last executing test programs: 21m36.809427388s ago: executing program 1 (id=23): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000045, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000080), 0x1, 0x42f, &(0x7f00000017c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(0x0, 0x0, 0x100000000000001) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$hiddev(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) 21m31.579348251s ago: executing program 1 (id=29): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x1d, 0x2, 0x6) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) accept(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast1}, 0x0) 21m29.626798988s ago: executing program 32 (id=13): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsmount(r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070056060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966ff76d796c171f5f7a31e1b14b0c0c712c0fdd2710f37a3d15710d68e7326a7db043c57784bd9bdb047db75"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 21m26.799057043s ago: executing program 1 (id=34): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$eJzs2s9rHGUYB/Bn0tbGlHQj/qIF8UUP6mVocvbQIC2IAUW7QhWkUzPRZcfdsLMsrIjJqV79EzyLR2+C9OglF/8CD14klxx7EEe6u5pG4iGI3ZJ+Ppd94N0vzzPMy8t7mP3Xv/6su1XnW8UwFrIsFq7GbtzLYiUW4i+78dorN3964b2bH7y1vrFx7d2Urq/fWF1LKV188ccPv/jupbvDC+9/f/GH87G38tH+wdqve8/tXdr/48annTp16tTrD1ORbvf7w+J2VabNTt3NU3qnKou6TJ1eXQ6OrG9V/e3tcSp6m8tL24OyrlPRG6duOU7DfhoOxqn4pOj0Up7naXkp+C/a395rmjhozt2Kpmme/CYu3I3lX6IV2VMpe/pq9uyt7Pnd7NJB07TmPSr/C+//8fbAob4YUX01ao/a09/p+vpWdKKKMq5EK36P+9tkZlpff3Pj2pU0sRJ3qp1ZfmfUPnM0vxqtWDk+vzrNp7hT/fbEtO3OqH0+liLORczya9GKZ47Prx3mJ/3PTPovxqsvP9A/j1b8/HH0o4rNuJ89zH+5mtIbb2+ko/NfnvwPAOC0ydPfjr2/5fm/rU/zJ7gf/uN+dTYun53vsxNRjz/vFlVVDhRVOVh8NMY4DUVENtlg2WyjzXsexQmLuR5LPCSHL33ekwAAAAAAAAAAAHASD+Nzwnk/IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj7MwAA//+3Ycw+") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x8}, {0xffbd, 0xff46, [0x8e, 0x5]}}}}, 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) 21m23.879642959s ago: executing program 1 (id=37): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51e9"], 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2cc, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@usrquota}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 21m21.298749948s ago: executing program 1 (id=41): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") open(0x0, 0x4827e, 0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0x40001a2) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x6, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x7, 0x3, 0x0, 0x0, 0x0, 0xee00, 0x0, 0x8, 0x1}}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000100)=0x4, 0x8112) 21m16.302692017s ago: executing program 1 (id=46): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)={[{@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodioread_nolock}, {@minixdf}, {@bh}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x24806, 0x0, 0xfd, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0x2) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0x3}, {0x3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1', 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) io_submit(r1, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 21m1.189116708s ago: executing program 33 (id=46): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)={[{@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodioread_nolock}, {@minixdf}, {@bh}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x24806, 0x0, 0xfd, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0x2) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0x3}, {0x3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1', 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) io_submit(r1, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 14m58.107381838s ago: executing program 7 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x20, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r5, 0x0, 0x29, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) 14m53.090530891s ago: executing program 4 (id=564): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000) r1 = syz_io_uring_setup(0x29d8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x28, {0x2, 0x4}, 0x9}, 0x1) io_uring_enter(r1, 0x1dde, 0x9fc1, 0xff, &(0x7f00000000c0)={[0x8]}, 0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) open_by_handle_at(r3, 0x0, 