ 416.626381][ T5267] ksys_write+0x143/0x240 [ 416.630899][ T5267] ? __ia32_sys_read+0x80/0x80 [ 416.636068][ T5267] ? lockdep_hardirqs_on+0x94/0x140 [ 416.641319][ T5267] do_syscall_64+0x4c/0xa0 [ 416.645883][ T5267] ? clear_bhb_loop+0x60/0xb0 [ 416.652389][ T5267] ? clear_bhb_loop+0x60/0xb0 [ 416.657131][ T5267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.663617][ T5267] RIP: 0033:0x7f728cf8ebe9 [ 416.668072][ T5267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.687732][ T5267] RSP: 002b:00007f728de71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 416.696291][ T5267] RAX: ffffffffffffffda RBX: 00007f728d1c5fa0 RCX: 00007f728cf8ebe9 [ 416.704298][ T5267] RDX: 0000000000000009 RSI: 0000200000000080 RDI: 0000000000000003 [ 416.704813][ T26] gspca_spca508: reg_read err -32 [ 416.712284][ T5267] RBP: 00007f728de71090 R08: 0000000000000000 R09: 0000000000000000 [ 416.725430][ T5267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.733758][ T5267] R13: 00007f728d1c6038 R14: 00007f728d1c5fa0 R15: 00007ffcf5105e78 [ 416.741982][ T5267] [ 416.748571][ T26] gspca_spca508: reg_read err -32 [ 416.757920][ T26] gspca_spca508: reg_read err -32 [ 416.775832][ T5251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.828488][ T5251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.284088][ T26] gspca_spca508: reg_read err -110 [ 417.291584][ T26] gspca_spca508: reg write: error -32 [ 417.332235][ T26] spca508: probe of 5-1:0.0 failed with error -32 [ 417.574915][ T5277] loop3: detected capacity change from 0 to 1024 [ 417.586473][ T5277] EXT4-fs: Ignoring removed bh option [ 417.622854][ T5277] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e118, mo2=0000] [ 417.631671][ T5277] System zones: 0-1, 3-12 [ 417.673457][ T5277] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #3: block 1: comm syz.3.220: lblock 1 mapped to illegal pblock 1 (length 1) [ 417.688898][ T5277] __quota_error: 22 callbacks suppressed [ 417.688956][ T5277] Quota error (device loop3): write_blk: dquota write failed [ 417.702584][ T5277] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 417.714846][ T5277] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.220: Failed to acquire dquot type 0 [ 417.729291][ T5277] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.220: Freeing blocks not in datazone - block = 0, count = 4096 [ 417.747297][ T5277] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.220: Invalid inode bitmap blk 0 in block_group 0 [ 417.762200][ T5277] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 417.771668][ T5277] EXT4-fs (loop3): 1 orphan inode deleted [ 417.777968][ T5277] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 417.787115][ T4330] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 417.827557][ T5277] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.220: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 417.967522][ T4330] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 418.099536][ T4330] EXT4-fs error (device loop3): ext4_release_dquot:6852: comm kworker/u4:0: Failed to release dquot type 0 [ 419.286468][ T4922] usb 5-1: USB disconnect, device number 4 [ 419.464441][ T5281] loop0: detected capacity change from 0 to 4096 [ 420.328841][ T5281] ntfs3: loop0: failed to convert "0080" to koi8-ru [ 420.452422][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 420.479480][ T5281] ntfs3: loop0: failed to convert name for inode 1e. [ 420.508706][ T5290] loop2: detected capacity change from 0 to 7 [ 420.565023][ T4502] Dev loop2: unable to read RDB block 7 [ 420.624521][ T4502] loop2: unable to read partition table [ 420.644377][ T4502] loop2: partition table beyond EOD, truncated [ 420.673367][ T5294] FAULT_INJECTION: forcing a failure. [ 420.673367][ T5294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.693233][ T5294] CPU: 1 PID: 5294 Comm: syz.1.228 Not tainted syzkaller #0 [ 420.700632][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.710900][ T5294] Call Trace: [ 420.714202][ T5294] [ 420.717148][ T5294] dump_stack_lvl+0x168/0x22e [ 420.721941][ T5294] ? show_regs_print_info+0x12/0x12 [ 420.727172][ T5294] ? load_image+0x3b0/0x3b0 [ 420.731712][ T5294] ? __lock_acquire+0x7c50/0x7c50 [ 420.736764][ T5294] should_fail_ex+0x399/0x4d0 [ 420.741558][ T5294] _copy_from_user+0x2c/0x170 [ 420.746262][ T5294] __sys_sendto+0x2c0/0x5c0 [ 420.750814][ T5294] ? file_end_write+0x156/0x250 [ 420.755700][ T5294] ? __ia32_sys_getpeername+0x80/0x80 [ 420.761652][ T5294] ? __fget_files+0x44a/0x4d0 [ 420.766362][ T5294] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 