last executing test programs: 54.760210915s ago: executing program 2 (id=453): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) r5 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x803, 0x103, 0x1}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x9, 0x6, 0x71, 0x80, r1, 0x40, '\x00', r4, r5, 0x1, 0x2, 0x5, 0xf}, 0x50) syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="129a917a2f2795010000386cfc080d052201064d7d54ed01090212dd00080000000904180000f8dac200"], 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2205d96c717ab96f0ded75d88a8", 0x0, 0xd5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000040)=0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000000000711133000000000085100000020000000095000000000000009500a505000000005d5b1a10392fd867bc8a2962528ee27ac5a8cc017bd896058879f3856fb3dc202d497359978058d499753523e84eef107e771f3fe987c0b8bcbd06100db0aa2d8bf2e373ea4cffd98d514c83acbb1dba4adbacb105fbfeb87d5bc1a4ed60f520f581bb777af4d678ecceee16390091afac1a76c50abaf1bbd41f829b073be59eefdd59cdbe15802288b016fd06b96b5fa4b6a8a0b787"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 49.926934025s ago: executing program 2 (id=465): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000880f379ea668a38e5e3394e8fbebf3b1621543482790a2d101111fbaf60b2d8df6b7495770fc7c92cc7ef7a0bb0c46da6cd16ba013310254f127cd26e43ee805bf3b113034ec961dd0ec002c15f4f7e7dc1ff10bfac1a289fc5138ca0fe083588c2e0079d6ecafd3aafade299458b993bd98b3e78e925ee46598f81e737243fe541a3356f98348834e39a5df2265f8e3ea8c7b0704b8bf2e0848864f3ba1bf420b", @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300)="989f85", &(0x7f00000005c0)=""/104}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) (fail_nth: 3) gettid() sendmsg$unix(r1, 0x0, 0x14000) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) 46.975241101s ago: executing program 2 (id=471): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x26, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @multicast2}}]}, 0xa8}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000d40)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f00000000c0), 0x0, 0x4ee, &(0x7f0000002680)="$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") r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f00000013c0)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000001dc0)="bc", 0x1}], 0x1}}], 0x1, 0x8040) shutdown(r7, 0x1) getsockopt$bt_hci(r7, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 45.44818196s ago: executing program 2 (id=476): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8003, 0xc95a, 0xf, 0x1, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x855, 0x4c74, 0x10000, 0x242, 0x4, 0xb, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x2, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x5, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x9, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6, 0x9, 0x384, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0xe6ff, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0xfffffffd, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x1, 0x5, 0x800, 0x0, 0x4dc, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0xbc, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x3, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x6, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x7f, 0x1ff, 0x2, 0x5a, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xffff, 0xa620, 0x1, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0xa, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xffffffff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_evm(0x0, &(0x7f0000000500), &(0x7f00000001c0)=ANY=[@ANYBLOB="0040000000f85f000009dfbe3aa6c615299625f90b82e3f5d33ad37dfc9149dc0bffd6"], 0x9, 0x2) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) lseek(r1, 0x1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000240)="75a6ab8dc3b751d315fe33c2ce15565f0920187d12382e8789b284053650a18ada410a9493a54aa8184b8677241b212355ae", 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.432600999s ago: executing program 2 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) removexattr(0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}, 0xff03}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) 42.501061925s ago: executing program 2 (id=489): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a0101000000000000000000000000000000000020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c"], 0x144}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 42.150591731s ago: executing program 32 (id=489): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a0101000000000000000000000000000000000020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c"], 0x144}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.565842979s ago: executing program 4 (id=567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) write$char_usb(r4, &(0x7f0000000580)="f010ef70ff4496f1ea5214b923e1672847fc5f5545809324ef6c522a7a70865892ed5f7e7f450eec6aaeb0f65aef0112f3b5199fac1513cbc65772be1b4a660185f1c95b2959cfc297a7784c3f740c", 0x4f) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2ee, 0x2d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x308407, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x4100000000000000, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439}) 13.420672729s ago: executing program 4 (id=568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000fddbdf252b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000500340040000000080026006c090000240051802000008009000100b168fa31670000000800030005ac0f00050002"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 12.82056025s ago: executing program 4 (id=572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) (async, rerun: 64) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x59091fd, 0x2}, 0x0, 0x7, 0x0, 0x1, 0x0}}) r4 = socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'vcan0\x00'}}, 0x1e) (async) sendmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003b80)="870b1aaecb", 0x5}], 0x20}}], 0x1, 0x4080) r6 = fanotify_init(0x4, 0x0) (async) r7 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fanotify_mark(r6, 0xd, 0x8000029, r7, 0x0) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xc, 0x4, 0x4, 0xd, 0x4000, r8}, 0x50) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) (async) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 32) dup3(r11, r10, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000005c0)={0x54, 0x0, &(0x7f0000000500)=[@release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x20) lseek(r12, 0x9, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x1, 0xfffffff8, 0x8461, r9, 0x40, '\x00', 0x0, r4, 0x1, 0x3, 0x1, 0xa, @value=r12}, 0x50) 11.168188521s ago: executing program 3 (id=576): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x3, @private1}}}, 0x108) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) (fail_nth: 3) 10.868299536s ago: executing program 4 (id=578): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254e"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000", @ANYRES32=0x41424344], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000200)=0x200000000000000a, 0x5, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.633209671s ago: executing program 1 (id=579): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) write$char_usb(r4, &(0x7f0000000580)="f010ef70ff4496f1ea5214b923e1672847fc5f5545809324ef6c522a7a70865892ed5f7e7f450eec6aaeb0f65aef0112f3b5199fac1513cbc65772be1b4a660185f1c95b2959cfc297a7784c3f740c", 0x4f) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2ee, 0x2d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x308407, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x4100000000000000, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439}) 10.280592857s ago: executing program 3 (id=580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0xc00, &(0x7f0000000780)) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 9.512233732s ago: executing program 1 (id=581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = eventfd2(0xd90a, 0x80001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0x8}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x200}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0x802) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, 0x0) close(r3) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) quotactl_fd$Q_SYNC(r5, 0xffffffff80000102, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x308) 8.963703372s ago: executing program 1 (id=582): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x80) creat(&(0x7f0000000740)='./file0\x00', 0x20) getdents64(r1, &(0x7f0000000080)=""/95, 0x5f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002580)='wchan\x00') lseek(r6, 0x9, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000906030000000000000000000a00000208000940800000010900020073797a30000000000500010007fae3a828000940fffffffe"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x24000811) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x28, 0xdde, 0x7f, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x1e, 0x0, &(0x7f00000001c0)=0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r8, 0x10d, 0xb, &(0x7f0000000080)=0xf, 0x4) 8.808507535s ago: executing program 0 (id=583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40404, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') creat(&(0x7f0000040040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000020000000100000000000000000000000200000006000000090000000900000000000000000000000000000000000000020000"]) 8.417479252s ago: executing program 3 (id=584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair(0x18, 0x80000, 0xfffffff9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000001c0)={'veth0_to_bridge\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES8=0x0, @ANYRESHEX, @ANYBLOB="d1794da8c0ccda034276e675928a25c45c8e1eb8b595a37ffdfe7d2a8c3972a69b1d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86354f17545ccae88", @ANYRESOCT=0x0, @ANYRES32, @ANYRESHEX, @ANYBLOB="f6da590b23cb84a57d688f69ccd633aabd50f4435b196a9eba38523390452cc0e8341d22292efd955e7ab8c705c9906c9978d3e084e6ebb270203823bcd3e639e96f9ad6af9265f675b798622d9e7501e719643ccc664bcb2647c9b59e3803dff967ac6aba224d894615cc71cec0faf09676c4f7b8f7580c772ba2f03d3d43c7a7fdb9eecebbfbe5fa5599958b77eb195865125fba6b823edbcd15e2cac7a27ca660a499891237edc218d4fd3760e73539aa0dfd57b9f3320000000000000004a47446bcd0113f3811eb471e01a1a60f58000000000000"], 0x1, 0xa7a, &(0x7f0000000980)="$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") r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0185879, &(0x7f0000000680)={0x4, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x2401}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000200)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0xc1, 0x8, 0x80, 0x3, 0x1f, 'syz0\x00', "d236487207d2e1285d520bf16ef3544f186515b96105dc0c481d28c4a47ec4b2", "91e1d9b18d2f88539242488d5597ca1a9ca705c1752732d2698f783620a843b2", [{0x612, 0x9, {0x3, 0x9}}, {0x1, 0x7, {0x0, 0x9}}, {0x8001, 0xca41, {0x1, 0x81}}, {0x3f2, 0x8, {0x2, 0xc63}}, {0x2, 0x5, {0x3, 0x80}}, {0x6, 0x3, {0x0, 0x2}}, {0x39c4, 0x200, {0x3, 0x8}}, {0x5, 0x2c, {0x2, 0x6}}, {0x100, 0xfffe, {0x2, 0x36}}, {0xa14, 0x78ba, {0x3, 0x6}}, {0xca, 0xfff9, {0x0, 0x7}}, {0x9, 0x2, {0x4, 0x5}}, {0x6, 0x8, {0x1, 0x6}}, {0x7, 0x3, {0x1}}, {0x0, 0xb8, {0x3, 0x5}}, {0x0, 0x0, {0x0, 0x6}}, {0x8, 0x0, {0x1, 0x400}}, {0x200, 0x2, {0x2, 0x7dd}}, {0x3, 0xffff, {0x2, 0x10}}, {0xa0d, 0x6}, {0x9, 0xa1, {0x3, 0x401}}, {0x1, 0x10, {0x0, 0x2}}, {0x2, 0x1, {0x3, 0x82d6}}, {0x458, 0x0, {0x3, 0x9}}, {0x6, 0x8, {0xdafa81f80d827ed1, 0x8}}, {0x1ff, 0x8000, {0x2, 0x7717851a}}, {0x5, 0x2, {0x0, 0x10000}}, {0x2, 0x6, {0x1, 0x5}}, {0x200, 0x7, {0x0, 0xfffffffd}}, {0x4a56, 0xfe, {0x2, 0x8}}, {0x2, 0x8, {0x2, 0xa770}}, {0x0, 0x0, {0x1, 0xb311}}, {0xfff, 0x7, {0x2, 0x2}}, {0x9c, 0x0, {0x0, 0x2}}, {0x4, 0x7fff, {0x3, 0xfffffffa}}, {0xfffe, 0x1ff, {0x3}}, {0x4, 0xa, {0x1, 0x3}}, {0x8, 0x2, {0x2, 0x9}}, {0x7, 0xe, {0x2, 0x3d}}, {0x1, 0xfff, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x1ff}, 0x8, 0x7e, 0xe, 0xd, 0x1c, 'syz1\x00', "258b0147c887139115fdb75d7977e3510952786a6dd57fc629c8761a15889988", "c65fb819d04c1737df8b3780dfc65609c040065bcbfc321a3ec0a56331780b0d", [{0x6, 0x3ff, {0x3, 0x3}}, {0x2, 0x5000, {0x1, 0x319}}, {0xcb, 0xff, {0x1, 0x9}}, {0x2, 0x8000, {0x0, 0x2a8f}}, {0x2af, 0x2d47, {0x0, 0x7}}, {0x7ff, 0x0, {0x0, 0x200}}, {0x0, 0x3, {0x2, 0xb}}, {0x0, 0xf, {0x0, 0x3b98247e}}, {0x58cf, 0xe598, {0x0, 0x5dc5020b}}, {0x100, 0xe31a, {0x0, 0x800}}, {0xff, 0x2c, {0x3, 0x2}}, {0x5, 0xd7, {0x3, 0x5}}, {0x6, 0x8, {0x2, 0x8}}, {0x9, 0x6, {0x3, 0x9}}, {0x1ff, 0x9, {0x0, 0x1}}, {0x6, 0x2}, {0x8, 0x3, {0x3, 0xfffffffc}}, {0x7, 0x8b, {0x1, 0x1}}, {0x5, 0x8edf, {0x2, 0x8001}}, {0xf, 0xe, {0x0, 0x80}}, {0x0, 0x8001, {0x2, 0x3}}, {0x800, 0x1, {0x3, 0x8}}, {0x4, 0x2, {0x1, 0x7}}, {0x8001, 0x4, {0x2, 0x2}}, {0x0, 0x7, {0x1, 0x7}}, {0x8, 0x7, {0x0, 0x7}}, {0x33b7, 0xff7, {0x6dac292ad798d235, 0xfffffffd}}, {0xfffa, 0x33, {0x3, 0x7}}, {0xc00, 0xd, {0x0, 0xaa46}}, {0x6, 0x3, {0x1, 0x8}}, {0x6, 0x621, {0x0, 0x4}}, {0x90, 0x3, {0x3, 0x7}}, {0x4, 0x9, {0x0, 0x6}}, {0x4cd, 0xb}, {0x8000, 0x800, {0x3, 0x4}}, {0x4c1, 0x7f, {0x0, 0x11}}, {0x8001, 0x2, {0x2, 0x8001}}, {0xe, 0xf800, {0x3, 0x10}}, {0x3ff, 0x7, {0x1, 0x362}}, {0x80, 0x7, {0x3, 0x46}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x80, 0x1, 0x87, 0x9000, 0x28, 'syz0\x00', "21f2d82ba93b664fba38845215f72d196526fcf1543d8901c6e2b28966ed0fb9", "07465a10910aa47607af66078d9eacbb89f9aad700c6698cb182fee16d258c69", [{0x2eef, 0x6, {0x1, 0x782}}, {0x9, 0x7, {0x1, 0x3d6}}, {0x1, 0xe, {0x2, 0x1}}, {0x1, 0x8, {0x3, 0x5ef5}}, {0xe, 0x10, {0x1, 0xffffffff}}, {0x2, 0x43e, {0x1, 0x1}}, {0x4, 0x8, {0x3, 0x851c}}, {0x351b, 0xd, {0x2, 0x6}}, {0x9, 0x4, {0x1, 0x81}}, {0x0, 0x1, {0x2, 0x9}}, {0xff91, 0x7ff, {0x3, 0x8}}, {0xc28, 0x7a9f, {0x1, 0xa595}}, {0xf, 0x2, {0x3, 0xfffffffa}}, {0x7, 0x3, {0x2}}, {0xc000, 0x0, {0x1, 0x1}}, {0xf, 0x3, {0x0, 0x4}}, {0x3, 0x7, {0x1, 0x101}}, {0x3, 0x3, {0x0, 0x2}}, {0xb, 0xfa82, {0x0, 0x82e}}, {0x4, 0xa, {0x2, 0x2a}}, {0x100, 0x6, {0x3, 0x3ff}}, {0x9, 0x4, {0x1, 0x659}}, {0x72ff, 0x8f, {0x3, 0x404400}}, {0x9a, 0x6c, {0x0, 0x2c}}, {0xe000, 0x7, {0x2, 0x3}}, {0x2, 0xe, {0x2, 0x1}}, {0x8, 0xffff, {0x1, 0x5}}, {0x2, 0x80, {0x3, 0x76d1}}, {0x2, 0x1200, {0x1, 0x80000001}}, {0x53, 0x8001, {0x0, 0x401}}, {0x982e, 0x30f, {0x0, 0x6}}, {0x8, 0x9, {0x3, 0x7}}, {0x0, 0x9, {0x2, 0x8}}, {0x2, 0x5, {0x0, 0x6}}, {0x0, 0x9, {0x0, 0xd}}, {0x8, 0xb0c0, {0x0, 0x6}}, {0x40, 0xfeff, {0x2, 0x169}}, {0x4, 0x2, {0x1, 0x2b0}}, {0x5, 0xfffe, {0x2, 0x7f}}, {0x4000, 0x3, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x6, 0x47, 0x40, 0xe, 0x9, 'syz0\x00', "aa5669707c8a063ed6250c10b5bc45791fd801a2b586e1da92c0fe05f24a3435", "7e5de5431653604337a770e95011ca20ba347e597d12e95a5be795014ac0e413", [{0x1, 0x1ff, {0x3, 0x66}}, {0x0, 0x1, {0x1, 0x6}}, {0x2cd, 0x0, {0x3, 0x80}}, {0x0, 0x6, {0x1, 0xa2}}, {0x8, 0x5, {0x3, 0x8}}, {0x6, 0x4d, {0x1}}, {0x4ef1, 0xbb0, {0x0, 0x9}}, {0x5, 0x9a, {0x0, 0x141c}}, {0x2, 0xffc0}, {0x4, 0x71, {0x0, 0x1}}, {0x6, 0x1, {0x0, 0x8}}, {0x9, 0x40, {0x3, 0xb}}, {0x7730, 0x7}, {0x6, 0x8000, {0x0, 0xfffffffe}}, {0x2, 0x3, {0x0, 0xfffffff9}}, {0x5, 0x9, {0x1, 0x70}}, {0x12c, 0x0, {0x2, 0x7}}, {0xfff7, 0x3, {0x2, 0x6b5}}, {0x1, 0x5, {0x0, 0xd}}, {0x1ff, 0x8001, {0x3, 0x1c}}, {0x1, 0xfff2, {0x1, 0xb33e}}, {0x7ff, 0x8, {0x0, 0x100}}, {0x6, 0x9, {0x1}}, {0xff7f, 0x8, {0x1, 0x9}}, {0x1822, 0x5, {0x0, 0x1}}, {0x200, 0x8, {0x0, 0x9}}, {0x0, 0x1, {0x3, 0x3}}, {0x2a, 0x8, {0x3, 0xe}}, {0x800, 0xffff, {0x0, 0xcfb3}}, {0xead6, 0x6, {0x3, 0x200}}, {0xfff8, 0x8, {0x3, 0x3b}}, {0x2, 0x3, {0x1}}, {0x2, 0x6, {0x3, 0x81}}, {0x4, 0xc, {0x2, 0x9}}, {0xd, 0xb, {0x2, 0x8}}, {0xfff, 0x40, {0x1, 0x2}}, {0x2, 0x1, {0x1, 0x3f8a}}, {0x83d2, 0x7e, {0x3, 0x5}}, {0x6, 0x5}, {0xbc3f, 0x3, {0x0, 0x80000000}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4c0d5}, 0x50) close(r5) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6(0xa, 0x2, 0x0) close_range(r1, r0, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r7, 0x3af001) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) write$cgroup_int(r8, &(0x7f00000002c0)=0x8, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580), 0x3, 0x433, &(0x7f0000000d80)="$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") setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000001007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad2c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 8.277538655s ago: executing program 1 (id=585): creat(0x0, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) sysfs$2(0x2, 0x101, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) shutdown(r1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 8.128453088s ago: executing program 0 (id=586): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28180ff, 0x0, 0x0, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x46ad, 0x400, 0x1, 0x105}, 