0x2000) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) r4 = syz_open_dev$evdev(0x0, 0x1, 0x200) syz_usb_disconnect(r4) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000540)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0x2, 0xc1, 0x8, 0x1, 0x3, 0x0, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x1, 0x6, 0x9, 0x4, 0x5, 0x5, 0x100000, 0x762, 0xa, 0xf, 0xe, 0x2b12, 0x100, 0x6, 0x0, 0x9, 0xfda, 0xbed4, 0x7, 0x3, 0x3, 0x0, 0xffffff29, 0x8, 0x5, 0x479b, 0x2, 0x7, 0x7f, 0x4, 0xa, 0x1, 0x12, 0x4000101, 0xd7, 0x1fa0860a, 0x7, 0x1, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2ac, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x5, 0x4, 0x100003, 0x8, 0x752, 0x0, 0x3, 0xc, 0xfffe, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xb, 0x84, 0x7fff, 0x5, 0x252, 0x7f, 0xb, 0x5, 0x20006, 0x5, 0x2, 0x0, 0x2, 0xd9a, 0x1000d, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x3, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x400008, 0x6, 0x1, 0xfffffffc, 0xc5c, 0xffffffff]}}) 14m52.823729473s ago: executing program 7 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc8, &(0x7f0000000580)=""/200, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) 14m50.705080963s ago: executing program 7 (id=566): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x1d, 0x2, 0x6) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) accept(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast1}, 0x0) 14m48.305012749s ago: executing program 4 (id=571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xd) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) preadv2(r5, &(0x7f00000018c0)=[{0x0}], 0x1, 0x2, 0x40, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x40) 14m47.001638323s ago: executing program 4 (id=573): syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4004, 0x0, 0x0, 0x0, 0x6}, 0x30, 0x1) landlock_restrict_self(r2, 0x8) umount2(&(0x7f0000000380)='./file0\x00', 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioperm(0x0, 0x7c9, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r4, 0x301, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x0, 0xad, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x21, 0x2, 0x0}) userfaultfd(0x80001) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ftruncate(r3, 0x2000009) sendfile(r3, r0, 0x0, 0x40000001) 14m46.663997331s ago: executing program 7 (id=576): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x1, 0xfffffe, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x4000003, 0x2a0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 14m46.195521622s ago: executing program 4 (id=579): getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x321002, 0x0) r0 = gettid() prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$packet(r1, 0x0, 0x63) r3 = memfd_secret(0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x80184153, &(0x7f0000000800)={0x0, &(0x7f0000000740)=[&(0x7f0000000480), &(0x7f0000000640)="af5525f85f923b714a416d0cf2dde1704680ad533990a4708162dc49e5d3a5dc4ef821e80262055d3f4f31d454210625b0a61dadb912aa8c15775df4bb68e970880fb919251650d48d8b62ef45ad73ec0d7333eb2f785aa7c4f27c05e1dcba716a2210dacd35a2a4d6"]}) syz_open_procfs(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') rename(&(0x7f0000000080)='.\x02\x00', &(0x7f0000000100)='.\x02/file0\x00') r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 14m46.054496806s ago: executing program 7 (id=581): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty, 0x80000000}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xded}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x300, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000500)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) 14m42.708315773s ago: executing program 7 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x20, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r5, 0x0, 0x29, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) 14m41.283795138s ago: executing program 4 (id=588): ioperm(0x0, 0x6, 0x6) pipe2$watch_queue(0x0, 0x80) r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 14m39.582577964s ago: executing program 4 (id=591): socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000100)={{@align=0x8, {0xc, 0x7d, 0x7, 0x9f}}, {{[0x1, 0x9d, 0xbaa, 0x6]}, 0x0, 0x1, 0x7, 0x0, &(0x7f00000000c0)=[{{@_ha_fsid={[0x4, 0x4]}, {0xa, 0x6, 0x6, 0x4}}, 0xb23, 0x0, '/dev/adsp1\x00'}]}}) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) rt_tgsigqueueinfo(0x0, 0x0, 0x34, &(0x7f0000000240)={0x15, 0x2, 