420.772397][ T5294] ? lock_chain_count+0x20/0x20 [ 420.777467][ T5294] __x64_sys_sendto+0xda/0xf0 [ 420.782179][ T5294] do_syscall_64+0x4c/0xa0 [ 420.786615][ T5294] ? clear_bhb_loop+0x60/0xb0 [ 420.791305][ T5294] ? clear_bhb_loop+0x60/0xb0 [ 420.796033][ T5294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.802129][ T5294] RIP: 0033:0x7f3fa458ebe9 [ 420.806563][ T5294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.826539][ T5294] RSP: 002b:00007f3fa53b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 420.834977][ T5294] RAX: ffffffffffffffda RBX: 00007f3fa47c5fa0 RCX: 00007f3fa458ebe9 [ 420.843104][ T5294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 420.851085][ T5294] RBP: 00007f3fa53b7090 R08: 0000200000e68000 R09: 0000000000000010 [ 420.859074][ T5294] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 420.867061][ T5294] R13: 00007f3fa47c6038 R14: 00007f3fa47c5fa0 R15: 00007ffef05e1478 [ 420.875069][ T5294] [ 421.252480][ T5304] FAULT_INJECTION: forcing a failure. [ 421.252480][ T5304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.271338][ T5304] CPU: 0 PID: 5304 Comm: syz.1.231 Not tainted syzkaller #0 [ 421.271833][ T5298] loop3: detected capacity change from 0 to 8192 [ 421.278879][ T5304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.278894][ T5304] Call Trace: [ 421.278902][ T5304] [ 421.278910][ T5304] dump_stack_lvl+0x168/0x22e [ 421.278941][ T5304] ? show_regs_print_info+0x12/0x12 [ 421.278964][ T5304] ? load_image+0x3b0/0x3b0 [ 421.278995][ T5304] ? __lock_acquire+0x7c50/0x7c50 [ 421.279023][ T5304] ? verify_lock_unused+0x140/0x140 [ 421.279054][ T5304] should_fail_ex+0x399/0x4d0 [ 421.279089][ T5304] _copy_from_user+0x2c/0x170 [ 421.279115][ T5304] ___sys_sendmsg+0x155/0x290 [ 421.279145][ T5304] ? __sys_sendmsg+0x270/0x270 [ 421.347148][ T5304] ? __lock_acquire+0x7c50/0x7c50 [ 421.352233][ T5304] ? __fdget+0x17c/0x200 [ 421.356589][ T5304] __se_sys_sendmsg+0x19e/0x270 [ 421.361482][ T5304] ? __x64_sys_sendmsg+0x80/0x80 [ 421.366447][ T5304] ? lockdep_hardirqs_on+0x94/0x140 [ 421.371682][ T5304] do_syscall_64+0x4c/0xa0 [ 421.376191][ T5304] ? clear_bhb_loop+0x60/0xb0 [ 421.381154][ T5304] ? clear_bhb_loop+0x60/0xb0 [ 421.385939][ T5304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.391866][ T5304] RIP: 0033:0x7f3fa458ebe9 [ 421.396481][ T5304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.416458][ T5304] RSP: 002b:00007f3fa53b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.425775][ T5304] RAX: ffffffffffffffda RBX: 00007f3fa47c5fa0 RCX: 00007f3fa458ebe9 [ 421.434254][ T5304] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 421.442269][ T5304] RBP: 00007f3fa53b7090 R08: 0000000000000000 R09: 0000000000000000 [ 421.450439][ T5304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.458449][ T5304] R13: 00007f3fa47c6038 R14: 00007f3fa47c5fa0 R15: 00007ffef05e1478 [ 421.466485][ T5304] [ 421.487920][ T5298] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 421.504629][ T5307] netlink: 48 bytes leftover after parsing attributes in process `syz.2.229'. [ 421.552237][ T5308] loop0: detected capacity change from 0 to 128 [ 421.598826][ T5308] FAT-fs (loop0): Unrecognized mount option "ut" or missing value [ 421.627013][ T5298] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 421.691902][ T5298] REISERFS (device loop3): using ordered data mode [ 421.720256][ T5298] reiserfs: using flush barriers [ 421.740855][ T5298] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 421.818771][ T5298] REISERFS (device loop3): checking transaction log (loop3) [ 422.751195][ T5313] FAULT_INJECTION: forcing a failure. [ 422.751195][ T5313] name failslab, interval 1, probability 0, space 0, times 0 [ 422.903969][ T5313] CPU: 1 PID: 5313 Comm: syz.4.233 Not tainted syzkaller #0 [ 422.911431][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.921922][ T5313] Call Trace: [ 422.925306][ T5313] [ 422.928367][ T5313] dump_stack_lvl+0x168/0x22e [ 422.933109][ T5313] ? show_regs_print_info+0x12/0x12 [ 422.938547][ T5313] ? load_image+0x3b0/0x3b0 [ 422.943445][ T5313] ? __might_sleep+0xd0/0xd0 [ 422.948246][ T5313] ? __lock_acquire+0x7c50/0x7c50 [ 422.953377][ T5313] ? rcu_is_watching+0x11/0xa0 [ 422.958177][ T5313] should_fail_ex+0x399/0x4d0 [ 422.962906][ T5313] should_failslab+0x5/0x20 [ 422.967529][ T5313] slab_pre_alloc_hook+0x59/0x310 [ 422.972573][ T5313] ? kvmalloc_node+0x6c/0x180 [ 422.977376][ T5313] __kmem_cache_alloc_node+0x4f/0x260 [ 422.982950][ T5313] ? mutex_lock_nested+0x10/0x10 [ 422.988043][ T5313] ? kvmalloc_node+0x6c/0x180 [ 422.992780][ T5313] __kmalloc_node+0xa0/0x240 [ 422.997939][ T5313] ? __lock_acquire+0x7c50/0x7c50 [ 423.002996][ T5313] kvmalloc_node+0x6c/0x180 [ 423.007703][ T5313] seq_read_iter+0x1f6/0xd50 [ 423.012426][ T5313] ? aa_file_perm+0x117/0xec0 [ 423.017268][ T5313] seq_read+0x159/0x1f0 [ 423.021730][ T5313] ? seq_open+0x130/0x130 [ 423.026175][ T5313] ? trace_raw_output_contention_end+0xd0/0xd0 [ 423.032514][ T5313] ? common_file_perm+0x171/0x1c0 [ 423.037693][ T5313] ? fsnotify_perm+0x248/0x550 [ 423.042596][ T5313] ? seq_open+0x130/0x130 [ 423.047061][ T5313] vfs_read+0x2c0/0x920 [ 423.051468][ T5313] ? kernel_read+0x1e0/0x1e0 [ 423.056113][ T5313] ? __fget_files+0x28/0x4d0 [ 423.060751][ T5313] ? __fget_files+0x44a/0x4d0 [ 423.066015][ T5313] ? __fdget_pos+0x2ae/0x360 [ 423.071082][ T5313] ? ksys_read+0x71/0x240 [ 423.075791][ T5313] ksys_read+0x143/0x240 [ 423.080868][ T5313] ? vfs_write+0x960/0x960 [ 423.085850][ T5313] ? lockdep_hardirqs_on+0x94/0x140 [ 423.092648][ T5313] do_syscall_64+0x4c/0xa0 [ 423.097727][ T5313] ? clear_bhb_loop+0x60/0xb0 [ 423.102656][ T5313] ? clear_bhb_loop+0x60/0xb0 [ 423.107738][ T5313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.113937][ T5313] RIP: 0033:0x7f91ec78ebe9 [ 423.118490][ T5313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.138410][ T5313] RSP: 002b:00007f91ed6d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.147043][ T5313] RAX: ffffffffffffffda RBX: 00007f91ec9c5fa0 RCX: 00007f91ec78ebe9 [ 423.155048][ T5313] RDX: 0000000000002020 RSI: 0000200000000400 RDI: 0000000000000005 [ 423.163038][ T5313] RBP: 00007f91ed6d8090 R08: 0000000000000000 R09: 0000000000000000 [ 423.171138][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.179145][ T5313] R13: 00007f91ec9c6038 R14: 00007f91ec9c5fa0 R15: 00007fff4dd46ce8 [ 423.187177][ T5313] [ 423.292565][ T5298] REISERFS (device loop3): Using tea hash to sort names [ 423.322542][ T5298] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 423.370393][ T5320] loop0: detected capacity change from 0 to 764 [ 423.853920][ T4355] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 424.074040][ T4355] usb 4-1: Using ep0 maxpacket: 8 [ 424.090064][ T4355] usb 4-1: unable to get BOS descriptor or descriptor too short [ 424.234573][ T4355] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 424.365769][ T4355] usb 4-1: config 4 has no interface number 0 [ 424.470382][ T4355] usb 4-1: config 4 interface 30 has no altsetting 0 [ 424.588816][ T4355] usb 4-1: string descriptor 0 read error: -22 [ 424.677789][ T4355] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 424.764717][ T4355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.830341][ T4355] usb 4-1: can't set config #4, error -71 [ 424.846239][ T5337] FAULT_INJECTION: forcing a failure. [ 424.846239][ T5337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.863111][ T4355] usb 4-1: USB disconnect, device number 3 [ 424.902480][ T5337] CPU: 1 PID: 5337 Comm: syz.4.241 Not tainted syzkaller #0 [ 424.909857][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 424.920041][ T5337] Call Trace: [ 424.923418][ T5337] [ 424.926519][ T5337] dump_stack_lvl+0x168/0x22e [ 424.931422][ T5337] ? show_regs_print_info+0x12/0x12 [ 424.936688][ T5337] ? load_image+0x3b0/0x3b0 [ 424.941246][ T5337] ? __lock_acquire+0x7c50/0x7c50 [ 424.946341][ T5337] should_fail_ex+0x399/0x4d0 [ 424.951095][ T5337] _copy_from_user+0x2c/0x170 [ 424.955830][ T5337] ucma_write+0x15d/0x2e0 [ 424.960254][ T5337] ? ucma_get_global_nl_info+0x70/0x70 [ 424.965899][ T5337] ? common_file_perm+0x171/0x1c0 [ 424.970994][ T5337] ? fsnotify_perm+0x5a/0x550 [ 424.972107][ T5339] 9p: Unknown access argument z: -22 [ 424.975790][ T5337] ? security_file_permission+0x75/0xa0 [ 424.975826][ T5337] ? ucma_get_global_nl_info+0x70/0x70 [ 424.975849][ T5337] vfs_write+0x2c4/0x960 [ 424.975882][ T5337] ? file_end_write+0x250/0x250 [ 424.975910][ T5337] ? __fget_files+0x28/0x4d0 [ 424.975937][ T5337] ? __fget_files+0x44a/0x4d0 [ 424.975971][ T5337] ? __fdget_pos+0x1d4/0x360 [ 424.975997][ T5337] ? ksys_write+0x71/0x240 [ 424.976035][ T5337] ksys_write+0x143/0x240 [ 424.976065][ T5337] ? __ia32_sys_read+0x80/0x80 [ 424.976097][ T5337] ? lockdep_hardirqs_on+0x94/0x140 [ 425.034278][ T5337] do_syscall_64+0x4c/0xa0 [ 425.038723][ T5337] ? clear_bhb_loop+0x60/0xb0 [ 425.043513][ T5337] ? clear_bhb_loop+0x60/0xb0 [ 425.048242][ T5337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.054307][ T5337] RIP: 0033:0x7f91ec78ebe9 [ 425.058764][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.078573][ T5337] RSP: 002b:00007f91ed6d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.087092][ T5337] RAX: ffffffffffffffda RBX: 00007f91ec9c5fa0 RCX: 00007f91ec78ebe9 [ 425.095088][ T5337] RDX: 0000000000000090 RSI: 0000200000000080 RDI: 0000000000000004 [ 425.103079][ T5337] RBP: 00007f91ed6d8090 R08: 0000000000000000 R09: 0000000000000000 [ 425.111073][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.119063][ T5337] R13: 00007f91ec9c6038 R14: 00007f91ec9c5fa0 R15: 00007fff4dd46ce8 [ 425.127114][ T5337] [ 425.549848][ T5335] loop1: detected capacity change from 0 to 40427 [ 425.752867][ T5335] F2FS-fs (loop1): Found nat_bits in checkpoint [ 425.947874][ T5335] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 426.254019][ T4310] syz-executor: attempt to access beyond end of device [ 426.254019][ T4310] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 426.299603][ T5351] loop4: detected capacity change from 0 to 32768 [ 426.361501][ T5351] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.244 (5351) [ 426.596324][ T5351] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 426.899050][ T5351] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 427.091484][ T5351] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 427.154772][ T5351] BTRFS info (device loop4): use lzo compression, level 0 [ 427.162122][ T5351] BTRFS info (device loop4): force zlib compression, level 3 [ 427.194067][ T5351] BTRFS info (device loop4): use lzo compression, level 0 [ 427.201446][ T5351] BTRFS info (device loop4): using free space tree [ 427.490144][ T5351] BTRFS info (device loop4): enabling ssd optimizations [ 428.156286][ T5391] FAULT_INJECTION: forcing a failure. [ 428.156286][ T5391] name failslab, interval 1, probability 0, space 0, times 0 [ 428.203892][ T5391] CPU: 1 PID: 5391 Comm: syz.1.252 Not tainted syzkaller #0 [ 428.205501][ T4320] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 428.211345][ T5391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.211362][ T5391] Call Trace: [ 428.211369][ T5391] [ 428.211382][ T5391] dump_stack_lvl+0x168/0x22e [ 428.211414][ T5391] ? show_regs_print_info+0x12/0x12 [ 428.211437][ T5391] ? load_image+0x3b0/0x3b0 [ 428.211468][ T5391] ? __might_sleep+0xd0/0xd0 [ 428.257869][ T5391] ? __lock_acquire+0x7c50/0x7c50 [ 428.263015][ T5391] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 428.268886][ T5391] should_fail_ex+0x399/0x4d0 [ 428.273754][ T5391] should_failslab+0x5/0x20 [ 428.278405][ T5391] slab_pre_alloc_hook+0x59/0x310 [ 428.283495][ T5391] kmem_cache_alloc+0x56/0x2f0 [ 428.288303][ T5391] ? getname_flags+0xb7/0x500 [ 428.293045][ T5391] getname_flags+0xb7/0x500 [ 428.297674][ T5391] __x64_sys_mkdirat+0x78/0x90 [ 428.303203][ T5391] do_syscall_64+0x4c/0xa0 [ 428.307754][ T5391] ? clear_bhb_loop+0x60/0xb0 [ 428.312487][ T5391] ? clear_bhb_loop+0x60/0xb0 [ 428.317215][ T5391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.323188][ T5391] RIP: 0033:0x7f3fa458d457 [ 428.327646][ T5391] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.347297][ T5391] RSP: 002b:00007f3fa5394e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 428.356162][ T5391] RAX: ffffffffffffffda RBX: 00007f3fa5394ef0 RCX: 00007f3fa458d457 [ 428.364275][ T5391] RDX: 00000000000001ff RSI: 00002000000002c0 RDI: 00000000ffffff9c [ 428.372313][ T5391] RBP: 0000200000000280 R08: 0000000000000000 R09: 0000000000000000 [ 428.380601][ T5391] R10: 0000200000000280 R11: 0000000000000246 R12: 00002000000002c0 [ 428.388639][ T5391] R13: 00007f3fa5394eb0 R14: 0000000000000000 R15: ffffffffffffffff [ 428.396699][ T5391] [ 429.732530][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.740274][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.573206][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.655037][ T5365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.674147][ T5426] loop1: detected capacity change from 0 to 32768 [ 432.692956][ T5426] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.263 (5426) [ 432.731424][ T5426] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 432.744533][ T5426] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 432.753317][ T5426] BTRFS info (device loop1): disabling tree log [ 432.760448][ T5426] BTRFS info (device loop1): setting nodatacow, compression disabled [ 432.769024][ T5426] BTRFS info (device loop1): turning off barriers [ 432.776227][ T5426] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 432.787445][ T5426] BTRFS info (device loop1): trying to use backup root at mount time [ 432.798291][ T5426] BTRFS