0x0, &(0x7f0000000240)=0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x3) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x101, 0x1, {0x2}}) io_uring_enter(r3, 0x8aa, 0x0, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x10100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000200)) 4.481905646s ago: executing program 4 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a6ff0540cdabee0000000000000109022b0001000000000904000002010351000905031300"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x1000000, &(0x7f0000000340)=ANY=[@ANYBLOB="756d61736b44633030303030303030303030303022302c6465636f6d706f73652c6e6c733d6370313235302c7569643d563d6d528a98948279dcaeea2e152540d4e3f1c9b26f0ec7a0b6d387e5cce8c82d262f647452cd28a93729a1c01ce4ac395a07d7152d3bb68a29775474c742d7828ddb2f960311c355078843e1cb54df37ce08843e65beecd525c4fbb6bacebec88b7846baad74121f4eb7f37082d31dac67900582bedb0faa6bac0f3309e5c328c39da6bb19ba6e97b5b85da7b4a42a6dc499ecee19cdeeeb35bf5c478b4d088396536740c3ae4c693f8c0c23ee0e9ebc10c4", @ANYRESHEX=0xee01, @ANYBLOB=',force,barrier,\x00'], 0x20, 0x6de, &(0x7f0000000840)="$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") accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') 3.884528887s ago: executing program 1 (id=588): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) (async) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3) (async) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x250d08}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x14, r6, 0x303, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) 3.672745441s ago: executing program 0 (id=589): semop(0x0, &(0x7f00000007c0)=[{0x4, 0x81}, {0x0, 0xfffd, 0x1000}], 0x2) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) semctl$GETPID(0x0, 0x4, 0xb, 0x0) 3.574107783s ago: executing program 0 (id=590): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) write$char_usb(r4, &(0x7f0000000580)="f010ef70ff4496f1ea5214b923e1672847fc5f5545809324ef6c522a7a70865892ed5f7e7f450eec6aaeb0f65aef0112f3b5199fac1513cbc65772be1b4a660185f1c95b2959cfc297a7784c3f740c", 0x4f) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2ee, 0x2d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x308407, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x4100000000000000, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439}) 3.268571639s ago: executing program 3 (id=591): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x26, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @multicast2}}]}, 0xa8}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000d40)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f00000000c0), 0x0, 0x4ee, &(0x7f0000002680)="$eJzs3E9oHNUfAPDvbJIm/fdrfv31V22pmlrFYDFp02p7EKSi4EFBrKAeQ5KW2rSRJgVbqmxB6lEK3sWjVw9e1UsRT4LXehSkUKSXtoK4Mrsz2c12d/Nv/xj7+cBm35vZmfe+O/Nm37y32QAeWiPpn6SSvhkROyKiUP+CkcrTvTtXpu7fuTIVxVLp5O9JebO7aT6T7Sa2ZpnRQkThk6S6osb8pctnJ2dnZy5k+fGFcx+Mz1+6/NyZoWzJ8eNHjxw+9sLE86sPqkF5aVx39348t2/Pa+9df2OqP1+el1YbR7uMxEijqpQ93e7Cemx7TTrpX8kWxcHO1YaVSs//9HANlNv/juiLVgev2MWaAZ1WKpVKLS7ExVK9qw8sATasJHpdA6A38g/69P43fzTqCGzqTPej526fqNwApXHfyx4RT5QX5uMgA3X3t+00EhHvFv/4In1Eh8YhAABqfXci7wnW9f+GKzMjf1688VL6/J9sDmU4Iv4bETsj4n8RsSsi/h8RuyPikYh4tG7/fRFRalH+SF1+sfzFSajCrTaF2lDa/3sxm9uq9v+WVGC4L8ttj8g7zDOHsvdkNAYGT52ZnTncoozvX/n5s2bravt/6SMtP+8LZvW41V83QDc9uTC55oDr3L4asbe/Pv6kPyJZnAlIImJPROxdxX6Ha9Jnnv1q32JmYOnrlo+/rNRwHm1F80ytlb6MeKZy/Iux5PhXS0yWzE+emzw9c3rm/MTi/OT4UMzOHBpPz4JDDcv48adrbzYrf9n4v/m1fpNXj317MmtZ65ce/y0153/k87fV+IeTiGRxvnZ+9WVc++XTpvc0az3/NyVvl9P5femHkwsLFw5HbEpef3D5RHXbPJ8+R7ES/+iBxu1/Z7ZN/k6kJ/FjEfF4VO4Q07rvj4gnI+JAi/h/ePmp99cef2el8U/XXf8q8S45/tX5+maJJJsbbLCq7+z+m/ebXDxWdvyPllOj2ZLG179kySWiWU3zT7t0yV/rfvcAAABgYyhExLaasaRtUSiMjVXGgHbFlsLs3PzCwVNzF89Pp+sihmOgkI90VcaDB5J8/HO4Jj9Rlz+SjRt/3re5nB+bmpud7mnkwNZym08KYxHv9NW0/9Rv7RliBv7J2jCPBmxQrdp/2onffb2LlQG6auWf/zc+6mhFgK6raf8N/sO//I294hq+9wVsAO7/garlf+jHNQM2vpK2DA+1VbX/g34EEP5N+uOtxXShpzUBuk3/Hx5Ky/5f/7oSpcHGq4biwRfHUOsd9sXaqrG5QVn3Oxdy80Tas+p6oWli81q2yn9NoelrorC6HQ5Ge47pqXW+G8UL86d3t/3kL2XflW/3Efy6K+00SwxEzZKeXI4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa7u8AAAD//8TA4LM=") r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f00000013c0)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000001dc0)="bc", 0x1}], 0x1}}], 0x1, 0x8040) getsockopt$bt_hci(r7, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 2.403225245s ago: executing program 0 (id=592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_LABELS_MASK={0x18, 0x17, [0x8001, 0x6, 0x1, 0x4, 0x1]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40480a0}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0xc1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}}, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000040)={0x7, 0x8, 0x8001}) 1.660558309s ago: executing program 0 (id=593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.282443306s ago: executing program 3 (id=594): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x80) creat(&(0x7f0000000740)='./file0\x00', 0x20) getdents64(r1, &(0x7f0000000080)=""/95, 0x5f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002580)='wchan\x00') lseek(r6, 0x9, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000906030000000000000000000a00000208000940800000010900020073797a30000000000500010007fae3a828000940fffffffe"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x24000811) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x28, 0xdde, 0x7f, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x1e, 0x0, &(0x7f00000001c0)=0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r8, 0x10d, 0xb, &(0x7f0000000080)=0xf, 0x4) 1.204236377s ago: executing program 1 (id=595): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='nls=cp\x00\x00\x00\x00\x00'], 0x1, 0x5d4, &(0x7f0000001980)="$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") rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) close(r1) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x2200002, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6465706167653d63703933362c696f636861727365743d6d61636963656c616e642c747970653d673696712c000f1264d3fd0f4ac7be99a63d6d0400028052b9422d8f9ddd6189929f23c0affb25b5dfa7d30e010000d648481730f224f60140483648e70cca4ae0d1164ee24fb9e31d20faa0a07386f4db0d81ab2e91520ada77a6da890e981889b044cf774eb8d510d40f0187840400968306e5b1ce5436f0d45ed7c5ecaafd9b0908"], 0x5, 0x307, &(0x7f0000000ac0)="$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") r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_expedited', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB='-', @ANYRESHEX, @ANYBLOB="38bc22c1"], 0x28) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000002100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r9, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) sendmmsg$inet(r9, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12) r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r10, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000040), &(0x7f0000000840)=""/215}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) 626.880918ms ago: executing program 4 (id=596): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000001dc0)={@broadcast, @dev, @void, {@ipv4={0x86dd, @generic={{0x5, 0x4, 0x3, 0x4, 0x14, 0x68, 0x0, 0x7, 0x1d, 0x0, @multicast2, @multicast2}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28060400) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x14, 0x1) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x20, &(0x7f0000000300)) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f0000002680), 0x100, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x101d0}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004000) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x8014) 0s ago: executing program 3 (id=597): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000a40)={0xf8, 0x3, 0x601, 0x8}) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') (fail_nth: 3) kernel console output (not intermixed with test programs): 0 to 64 [ 175.330405][ T4370] usb 2-1: Using ep0 maxpacket: 32 [ 175.339459][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 175.650430][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 175.683646][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.779970][ T4370] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 175.844359][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 175.857324][ T4370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.886417][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.918061][ T4370] usb 2-1: Product: syz [ 175.922941][ T4370] usb 2-1: Manufacturer: syz [ 175.935492][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 175.961242][ T4370] usb 2-1: SerialNumber: syz [ 175.967893][ T7] usb 3-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 175.983605][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.006503][ T4370] usb 2-1: config 0 descriptor?? [ 176.013418][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.035750][ T13] usb 5-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 176.058942][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.069271][ T7] usb 3-1: config 0 descriptor?? [ 176.081575][ T4370] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 176.119446][ T7] usb 3-1: MIDIStreaming interface descriptor not found [ 176.129661][ T13] usb 5-1: config 0 descriptor?? [ 176.156639][ T4941] loop3: detected capacity change from 0 to 512 [ 176.177871][ T13] usb 5-1: MIDIStreaming interface descriptor not found [ 176.407209][ T4921] loop2: detected capacity change from 0 to 1024 [ 176.430748][ T4933] loop4: detected capacity change from 0 to 1024 [ 176.539492][ T4921] hfsplus: unable to parse mount options [ 176.549115][ T4933] hfsplus: unable to parse mount options [ 176.987177][ T4370] gspca_ov534_9: reg_w failed -110 [ 177.006574][ T13] usb 5-1: USB disconnect, device number 3 [ 177.089169][ T4941] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.167: invalid block [ 177.238278][ T4941] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.167: invalid indirect mapped block 4294967295 (level 1) [ 177.273688][ T4941] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.167: invalid indirect mapped block 4294967295 (level 1) [ 177.423770][ T4941] EXT4-fs (loop3): 2 truncates cleaned up [ 177.456566][ T4941] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.481362][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 177.617685][ T4370] gspca_ov534_9: Unknown sensor 0000 [ 177.617813][ T4370] ov534_9: probe of 2-1:0.0 failed with error -22 [ 178.091132][ T4947] Process accounting resumed [ 178.124705][ T4302] usb 3-1: USB disconnect, device number 9 [ 178.201751][ T4953] loop0: detected capacity change from 0 to 40427 [ 178.306892][ T4953] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 178.333792][ T4953] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 178.417950][ T4953] F2FS-fs (loop0): invalid crc value [ 178.447351][ T4965] loop2: detected capacity change from 0 to 1024 [ 178.491500][ T4953] F2FS-fs (loop0): Found nat_bits in checkpoint [ 178.516661][ T4965] ======================================================= [ 178.516661][ T4965] WARNING: The mand mount option has been deprecated and [ 178.516661][ T4965] and is ignored by this kernel. Remove the mand [ 178.516661][ T4965] option from the mount to silence this warning. [ 178.516661][ T4965] ======================================================= [ 178.604414][ T4965] EXT4-fs (loop2): inline encryption not supported [ 178.642948][ T4965] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.713495][ T4953] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 178.729601][ T4953] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 178.775193][ T4965] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 179.109699][ T4370] usb 2-1: USB disconnect, device number 7 [ 179.163564][ T4972] autofs4:pid:4972:autofs_fill_super: called with bogus options [ 179.863312][ T4981] loop1: detected capacity change from 0 to 64 [ 180.647463][ T4985] binder: 4984:4985 ioctl 4018620d 0 returned -22 [ 180.846705][ T4991] binder: 4984:4991 ioctl b101 0 returned -22 [ 181.422235][ T4996] loop1: detected capacity change from 0 to 64 [ 182.501136][ T5014] loop4: detected capacity change from 0 to 64 [ 184.101346][ T5018] FAULT_INJECTION: forcing a failure. [ 184.101346][ T5018] name failslab, interval 1, probability 0, space 0, times 0 [ 184.116674][ T5018] CPU: 1 PID: 5018 Comm: syz.3.189 Not tainted syzkaller #0 [ 184.125984][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.139096][ T5018] Call Trace: [ 184.143814][ T5018] [ 184.147416][ T5018] dump_stack_lvl+0x168/0x230 [ 184.153447][ T5018] ? show_regs_print_info+0x20/0x20 [ 184.159900][ T5018] ? load_image+0x3b0/0x3b0 [ 184.165797][ T5018] ? __might_sleep+0xf0/0xf0 [ 184.171789][ T5018] ? __lock_acquire+0x7c60/0x7c60 [ 184.179243][ T5018] ? netlink_insert+0xe7c/0x11d0 [ 184.184693][ T5018] should_fail+0x38c/0x4c0 [ 184.191705][ T5018] should_failslab+0x5/0x20 [ 184.196590][ T5018] slab_pre_alloc_hook+0x51/0xc0 [ 184.201857][ T5018] kmem_cache_alloc_node+0x47/0x2d0 [ 184.209540][ T5018] ? __alloc_skb+0xf4/0x750 [ 184.215351][ T5018] __alloc_skb+0xf4/0x750 [ 184.221063][ T5018] netlink_sendmsg+0x645/0xbc0 [ 184.226704][ T5018] ? netlink_getsockopt+0x560/0x560 [ 184.233748][ T5018] ? aa_sock_msg_perm+0x94/0x150 [ 184.239659][ T5018] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 184.246931][ T5018] ? security_socket_sendmsg+0x7c/0xa0 [ 184.253958][ T5018] ? netlink_getsockopt+0x560/0x560 [ 184.260899][ T5018] ____sys_sendmsg+0x5a2/0x8c0 [ 184.266734][ T5018] ? memset+0x1e/0x40 [ 184.271635][ T5018] ? __sys_sendmsg_sock+0x30/0x30 [ 184.278178][ T5018] ? import_iovec+0x6f/0xa0 [ 184.283630][ T5018] ___sys_sendmsg+0x1f0/0x260 [ 184.293960][ T5018] ? __sys_sendmsg+0x250/0x250 [ 184.301881][ T5018] ? vfs_write+0x84d/0xd00 [ 184.306851][ T5018] ? __fdget+0x18b/0x210 [ 184.312284][ T5018] __se_sys_sendmsg+0x190/0x250 [ 184.317654][ T5018] ? __x64_sys_sendmsg+0x80/0x80 [ 184.324253][ T5018] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 184.330933][ T5018] ? lockdep_hardirqs_on+0x94/0x140 [ 184.338436][ T5018] do_syscall_64+0x4c/0xa0 [ 184.344083][ T5018] ? clear_bhb_loop+0x30/0x80 [ 184.351798][ T5018] ? clear_bhb_loop+0x30/0x80 [ 184.358372][ T5018] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.366249][ T5018] RIP: 0033:0x7f1950cc3be9 [ 184.371779][ T5018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.396082][ T5018] RSP: 002b:00007f194ef2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.408467][ T5018] RAX: ffffffffffffffda RBX: 00007f1950efafa0 RCX: 00007f1950cc3be9 [ 184.419187][ T5018] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 184.428475][ T5018] RBP: 00007f194ef2b090 R08: 0000000000000000 R09: 0000000000000000 [ 184.439810][ T5018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.449427][ T5018] R13: 00007f1950efb038 R14: 00007f1950efafa0 R15: 00007fff1bb4f458 [ 184.461684][ T5018] [ 184.982559][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 185.263528][ T5031] loop1: detected capacity change from 0 to 40427 [ 185.349709][ T5031] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 185.359511][ T5031] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 185.650138][ T5031] F2FS-fs (loop1): invalid crc value [ 185.813983][ T5031] F2FS-fs (loop1): Found nat_bits in checkpoint [ 185.953981][ T5031] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 185.961575][ T5031] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 186.096995][ T4302] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 186.158330][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 186.218453][ T5046] binder: 5045:5046 ioctl 4018620d 0 returned -22 [ 186.286891][ T21] usb 3-1: config 0 has no interfaces? [ 186.293078][ T21] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 186.325743][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.327369][ T5052] binder: 5045:5052 ioctl b101 0 returned -22 [ 186.353179][ T21] usb 3-1: config 0 descriptor?? [ 186.684713][ T5058] loop4: detected capacity change from 0 to 64 [ 187.410861][ T4302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.425584][ T4302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 187.439407][ T4302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 187.452053][ T4302] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.465438][ T4302] usb 1-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 187.474667][ T4302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.499584][ T4302] usb 1-1: config 0 descriptor?? [ 187.561642][ T4302] usb 1-1: MIDIStreaming interface descriptor not found [ 187.608445][ T1111] usb 3-1: USB disconnect, device number 10 [ 187.900816][ T5029] loop0: detected capacity change from 0 to 1024 [ 188.009995][ T5029] hfsplus: unable to parse mount options [ 189.176557][ T5084] loop3: detected capacity change from 0 to 64 [ 189.747731][ T5091] loop4: detected capacity change from 0 to 512 [ 189.872359][ T5076] Process accounting resumed [ 189.889803][ T4302] usb 1-1: USB disconnect, device number 8 [ 190.202985][ T5091] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.263810][ T5091] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.169078][ T5111] binder: BINDER_SET_CONTEXT_MGR already set [ 191.214349][ T5111] binder: 5108:5111 ioctl 4018620d 200000004a80 returned -16 [ 191.562698][ T5125] loop0: detected capacity change from 0 to 64 [ 192.452010][ T5124] netlink: 148 bytes leftover after parsing attributes in process `syz.4.212'. [ 192.651402][ T5124] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 193.145217][ T5139] loop3: detected capacity change from 0 to 64 [ 193.155366][ T1108] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 193.783317][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.839566][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 193.923057][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 193.940009][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.965675][ T1108] usb 3-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 193.975400][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.993328][ T1108] usb 3-1: config 0 descriptor?? [ 194.057234][ T1108] usb 3-1: MIDIStreaming interface descriptor not found [ 194.286334][ T5133] loop2: detected capacity change from 0 to 1024 [ 194.326557][ T5133] hfsplus: unable to parse mount options [ 194.916983][ T5124] syz.4.212 (5124) used greatest stack depth: 20864 bytes left [ 195.158040][ T5156] loop4: detected capacity change from 0 to 8192 [ 195.958291][ T5152] Process accounting resumed [ 196.061571][ T4315] usb 3-1: USB disconnect, device number 11 [ 196.130976][ T5156] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 196.153548][ T5156] REISERFS (device loop4): using ordered data mode [ 196.169921][ T5156] reiserfs: using flush barriers [ 196.187464][ T5156] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.229089][ T5156] REISERFS (device loop4): checking transaction log (loop4) [ 196.459890][ T5165] loop2: detected capacity change from 0 to 40427 [ 196.512433][ T5163] loop0: detected capacity change from 0 to 8192 [ 196.544401][ T5165] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 196.555282][ T5165] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 196.577263][ T5165] F2FS-fs (loop2): invalid crc value [ 196.595852][ T5163] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 196.609808][ T5163] REISERFS (device loop0): using ordered data mode [ 196.617206][ T5163] reiserfs: using flush barriers [ 196.634131][ T5163] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.728294][ T5165] F2FS-fs (loop2): Found nat_bits in checkpoint [ 196.812937][ T5163] REISERFS (device loop0): checking transaction log (loop0) [ 196.895925][ T5165] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 196.905325][ T5165] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 197.802656][ T5156] REISERFS (device loop4): Using tea hash to sort names [ 197.928845][ T5156] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 198.361916][ T5189] loop3: detected capacity change from 0 to 64 [ 199.018522][ T5163] REISERFS (device loop0): Using tea hash to sort names [ 199.097958][ T5163] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 199.125326][ T5163] FAULT_INJECTION: forcing a failure. [ 199.125326][ T5163] name failslab, interval 1, probability 0, space 0, times 0 [ 199.222259][ T5163] CPU: 1 PID: 5163 Comm: syz.0.224 Not tainted syzkaller #0 [ 199.230341][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.241827][ T5163] Call Trace: [ 199.245501][ T5163] [ 199.248657][ T5163] dump_stack_lvl+0x168/0x230 [ 199.254116][ T5163] ? show_regs_print_info+0x20/0x20 [ 199.259583][ T5163] ? load_image+0x3b0/0x3b0 [ 199.264848][ T5163] ? __might_sleep+0xf0/0xf0 [ 199.270321][ T5163] ? __lock_acquire+0x7c60/0x7c60 [ 199.275508][ T5163] ? __context_tracking_exit+0x4c/0x80 [ 199.281426][ T5163] should_fail+0x38c/0x4c0 [ 199.286446][ T5163] should_failslab+0x5/0x20 [ 199.291171][ T5163] slab_pre_alloc_hook+0x51/0xc0 [ 199.297245][ T5163] ? getname_flags+0xb5/0x500 [ 199.301971][ T5163] kmem_cache_alloc+0x3d/0x290 [ 199.306865][ T5163] getname_flags+0xb5/0x500 [ 199.312015][ T5163] __x64_sys_unlinkat+0xaa/0xe0 [ 199.316907][ T5163] do_syscall_64+0x4c/0xa0 [ 199.321358][ T5163] ? clear_bhb_loop+0x30/0x80 [ 199.326165][ T5163] ? clear_bhb_loop+0x30/0x80 [ 199.331231][ T5163] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.337429][ T5163] RIP: 0033:0x7ff1ac8ddbe9 [ 199.342089][ T5163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.362699][ T5163] RSP: 002b:00007ff1aab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 199.371567][ T5163] RAX: ffffffffffffffda RBX: 00007ff1acb14fa0 RCX: 00007ff1ac8ddbe9 [ 199.379670][ T5163] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 199.389505][ T5163] RBP: 00007ff1aab45090 R08: 0000000000000000 R09: 0000000000000000 [ 199.399935][ T5163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.408895][ T5163] R13: 00007ff1acb15038 R14: 00007ff1acb14fa0 R15: 00007ffcb4bbe558 [ 199.417926][ T5163] [ 199.421125][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.011692][ T4302] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 200.450635][ T4302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.619280][ T4302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 200.811797][ T4302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 200.930885][ T4302] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.953612][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.997011][ T4302] usb 4-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 201.015364][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.061365][ T4302] usb 4-1: config 0 descriptor?? [ 201.126927][ T4302] usb 4-1: MIDIStreaming interface descriptor not found [ 201.484188][ T5199] loop3: detected capacity change from 0 to 1024 [ 201.542068][ T5199] hfsplus: unable to parse mount options [ 202.021199][ C1] hrtimer: interrupt took 183969 ns [ 203.896041][ T5219] Process accounting resumed [ 203.913115][ T4302] usb 4-1: USB disconnect, device number 10 [ 205.697603][ T5250] netlink: 136 bytes leftover after parsing attributes in process `syz.1.245'. [ 205.715722][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.724469][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.569508][ T5261] loop3: detected capacity change from 0 to 40427 [ 207.708667][ T5261] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 207.719144][ T5261] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 207.731184][ T5266] binder: BINDER_SET_CONTEXT_MGR already set [ 207.742452][ T5261] F2FS-fs (loop3): invalid crc value [ 207.763400][ T5266] binder: 5265:5266 ioctl 4018620d 200000004a80 returned -16 [ 207.805849][ T5261] F2FS-fs (loop3): Found nat_bits in checkpoint [ 207.871528][ T5261] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 207.879297][ T5261] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 208.178504][ T4230] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 208.273760][ T5274] mmap: syz.0.252 (5274): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 208.680937][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.888889][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 208.901436][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 208.913894][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.930054][ T4230] usb 2-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 208.941140][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.960412][ T4230] usb 2-1: config 0 descriptor?? [ 209.019144][ T4230] usb 2-1: MIDIStreaming interface descriptor not found [ 209.051899][ T5285] loop2: detected capacity change from 0 to 64 [ 209.251779][ T5268] loop1: detected capacity change from 0 to 1024 [ 209.259302][ T4252] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 209.333672][ T5268] hfsplus: unable to parse mount options [ 209.877947][ T4252] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.905763][ T4252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 209.951716][ T4252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 210.186613][ T4252] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.204369][ T4252] usb 1-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 210.216263][ T4252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.252970][ T4252] usb 1-1: config 0 descriptor?? [ 210.895226][ T5286] Process accounting resumed [ 210.927650][ T4230] usb 2-1: USB disconnect, device number 8 [ 211.261150][ T4252] debugfs: Directory 'card3' with parent 'sound' already present! [ 211.293652][ T4252] usb 1-1: MIDIStreaming interface descriptor not found [ 211.380860][ T4252] usb 1-1: USB disconnect, device number 9 [ 211.602723][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.028878][ T5317] loop2: detected capacity change from 0 to 512 [ 213.151509][ T5317] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.259: invalid indirect mapped block 4294967295 (level 1) [ 213.172863][ T5317] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.259: invalid indirect mapped block 4294967295 (level 1) [ 213.195171][ T5317] EXT4-fs (loop2): 2 truncates cleaned up [ 213.203258][ T5317] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.408601][ T4252] Bluetooth: hci1: command 0x0406 tx timeout [ 213.440778][ T4252] Bluetooth: hci3: command 0x0406 tx timeout [ 213.470112][ T4252] Bluetooth: hci2: command 0x0406 tx timeout [ 213.512982][ T4252] Bluetooth: hci4: command 0x0406 tx timeout [ 213.570362][ T5323] binder: 5322:5323 ioctl c0306201 0 returned -14 [ 213.680726][ T5324] binder: 5322:5324 ioctl b101 0 returned -22 [ 214.067031][ T5334] loop1: detected capacity change from 0 to 64 [ 215.029950][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 215.208779][ T5348] overlayfs: missing 'lowerdir' [ 216.419619][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.429886][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 216.452807][ T5358] FAULT_INJECTION: forcing a failure. [ 216.452807][ T5358] name failslab, interval 1, probability 0, space 0, times 0 [ 216.472016][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 216.487716][ T5358] CPU: 1 PID: 5358 Comm: syz.4.275 Not tainted syzkaller #0 [ 216.495064][ T5358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.505154][ T5358] Call Trace: [ 216.508477][ T5358] [ 216.511576][ T5358] dump_stack_lvl+0x168/0x230 [ 216.516479][ T5358] ? show_regs_print_info+0x20/0x20 [ 216.521722][ T5358] ? load_image+0x3b0/0x3b0 [ 216.526523][ T5358] ? __might_sleep+0xf0/0xf0 [ 216.531150][ T5358] ? __lock_acquire+0x7c60/0x7c60 [ 216.536312][ T5358] should_fail+0x38c/0x4c0 [ 216.541272][ T5358] should_failslab+0x5/0x20 [ 216.546363][ T5358] slab_pre_alloc_hook+0x51/0xc0 [ 216.552283][ T5358] ? shmem_match+0x160/0x160 [ 216.557200][ T5358] ? shmem_alloc_inode+0x16/0x30 [ 216.562279][ T5358] kmem_cache_alloc+0x3d/0x290 [ 216.567437][ T5358] ? shmem_match+0x160/0x160 [ 216.572337][ T5358] shmem_alloc_inode+0x16/0x30 [ 216.577377][ T5358] new_inode_pseudo+0x5f/0x210 [ 216.582398][ T5358] new_inode+0x25/0x1c0 [ 216.586969][ T5358] shmem_get_inode+0x334/0xa90 [ 216.591922][ T5358] ? _raw_spin_unlock+0x24/0x40 [ 216.596926][ T5358] __shmem_file_setup+0x10b/0x290 [ 216.602189][ T5358] ? shmem_file_setup+0x13/0x30 [ 216.607896][ T5358] __se_sys_memfd_create+0x290/0x430 [ 216.613384][ T5358] ? __x64_sys_memfd_create+0x60/0x60 [ 216.618789][ T5358] ? lockdep_hardirqs_on+0x94/0x140 [ 216.624103][ T5358] do_syscall_64+0x4c/0xa0 [ 216.628711][ T5358] ? clear_bhb_loop+0x30/0x80 [ 216.633614][ T5358] ? clear_bhb_loop+0x30/0x80 [ 216.638688][ T5358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.646087][ T5358] RIP: 0033:0x7f036e9a3be9 [ 216.651104][ T5358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.674749][ T5358] RSP: 002b:00007f036cc0ae18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 216.684002][ T5358] RAX: ffffffffffffffda RBX: 000000000000062d RCX: 00007f036e9a3be9 [ 216.693968][ T5358] RDX: 00007f036cc0aef0 RSI: 0000000000000000 RDI: 00007f036ea277e8 [ 216.703158][ T5358] RBP: 0000200000000c40 R08: 00007f036cc0abb7 R09: 00007f036cc0ae40 [ 216.713524][ T5358] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000005c0 [ 216.723028][ T5358] R13: 00007f036cc0aef0 R14: 00007f036cc0aeb0 R15: 0000200000000000 [ 216.731932][ T5358] [ 216.784638][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.817837][ T25] usb 3-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 216.836398][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.867175][ T25] usb 3-1: config 0 descriptor?? [ 216.925240][ T25] usb 3-1: MIDIStreaming interface descriptor not found [ 217.163215][ T5337] loop2: detected capacity change from 0 to 1024 [ 217.203499][ T5371] binder: 5370:5371 ioctl c0306201 0 returned -14 [ 217.223137][ T5337] hfsplus: unable to parse mount options [ 217.271882][ T5372] loop1: detected capacity change from 0 to 512 [ 217.372455][ T5372] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.273: invalid block [ 217.402456][ T5372] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.273: invalid indirect mapped block 4294967295 (level 1) [ 217.440009][ T5372] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.273: invalid indirect mapped block 4294967295 (level 1) [ 217.462494][ T5372] EXT4-fs (loop1): 2 truncates cleaned up [ 217.473374][ T5372] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 217.533140][ T5375] binder: 5370:5375 ioctl b101 0 returned -22 [ 217.767018][ T5382] loop3: detected capacity change from 0 to 512 [ 217.887700][ T5382] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.277: invalid indirect mapped block 4294967295 (level 1) [ 217.904217][ T5382] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.277: invalid indirect mapped block 4294967295 (level 1) [ 217.922104][ T5382] EXT4-fs (loop3): 2 truncates cleaned up [ 217.928570][ T5382] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.459594][ T5337] Process accounting resumed [ 218.482895][ T4252] usb 3-1: USB disconnect, device number 12 [ 220.048463][ T5401] loop2: detected capacity change from 0 to 1024 [ 220.138010][ T5401] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 220.197322][ T5401] EXT4-fs (loop2): orphan cleanup on readonly fs [ 220.278083][ T5401] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.285: Freeing blocks not in datazone - block = 0, count = 4096 [ 220.347505][ T5401] EXT4-fs (loop2): 1 orphan inode deleted [ 220.369771][ T5401] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.641047][ T5411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.286'. [ 221.860585][ T5377] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 222.768259][ T5433] binder: 5426:5433 ioctl c0306201 0 returned -14 [ 222.837295][ T5435] binder: 5426:5435 ioctl b101 0 returned -22 [ 222.920018][ T4252] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 223.454787][ T4252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.583631][ T4252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 223.650819][ T4252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 223.786936][ T4252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.870827][ T4252] usb 3-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 223.915294][ T4252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.969439][ T4252] usb 3-1: config 0 descriptor?? [ 224.045190][ T4252] usb 3-1: MIDIStreaming interface descriptor not found [ 224.427083][ T5428] loop2: detected capacity change from 0 to 1024 [ 224.502893][ T5428] hfsplus: unable to parse mount options [ 225.190789][ T5459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.300'. [ 225.883369][ T5449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.298'. [ 225.987855][ T5455] Process accounting resumed [ 226.094039][ T4252] usb 3-1: USB disconnect, device number 13 [ 228.852451][ T4498] udevd[4498]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.452878][ T5478] binder: BINDER_SET_CONTEXT_MGR already set [ 229.492699][ T5478] binder: 5477:5478 ioctl 4018620d 200000004a80 returned -16 [ 229.585226][ T5480] binder: 5477:5480 ioctl b101 0 returned -22 [ 231.244524][ T5488] loop1: detected capacity change from 0 to 512 [ 231.651795][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 232.225364][ T5501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.311'. [ 232.763557][ T5488] EXT4-fs: failed to create workqueue [ 232.771051][ T5488] EXT4-fs (loop1): mount failed [ 232.870290][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 232.896308][ T5505] FAULT_INJECTION: forcing a failure. [ 232.896308][ T5505] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 232.923647][ T5505] CPU: 0 PID: 5505 Comm: syz.0.313 Not tainted syzkaller #0 [ 232.932066][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.945507][ T5505] Call Trace: [ 232.950677][ T5505] [ 232.954261][ T5505] dump_stack_lvl+0x168/0x230 [ 232.959612][ T5505] ? show_regs_print_info+0x20/0x20 [ 232.965558][ T5505] ? load_image+0x3b0/0x3b0 [ 232.971286][ T5505] ? __lock_acquire+0x7c60/0x7c60 [ 232.977929][ T5505] should_fail+0x38c/0x4c0 [ 232.983489][ T5505] _copy_from_user+0x2e/0x170 [ 232.989345][ T5505] __copy_msghdr_from_user+0xaf/0x5e0 [ 232.995925][ T5505] ? verify_lock_unused+0x140/0x140 [ 233.001651][ T5505] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 233.008243][ T5505] ___sys_sendmsg+0x156/0x260 [ 233.013354][ T5505] ? __sys_sendmsg+0x250/0x250 [ 233.018163][ T5505] ? vfs_write+0x84d/0xd00 [ 233.022775][ T5505] ? __fdget+0x18b/0x210 [ 233.027217][ T5505] __se_sys_sendmsg+0x190/0x250 [ 233.032630][ T5505] ? __x64_sys_sendmsg+0x80/0x80 [ 233.037700][ T5505] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 233.043858][ T5505] ? lockdep_hardirqs_on+0x94/0x140 [ 233.049311][ T5505] do_syscall_64+0x4c/0xa0 [ 233.053755][ T5505] ? clear_bhb_loop+0x30/0x80 [ 233.058635][ T5505] ? clear_bhb_loop+0x30/0x80 [ 233.064165][ T5505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.070222][ T5505] RIP: 0033:0x7ff1ac8ddbe9 [ 233.074933][ T5505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.096551][ T5505] RSP: 002b:00007ff1aab45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.105565][ T5505] RAX: ffffffffffffffda RBX: 00007ff1acb14fa0 RCX: 00007ff1ac8ddbe9 [ 233.114088][ T5505] RDX: 0000000000004800 RSI: 0000200000000000 RDI: 0000000000000003 [ 233.122430][ T5505] RBP: 00007ff1aab45090 R08: 0000000000000000 R09: 0000000000000000 [ 233.131203][ T5505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.139390][ T5505] R13: 00007ff1acb15038 R14: 00007ff1acb14fa0 R15: 00007ffcb4bbe558 [ 233.148050][ T5505] [ 233.447837][ T7] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 233.475467][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.501223][ T7] usb 4-1: Product: syz [ 233.506259][ T7] usb 4-1: Manufacturer: syz [ 233.532970][ T4313] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 233.542393][ T7] usb 4-1: SerialNumber: syz [ 233.546911][ T5515] usb usb8: usbfs: process 5515 (syz.0.317) did not claim interface 0 before use [ 233.563005][ T7] usb 4-1: config 0 descriptor?? [ 233.576423][ T5515] tipc: Enabling of bearer rejected, failed to enable media [ 233.625262][ T7] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 233.861271][ T5486] loop3: detected capacity change from 0 to 512 [ 233.955219][ T5486] EXT4-fs warning (device loop3): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 233.957984][ T5524] binder: 5520:5524 ioctl b101 0 returned -22 [ 233.974752][ T4313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.988137][ T5486] EXT4-fs warning (device loop3): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132791, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop12 [ 233.990240][ T7] usb 4-1: Found UVC 0.00 device syz (0d49:7000) [ 234.035440][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 234.057648][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 234.073805][ T7] usb 4-1: No valid video chain found. [ 234.082633][ T4313] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.110295][ T4313] usb 3-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 234.128532][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.141045][ T4313] usb 3-1: config 0 descriptor?? [ 234.209527][ T4313] usb 3-1: MIDIStreaming interface descriptor not found [ 234.432573][ T5506] loop2: detected capacity change from 0 to 1024 [ 234.476987][ T5486] program syz.3.308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.486716][ T5506] hfsplus: unable to parse mount options [ 234.599032][ T13] usb 4-1: USB disconnect, device number 11 [ 236.135559][ T5553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.324'. [ 236.185761][ T5534] Process accounting resumed [ 236.248439][ T13] usb 3-1: USB disconnect, device number 14 [ 236.848871][ T5575] binder: 5566:5575 ioctl b101 0 returned -22 [ 237.373022][ T5584] loop3: detected capacity change from 0 to 512 [ 237.444494][ T5584] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.333: invalid block [ 237.459701][ T5584] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.333: invalid indirect mapped block 4294967295 (level 1) [ 237.476067][ T5584] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.333: invalid indirect mapped block 4294967295 (level 1) [ 237.491595][ T5584] EXT4-fs (loop3): 2 truncates cleaned up [ 237.497446][ T5584] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.069620][ T5597] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 239.238125][ T5597] netlink: 36 bytes leftover after parsing attributes in process `syz.0.337'. [ 239.442663][ T5603] loop1: detected capacity change from 0 to 512 [ 239.570110][ T5603] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.328: invalid indirect mapped block 4294967295 (level 1) [ 239.585644][ T5603] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.328: invalid indirect mapped block 4294967295 (level 1) [ 239.600946][ T5603] EXT4-fs (loop1): 2 truncates cleaned up [ 239.606823][ T5603] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.778595][ T4302] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 239.797230][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 240.228361][ T4302] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.246218][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.279989][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 240.308025][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 240.332283][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.374199][ T13] usb 5-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 240.434341][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.484312][ T13] usb 5-1: config 0 descriptor?? [ 240.491889][ T4302] usb 1-1: not running at top speed; connect to a high speed hub [ 240.677791][ T5615] Can't find ip_set type hash [ 240.696294][ T13] usb 5-1: MIDIStreaming interface descriptor not found [ 241.011406][ T5626] FAULT_INJECTION: forcing a failure. [ 241.011406][ T5626] name failslab, interval 1, probability 0, space 0, times 0 [ 241.051821][ T5626] CPU: 1 PID: 5626 Comm: syz.1.345 Not tainted syzkaller #0 [ 241.059487][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.069810][ T5626] Call Trace: [ 241.073122][ T5626] [ 241.076082][ T5626] dump_stack_lvl+0x168/0x230 [ 241.081067][ T5626] ? show_regs_print_info+0x20/0x20 [ 241.086361][ T5626] ? load_image+0x3b0/0x3b0 [ 241.091166][ T5626] ? __lock_acquire+0x7c60/0x7c60 [ 241.097660][ T5626] should_fail+0x38c/0x4c0 [ 241.103560][ T5626] should_failslab+0x5/0x20 [ 241.109272][ T5626] slab_pre_alloc_hook+0x51/0xc0 [ 241.114898][ T5626] kmem_cache_alloc_trace+0x47/0x2a0 [ 241.124099][ T5626] ? btf_new_fd+0x1a0/0x910 [ 241.129640][ T5626] btf_new_fd+0x1a0/0x910 [ 241.134635][ T5626] __sys_bpf+0x51c/0x670 [ 241.139635][ T5626] ? bpf_link_show_fdinfo+0x340/0x340 [ 241.145530][ T5626] ? bpf_trace_run2+0x1df/0x2d0 [ 241.154204][ T5626] __x64_sys_bpf+0x78/0x90 [ 241.159845][ T5626] do_syscall_64+0x4c/0xa0 [ 241.166875][ T5626] ? clear_bhb_loop+0x30/0x80 [ 241.173539][ T5626] ? clear_bhb_loop+0x30/0x80 [ 241.178856][ T5626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.185485][ T5626] RIP: 0033:0x7f16d95e4be9 [ 241.190026][ T5626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.210078][ T5626] RSP: 002b:00007f16d784c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.219016][ T5626] RAX: ffffffffffffffda RBX: 00007f16d981bfa0 RCX: 00007f16d95e4be9 [ 241.227168][ T5626] RDX: 0000000000000028 RSI: 00002000000003c0 RDI: 0000000000000012 [ 241.235788][ T5626] RBP: 00007f16d784c090 R08: 0000000000000000 R09: 0000000000000000 [ 241.244972][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.253150][ T5626] R13: 00007f16d981c038 R14: 00007f16d981bfa0 R15: 00007ffead1628e8 [ 241.262833][ T5626] [ 241.282877][ T4302] usb 1-1: config 1 interface 0 has no altsetting 0 [ 241.329594][ T5629] binder: 5627:5629 ioctl b101 0 returned -22 [ 241.464812][ T4302] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 241.481876][ T4302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.491204][ T4302] usb 1-1: Product: syz [ 241.495913][ T4302] usb 1-1: Manufacturer: syz [ 241.510690][ T4302] usb 1-1: SerialNumber: syz [ 241.684053][ T4230] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 241.989180][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 242.192247][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.267752][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 242.313602][ T4230] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 242.337620][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.520118][ T7] usb 5-1: USB disconnect, device number 4 [ 242.567095][ T4230] usb 2-1: config 0 descriptor?? [ 242.611344][ T4230] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 242.943579][ T4302] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 243.062003][ T3546] bcm5974 1-1:1.0: could not read from device [ 243.138895][ T4302] usb 1-1: USB disconnect, device number 10 [ 243.319267][ T5639] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 243.348872][ T5639] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 245.321247][ T5664] loop3: detected capacity change from 0 to 4096 [ 245.817591][ T5667] loop2: detected capacity change from 0 to 512 [ 245.852547][ T5664] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 246.024462][ T5664] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 246.069211][ T4313] usb 2-1: USB disconnect, device number 9 [ 246.107007][ T5664] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 246.140928][ T5667] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.354: invalid indirect mapped block 4294967295 (level 1) [ 246.166302][ T5667] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.354: invalid indirect mapped block 4294967295 (level 1) [ 246.189675][ T5664] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 246.207645][ T5667] EXT4-fs (loop2): 2 truncates cleaned up [ 246.216763][ T5667] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 246.230649][ T5679] binder: BINDER_SET_CONTEXT_MGR already set [ 246.235481][ T5664] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 246.242241][ T5678] binder: BINDER_SET_CONTEXT_MGR already set [ 246.259408][ T5664] ntfs: volume version 3.1. [ 246.322883][ T5679] binder: 5677:5679 ioctl 4018620d 200000004a80 returned -16 [ 246.362151][ T5664] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 246.394902][ T5678] binder: 5676:5678 ioctl 4018620d 2000000002c0 returned -16 [ 246.407866][ T5664] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 246.425392][ T5664] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 246.438241][ T5678] binder: 5676:5678 ioctl c0306201 200000000680 returned -14 [ 246.438443][ T5664] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 246.486233][ T5664] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 246.534580][ T5680] binder: 5677:5680 ioctl b101 0 returned -22 [ 247.739159][ T4313] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 248.145295][ T4313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.214854][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 248.279417][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 248.368686][ T4313] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.412865][ T4313] usb 3-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 248.449388][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.493818][ T4313] usb 3-1: config 0 descriptor?? [ 248.544601][ T4313] usb 3-1: MIDIStreaming interface descriptor not found [ 248.626242][ T1111] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 248.827009][ T5683] loop2: detected capacity change from 0 to 1024 [ 248.948564][ T5683] hfsplus: unable to parse mount options [ 249.162894][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 249.614994][ T5727] FAULT_INJECTION: forcing a failure. [ 249.614994][ T5727] name failslab, interval 1, probability 0, space 0, times 0 [ 249.628945][ T5727] CPU: 1 PID: 5727 Comm: syz.4.373 Not tainted syzkaller #0 [ 249.636283][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.646600][ T5727] Call Trace: [ 249.649995][ T5727] [ 249.652956][ T5727] dump_stack_lvl+0x168/0x230 [ 249.657689][ T5727] ? show_regs_print_info+0x20/0x20 [ 249.663097][ T5727] ? load_image+0x3b0/0x3b0 [ 249.667744][ T5727] ? __might_sleep+0xf0/0xf0 [ 249.672845][ T5727] ? __lock_acquire+0x7c60/0x7c60 [ 249.677956][ T5727] should_fail+0x38c/0x4c0 [ 249.682528][ T5727] should_failslab+0x5/0x20 [ 249.687402][ T5727] slab_pre_alloc_hook+0x51/0xc0 [ 249.692741][ T5727] kmem_cache_alloc_node_trace+0x4a/0x300 [ 249.698990][ T5727] ? __get_vm_area_node+0x119/0x2d0 [ 249.704607][ T5727] __get_vm_area_node+0x119/0x2d0 [ 249.709956][ T5727] __vmalloc_node_range+0xef/0x8b0 [ 249.715319][ T5727] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 249.721027][ T5727] ? end_current_label_crit_section+0x170/0x170 [ 249.727409][ T5727] ? __lock_acquire+0x7c60/0x7c60 [ 249.732477][ T5727] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 249.738255][ T5727] __vmalloc+0x76/0x80 [ 249.742880][ T5727] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 249.750197][ T5727] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 249.757242][ T5727] bpf_prog_alloc+0x1a/0x1e0 [ 249.762532][ T5727] bpf_prog_load+0x7b3/0x1550 [ 249.767700][ T5727] ? map_freeze+0x350/0x350 [ 249.772443][ T5727] ? __might_fault+0xb7/0x110 [ 249.778155][ T5727] ? __might_fault+0xb3/0x110 [ 249.783080][ T5727] ? bpf_lsm_bpf+0x5/0x10 [ 249.789063][ T5727] ? security_bpf+0x7a/0xa0 [ 249.793696][ T5727] __sys_bpf+0x4c2/0x670 [ 249.798512][ T5727] ? bpf_link_show_fdinfo+0x340/0x340 [ 249.804375][ T5727] ? bpf_trace_run2+0x1df/0x2d0 [ 249.809613][ T5727] __x64_sys_bpf+0x78/0x90 [ 249.814354][ T5727] do_syscall_64+0x4c/0xa0 [ 249.819355][ T5727] ? clear_bhb_loop+0x30/0x80 [ 249.824759][ T5727] ? clear_bhb_loop+0x30/0x80 [ 249.829584][ T5727] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.836212][ T5727] RIP: 0033:0x7f036e9a3be9 [ 249.841407][ T5727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.863801][ T5727] RSP: 002b:00007f036cc0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.873590][ T5727] RAX: ffffffffffffffda RBX: 00007f036ebdafa0 RCX: 00007f036e9a3be9 [ 249.882593][ T5727] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 249.891573][ T5727] RBP: 00007f036cc0b090 R08: 0000000000000000 R09: 0000000000000000 [ 249.900786][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.912195][ T5727] R13: 00007f036ebdb038 R14: 00007f036ebdafa0 R15: 00007fff803d8df8 [ 249.920605][ T5727] [ 249.926202][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.949544][ T1111] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 249.971626][ T1111] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 249.981329][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.008715][ T1111] usb 4-1: config 0 descriptor?? [ 250.018447][ T5727] syz.4.373: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 250.040636][ T5727] CPU: 1 PID: 5727 Comm: syz.4.373 Not tainted syzkaller #0 [ 250.048767][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.058949][ T5727] Call Trace: [ 250.062441][ T5727] [ 250.065395][ T5727] dump_stack_lvl+0x168/0x230 [ 250.070328][ T5727] ? rcu_lock_release+0x5/0x20 [ 250.075142][ T5727] ? show_regs_print_info+0x20/0x20 [ 250.080491][ T5727] ? load_image+0x3b0/0x3b0 [ 250.085092][ T5727] ? __rcu_read_unlock+0x78/0xd0 [ 250.090083][ T5727] warn_alloc+0x20e/0x2f0 [ 250.094547][ T5727] ? zone_watermark_ok_safe+0x240/0x240 [ 250.100345][ T5727] ? __get_vm_area_node+0x2b5/0x2d0 [ 250.105591][ T5727] __vmalloc_node_range+0x2b1/0x8b0 [ 250.110835][ T5727] ? end_current_label_crit_section+0x170/0x170 [ 250.118299][ T5727] ? __lock_acquire+0x7c60/0x7c60 [ 250.124183][ T5727] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 250.129795][ T5727] __vmalloc+0x76/0x80 [ 250.135385][ T5727] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 250.142200][ T5727] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 250.147658][ T5727] bpf_prog_alloc+0x1a/0x1e0 [ 250.152330][ T5727] bpf_prog_load+0x7b3/0x1550 [ 250.157614][ T5727] ? map_freeze+0x350/0x350 [ 250.162282][ T5727] ? __might_fault+0xb7/0x110 [ 250.167434][ T5727] ? __might_fault+0xb3/0x110 [ 250.172644][ T5727] ? bpf_lsm_bpf+0x5/0x10 [ 250.177965][ T5727] ? security_bpf+0x7a/0xa0 [ 250.183881][ T5727] __sys_bpf+0x4c2/0x670 [ 250.188354][ T5727] ? bpf_link_show_fdinfo+0x340/0x340 [ 250.194413][ T5727] ? bpf_trace_run2+0x1df/0x2d0 [ 250.199783][ T5727] __x64_sys_bpf+0x78/0x90 [ 250.206436][ T5727] do_syscall_64+0x4c/0xa0 [ 250.211549][ T5727] ? clear_bhb_loop+0x30/0x80 [ 250.216476][ T5727] ? clear_bhb_loop+0x30/0x80 [ 250.222158][ T5727] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.228362][ T5727] RIP: 0033:0x7f036e9a3be9 [ 250.233819][ T5727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.256638][ T5727] RSP: 