0x1}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_ublk_setup_io_uring(0x1b1d, 0x0, &(0x7f0000000040), &(0x7f0000000200), 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r5, 0x8000000) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) getsockopt$nfc_llcp(r6, 0x118, 0x4, &(0x7f0000000540)=""/233, 0xe9) listen(r4, 0x10) 14m26.464296081s ago: executing program 34 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x20, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r5, 0x0, 0x29, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) 14m22.798315537s ago: executing program 35 (id=591): socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000100)={{@align=0x8, {0xc, 0x7d, 0x7, 0x9f}}, {{[0x1, 0x9d, 0xbaa, 0x6]}, 0x0, 0x1, 0x7, 0x0, &(0x7f00000000c0)=[{{@_ha_fsid={[0x4, 0x4]}, {0xa, 0x6, 0x6, 0x4}}, 0xb23, 0x0, '/dev/adsp1\x00'}]}}) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) rt_tgsigqueueinfo(0x0, 0x0, 0x34, &(0x7f0000000240)={0x15, 0x2, 0x1}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_ublk_setup_io_uring(0x1b1d, 0x0, &(0x7f0000000040), &(0x7f0000000200), 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r5, 0x8000000) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) getsockopt$nfc_llcp(r6, 0x118, 0x4, &(0x7f0000000540)=""/233, 0xe9) listen(r4, 0x10) 2m42.081727043s ago: executing program 9 (id=2624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd700e000600001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}}, 0x0) 2m41.651563743s ago: executing program 9 (id=2627): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0x9, "fa5dd1f5"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 2m39.518145366s ago: executing program 9 (id=2644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f000000dbc0), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f000000dd40)={0x0, 0x0, &(0x7f000000dd00)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x800) 2m39.330250406s ago: executing program 9 (id=2647): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000b40)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@orlov}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m38.418263621s ago: executing program 9 (id=2649): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m37.813187484s ago: executing program 9 (id=2651): r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x1ff, &(0x7f0000000080), 0x8) syz_open_procfs(0x0, &(0x7f0000001380)='comm\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) io_uring_setup(0x9, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)) timerfd_create(0x0, 0x0) read$FUSE(r4, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x2, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000001f00)={0x3}) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x10001, 0x5, r6}) r7 = socket(0x1e, 0x4, 0x0) recvfrom(r7, 0x0, 0x0, 0x6667b9fe4a5fca3, 0x0, 0x0) 2m36.654473234s ago: executing program 36 (id=2651): r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x1ff, &(0x7f0000000080), 0x8) syz_open_procfs(0x0, &(0x7f0000001380)='comm\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) io_uring_setup(0x9, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)) timerfd_create(0x0, 0x0) read$FUSE(r4, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x2, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000001f00)={0x3}) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x10001, 0x5, r6}) r7 = socket(0x1e, 0x4, 0x0) recvfrom(r7, 0x0, 0x0, 0x6667b9fe4a5fca3, 0x0, 0x0) 5.873140974s ago: executing program 5 (id=3558): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x20, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r5, 0x0, 0x29, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x6, 0x2c, 0x1, 0xfffffffe, 0x81, 0x1000, 0x889a, 0x20000004, 0x6, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x3, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) 4.514705966s ago: executing program 5 (id=3564): write(0xffffffffffffffff, &(0x7f0000000100)='0fc5:127:', 0x9) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x250, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="747275738b65642e"], 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) 3.610081628s ago: executing program 5 (id=3569): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x601}, "000300b000000228", "5171bb74cd3660dab9e200000000a900", "00802000", "ed2a87ab360069a7"}, 0x38) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002218000000"], 0x0}, 0x0) 3.565716052s ago: executing program 0 (id=3571): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) socket$xdp(0x2c, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000300)={0x1, r3}) openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x23700, 0x0) r5 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) shmctl$SHM_LOCK(r5, 0xb) ioprio_set$pid(0x1, 0x0, 0x2004) ioprio_get$pid(0x2, 0x0) shmctl$SHM_LOCK(r5, 0xb) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x4010) 3.516009063s ago: executing program 3 (id=3572): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000000e0000000000000000000000000000000300000000000000001000000000000015ba5ccdffffffffff0700000000000000000000000000000000000000000000083000dd00000000000000000000000001000000000000000200000000000000b4000000000000000000000000000000000000000000000002100000000000000000000000000000010000000000000008000000000000000900"/175]) syz_open_dev$vcsn(&(0x7f00000003c0), 0xa942, 0x301000) r2 = openat$udambuf(0xffffff9c, &(0x7f00000002c0), 0x2) r3 = memfd_create(&(0x7f0000000340)='test_dummy_encryption', 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000001000000", @ANYRES32=r3, @ANYBLOB="000000000033004000000000000030e3c656f9fbdd1aeaf36cdeeca8a88e88fb93b7ec4e18bcf3d1cafe526d6012c9babca8aa7671cdc4a0b899cc07f58e52e2a8a3418991cb92c3b0bce10e4ebbdce1677fc85098dea290c8f9beef69a28dcd1e2d70d79fc0bf16bc7c6394b08e34f060e61a40c3d109fdb90a2b8d49f6f1be6cfef109d3ac621d5eeb060e8b3b879e199e50d4d78bc16b57e16517ef138d09dccb423bae7057d5e6841d84e07900745ccbe7e0e7def96e0a9938cacc5cc9fc"]) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TCXONC(r5, 0x540a, 0x0) write$P9_RREADDIR(r6, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x3, 0x2, "2df3724a7b088cd6b1c2054f977ef70c078358", 0x6, 0x8}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x300) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) 3.344720334s ago: executing program 0 (id=3575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x7c, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}}, 0x0) 3.213768608s ago: executing program 8 (id=3577): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x20, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r5, 0x0, 0x29, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x6, 0x2c, 0x1, 0xfffffffe, 0x81, 0x1000, 0x889a, 0x20000004, 0x6, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x3, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) 2.931100245s ago: executing program 0 (id=3580): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 2.883979052s ago: executing program 8 (id=3581): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.640558651s ago: executing program 0 (id=3584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x3000000000, &(0x7f00004d6000/0x1000)=nil, 0x3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001a00)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x44, 0x0, 0x9}, {0x8, 0x0, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r4, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x2a, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='0', 0x1) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000380)={0x7, 0x7, 0x4, 0x1ff, 0x101, 0x1}) io_setup(0x222, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2.533553512s ago: executing program 8 (id=3586): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0xa, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="0100fe0fff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.710461886s ago: executing program 3 (id=3587): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, &(0x7f0000001b40)="08ba810a10d69bfad8c22e8786", 0xffeb, 0x0, &(0x7f0000002400)={0x2, 0x4e23, @multicast2}, 0x10) 1.641424521s ago: executing program 8 (id=3588): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt+bH/ved+a93TcznQmgbQ2kf5KIbRHxe0T0ZdnbFxjI3ubnZsZuzs2MJbGw8PbfSWW5G3MzY8WixXpb88yhUkTpsySOJ0vLnbp46cxouTxxPs8PTZ/9cGjq4qXnTp8dPTVxauLcyLFjR48Mv/jCyPNrEmca1429H0/u2/P6u1ffHDtx9b2fvk2rtXt/Nr86jju6WSegOgbSrfbPQkXtvCebqPu9YHtVOulsYUVoSkdEpLurq9L/+6IjFndeX7z2aUsrB6yr9LdpS+PZswvAJpZEq2sAtEbxQ58e/xavDRp6/C9cfzmiO0/Pz82Mzd+KvzNK+fSudSx/ICJOzP77VfqKZs9DAACsQmVs82y98V8pdlfes2sdO/JrKP0RcX9E7IyIByJiV0Q8GFFZ9qGIeDhbeaFvheUP1OSXjn9K1+rWeY2k47+XqsZ+81Xx52/9HXlueyX+ruTk6fLE4XybHIquLWl+eJkyvn/1ty8azase/6WvtPxiLJhX4FpnzQm68dHp0bXaCNcvR+ztrBd/cutKQNoC9kTE3uY+ekeROP30N/saLXTn+JexBteZFr6OeCrb/7NRE38hWf765FBPlCcODxWtYqmff73yVqPy7yr+NXD9wCNZYnH/1yxR1dDK5YnzU82XceWPzxse06y2/Xcn71T65C/vZ9MujE5Pnx+O6E7eqOSLY7rK9JHFdS+MTvem+WL5tP0fOli//+/M10n3f7qV0ka8PyIejYjH8ro/HhEHIuLgMvH/+MoTHywTfxJJtG7/X44Yr/v9d6v99yfV1+tXkeg488N3ja6Yr2z/H43ZyndtpvL9dwcrreBdbj4AAAC4J5QiYlskpcEsPbAtSqXBwex/+HfFfaXy5NT0MycnPzo3nt0j0B9dpeJMV1/V+dDhZDb/xCw/kp8rLuYfyc8bf9nRW8kPjk2Wx1scO7S7rbf3/yj6f+qvjlbXDlh37teC9lXb/0stqgew8Vby++9YADan2/t/T/qnt1V1ATaW439oX/X6/yc1eeN/2JyW9v8/6zyyDtiMjP+hfen/0L70f2hLzdzOH8cbzeqJiGYeC1DcLLD6pwr0rPgO/3ZJFE+8WM+yeuPSme58SpRaFGlHk41tUyTSHrOxhS4+QwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBe9l8AAAD//3ow3kU=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1.605455718s