info (device loop1): force zlib compression, level 3 [ 432.806224][ T5426] BTRFS info (device loop1): max_inline at 0 [ 432.813255][ T5426] BTRFS info (device loop1): using free space tree [ 432.955201][ T4667] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 432.982854][ T5426] BTRFS error (device loop1): failed to load root extent [ 432.993973][ T5426] BTRFS warning (device loop1): try to load backup roots slot 1 [ 433.012444][ T4408] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 433.036326][ T5426] BTRFS warning (device loop1): couldn't read tree root [ 433.043524][ T5426] BTRFS warning (device loop1): try to load backup roots slot 2 [ 433.072830][ T5426] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 433.090017][ T5426] BTRFS warning (device loop1): couldn't read tree root [ 433.113921][ T5426] BTRFS warning (device loop1): try to load backup roots slot 3 [ 433.163937][ T5426] BTRFS info (device loop1): enabling ssd optimizations [ 433.173239][ T5426] BTRFS info (device loop1): rebuilding free space tree [ 433.257731][ T5426] BTRFS info (device loop1): checking UUID tree [ 433.462229][ T4310] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 433.767119][ T5365] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.776524][ T5365] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.786463][ T5365] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.795500][ T5365] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.866794][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 433.884414][ T5419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 433.893268][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 434.581220][ T5461] FAULT_INJECTION: forcing a failure. [ 434.581220][ T5461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.749138][ T5461] CPU: 1 PID: 5461 Comm: syz.0.266 Not tainted syzkaller #0 [ 434.756514][ T5461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 434.766614][ T5461] Call Trace: [ 434.770021][ T5461] [ 434.772994][ T5461] dump_stack_lvl+0x168/0x22e [ 434.777803][ T5461] ? show_regs_print_info+0x12/0x12 [ 434.783037][ T5461] ? load_image+0x3b0/0x3b0 [ 434.787678][ T5461] ? __lock_acquire+0x7c50/0x7c50 [ 434.792779][ T5461] ? verify_lock_unused+0x140/0x140 [ 434.798013][ T5461] ? __schedule+0x10f4/0x40b0 [ 434.802733][ T5461] should_fail_ex+0x399/0x4d0 [ 434.807459][ T5461] _copy_from_user+0x2c/0x170 [ 434.812272][ T5461] ___sys_sendmsg+0x155/0x290 [ 434.817081][ T5461] ? __sys_sendmsg+0x270/0x270 [ 434.821932][ T5461] ? __fdget+0x17c/0x200 [ 434.826259][ T5461] __se_sys_sendmsg+0x19e/0x270 [ 434.831151][ T5461] ? __x64_sys_sendmsg+0x80/0x80 [ 434.836141][ T5461] ? lockdep_hardirqs_on+0x94/0x140 [ 434.841563][ T5461] do_syscall_64+0x4c/0xa0 [ 434.846115][ T5461] ? clear_bhb_loop+0x60/0xb0 [ 434.850831][ T5461] ? clear_bhb_loop+0x60/0xb0 [ 434.855551][ T5461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.861575][ T5461] RIP: 0033:0x7f728cf8ebe9 [ 434.866024][ T5461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.885932][ T5461] RSP: 002b:00007f728de71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.894393][ T5461] RAX: ffffffffffffffda RBX: 00007f728d1c5fa0 RCX: 00007f728cf8ebe9 [ 434.902412][ T5461] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 434.910520][ T5461] RBP: 00007f728de71090 R08: 0000000000000000 R09: 0000000000000000 [ 434.918617][ T5461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.926805][ T5461] R13: 00007f728d1c6038 R14: 00007f728d1c5fa0 R15: 00007ffcf5105e78 [ 434.934825][ T5461] [ 436.338904][ T5487] FAULT_INJECTION: forcing a failure. [ 436.338904][ T5487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.471299][ T5492] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 436.866307][ T5487] CPU: 1 PID: 5487 Comm: syz.0.273 Not tainted syzkaller #0 [ 436.873685][ T5487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.883797][ T5487] Call Trace: [ 436.887109][ T5487] [ 436.890053][ T5487] dump_stack_lvl+0x168/0x22e [ 436.894755][ T5487] ? show_regs_print_info+0x12/0x12 [ 436.899974][ T5487] ? load_image+0x3b0/0x3b0 [ 436.904507][ T5487] ? __lock_acquire+0x7c50/0x7c50 [ 436.909567][ T5487] ? snprintf+0xd7/0x120 [ 436.913833][ T5487] should_fail_ex+0x399/0x4d0 [ 436.918537][ T5487] _copy_to_user+0x2c/0x130 [ 436.923059][ T5487] simple_read_from_buffer+0xe3/0x150 [ 436.928471][ T5487] proc_fail_nth_read+0x19a/0x210 [ 436.933511][ T5487] ? proc_fault_inject_write+0x2f0/0x2f0 [ 436.939167][ T5487] ? fsnotify_perm+0x248/0x550 [ 436.943951][ T5487] ? proc_fault_inject_write+0x2f0/0x2f0 [ 