002b:00007f036cc0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.266006][ T5727] RAX: ffffffffffffffda RBX: 00007f036ebdafa0 RCX: 00007f036e9a3be9 [ 250.274578][ T5727] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 250.283345][ T5727] RBP: 00007f036cc0b090 R08: 0000000000000000 R09: 0000000000000000 [ 250.291868][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.300277][ T5727] R13: 00007f036ebdb038 R14: 00007f036ebdafa0 R15: 00007fff803d8df8 [ 250.309283][ T5727] [ 250.420647][ T1111] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 250.432792][ T5720] Process accounting resumed [ 250.462473][ T5727] Mem-Info: [ 250.466249][ T4313] usb 3-1: USB disconnect, device number 15 [ 250.486088][ T5727] active_anon:2231 inactive_anon:9009 isolated_anon:0 [ 250.486088][ T5727] active_file:6421 inactive_file:38105 isolated_file:0 [ 250.486088][ T5727] unevictable:768 dirty:172 writeback:0 [ 250.486088][ T5727] slab_reclaimable:20653 slab_unreclaimable:94862 [ 250.486088][ T5727] mapped:33818 shmem:6574 pagetables:694 bounce:0 [ 250.486088][ T5727] kernel_misc_reclaimable:0 [ 250.486088][ T5727] free:1374054 free_pcp:14917 free_cma:0 [ 250.695552][ T5727] Node 0 active_anon:10792kB inactive_anon:27628kB active_file:25484kB inactive_file:152420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127372kB dirty:688kB writeback:0kB shmem:18120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11952kB pagetables:2776kB all_unreclaimable? no [ 250.746432][ T5735] binder: 5729:5735 ioctl b101 0 returned -22 [ 251.017490][ T5727] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 252.515802][ T4230] usb 4-1: USB disconnect, device number 12 [ 252.551831][ T5746] FAULT_INJECTION: forcing a failure. [ 252.551831][ T5746] name failslab, interval 1, probability 0, space 0, times 0 [ 252.649576][ T5746] CPU: 1 PID: 5746 Comm: syz.0.378 Not tainted syzkaller #0 [ 252.657014][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.667313][ T5746] Call Trace: [ 252.670749][ T5746] [ 252.672036][ T5727] Node 0 [ 252.673781][ T5746] dump_stack_lvl+0x168/0x230 [ 252.673784][ T5727] DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.676867][ T5746] ? show_regs_print_info+0x20/0x20 [ 252.681712][ T5727] lowmem_reserve[]: [ 252.707645][ T5746] ? load_image+0x3b0/0x3b0 [ 252.707685][ T5746] ? __might_sleep+0xf0/0xf0 [ 252.707712][ T5746] ? __lock_acquire+0x7c60/0x7c60 [ 252.707742][ T5746] should_fail+0x38c/0x4c0 [ 252.707771][ T5746] should_failslab+0x5/0x20 [ 252.707789][ T5746] slab_pre_alloc_hook+0x51/0xc0 [ 252.707809][ T5746] kmem_cache_alloc_node_trace+0x4a/0x300 [ 252.707829][ T5746] ? __get_vm_area_node+0x119/0x2d0 [ 252.707855][ T5746] __get_vm_area_node+0x119/0x2d0 [ 252.707880][ T5746] __vmalloc_node_range+0xef/0x8b0 [ 252.707900][ T5746] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 252.707925][ T5746] ? end_current_label_crit_section+0x170/0x170 [ 252.741188][ T5727] 0 [ 252.745723][ T5746] ? __lock_acquire+0x7c60/0x7c60 [ 252.745755][ T5746] ? __lock_acquire+0x13ad/0x7c60 [ 252.745783][ T5746] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 252.751630][ T5727] 2541 [ 252.756987][ T5746] __vmalloc+0x76/0x80 [ 252.757013][ T5746] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 252.757037][ T5746] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 252.757064][ T5746] bpf_prog_alloc+0x1a/0x1e0 [ 252.757087][ T5746] bpf_prog_load+0x7b3/0x1550 [ 252.757121][ T5746] ? map_freeze+0x350/0x350 [ 252.757143][ T5746] ? __might_fault+0xb7/0x110 [ 252.757178][ T5746] ? __might_fault+0xb3/0x110 [ 252.779386][ T5727] 2542 [ 252.781737][ T5746] ? bpf_lsm_bpf+0x5/0x10 [ 252.837862][ T5727] 2542 [ 252.840312][ T5746] ? security_bpf+0x7a/0xa0 [ 252.840350][ T5746] __sys_bpf+0x4c2/0x670 [ 252.843271][ T5727] 2542 [ 252.847578][ T5746] ? bpf_link_show_fdinfo+0x340/0x340 [ 252.847622][ T5746] ? vtime_user_exit+0x2dc/0x400 [ 252.869956][ T5727] [ 252.872471][ T5746] __x64_sys_bpf+0x78/0x90 [ 252.872506][ T5746] do_syscall_64+0x4c/0xa0 [ 252.883959][ T5746] ? clear_bhb_loop+0x30/0x80 [ 252.888675][ T5746] ? clear_bhb_loop+0x30/0x80 [ 252.893394][ T5746] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.899900][ T5746] RIP: 0033:0x7ff1ac8ddbe9 [ 252.904398][ T5746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.924437][ T5746] RSP: 002b:00007ff1aab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.933081][ T5746] RAX: ffffffffffffffda RBX: 00007ff1acb14fa0 RCX: 00007ff1ac8ddbe9 [ 252.941198][ T5746] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 252.949287][ T5746] RBP: 00007ff1aab45090 R08: 0000000000000000 R09: 0000000000000000 [ 252.957363][ T5746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.965346][ T5746] R13: 00007ff1acb15038 R14: 00007ff1acb14fa0 R15: 00007ffcb4bbe558 [ 252.973482][ T5746] [ 253.001205][ T5727] Node 0 DMA32 free:1598324kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:5384kB inactive_anon:28396kB active_file:25604kB inactive_file:152300kB unevictable:1536kB writepending:692kB present:3129332kB managed:2608996kB mlocked:0kB bounce:0kB free_pcp:30336kB local_pcp:13016kB free_cma:0kB [ 253.033072][ T5727] lowmem_reserve[]: 0 0 0 0 0 [ 253.070703][ T5727] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 253.108874][ T5727] lowmem_reserve[]: 0 0 0 0 0 [ 253.113830][ T5727] Node 1 Normal free:3897868kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:24448kB local_pcp:10196kB free_cma:0kB [ 253.168743][ T5727] lowmem_reserve[]: 0 0 0 0 0 [ 253.187525][ T5750] loop3: detected capacity change from 0 to 64 [ 253.221596][ T5727] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 253.273998][ T5727] Node 0 DMA32: 702*4kB (UM) 542*8kB (UM) 309*16kB (UM) 245*32kB (UME) 83*64kB (UM) 68*128kB (UME) 26*256kB (UM) 9*512kB (M) 6*1024kB (UME) 3*2048kB (UME) 375*4096kB (UM) = 1593496kB [ 253.327139][ T5727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 253.365122][ T5727] Node 1 Normal: 105*4kB (UME) 29*8kB (UME) 26*16kB (UME) 51*32kB (UME) 32*64kB (UE) 15*128kB (UE) 10*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (ME) 948*4096kB (M) = 3897868kB [ 253.384520][ T5727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.411899][ T5727] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 253.534102][ T5727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.607321][ T5727] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 253.660805][ T5727] 51109 total pagecache pages [ 253.665927][ T5727] 0 pages in swap cache [ 253.670243][ T5727] Swap cache stats: add 5475, delete 5475, find 2257/2688 [ 253.721248][ T5727] Free swap = 124428kB [ 253.739473][ T5727] Total swap = 124996kB [ 253.767787][ T5727] 2097051 pages RAM [ 253.782644][ T5727] 0 pages HighMem/MovableOnly [ 253.814932][ T5727] 410815 pages reserved [ 253.819319][ T5727] 0 pages cma reserved [ 253.828048][ T5765] loop3: detected capacity change from 0 to 4096 [ 254.055918][ T5780] binder: 5777:5780 ioctl b101 0 returned -22 [ 255.150159][ T4188] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 255.221854][ T4188] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 256.862862][ T5793] FAULT_INJECTION: forcing a failure. [ 256.862862][ T5793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.971153][ T5793] CPU: 0 PID: 5793 Comm: syz.3.390 Not tainted syzkaller #0 [ 256.978502][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.988689][ T5793] Call Trace: [ 256.991991][ T5793] [ 256.994942][ T5793] dump_stack_lvl+0x168/0x230 [ 256.999654][ T5793] ? show_regs_print_info+0x20/0x20 [ 257.005148][ T5793] ? load_image+0x3b0/0x3b0 [ 257.009814][ T5793] ? __lock_acquire+0x7c60/0x7c60 [ 257.014888][ T5793] should_fail+0x38c/0x4c0 [ 257.019410][ T5793] _copy_from_user+0x2e/0x170 [ 257.024131][ T5793] bpf_test_init+0x136/0x1b0 [ 257.028850][ T5793] bpf_prog_test_run_skb+0x181/0x1180 [ 257.034259][ T5793] ? __fget_files+0x40f/0x480 [ 257.038978][ T5793] ? cpu_online+0x60/0x60 [ 257.043426][ T5793] bpf_prog_test_run+0x31e/0x390 [ 257.048917][ T5793] __sys_bpf+0x535/0x670 [ 257.053211][ T5793] ? bpf_link_show_fdinfo+0x340/0x340 [ 257.058634][ T5793] ? vtime_user_exit+0x2dc/0x400 [ 257.063702][ T5793] __x64_sys_bpf+0x78/0x90 [ 257.068143][ T5793] do_syscall_64+0x4c/0xa0 [ 257.072588][ T5793] ? clear_bhb_loop+0x30/0x80 [ 257.077303][ T5793] ? clear_bhb_loop+0x30/0x80 [ 257.082005][ T5793] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.087938][ T5793] RIP: 0033:0x7f1950cc3be9 [ 257.092552][ T5793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.112295][ T5793] RSP: 002b:00007f194ef2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.121416][ T5793] RAX: ffffffffffffffda RBX: 00007f1950efafa0 RCX: 00007f1950cc3be9 [ 257.129516][ T5793] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 257.137548][ T5793] RBP: 00007f194ef2b090 R08: 0000000000000000 R09: 0000000000000000 [ 257.145574][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.153758][ T5793] R13: 00007f1950efb038 R14: 00007f1950efafa0 R15: 00007fff1bb4f458 [ 257.161908][ T5793] [ 257.249885][ T5800] loop2: detected capacity change from 0 to 64 [ 257.987824][ T5814] loop3: detected capacity change from 0 to 512 [ 258.380266][ T5814] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.396: invalid block [ 258.393842][ T5814] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.396: invalid indirect mapped block 4294967295 (level 1) [ 258.409084][ T5814] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.396: invalid indirect mapped block 4294967295 (level 1) [ 258.424598][ T5814] EXT4-fs (loop3): 2 truncates cleaned up [ 258.430613][ T5814] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.062734][ T5832] binder: 5829:5832 ioctl b101 0 returned -22 [ 259.135183][ T5811] loop1: detected capacity change from 0 to 32768 [ 260.458229][ T5841] FAULT_INJECTION: forcing a failure. [ 260.458229][ T5841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.581237][ T5811] XFS (loop1): Mounting V5 Filesystem [ 260.606793][ T5841] CPU: 0 PID: 5841 Comm: syz.4.405 Not tainted syzkaller #0 [ 260.614143][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.624835][ T5841] Call Trace: [ 260.628152][ T5841] [ 260.631112][ T5841] dump_stack_lvl+0x168/0x230 [ 260.635825][ T5841] ? show_regs_print_info+0x20/0x20 [ 260.641606][ T5841] ? load_image+0x3b0/0x3b0 [ 260.646150][ T5841] ? __lock_acquire+0x7c60/0x7c60 [ 260.651215][ T5841] should_fail+0x38c/0x4c0 [ 260.655668][ T5841] _copy_to_user+0x2e/0x130 [ 260.660209][ T5841] simple_read_from_buffer+0xe3/0x150 [ 260.665618][ T5841] proc_fail_nth_read+0x19a/0x210 [ 260.670681][ T5841] ? proc_fault_inject_write+0x2f0/0x2f0 [ 260.676451][ T5841] ? fsnotify_perm+0x254/0x560 [ 260.681332][ T5841] ? proc_fault_inject_write+0x2f0/0x2f0 [ 260.686998][ T5841] vfs_read+0x2f6/0xcf0 [ 260.691206][ T5841] ? kernel_read+0x1e0/0x1e0 [ 260.695839][ T5841] ? __fget_files+0x40f/0x480 [ 260.700569][ T5841] ? mutex_lock_nested+0x17/0x20 [ 260.705546][ T5841] ? __fdget_pos+0x2bf/0x370 [ 260.710165][ T5841] ? ksys_read+0x71/0x250 [ 260.714531][ T5841] ksys_read+0x14d/0x250 [ 260.718808][ T5841] ? vfs_write+0xd00/0xd00 [ 260.723365][ T5841] ? lockdep_hardirqs_on+0x94/0x140 [ 260.728603][ T5841] do_syscall_64+0x4c/0xa0 [ 260.733059][ T5841] ? clear_bhb_loop+0x30/0x80 [ 260.737806][ T5841] ? clear_bhb_loop+0x30/0x80 [ 260.742535][ T5841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.748651][ T5841] RIP: 0033:0x7f036e9a25fc [ 260.753102][ T5841] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 260.772829][ T5841] RSP: 002b:00007f036cc0b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.781281][ T5841] RAX: ffffffffffffffda RBX: 00007f036ebdafa0 RCX: 00007f036e9a25fc [ 260.789380][ T5841] RDX: 000000000000000f RSI: 00007f036cc0b0a0 RDI: 0000000000000005 [ 260.797393][ T5841] RBP: 00007f036cc0b090 R08: 0000000000000000 R09: 0000000000000000 [ 260.805417][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.813412][ T5841] R13: 00007f036ebdb038 R14: 00007f036ebdafa0 R15: 00007fff803d8df8 [ 260.821777][ T5841] [ 260.860312][ T5811] XFS (loop1): Ending clean mount [ 260.936761][ T5811] XFS (loop1): Quotacheck needed: Please wait. [ 261.114595][ T5811] XFS (loop1): Quotacheck: Done. [ 261.218047][ T4193] XFS (loop1): Unmounting Filesystem [ 261.602851][ T4230] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 262.164028][ T5877] loop1: detected capacity change from 0 to 40427 [ 262.291868][ T5877] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 262.299717][ T5877] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 262.321476][ T5877] F2FS-fs (loop1): invalid crc value [ 262.383606][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.463495][ T5877] F2FS-fs (loop1): Found nat_bits in checkpoint [ 262.536993][ T5877] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 262.544525][ T5877] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 262.699709][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 262.710716][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 262.721955][ T4230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.734952][ T4230] usb 3-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 262.744720][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.779723][ T4230] usb 3-1: config 0 descriptor?? [ 262.857130][ T4230] usb 3-1: MIDIStreaming interface descriptor not found [ 263.150321][ T5893] binder: 5889:5893 ioctl b101 0 returned -22 [ 264.534133][ T4302] usb 3-1: USB disconnect, device number 16 [ 267.544807][ T5932] Can't find ip_set type hash:net,po [ 267.957388][ T5937] loop2: detected capacity change from 0 to 64 [ 268.295384][ T5943] binder: 5940:5943 ioctl 4018620d 0 returned -22 [ 268.492281][ T5946] loop1: detected capacity change from 0 to 512 [ 269.123215][ T5946] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.426: invalid block [ 269.139740][ T5951] binder: 5940:5951 ioctl b101 0 returned -22 [ 269.147820][ T5946] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.426: invalid indirect mapped block 4294967295 (level 1) [ 269.162544][ T5946] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.426: invalid indirect mapped block 4294967295 (level 1) [ 269.189423][ T5946] EXT4-fs (loop1): 2 truncates cleaned up [ 269.195325][ T5946] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 269.781957][ T5967] binder: 5961:5967 ioctl 4018620d 0 returned -22 [ 270.081590][ T5971] binder: 5961:5971 ioctl b101 0 returned -22 [ 270.204341][ T5975] loop3: detected capacity change from 0 to 1024 [ 270.447896][ T5975] EXT4-fs (loop3): inline encryption not supported [ 270.458800][ T5975] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.976382][ T5975] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 271.290877][ T5989] autofs4:pid:5989:autofs_fill_super: called with bogus options [ 271.597843][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.604175][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.974291][ T6005] loop3: detected capacity change from 0 to 40427 [ 273.047455][ T6005] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 273.055451][ T6005] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 273.069450][ T6005] F2FS-fs (loop3): invalid crc value [ 273.159800][ T6005] F2FS-fs (loop3): Found nat_bits in checkpoint [ 273.182535][ T6013] binder: 6011:6013 ioctl 4018620d 0 returned -22 [ 273.308710][ T6021] binder: 6011:6021 ioctl b101 0 returned -22 [ 273.395988][ T6005] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 273.403177][ T6005] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 275.895522][ T4313] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 276.046912][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 276.161990][ T4313] usb 5-1: Using ep0 maxpacket: 32 [ 276.343370][ T6053] loop1: detected capacity change from 0 to 64 [ 276.488257][ T4313] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 276.497767][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.514897][ T4313] usb 5-1: Product: syz [ 276.519956][ T4313] usb 5-1: Manufacturer: syz [ 276.531648][ T4313] usb 5-1: SerialNumber: syz [ 276.553547][ T4313] usb 5-1: config 0 descriptor?? [ 276.586205][ T5205] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 276.846199][ T5205] usb 3-1: device descriptor read/64, error -71 [ 277.239323][ T5205] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 277.372137][ T4313] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 277.561888][ T5205] usb 3-1: device descriptor read/64, error -71 [ 277.711777][ T5205] usb usb3-port1: attempt power cycle [ 277.975991][ T6062] loop1: detected capacity change from 0 to 512 [ 278.081429][ T6062] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.458: invalid indirect mapped block 4294967295 (level 1) [ 278.096547][ T6062] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.458: invalid indirect mapped block 4294967295 (level 1) [ 278.110665][ T4313] gspca_ov534_9: reg_w failed -71 [ 278.116640][ T6062] EXT4-fs (loop1): 2 truncates cleaned up [ 278.122509][ T6062] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 278.342139][ T5205] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 278.459870][ T5205] usb 3-1: device descriptor read/8, error -71 [ 278.641434][ T4313] gspca_ov534_9: Unknown sensor 0000 [ 278.641506][ T4313] ov534_9: probe of 5-1:0.0 failed with error -22 [ 278.876817][ T5205] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 278.983988][ T5205] usb 3-1: device descriptor read/8, error -71 [ 279.121159][ T5205] usb usb3-port1: unable to enumerate USB device [ 279.537505][ T4313] usb 5-1: USB disconnect, device number 5 [ 280.994523][ T6090] FAULT_INJECTION: forcing a failure. [ 280.994523][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 281.086903][ T6090] CPU: 0 PID: 6090 Comm: syz.2.465 Not tainted syzkaller #0 [ 281.094258][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.104355][ T6090] Call Trace: [ 281.107821][ T6090] [ 281.110816][ T6090] dump_stack_lvl+0x168/0x230 [ 281.115533][ T6090] ? show_regs_print_info+0x20/0x20 [ 281.120767][ T6090] ? load_image+0x3b0/0x3b0 [ 281.125394][ T6090] ? __might_sleep+0xf0/0xf0 [ 281.130021][ T6090] ? __lock_acquire+0x7c60/0x7c60 [ 281.135073][ T6090] should_fail+0x38c/0x4c0 [ 281.139505][ T6090] should_failslab+0x5/0x20 [ 281.144027][ T6090] slab_pre_alloc_hook+0x51/0xc0 [ 281.149071][ T6090] ? iget_locked+0x1f8/0x820 [ 281.153672][ T6090] kmem_cache_alloc+0x3d/0x290 [ 281.158457][ T6090] iget_locked+0x1f8/0x820 [ 281.162883][ T6090] ? mark_lock+0x94/0x320 [ 281.167248][ T6090] kernfs_get_inode+0x4b/0x6d0 [ 281.172041][ T6090] cgroup_attach_permissions+0x2bc/0xa90 [ 281.177696][ T6090] __cgroup_procs_write+0x1e4/0x350 [ 281.182921][ T6090] cgroup_procs_write+0x23/0x40 [ 281.187790][ T6090] ? cgroup_procs_next+0xa0/0xa0 [ 281.192827][ T6090] cgroup_file_write+0x2f7/0x630 [ 281.197877][ T6090] ? read_lock_is_recursive+0x10/0x10 [ 281.203287][ T6090] ? cgroup_seqfile_stop+0xd0/0xd0 [ 281.208515][ T6090] ? cgroup_seqfile_stop+0xd0/0xd0 [ 281.213637][ T6090] kernfs_fop_write_iter+0x379/0x4c0 [ 281.218939][ T6090] vfs_write+0x712/0xd00 [ 281.223192][ T6090] ? file_end_write+0x250/0x250 [ 281.228153][ T6090] ? __fget_files+0x40f/0x480 [ 281.232846][ T6090] ? mutex_lock_nested+0x17/0x20 [ 281.237818][ T6090] ? __fdget_pos+0x2bf/0x370 [ 281.242413][ T6090] ? ksys_write+0x71/0x250 [ 281.246967][ T6090] ksys_write+0x14d/0x250 [ 281.251504][ T6090] ? __ia32_sys_read+0x80/0x80 [ 281.256319][ T6090] ? lockdep_hardirqs_on+0x94/0x140 [ 281.261538][ T6090] do_syscall_64+0x4c/0xa0 [ 281.265965][ T6090] ? clear_bhb_loop+0x30/0x80 [ 281.270653][ T6090] ? clear_bhb_loop+0x30/0x80 [ 281.275351][ T6090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.281250][ T6090] RIP: 0033:0x7f5aeadbabe9 [ 281.285676][ T6090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.305286][ T6090] RSP: 002b:00007f5ae9022038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.313711][ T6090] RAX: ffffffffffffffda RBX: 00007f5aeaff1fa0 RCX: 00007f5aeadbabe9 [ 281.321707][ T6090] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000006 [ 281.329686][ T6090] RBP: 00007f5ae9022090 R08: 0000000000000000 R09: 0000000000000000 [ 281.337659][ T6090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.345648][ T6090] R13: 00007f5aeaff2038 R14: 00007f5aeaff1fa0 R15: 00007ffe56ad9128 [ 281.353646][ T6090] [ 283.848811][ T6106] Can't find ip_set type hash:net,por [ 284.102590][ T6109] loop3: detected capacity change from 0 to 512 [ 284.405152][ T6109] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.469: invalid indirect mapped block 4294967295 (level 1) [ 284.421738][ T6109] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.469: invalid indirect mapped block 4294967295 (level 1) [ 284.438503][ T6109] EXT4-fs (loop3): 2 truncates cleaned up [ 284.444056][ T6119] loop2: detected capacity change from 0 to 512 [ 284.444485][ T6109] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.634097][ T6119] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.471: invalid indirect mapped block 4294967295 (level 1) [ 284.648921][ T6119] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.471: invalid indirect mapped block 4294967295 (level 1) [ 284.663765][ T6119] EXT4-fs (loop2): 2 truncates cleaned up [ 284.669573][ T6119] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.863533][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 284.882968][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.905420][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.944982][ T6135] loop3: detected capacity change from 0 to 2048 [ 285.035681][ T6135] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.140745][ T6135] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.242598][ T6135] syz.3.475 (6135) used greatest stack depth: 20776 bytes left [ 285.306956][ T6140] loop2: detected capacity change from 0 to 512 [ 285.333187][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.353097][ T6140] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 285.372222][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 285.422927][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 285.424233][ T6140] EXT4-fs (loop2): 1 truncate cleaned up [ 285.456020][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.486206][ T13] usb 5-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 285.503937][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.533383][ T13] usb 5-1: config 0 descriptor?? [ 285.581874][ T13] usb 5-1: MIDIStreaming interface descriptor not found [ 285.586439][ T6140] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 286.069699][ T13] usb 5-1: USB disconnect, device number 6 [ 286.114689][ T4197] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 286.763115][ T6156] syz.4.481 uses obsolete (PF_INET,SOCK_PACKET) [ 287.057287][ T6158] loop3: detected capacity change from 0 to 2048 [ 287.698771][ T6158] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.742245][ T6158] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.097040][ T6176] loop3: detected capacity change from 0 to 512 [ 288.175561][ T6176] FAT-fs (loop3): Unrecognized mount option "sys_iôoutable" or missing value [ 288.403844][ T239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.583116][ T239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.593741][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 288.832575][ T6172] loop1: detected capacity change from 0 to 512 [ 288.853327][ T239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.140925][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 289.269169][ T7] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 289.316612][ T6172] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.487: invalid indirect mapped block 4294967295 (level 1) [ 289.331730][ T6172] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.487: invalid indirect mapped block 4294967295 (level 1) [ 289.347359][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.369275][ T6172] EXT4-fs (loop1): 2 truncates cleaned up [ 289.375317][ T6172] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 289.481772][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 289.492782][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.532273][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 289.565797][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 289.672972][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.697398][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 289.910632][ T7] usb 4-1: SerialNumber: syz [ 289.934715][ T239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.962775][ T7] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 289.963524][ T6203] FAULT_INJECTION: forcing a failure. [ 289.963524][ T6203] name failslab, interval 1, probability 0, space 0, times 0 [ 290.130579][ T6205] Can't find ip_set type hash:net,por [ 290.165077][ T6203] CPU: 1 PID: 6203 Comm: syz.0.498 Not tainted syzkaller #0 [ 290.173130][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.183212][ T6203] Call Trace: [ 290.186613][ T6203] [ 290.189578][ T6203] dump_stack_lvl+0x168/0x230 [ 290.194286][ T6203] ? show_regs_print_info+0x20/0x20 [ 290.199512][ T6203] ? load_image+0x3b0/0x3b0 [ 290.204147][ T6203] ? __might_sleep+0xf0/0xf0 [ 290.208789][ T6203] ? __lock_acquire+0x7c60/0x7c60 [ 290.213850][ T6203] should_fail+0x38c/0x4c0 [ 290.218471][ T6203] should_failslab+0x5/0x20 [ 290.223001][ T6203] slab_pre_alloc_hook+0x51/0xc0 [ 290.227963][ T6203] ? __alloc_file+0x25/0x240 [ 290.232632][ T6203] kmem_cache_alloc+0x3d/0x290 [ 290.237523][ T6203] ? __lock_acquire+0x12d9/0x7c60 [ 290.242569][ T6203] __alloc_file+0x25/0x240 [ 290.247010][ T6203] alloc_empty_file+0x90/0x180 [ 290.251792][ T6203] path_openat+0xfc/0x2f30 [ 290.256248][ T6203] ? verify_lock_unused+0x140/0x140 [ 290.261567][ T6203] ? __kasan_slab_alloc+0xb3/0xd0 [ 290.266623][ T6203] ? __kasan_slab_alloc+0x9c/0xd0 [ 290.271855][ T6203] ? slab_post_alloc_hook+0x4c/0x380 [ 290.277164][ T6203] ? verify_lock_unused+0x140/0x140 [ 290.282605][ T6203] ? __x64_sys_open+0x11b/0x140 [ 290.287573][ T6203] ? do_syscall_64+0x4c/0xa0 [ 290.292193][ T6203] ? do_filp_open+0x3e0/0x3e0 [ 290.297082][ T6203] do_filp_open+0x1b3/0x3e0 [ 290.301606][ T6203] ? vfs_tmpfile+0x300/0x300 [ 290.306243][ T6203] ? _raw_spin_unlock+0x24/0x40 [ 290.311114][ T6203] ? alloc_fd+0x598/0x630 [ 290.315473][ T6203] do_sys_openat2+0x142/0x4a0 [ 290.320181][ T6203] ? do_sys_open+0xe0/0xe0 [ 290.324620][ T6203] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 290.330632][ T6203] ? lock_chain_count+0x20/0x20 [ 290.335610][ T6203] ? vtime_user_exit+0x2dc/0x400 [ 290.340684][ T6203] __x64_sys_open+0x11b/0x140 [ 290.345578][ T6203] do_syscall_64+0x4c/0xa0 [ 290.350113][ T6203] ? clear_bhb_loop+0x30/0x80 [ 290.354823][ T6203] ? clear_bhb_loop+0x30/0x80 [ 290.359540][ T6203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 290.365458][ T6203] RIP: 0033:0x7ff1ac8ddbe9 [ 290.369892][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.389518][ T6203] RSP: 002b:00007ff1aab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 290.398047][ T6203] RAX: ffffffffffffffda RBX: 00007ff1acb14fa0 RCX: 00007ff1ac8ddbe9 [ 290.406048][ T6203] RDX: 0000000000000008 RSI: 00000000000200c0 RDI: 00002000000004c0 [ 290.414052][ T6203] RBP: 00007ff1aab45090 R08: 0000000000000000 R09: 0000000000000000 [ 290.422042][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.430028][ T6203] R13: 00007ff1acb15038 R14: 00007ff1acb14fa0 R15: 00007ffcb4bbe558 [ 290.438139][ T6203] [ 290.523767][ T7] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 290.862732][ T6176] loop3: detected capacity change from 0 to 4096 [ 291.049289][ T6176] NILFS (loop3): unrecognized mount option "y7N·}ð" [ 291.318787][ T5205] usb 4-1: USB disconnect, device number 13 [ 291.391351][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 292.322287][ T6187] chnl_net:caif_netlink_parms(): no params data found [ 293.075765][ T6248] FAULT_INJECTION: forcing a failure. [ 293.075765][ T6248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.109521][ T6248] CPU: 0 PID: 6248 Comm: syz.1.505 Not tainted syzkaller #0 [ 293.116865][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.127034][ T6248] Call Trace: [ 293.130337][ T6248] [ 293.133294][ T6248] dump_stack_lvl+0x168/0x230 [ 293.138019][ T6248] ? show_regs_print_info+0x20/0x20 [ 293.143269][ T6248] ? load_image+0x3b0/0x3b0 [ 293.147847][ T6248] ? __lock_acquire+0x7c60/0x7c60 [ 293.152904][ T6248] ? vfs_write+0x84d/0xd00 [ 293.157358][ T6248] should_fail+0x38c/0x4c0 [ 293.161822][ T6248] _copy_from_user+0x2e/0x170 [ 293.166568][ T6248] __sys_bpf+0x21b/0x670 [ 293.170844][ T6248] ? bpf_link_show_fdinfo+0x340/0x340 [ 293.176354][ T6248] ? vtime_user_exit+0x2dc/0x400 [ 293.181337][ T6248] __x64_sys_bpf+0x78/0x90 [ 293.185793][ T6248] do_syscall_64+0x4c/0xa0 [ 293.190237][ T6248] ? clear_bhb_loop+0x30/0x80 [ 293.194966][ T6248] ? clear_bhb_loop+0x30/0x80 [ 293.199762][ T6248] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.205687][ T6248] RIP: 0033:0x7f16d95e4be9 [ 293.210134][ T6248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.230163][ T6248] RSP: 002b:00007f16d784c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 293.238643][ T6248] RAX: ffffffffffffffda RBX: 00007f16d981bfa0 RCX: 00007f16d95e4be9 [ 293.246736][ T6248] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 293.254739][ T6248] RBP: 00007f16d784c090 R08: 0000000000000000 R09: 0000000000000000 [ 293.262929][ T6248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.270910][ T6248] R13: 00007f16d981c038 R14: 00007f16d981bfa0 R15: 00007ffead1628e8 [ 293.278926][ T6248] [ 293.522019][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.541536][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.600808][ T6187] device bridge_slave_0 entered promiscuous mode [ 293.771843][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.779680][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 293.796257][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.570837][ T6187] device bridge_slave_1 entered promiscuous mode [ 295.770623][ T6283] loop1: detected capacity change from 0 to 128 [ 295.815275][ T6283] befs: Unrecognized mount option "000000000000000000000xffffffffffffffff" or missing value [ 295.835984][ T6187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.851823][ T6285] snd_dummy snd_dummy.0: control 1:0:1073741821:syz1:0 is already present [ 296.002021][ T6187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.006597][ T4310] Bluetooth: hci4: command 0x040f tx timeout [ 296.035617][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 296.748737][ T6294] FAULT_INJECTION: forcing a failure. [ 296.748737][ T6294] name failslab, interval 1, probability 0, space 0, times 0 [ 296.761564][ T6294] CPU: 1 PID: 6294 Comm: syz.0.519 Not tainted syzkaller #0 [ 296.768887][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.778963][ T6294] Call Trace: [ 296.782259][ T6294] [ 296.785207][ T6294] dump_stack_lvl+0x168/0x230 [ 296.789920][ T6294] ? show_regs_print_info+0x20/0x20 [ 296.795139][ T6294] ? load_image+0x3b0/0x3b0 [ 296.799669][ T6294] ? __lock_acquire+0x7c60/0x7c60 [ 296.804844][ T6294] ? rcu_lock_release+0x5/0x20 [ 296.809634][ T6294] should_fail+0x38c/0x4c0 [ 296.814169][ T6294] should_failslab+0x5/0x20 [ 296.818691][ T6294] slab_pre_alloc_hook+0x51/0xc0 [ 296.823649][ T6294] kmem_cache_alloc_node_trace+0x4a/0x300 [ 296.829455][ T6294] ? __get_vm_area_node+0x119/0x2d0 [ 296.834702][ T6294] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 296.840547][ T6294] __get_vm_area_node+0x119/0x2d0 [ 296.845627][ T6294] __vmalloc_node_range+0xef/0x8b0 [ 296.850765][ T6294] ? kvm_dev_ioctl+0x160/0x2040 [ 296.855659][ T6294] ? hardware_enable_nolock+0x130/0x130 [ 296.861230][ T6294] ? kvm_dev_ioctl+0x160/0x2040 [ 296.866135][ T6294] __vmalloc+0x76/0x80 [ 296.870231][ T6294] ? kvm_dev_ioctl+0x160/0x2040 [ 296.875112][ T6294] kvm_dev_ioctl+0x160/0x2040 [ 296.879828][ T6294] ? hardware_enable_nolock+0x130/0x130 [ 296.885408][ T6294] ? bpf_lsm_file_ioctl+0x5/0x10 [ 296.890368][ T6294] ? security_file_ioctl+0x7c/0xa0 [ 296.895504][ T6294] ? hardware_enable_nolock+0x130/0x130 [ 296.901074][ T6294] __se_sys_ioctl+0xfa/0x170 [ 296.905695][ T6294] do_syscall_64+0x4c/0xa0 [ 296.910134][ T6294] ? clear_bhb_loop+0x30/0x80 [ 296.914924][ T6294] ? clear_bhb_loop+0x30/0x80 [ 296.919628][ T6294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.925577][ T6294] RIP: 0033:0x7ff1ac8ddbe9 [ 296.930019][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.949736][ T6294] RSP: 002b:00007ff1aab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.958289][ T6294] RAX: ffffffffffffffda RBX: 00007ff1acb14fa0 RCX: 00007ff1ac8ddbe9 [ 296.966304][ T6294] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 296.974532][ T6294] RBP: 00007ff1aab45090 R08: 0000000000000000 R09: 0000000000000000 [ 296.982659][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.990664][ T6294] R13: 00007ff1acb15038 R14: 00007ff1acb14fa0 R15: 00007ffcb4bbe558 [ 296.998782][ T6294] [ 297.003352][ T6294] warn_alloc: 1 callbacks suppressed [ 297.003368][ T6294] syz.0.519: vmalloc error: size 47408, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 297.024873][ T6294] CPU: 1 PID: 6294 Comm: syz.0.519 Not tainted syzkaller #0 [ 297.032186][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.042274][ T6294] Call Trace: [ 297.045755][ T6294] [ 297.048788][ T6294] dump_stack_lvl+0x168/0x230 [ 297.053579][ T6294] ? rcu_lock_release+0x5/0x20 [ 297.058387][ T6294] ? show_regs_print_info+0x20/0x20 [ 297.063616][ T6294] ? load_image+0x3b0/0x3b0 [ 297.068162][ T6294] warn_alloc+0x20e/0x2f0 [ 297.072521][ T6294] ? zone_watermark_ok_safe+0x240/0x240 [ 297.078094][ T6294] ? rcu_is_watching+0x11/0xa0 [ 297.082975][ T6294] ? __get_vm_area_node+0x119/0x2d0 [ 297.088386][ T6294] ? __get_vm_area_node+0x2b5/0x2d0 [ 297.093714][ T6294] __vmalloc_node_range+0x2b1/0x8b0 [ 297.098993][ T6294] ? hardware_enable_nolock+0x130/0x130 [ 297.104789][ T6294] ? kvm_dev_ioctl+0x160/0x2040 [ 297.109988][ T6294] __vmalloc+0x76/0x80 [ 