436.949598][ T5487] vfs_read+0x2c0/0x920 [ 436.953789][ T5487] ? kernel_read+0x1e0/0x1e0 [ 436.958418][ T5487] ? __fget_files+0x28/0x4d0 [ 436.963044][ T5487] ? __fget_files+0x44a/0x4d0 [ 436.967748][ T5487] ? __fdget_pos+0x2ae/0x360 [ 436.972442][ T5487] ? ksys_read+0x71/0x240 [ 436.976879][ T5487] ksys_read+0x143/0x240 [ 436.981146][ T5487] ? vfs_write+0x960/0x960 [ 436.985584][ T5487] ? lockdep_hardirqs_on+0x94/0x140 [ 436.990809][ T5487] do_syscall_64+0x4c/0xa0 [ 436.995332][ T5487] ? clear_bhb_loop+0x60/0xb0 [ 437.000212][ T5487] ? clear_bhb_loop+0x60/0xb0 [ 437.004907][ T5487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.010830][ T5487] RIP: 0033:0x7f728cf8d5fc [ 437.015368][ T5487] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 437.035011][ T5487] RSP: 002b:00007f728de71030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 437.043475][ T5487] RAX: ffffffffffffffda RBX: 00007f728d1c5fa0 RCX: 00007f728cf8d5fc [ 437.051474][ T5487] RDX: 000000000000000f RSI: 00007f728de710a0 RDI: 0000000000000006 [ 437.059467][ T5487] RBP: 00007f728de71090 R08: 0000000000000000 R09: 0000000000000000 [ 437.067454][ T5487] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 437.075439][ T5487] R13: 00007f728d1c6038 R14: 00007f728d1c5fa0 R15: 00007ffcf5105e78 [ 437.083449][ T5487] [ 437.308219][ T5494] FAULT_INJECTION: forcing a failure. [ 437.308219][ T5494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.364153][ T5494] CPU: 1 PID: 5494 Comm: syz.1.277 Not tainted syzkaller #0 [ 437.371621][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 437.381809][ T5494] Call Trace: [ 437.385132][ T5494] [ 437.388105][ T5494] dump_stack_lvl+0x168/0x22e [ 437.392861][ T5494] ? show_regs_print_info+0x12/0x12 [ 437.398111][ T5494] ? load_image+0x3b0/0x3b0 [ 437.402766][ T5494] ? __lock_acquire+0x7c50/0x7c50 [ 437.407847][ T5494] should_fail_ex+0x399/0x4d0 [ 437.412578][ T5494] _copy_from_iter+0x1c5/0x10c0 [ 437.417490][ T5494] ? copyout_mc+0x110/0x110 [ 437.422062][ T5494] ? tun_get_user+0x636/0x3b90 [ 437.426899][ T5494] ? __lock_acquire+0x7c50/0x7c50 [ 437.431984][ T5494] ? page_copy_sane+0x4e/0x390 [ 437.436817][ T5494] copy_page_from_iter+0x77/0x100 [ 437.441625][ T5503] loop4: detected capacity change from 0 to 256 [ 437.441922][ T5494] tun_get_user+0x1aa7/0x3b90 [ 437.452905][ T5494] ? tun_get_user+0x636/0x3b90 [ 437.457753][ T5494] ? rcu_read_unlock+0xa0/0xa0 [ 437.462576][ T5494] ? tun_get+0x1c/0x2e0 [ 437.467134][ T5494] ? __lock_acquire+0x7c50/0x7c50 [ 437.472227][ T5494] ? tun_get+0x1c/0x2e0 [ 437.476464][ T5494] tun_chr_write_iter+0x112/0x1f0 [ 437.481548][ T5494] vfs_write+0x44c/0x960 [ 437.485848][ T5494] ? file_end_write+0x250/0x250 [ 437.490756][ T5494] ? __fget_files+0x44a/0x4d0 [ 437.495593][ T5494] ? __fdget_pos+0x1d4/0x360 [ 437.500237][ T5494] ? ksys_write+0x71/0x240 [ 437.504698][ T5494] ksys_write+0x143/0x240 [ 437.509069][ T5494] ? __ia32_sys_read+0x80/0x80 [ 437.513864][ T5494] ? lockdep_hardirqs_on+0x94/0x140 [ 437.519113][ T5494] do_syscall_64+0x4c/0xa0 [ 437.523554][ T5494] ? clear_bhb_loop+0x60/0xb0 [ 437.528286][ T5494] ? clear_bhb_loop+0x60/0xb0 [ 437.533253][ T5494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.539183][ T5494] RIP: 0033:0x7f3fa458d69f [ 437.543648][ T5494] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 437.563370][ T5494] RSP: 002b:00007f3fa53b7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 437.571940][ T5494] RAX: ffffffffffffffda RBX: 00007f3fa47c5fa0 RCX: 00007f3fa458d69f [ 437.579952][ T5494] RDX: 0000000000000032 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 437.587953][ T5494] RBP: 00007f3fa53b7090 R08: 0000000000000000 R09: 0000000000000000 [ 437.596052][ T5494] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001 [ 437.604068][ T5494] R13: 00007f3fa47c6038 R14: 00007f3fa47c5fa0 R15: 00007ffef05e1478 [ 437.612445][ T5494] [ 437.883907][ T4422] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 438.481047][ T5512] Zero length message leads to an empty skb [ 438.554014][ T4422] usb 4-1: Invalid ep0 maxpacket: 32 [ 438.874928][ T4422] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 439.145067][ T4422] usb 4-1: Invalid ep0 maxpacket: 32 [ 439.181282][ T4422] usb usb4-port1: attempt power cycle [ 440.016415][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.022823][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.023373][ T5532] FAULT_INJECTION: forcing a failure. [ 440.023373][ T5532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.055087][ T5511] Cannot find add_set index 0 as target [ 440.060873][ T5532] CPU: 1 PID: 5532 Comm: syz.0.290 Not tainted syzkaller #0 [ 440.063832][ T4422] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 440.068189][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.068206][ T5532] Call Trace: [ 440.068214][ T5532] [ 440.068224][ T5532] dump_stack_lvl+0x168/0x22e [ 440.097562][ T5532] ? show_regs_print_info+0x12/0x12 [ 440.102835][ T5532] ? load_image+0x3b0/0x3b0 [ 440.107401][ T5532] ? __lock_acquire+0x7c50/0x7c50 [ 440.111860][ T5531] mmap: syz.2.282 (5531) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 440.112460][ T5532] ? verify_lock_unused+0x140/0x140 [ 440.129756][ T5532] should_fail_ex+0x399/0x4d0 [ 440.134472][ T5532] _copy_from_user+0x2c/0x170 [ 440.139185][ T5532] ___sys_sendmsg+0x155/0x290 [ 440.143900][ T5532] ? __sys_sendmsg+0x270/0x270 [ 440.149260][ T5532] ? __fdget+0x17c/0x200 [ 440.153529][ T5532] __sys_sendmmsg+0x272/0x490 [ 440.158266][ T5532] ? __ia32_sys_sendmsg+0x80/0x80 [ 440.163355][ T5532] ? mutex_unlock+0x10/0x10 [ 440.168262][ T5532] ? __fget_files+0x44a/0x4d0 [ 440.173164][ T5532] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 440.179279][ T5532] ? lock_chain_count+0x20/0x20 [ 440.184179][ T5532] __x64_sys_sendmmsg+0x9c/0xb0 [ 440.189348][ T5532] do_syscall_64+0x4c/0xa0 [ 440.195126][ T5532] ? clear_bhb_loop+0x60/0xb0 [ 440.200377][ T5532] ? clear_bhb_loop+0x60/0xb0 [ 440.205108][ T5532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.211065][ T5532] RIP: 0033:0x7f728cf8ebe9 [ 440.215529][ T5532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.235873][ T5532] RSP: 002b:00007f728de71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 440.244789][ T5532] RAX: ffffffffffffffda RBX: 00007f728d1c5fa0 RCX: 00007f728cf8ebe9 [ 440.253101][ T5532] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 440.261806][ T5532] RBP: 00007f728de71090 R08: 0000000000000000 R09: 0000000000000000 [ 440.269903][ T5532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.278073][ T5532] R13: 00007f728d1c6038 R14: 00007f728d1c5fa0 R15: 00007ffcf5105e78 [ 440.286185][ T5532] [ 440.290452][ T5531] [ 440.292636][ T4422] usb 4-1: Invalid ep0 maxpacket: 32 [ 440.292982][ T5531] ====================================================== [ 440.305348][ T5531] WARNING: possible circular locking dependency detected [ 440.312497][ T5531] syzkaller #0 Not tainted [ 440.317047][ T5531] ------------------------------------------------------ [ 440.324275][ T5531] syz.2.282/5531 is trying to acquire lock: [ 440.330296][ T5531] ffff88807e3ffa80 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 440.341318][ T5531] [ 440.341318][ T5531] but task is already holding lock: [ 440.349462][ T5531] ffff88801746a6d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 440.360143][ T5531] [ 440.360143][ T5531] which lock already depends on the new lock. [ 440.360143][ T5531] [ 440.370564][ T5531] [ 440.370564][ T5531] the existing dependency chain (in reverse order) is: [ 440.382130][ T5531] [ 440.382130][ T5531] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 440.389835][ T5531] down_read_killable+0x4c/0x340 [ 440.396340][ T5531] mmap_read_lock_killable+0x1d/0x60 [ 440.402370][ T5531] lock_mm_and_find_vma+0x2b1/0x2f0 [ 440.408323][ T5531] do_user_addr_fault+0x2db/0xb10 [ 440.413924][ T5531] exc_page_fault+0x60/0x100 [ 440.419080][ T5531] asm_exc_page_fault+0x22/0x30 [ 440.424567][ T5531] fault_in_readable+0x13e/0x1f0 [ 440.430150][ T5531] fault_in_iov_iter_readable+0xbb/0x2e0 [ 440.436697][ T5531] generic_perform_write+0x1d2/0x560 [ 440.442719][ T5531] __generic_file_write_iter+0x172/0x430 [ 440.448898][ T5531] generic_file_write_iter+0xab/0x2e0 [ 440.454809][ T5531] vfs_write+0x44c/0x960 [ 440.459598][ T5531] ksys_write+0x143/0x240 [ 440.464491][ T5531] do_syscall_64+0x4c/0xa0 [ 440.469797][ T5531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.476249][ T5531] [ 440.476249][ T5531] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 440.487171][ T5531] __lock_acquire+0x2cf8/0x7c50 [ 440.492587][ T5531] lock_acquire+0x1b4/0x490 [ 440.498951][ T5531] down_write+0x36/0x60 [ 440.504007][ T5531] process_measurement+0x33c/0x1a10 [ 440.509781][ T5531] ima_file_mmap+0x104/0x150 [ 440.515001][ T5531] __se_sys_remap_file_pages+0x53e/0x770 [ 440.521301][ T5531] do_syscall_64+0x4c/0xa0 [ 440.526367][ T5531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.533035][ T5531] [ 440.533035][ T5531] other info that might help us debug this: [ 440.533035][ T5531] [ 440.543646][ T5531] Possible unsafe locking scenario: [ 440.543646][ T5531] [ 440.551311][ T5531] CPU0 