297.114099][ T6294] ? kvm_dev_ioctl+0x160/0x2040 [ 297.118998][ T6294] kvm_dev_ioctl+0x160/0x2040 [ 297.123736][ T6294] ? hardware_enable_nolock+0x130/0x130 [ 297.129326][ T6294] ? bpf_lsm_file_ioctl+0x5/0x10 [ 297.134393][ T6294] ? security_file_ioctl+0x7c/0xa0 [ 297.139538][ T6294] ? hardware_enable_nolock+0x130/0x130 [ 297.145115][ T6294] __se_sys_ioctl+0xfa/0x170 [ 297.149745][ T6294] do_syscall_64+0x4c/0xa0 [ 297.154192][ T6294] ? clear_bhb_loop+0x30/0x80 [ 297.158895][ T6294] ? clear_bhb_loop+0x30/0x80 [ 297.163606][ T6294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.169641][ T6294] RIP: 0033:0x7ff1ac8ddbe9 [ 297.174203][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.194095][ T6294] RSP: 002b:00007ff1aab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.202534][ T6294] RAX: ffffffffffffffda RBX: 00007ff1acb14fa0 RCX: 00007ff1ac8ddbe9 [ 297.210530][ T6294] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 297.218530][ T6294] RBP: 00007ff1aab45090 R08: 0000000000000000 R09: 0000000000000000 [ 297.226520][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.234509][ T6294] R13: 00007ff1acb15038 R14: 00007ff1acb14fa0 R15: 00007ffcb4bbe558 [ 297.242595][ T6294] [ 297.246539][ T6294] Mem-Info: [ 297.249683][ T6294] active_anon:1356 inactive_anon:9827 isolated_anon:0 [ 297.249683][ T6294] active_file:7459 inactive_file:37896 isolated_file:0 [ 297.249683][ T6294] unevictable:768 dirty:1281 writeback:0 [ 297.249683][ T6294] slab_reclaimable:20979 slab_unreclaimable:95141 [ 297.249683][ T6294] mapped:35478 shmem:6557 pagetables:656 bounce:0 [ 297.249683][ T6294] kernel_misc_reclaimable:0 [ 297.249683][ T6294] free:1376580 free_pcp:12617 free_cma:0 [ 297.291875][ T6294] Node 0 active_anon:5392kB inactive_anon:38900kB active_file:29636kB inactive_file:151584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141912kB dirty:5124kB writeback:0kB shmem:24152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12004kB pagetables:2624kB all_unreclaimable? no [ 297.323281][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.329965][ T6294] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 297.359697][ T6294] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.386131][ T6294] lowmem_reserve[]: 0 2541 2542 2542 2542 [ 297.391999][ T6294] Node 0 DMA32 free:1588612kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:5392kB inactive_anon:42600kB active_file:29636kB inactive_file:151584kB unevictable:1536kB writepending:5124kB present:3129332kB managed:2608996kB mlocked:0kB bounce:0kB free_pcp:26300kB local_pcp:21460kB free_cma:0kB [ 297.422098][ T6294] lowmem_reserve[]: 0 0 0 0 0 [ 297.426946][ T6294] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.453689][ T6294] lowmem_reserve[]: 0 0 0 0 0 [ 297.458543][ T6294] Node 1 Normal free:3897868kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:24448kB local_pcp:12204kB free_cma:0kB [ 297.487598][ T6294] lowmem_reserve[]: 0 0 0 0 0 [ 297.492349][ T6294] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 297.505091][ T6294] Node 0 DMA32: 261*4kB (UME) 57*8kB (UE) 23*16kB (UE) 16*32kB (UME) 44*64kB (UME) 83*128kB (UME) 38*256kB (UME) 10*512kB (UME) 7*1024kB (UME) 5*2048kB (UM) 375*4096kB (UM) = 1584076kB [ 297.523670][ T6294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 297.535368][ T6294] Node 1 Normal: 105*4kB (UME) 29*8kB (UME) 26*16kB (UME) 51*32kB (UME) 32*64kB (UE) 15*128kB (UE) 10*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (ME) 948*4096kB (M) = 3897868kB [ 297.553921][ T6294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.563909][ T6294] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.573456][ T6294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.583157][ T6294] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.592622][ T6294] 54761 total pagecache pages [ 297.597477][ T6294] 0 pages in swap cache [ 297.601783][ T6294] Swap cache stats: add 9391, delete 9391, find 3874/4631 [ 297.609136][ T6294] Free swap = 124656kB [ 297.613310][ T6294] Total swap = 124996kB [ 297.617622][ T6294] 2097051 pages RAM [ 297.621466][ T6294] 0 pages HighMem/MovableOnly [ 297.626207][ T6294] 410815 pages reserved [ 297.630379][ T6294] 0 pages cma reserved [ 298.846028][ T5466] Bluetooth: hci4: command 0x0419 tx timeout [ 299.067413][ T6187] team0: Port device team_slave_0 added [ 299.507126][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 299.924147][ T25] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 299.996244][ T25] usb 5-1: can't read configurations, error -22 [ 300.209493][ T6187] team0: Port device team_slave_1 added [ 300.297980][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 300.595199][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.815054][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.841141][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.483353][ T6358] loop3: detected capacity change from 0 to 512 [ 303.334252][ T25] usb 5-1: device descriptor read/all, error -71 [ 303.375960][ T6187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.387943][ T25] usb usb5-port1: attempt power cycle [ 303.393912][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.401102][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.420699][ T6358] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.535: invalid indirect mapped block 4294967295 (level 1) [ 303.427364][ T6187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.455266][ T6358] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.535: invalid indirect mapped block 4294967295 (level 1) [ 303.471097][ T6358] EXT4-fs (loop3): 2 truncates cleaned up [ 303.476983][ T6358] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 304.041017][ T6392] FAULT_INJECTION: forcing a failure. [ 304.041017][ T6392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.054367][ T6392] CPU: 1 PID: 6392 Comm: syz.4.543 Not tainted syzkaller #0 [ 304.061867][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.071946][ T6392] Call Trace: [ 304.075254][ T6392] [ 304.078204][ T6392] dump_stack_lvl+0x168/0x230 [ 304.082916][ T6392] ? show_regs_print_info+0x20/0x20 [ 304.088138][ T6392] ? load_image+0x3b0/0x3b0 [ 304.092768][ T6392] ? __lock_acquire+0x7c60/0x7c60 [ 304.097821][ T6392] ? drm_dev_dbg+0x1c0/0x1c0 [ 304.102428][ T6392] ? finish_task_switch+0x12f/0x640 [ 304.107649][ T6392] should_fail+0x38c/0x4c0 [ 304.112096][ T6392] _copy_from_user+0x2e/0x170 [ 304.117024][ T6392] drm_ioctl+0x53c/0x990 [ 304.121318][ T6392] ? drm_mode_create_dumb+0x280/0x280 [ 304.126719][ T6392] ? drm_ioctl_kernel+0x4b0/0x4b0 [ 304.131780][ T6392] ? bpf_lsm_file_ioctl+0x5/0x10 [ 304.136892][ T6392] ? security_file_ioctl+0x7c/0xa0 [ 304.142048][ T6392] ? drm_ioctl_kernel+0x4b0/0x4b0 [ 304.147163][ T6392] __se_sys_ioctl+0xfa/0x170 [ 304.151791][ T6392] do_syscall_64+0x4c/0xa0 [ 304.156235][ T6392] ? clear_bhb_loop+0x30/0x80 [ 304.160931][ T6392] ? clear_bhb_loop+0x30/0x80 [ 304.165761][ T6392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.171683][ T6392] RIP: 0033:0x7f036e9a3be9 [ 304.176211][ T6392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.195852][ T6392] RSP: 002b:00007f036cbea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.204290][ T6392] RAX: ffffffffffffffda RBX: 00007f036ebdb090 RCX: 00007f036e9a3be9 [ 304.212381][ T6392] RDX: 0000200000000200 RSI: 00000000c02064b2 RDI: 0000000000000007 [ 304.220373][ T6392] RBP: 00007f036cbea090 R08: 0000000000000000 R09: 0000000000000000 [ 304.228362][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.236356][ T6392] R13: 00007f036ebdb128 R14: 00007f036ebdb090 R15: 00007fff803d8df8 [ 304.244364][ T6392] [ 304.916773][ T6187] device hsr_slave_0 entered promiscuous mode [ 304.934806][ T6187] device hsr_slave_1 entered promiscuous mode [ 304.944228][ T6187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.963867][ T6187] Cannot create hsr debugfs directory [ 304.969655][ T6398] netlink: 'syz.0.545': attribute type 1 has an invalid length. [ 305.060293][ T6385] loop3: detected capacity change from 0 to 32768 [ 305.114576][ T6385] (syz.3.541,6385,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.157804][ T6385] (syz.3.541,6385,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.236174][ T6400] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 305.332679][ T6398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.426536][ T4290] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 306.290437][ T4313] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 306.352711][ T6385] (syz.3.541,6385,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 306.478590][ T6385] JBD2: Ignoring recovery information on journal [ 306.488201][ T4290] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 306.592512][ T6385] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 306.702162][ T6414] loop1: detected capacity change from 0 to 40427 [ 306.768207][ T6414] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 306.776361][ T6414] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 306.787432][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 306.818409][ T6414] F2FS-fs (loop1): invalid crc value [ 306.839645][ T4313] usb 1-1: Using ep0 maxpacket: 8 [ 306.862516][ T6414] F2FS-fs (loop1): Found nat_bits in checkpoint [ 306.868892][ T239] device hsr_slave_0 left promiscuous mode [ 306.876265][ T6385] (syz.3.541,6385,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 306.913422][ T239] device hsr_slave_1 left promiscuous mode [ 306.921653][ T6414] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 306.929008][ T6414] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 306.943854][ T239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.945513][ T6385] (syz.3.541,6385,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 307.060523][ T6385] (syz.3.541,6385,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 307.103479][ T239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.117551][ T6385] (syz.3.541,6385,1):ocfs2_quota_read:201 ERROR: status = -5 [ 307.151591][ T6385] __quota_error: 6 callbacks suppressed [ 307.151611][ T6385] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5 [ 307.160476][ T4313] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 307.172897][ T239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.181656][ T4313] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 307.181683][ T4313] usb 1-1: config 6 has no interface number 0 [ 307.181717][ T4313] usb 1-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xAA, skipping [ 307.181743][ T4313] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.203530][ T6385] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 307.324387][ T6385] (syz.3.541,6385,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 307.356929][ T6385] (syz.3.541,6385,0):ocfs2_mknod:314 ERROR: status = -5 [ 307.546185][ T4313] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 307.584208][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.597713][ T239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.624400][ T6385] (syz.3.541,6385,0):ocfs2_mknod:502 ERROR: status = -5 [ 307.670978][ T4313] usb 1-1: Product: syz [ 307.682837][ T6385] (syz.3.541,6385,0):ocfs2_mkdir:659 ERROR: status = -5 [ 307.710472][ T4313] usb 1-1: Manufacturer: syz [ 307.752034][ T4313] usb 1-1: SerialNumber: syz [ 307.931817][ T4313] hso 1-1:6.2: Failed to find INT IN ep [ 307.984990][ T239] device bridge_slave_1 left promiscuous mode [ 307.993186][ T239] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.078675][ T239] device bridge_slave_0 left promiscuous mode [ 308.111581][ T239] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.147249][ T4269] usb 1-1: USB disconnect, device number 11 [ 308.312185][ T239] device veth1_macvtap left promiscuous mode [ 308.337783][ T239] device veth0_macvtap left promiscuous mode [ 308.344121][ T239] device veth1_vlan left promiscuous mode [ 308.372080][ T239] device veth0_vlan left promiscuous mode [ 308.731878][ T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 309.193339][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 309.263231][ T6447] loop1: detected capacity change from 0 to 512 [ 309.492261][ T6447] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.550: invalid indirect mapped block 4294967295 (level 1) [ 309.508991][ T6447] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.550: invalid indirect mapped block 4294967295 (level 1) [ 309.527517][ T6447] EXT4-fs (loop1): 2 truncates cleaned up [ 309.533349][ T6447] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 309.993763][ T239] team0 (unregistering): Port device team_slave_1 removed [ 310.044375][ T6451] kvm [6450]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x0 [ 310.055246][ T239] team0 (unregistering): Port device team_slave_0 removed [ 310.169551][ T239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.217049][ T239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.534180][ T239] bond0 (unregistering): Released all slaves Stopping sshd: stopped /usr/sbin/sshd (pid 3953) OK Stopping crond: [ 311.714098][ T6454] loop1: detected capacity change from 0 to 32768 [ 311.790607][ T6473] FAULT_INJECTION: forcing a failure. [ 311.790607][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 311.879667][ T6473] CPU: 0 PID: 6473 Comm: syz.0.560 Not tainted syzkaller #0 [ 311.887100][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.897181][ T6473] Call Trace: [ 311.900542][ T6473] [ 311.903492][ T6473] dump_stack_lvl+0x168/0x230 [ 311.908200][ T6473] ? show_regs_print_info+0x20/0x20 [ 311.913426][ T6473] ? load_image+0x3b0/0x3b0 [ 311.917964][ T6473] ? __might_sleep+0xf0/0xf0 [ 311.922576][ T6473] ? __lock_acquire+0x7c60/0x7c60 [ 311.927629][ T6473] should_fail+0x38c/0x4c0 [ 311.932215][ T6473] should_failslab+0x5/0x20 [ 311.936762][ T6473] slab_pre_alloc_hook+0x51/0xc0 [ 311.942172][ T6473] ? kvm_mmu_topup_memory_cache+0xde/0x200 [ 311.948018][ T6473] kmem_cache_alloc+0x3d/0x290 [ 311.952824][ T6473] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 311.958840][ T6473] kvm_mmu_topup_memory_cache+0xde/0x200 [ 311.964521][ T6473] kvm_mmu_load+0x88/0x1b90 [ 311.969154][ T6473] ? kvm_apic_accept_events+0x53a/0x550 [ 311.974753][ T6473] ? lock_chain_count+0x20/0x20 [ 311.979641][ T6473] ? kvm_apic_has_interrupt+0x729/0x740 [ 311.985225][ T6473] ? kvm_lapic_enable_pv_eoi+0x140/0x140 [ 311.990911][ T6473] vcpu_enter_guest+0x61b3/0x70e0 [ 311.995998][ T6473] ? local_bh_enable+0x20/0x20 [ 312.000922][ T6473] ? 