CPU1 [ 440.556695][ T5531] ---- ---- [ 440.562156][ T5531] lock(&mm->mmap_lock); [ 440.566598][ T5531] lock(&sb->s_type->i_mutex_key#12); [ 440.575097][ T5531] lock(&mm->mmap_lock); [ 440.582164][ T5531] lock(&sb->s_type->i_mutex_key#12); [ 440.587822][ T5531] [ 440.587822][ T5531] *** DEADLOCK *** [ 440.587822][ T5531] [ 440.596074][ T5531] 1 lock held by syz.2.282/5531: [ 440.601116][ T5531] #0: ffff88801746a6d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 440.611818][ T5531] [ 440.611818][ T5531] stack backtrace: [ 440.617747][ T5531] CPU: 1 PID: 5531 Comm: syz.2.282 Not tainted syzkaller #0 [ 440.625139][ T5531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.635401][ T5531] Call Trace: [ 440.638708][ T5531] [ 440.641664][ T5531] dump_stack_lvl+0x168/0x22e [ 440.646445][ T5531] ? load_image+0x3b0/0x3b0 [ 440.651063][ T5531] ? show_regs_print_info+0x12/0x12 [ 440.656294][ T5531] ? print_circular_bug+0x12b/0x1a0 [ 440.662510][ T5531] check_noncircular+0x274/0x310 [ 440.668142][ T5531] ? add_chain_block+0x940/0x940 [ 440.673132][ T5531] ? lockdep_lock+0xdc/0x1e0 [ 440.677862][ T5531] ? _find_first_zero_bit+0xcf/0x100 [ 440.683302][ T5531] __lock_acquire+0x2cf8/0x7c50 [ 440.688193][ T5531] ? ima_match_policy+0x104/0x2100 [ 440.693668][ T5531] ? verify_lock_unused+0x140/0x140 [ 440.698908][ T5531] ? ima_match_policy+0x207a/0x2100 [ 440.704242][ T5531] lock_acquire+0x1b4/0x490 [ 440.708863][ T5531] ? process_measurement+0x33c/0x1a10 [ 440.714262][ T5531] ? __might_sleep+0xd0/0xd0 [ 440.718887][ T5531] ? read_lock_is_recursive+0x10/0x10 [ 440.724295][ T5531] ? ima_get_action+0x71/0xa0 [ 440.728997][ T5531] down_write+0x36/0x60 [ 440.733183][ T5531] ? process_measurement+0x33c/0x1a10 [ 440.738573][ T5531] process_measurement+0x33c/0x1a10 [ 440.743884][ T5531] ? ima_file_mmap+0x150/0x150 [ 440.748762][ T5531] ? aa_file_perm+0x117/0xec0 [ 440.753473][ T5531] ? mtree_load+0xeb/0xa40 [ 440.757909][ T5531] ? mtree_load+0x90a/0xa40 [ 440.762430][ T5531] ? aa_get_current_label+0x110/0x1d0 [ 440.767839][ T5531] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 440.774106][ T5531] ima_file_mmap+0x104/0x150 [ 440.778718][ T5531] ? ima_file_free+0x3e0/0x3e0 [ 440.783513][ T5531] ? common_file_perm+0x171/0x1c0 [ 440.788606][ T5531] ? bpf_lsm_mmap_file+0x5/0x10 [ 440.793579][ T5531] ? security_mmap_file+0x11b/0x180 [ 440.798899][ T5531] __se_sys_remap_file_pages+0x53e/0x770 [ 440.804596][ T5531] ? __se_sys_futex+0x14a/0x440 [ 440.809555][ T5531] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 440.815313][ T5531] ? lock_chain_count+0x20/0x20 [ 440.820199][ T5531] ? lockdep_hardirqs_on+0x94/0x140 [ 440.825417][ T5531] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 440.831161][ T5531] do_syscall_64+0x4c/0xa0 [ 440.835597][ T5531] ? clear_bhb_loop+0x60/0xb0 [ 440.840285][ T5531] ? clear_bhb_loop+0x60/0xb0 [ 440.844972][ T5531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.850893][ T5531] RIP: 0033:0x7fa0da98ebe9 [ 440.855317][ T5531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.875032][ T5531] RSP: 002b:00007fa0db7fc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 440.883561][ T5531] RAX: ffffffffffffffda RBX: 00007fa0dabc6090 RCX: 00007fa0da98ebe9 [ 440.891638][ T5531] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000005fd000 [ 440.899626][ T5531] RBP: 00007fa0daa11e19 R08: 0000000000020000 R09: 0000000000000000 [ 440.907612][ T5531] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 440.915590][ T5531] R13: 00007fa0dabc6128 R14: 00007fa0dabc6090 R15: 00007ffe69bd9ce8 [ 440.923605][ T5531] [ 441.003806][ T4422] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 441.064243][ T5522] loop4: detected capacity change from 0 to 128 [ 441.086712][ T5522] EXT4-fs: Ignoring removed nobh option [ 441.111579][ T5522] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 441.120541][ T5522] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 441.221238][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 441.234015][ T4422] usb 4-1: device not accepting address 7, error -71 [ 441.247529][ T4422] usb usb4-port1: unable to enumerate USB device [ 441.276946][ T5511] loop2: detected capacity change from 0 to 32768 [ 441.308455][ T27] audit: type=1800 audit(1757286682.723:5): pid=5511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.282" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 441.311655][ T5511] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 441.311655][ T5511] [ 441.338643][ T5511] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 441.338643][ T5511]