0xffffffffa002e000 [ 312.005109][ T6473] ? is_bpf_text_address+0x254/0x270 [ 312.010536][ T6473] ? __kernel_text_address+0x9a/0x100 [ 312.015982][ T6473] ? mark_lock+0x94/0x320 [ 312.020449][ T6473] ? __lock_acquire+0x13ad/0x7c60 [ 312.025506][ T6473] ? kfree+0xef/0x2a0 [ 312.029533][ T6473] ? mark_lock+0x94/0x320 [ 312.033981][ T6473] ? __lock_acquire+0x12d9/0x7c60 [ 312.039519][ T6473] ? kasan_set_track+0x62/0x70 [ 312.044503][ T6473] ? kasan_set_track+0x4b/0x70 [ 312.049421][ T6473] ? __lock_acquire+0x12d9/0x7c60 [ 312.054747][ T6473] ? verify_lock_unused+0x140/0x140 [ 312.061329][ T6473] ? vmx_vcpu_load_vmcs+0x484/0x780 [ 312.066613][ T6473] ? mark_lock+0x94/0x320 [ 312.071076][ T6473] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 312.077112][ T6473] ? __local_bh_enable_ip+0x12a/0x1b0 [ 312.082622][ T6473] ? read_lock_is_recursive+0x10/0x10 [ 312.088034][ T6473] ? rcu_is_watching+0x11/0xa0 [ 312.093491][ T6473] kvm_arch_vcpu_ioctl_run+0xdea/0x1f40 [ 312.099097][ T6473] kvm_vcpu_ioctl+0x887/0xb80 [ 312.103816][ T6473] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 312.109508][ T6473] ? bpf_lsm_file_ioctl+0x5/0x10 [ 312.114489][ T6473] ? security_file_ioctl+0x7c/0xa0 [ 312.119630][ T6473] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 312.125307][ T6473] __se_sys_ioctl+0xfa/0x170 [ 312.130024][ T6473] do_syscall_64+0x4c/0xa0 [ 312.134464][ T6473] ? clear_bhb_loop+0x30/0x80 [ 312.139171][ T6473] ? clear_bhb_loop+0x30/0x80 [ 312.143876][ T6473] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.149814][ T6473] RIP: 0033:0x7ff1ac8ddbe9 [ 312.154269][ T6473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.173907][ T6473] RSP: 002b:00007ff1aab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.182551][ T6473] RAX: ffffffffffffffda RBX: 00007ff1acb14fa0 RCX: 00007ff1ac8ddbe9 [ 312.190594][ T6473] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 312.198609][ T6473] RBP: 00007ff1aab45090 R08: 0000000000000000 R09: 0000000000000000 [ 312.206802][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.215209][ T6473] R13: 00007ff1acb15038 R14: 00007ff1acb14fa0 R15: 00007ffcb4bbe558 [ 312.223236][ T6473] stopped /usr/sbin/crond (pid 3932) OK [ 313.050463][ T6187] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.254301][ T6187] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 313.280125][ T6187] netdevsim netdevsim5 netdevsim2: renamed from eth2 Stopping dhcpcd... [ 313.405666][ T6187] netdevsim netdevsim5 netdevsim3: renamed from eth3 stopped /sbin/dhcpcd (pid 3853) [ 313.712854][ T6470] loop3: detected capacity change from 0 to 32768 [ 313.848265][ T6470] jfs: Unrecognized mount option """ or missing value [ 314.997513][ T6187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.073443][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.120400][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.203021][ T6187] 8021q: adding VLAN 0 to HW filter on device team0 Stopping network: [ 315.337311][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.363637][ T6532] loop3: detected capacity change from 0 to 16 [ 315.393115][ T6534] loop1: detected capacity change from 0 to 512 [ 315.433950][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.676868][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.684044][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.097645][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.201950][ T6532] erofs: (device loop3): mounted with root inode @ nid 36. [ 316.324328][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.334818][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.353777][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.360936][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.743379][ T6534] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.565: invalid indirect mapped block 4294967295 (level 1) [ 316.768382][ T6534] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.565: invalid indirect mapped block 4294967295 (level 1) [ 316.788300][ T6534] EXT4-fs (loop1): 2 truncates cleaned up [ 316.794196][ T6534] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 317.155069][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 317.307098][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.379942][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.415142][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.473680][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.534428][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.744079][ T6187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.848361][ T6187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.113243][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.140542][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.222579][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.271898][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.297890][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.317945][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.498815][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 319.511556][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 319.627144][ T6592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.577'. [ 319.726369][ T6591] FAULT_INJECTION: forcing a failure. [ 319.726369][ T6591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.752410][ T6591] CPU: 1 PID: 6591 Comm: syz.3.576 Not tainted syzkaller #0 [ 319.759763][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.769934][ T6591] Call Trace: [ 319.773235][ T6591] [ 319.776180][ T6591] dump_stack_lvl+0x168/0x230 [ 319.781000][ T6591] ? show_regs_print_info+0x20/0x20 [ 319.786237][ T6591] ? load_image+0x3b0/0x3b0 [ 319.790772][ T6591] ? __lock_acquire+0x7c60/0x7c60 [ 319.795829][ T6591] should_fail+0x38c/0x4c0 [ 319.800364][ T6591] _copy_to_user+0x2e/0x130 [ 319.804881][ T6591] simple_read_from_buffer+0xe3/0x150 [ 319.810270][ T6591] proc_fail_nth_read+0x19a/0x210 [ 319.815311][ T6591] ? proc_fault_inject_write+0x2f0/0x2f0 [ 319.820962][ T6591] ? fsnotify_perm+0x254/0x560 [ 319.825734][ T6591] ? proc_fault_inject_write+0x2f0/0x2f0 [ 319.831458][ T6591] vfs_read+0x2f6/0xcf0 [ 319.835627][ T6591] ? kernel_read+0x1e0/0x1e0 [ 319.840260][ T6591] ? __fget_files+0x40f/0x480 [ 319.844948][ T6591] ? mutex_lock_nested+0x17/0x20 [ 319.849892][ T6591] ? __fdget_pos+0x2bf/0x370 [ 319.854486][ T6591] ? ksys_read+0x71/0x250 [ 319.858818][ T6591] ksys_read+0x14d/0x250 [ 319.863076][ T6591] ? vfs_write+0xd00/0xd00 [ 319.867499][ T6591] ? lockdep_hardirqs_on+0x94/0x140 [ 319.872713][ T6591] do_syscall_64+0x4c/0xa0 [ 319.877154][ T6591] ? clear_bhb_loop+0x30/0x80 [ 319.881846][ T6591] ? clear_bhb_loop+0x30/0x80 [ 319.886538][ T6591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.892437][ T6591] RIP: 0033:0x7f1950cc25fc [ 319.896864][ T6591] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.916598][ T6591] RSP: 002b:00007f194ef0a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.925034][ T6591] RAX: ffffffffffffffda RBX: 00007f1950efb090 RCX: 00007f1950cc25fc [ 319.933115][ T6591] RDX: 000000000000000f RSI: 00007f194ef0a0a0 RDI: 0000000000000007 [ 319.941248][ T6591] RBP: 00007f194ef0a090 R08: 0000000000000000 R09: 0000000000000000 [ 319.949247][ T6591] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 319.957329][ T6591] R13: 00007f1950efb128 R14: 00007f1950efb090 R15: 00007fff1bb4f458 [ 319.965440][ T6591] [ 320.484371][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.601311][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.019660][ T6187] 8021q: adding VLAN 0 to HW filter on device batadv0 OK Stopping iptables: OK Stopping system message bus: [ 325.809953][ T6633] loop3: detected capacity change from 0 to 2048 [ 325.984109][ T4244] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 326.860099][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.925474][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.026438][ T6187] device veth0_vlan entered promiscuous mode [ 327.053049][ T5466] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 327.136987][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 327.157508][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.200515][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 327.254783][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 327.318425][ T4244] usb 2-1: device descriptor read/64, error -71 [ 327.344645][ T6187] device veth1_vlan entered promiscuous mode [ 327.462155][ T5466] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.590050][ T5466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 328.024963][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 328.036409][ T5466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41216, setting to 1024 [ 328.052250][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 328.250052][ T5466] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.263000][ T5466] usb 5-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 328.278016][ T6187] device veth0_macvtap entered promiscuous mode [ 328.284506][ T5466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.292981][ T4244] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 328.311050][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 328.322956][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.335058][ T5466] usb 5-1: config 0 descriptor?? [ 328.337832][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.592'. [ 328.355696][ T6660] loop3: detected capacity change from 0 to 512 [ 328.427283][ T5466] usb 5-1: MIDIStreaming interface descriptor not found [ 328.438086][ T6187] device veth1_macvtap entered promiscuous mode [ 328.452223][ T6660] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.591: invalid indirect mapped block 4294967295 (level 1) [ 328.454310][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 328.473851][ T6660] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.591: invalid indirect mapped block 4294967295 (level 1) [ 328.485901][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 328.492551][ T6660] EXT4-fs (loop3): 2 truncates cleaned up [ 328.501591][ T6660] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 328.528605][ T6664] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 328.572025][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.598363][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.652092][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 done [ 328.682845][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.706282][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.720601][ T4244] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 328.734528][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.762901][ T4244] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.788749][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.801524][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.822406][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.825479][ T4244] usb 2-1: config 0 descriptor?? [ 328.847727][ T6187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.875862][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 328.889365][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 328.912658][ T4244] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 328.918278][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.942394][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.002980][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.053189][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.082649][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.115478][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.139226][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.147128][ T6648] loop1: detected capacity change from 0 to 1024 [ 329.168081][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.230349][ T6187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.274942][ T6187] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.302404][ T6648] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1. [ 329.327289][ T6187] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.336279][ T6187] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.345209][ T6187] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.391297][ T25] usb 2-1: USB disconnect, device number 11 [ 329.415523][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 329.448032][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 329.981464][ T1111] usb 5-1: USB disconnect, device number 11 [ 330.362882][ T6682] loop1: detected capacity change from 0 to 1024 [ 330.664365][ T6689] loop3: detected capacity change from 0 to 512 [ 330.715698][ T6682] hfsplus: unable to load nls mapping "cp" [ 330.757811][ T6682] hfsplus: unable to parse mount options [ 330.937469][ T4415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.989661][ T4415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.007033][ T6689] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 331.377790][ T6689] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.420805][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 331.468757][ T6689] FAULT_INJECTION: forcing a failure. [ 331.468757][ T6689] name failslab, interval 1, probability 0, space 0, times 0 [ 331.512560][ T6695] loop1: detected capacity change from 0 to 64 [ 331.519048][ T6689] CPU: 0 PID: 6689 Comm: syz.3.597 Not tainted syzkaller #0 [ 331.526388][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.536467][ T6689] Call Trace: [ 331.539761][ T6689] [ 331.542720][ T6689] dump_stack_lvl+0x168/0x230 [ 331.547457][ T6689] ? show_regs_print_info+0x20/0x20 [ 331.552678][ T6689] ? load_image+0x3b0/0x3b0 [ 331.557206][ T6689] ? __might_sleep+0xf0/0xf0 [ 331.561817][ T6689] ? __lock_acquire+0x7c60/0x7c60 [ 331.566868][ T6689] should_fail+0x38c/0x4c0 [ 331.571322][ T6689] should_failslab+0x5/0x20 [ 331.575847][ T6689] slab_pre_alloc_hook+0x51/0xc0 [ 331.580813][ T6689] ? getname_flags+0xb5/0x500 [ 331.585517][ T6689] kmem_cache_alloc+0x3d/0x290 [ 331.590309][ T6689] getname_flags+0xb5/0x500 [ 331.594933][ T6689] __x64_sys_rename+0x6a/0x90 [ 331.599630][ T6689] do_syscall_64+0x4c/0xa0 [ 331.604069][ T6689] ? clear_bhb_loop+0x30/0x80 [ 331.604442][ T4244] REISERFS panic (device loop4): journal-003 check_journal_end: j_start (25) is too high [ 331.608768][ T6689] ? clear_bhb_loop+0x30/0x80 [ 331.608794][ T6689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 331.608816][ T6689] RIP: 0033:0x7f1950cc3be9 [ 331.608837][ T6689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.608855][ T6689] RSP: 002b:00007f194ef2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 331.608878][ T6689] RAX: ffffffffffffffda RBX: 00007f1950efafa0 RCX: 00007f1950cc3be9 [ 331.619286][ T4244] ------------[ cut here ]------------ [ 331.623614][ T6689] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000080 [ 331.629669][ T4244] kernel BUG at fs/reiserfs/prints.c:390! [ 331.633965][ T6689] RBP: 00007f194ef2b090 R08: 0000000000000000 R09: 0000000000000000 [ 331.653844][ T4244] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 331.662222][ T6689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.670188][ T4244] CPU: 1 PID: 4244 Comm: kworker/1:6 Not tainted syzkaller #0 [ 331.675631][ T6689] R13: 00007f1950efb038 R14: 00007f1950efafa0 R15: 00007fff1bb4f458 [ 331.683600][ T4244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.689313][ T6689] [ 331.697357][ T4244] Workqueue: events_long flush_old_commits [ 331.723673][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.727052][ T4244] [ 331.727060][ T4244] RIP: 0010:__reiserfs_panic+0x13a/0x140 [ 331.727092][ T4244] Code: c7 c1 c0 31 1b 8a 48 0f 44 c8 4c 0f 44 f0 48 c7 c7 80 32 1b 8a 4c 89 fe 4c 89 f2 49 89 d8 49 c7 c1 e0 6d 1e 96 e8 16 52 ff ff <0f> 0b 0f 1f 40 00 53 48 89 fb e8 b7 ad d8 f7 48 c7 c7 40 3b 1b 8a [ 331.727110][ T4244] RSP: 0018:ffffc9000424f860 EFLAGS: 00010246 [ 331.782169][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.787724][ T4244] RAX: 0000000000000056 RBX: ffffffff8bb99e5e RCX: 0d2c5420b0087800 [ 331.787742][ T4244] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 331.787756][ T4244] RBP: ffffc9000424f960 R08: dffffc0000000000 R09: ffffed10172267a8 [ 331.787771][ T4244] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffffffff8a1b7f00 [ 331.787786][ T4244] R13: ffffc9000424f880 R14: ffffffff8a1b7ee0 R15: ffff8880775146a8 [ 331.787801][ T4244] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 331.844300][ T4244] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.850477][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 331.850901][ T4244] CR2: 00007f1950d5f6bc CR3: 000000000be8e000 CR4: 00000000003506e0 [ 331.850925][ T4244] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.874152][ T4244] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 331.882150][ T4244] Call Trace: [ 331.885456][ T4244] [ 331.888402][ T4244] ? reiserfs_info+0x150/0x150 [ 331.893198][ T4244] ? mutex_lock_nested+0x17/0x20 [ 331.898204][ T4244] do_journal_end+0x3c97/0x42d0 [ 331.903217][ T4244] ? _raw_spin_unlock+0x24/0x40 [ 331.908102][ T4244] ? journal_end_sync+0x177/0x1e0 [ 331.913169][ T4244] flush_old_commits+0x20f/0x2f0 [ 331.918226][ T4244] ? reiserfs_fill_super+0x23e0/0x23e0 [ 331.923713][ T4244] ? _raw_spin_unlock_irq+0x1f/0x40 [ 331.928948][ T4244] process_one_work+0x863/0x1000 [ 331.933927][ T4244] ? worker_detach_from_pool+0x240/0x240 [ 331.939592][ T4244] ? lockdep_hardirqs_off+0x70/0x100 [ 331.944912][ T4244] ? _raw_spin_lock_irq+0xab/0xe0 [ 331.949974][ T4244] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 331.955379][ T4244] ? wq_worker_running+0x97/0x170 [ 331.960431][ T4244] worker_thread+0xaa8/0x12a0 [ 331.965152][ T4244] kthread+0x436/0x520 [ 331.969244][ T4244] ? rcu_lock_release+0x20/0x20 [ 331.974120][ T4244] ? kthread_blkcg+0xd0/0xd0 [ 331.978735][ T4244] ret_from_fork+0x1f/0x30 [ 331.983183][ T4244] [ 331.986232][ T4244] Modules linked in: [ 332.294985][ T4244] ---[ end trace 33f7d7e16ebb1b01 ]--- [ 332.305133][ T4244] RIP: 0010:__reiserfs_panic+0x13a/0x140 [ 332.316613][ T4244] Code: c7 c1 c0 31 1b 8a 48 0f 44 c8 4c 0f 44 f0 48 c7 c7 80 32 1b 8a 4c 89 fe 4c 89 f2 49 89 d8 49 c7 c1 e0 6d 1e 96 e8 16 52 ff ff <0f> 0b 0f 1f 40 00 53 48 89 fb e8 b7 ad d8 f7 48 c7 c7 40 3b 1b 8a [ 332.867890][ T4244] RSP: 0018:ffffc9000424f860 EFLAGS: 00010246 [ 332.874083][ T4244] RAX: 0000000000000056 RBX: ffffffff8bb99e5e RCX: 0d2c5420b0087800 [ 332.882243][ T4244] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 332.883093][ T6695] hfs: unable to locate alternate MDB [ 332.890783][ T4244] RBP: ffffc9000424f960 R08: dffffc0000000000 R09: ffffed10172267a8 [ 332.903498][ T6695] hfs: continuing without an alternate MDB [ 332.917207][ T6695] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 332.934004][ T4244] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffffffff8a1b7f00 [ 332.942042][ T4244] R13: ffffc9000424f880 R14: ffffffff8a1b7ee0 R15: ffff8880775146a8 [ 332.950952][ T4244] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 332.963902][ T4244] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.970820][ T4244] CR2: 00007f01a0597000 CR3: 000000007dc65000 CR4: 00000000003506e0 [ 332.981054][ T4244] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.989147][ T4244] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 332.999320][ T4244] Kernel panic - not syncing: Fatal exception [ 333.005720][ T4244] Kernel Offset: disabled [ 333.010062][ T4244] Rebooting in 86400 seconds.. serialport: VM disconnected.