ago: executing program 3 (id=3589): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000980)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x10, "0900c7e2f68e08ddf7b27874d17b"}, @sack={0x5, 0xe, [0x220, 0x130c, 0xabc]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0xa, [0x1, 0xfffffffe]}]}}}}}}}}, 0x0) 1.579424047s ago: executing program 6 (id=3590): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) 1.405801426s ago: executing program 8 (id=3593): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x20, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r5, 0x0, 0x29, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x6, 0x2c, 0x1, 0xfffffffe, 0x81, 0x1000, 0x889a, 0x20000004, 0x6, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x3, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) 1.38780071s ago: executing program 6 (id=3594): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000002c0)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x200a04000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 1.374639235s ago: executing program 3 (id=3595): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r0, &(0x7f0000001240)="62f5ff6ccf3d2ec97f0e4bc8a900d2e75067a5109d749cdf1ba00926335fdca4d2df9c6093533dbe86131af765f8be39df30e3e4f257006bf1826c92170c0a", 0x3f) write$P9_RWRITE(r0, 0x0, 0x0) 1.29867421s ago: executing program 6 (id=3596): socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/config.gz\x00', 0x0, 0x80) read$watch_queue(r0, &(0x7f0000001540)=""/4096, 0x1000) 1.231411812s ago: executing program 5 (id=3597): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 1.207865108s ago: executing program 8 (id=3598): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000080)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@tz_utc}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='3', 0x1, 0x4fed0) 1.19073657s ago: executing program 6 (id=3599): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000000e0000000000000000000000000000000300000000000000001000000000000015ba5ccdffffffffff0700000000000000000000000000000000000000000000083000dd00000000000000000000000001000000000000000200000000000000b4000000000000000000000000000000000000000000000002100000000000000000000000000000010000000000000008000000000000000900"/175]) syz_open_dev$vcsn(&(0x7f00000003c0), 0xa942, 0x301000) r2 = openat$udambuf(0xffffff9c, &(0x7f00000002c0), 0x2) r3 = memfd_create(&(0x7f0000000340)='test_dummy_encryption', 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000001000000", @ANYRES32=r3, @ANYBLOB="000000000033004000000000000030e3c656f9fbdd1aeaf36cdeeca8a88e88fb93b7ec4e18bcf3d1cafe526d6012c9babca8aa7671cdc4a0b899cc07f58e52e2a8a3418991cb92c3b0bce10e4ebbdce1677fc85098dea290c8f9beef69a28dcd1e2d70d79fc0bf16bc7c6394b08e34f060e61a40c3d109fdb90a2b8d49f6f1be6cfef109d3ac621d5eeb060e8b3b879e199e50d4d78bc16b57e16517ef138d09dccb423bae7057d5e6841d84e07900745ccbe7e0e7def96e0a9938cacc5cc9fc"]) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TCXONC(r5, 0x540a, 0x0) write$P9_RREADDIR(r6, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x3, 0x2, "2df3724a7b088cd6b1c2054f977ef70c078358", 0x6, 0x8}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x300) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) 1.11280445s ago: executing program 2 (id=3600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x2, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x800, 0x2, 0xa, 0xbc2, 0x1ff, 0x10, 0x4, 0x8, 0x4, 0x4, 0x6, 0xff, 0x2b45, 0x1, 0x0, 0x6, 0x1, 0x5, 0x552a, 0x9, 0x1, 0x8, 0x3ff, 0x9, 0x9, 0x1000, 0x4, 0x5fdb, 0x1ff, 0x2, 0x10000, 0x7, 0x4, 0x9, 0xfff, 0x10000, 0x10000, 0xd6, 0xfffffff8, 0x8, 0x8001, 0x80000000, 0x32, 0xe, 0x3, 0x0, 0x0, 0x1, 0x10001, 0x481, 0x9, 0xffffff46, 0x8, 0x9, 0x90d3, 0xffff177f, 0x7, 0x0, 0xb099, 0x3, 0x1, 0xff, 0xfffffff0, 0x10, 0xc, 0xfd, 0x101, 0x7, 0x0, 0x0, 0x2, 0x0, 0x3, 0x81, 0xd, 0x3, 0x3, 0x6, 0x6e, 0x90, 0x3, 0x8000, 0xe, 0x9, 0x401, 0xb879, 0x8, 0x8, 0x1, 0x2, 0x80000001, 0xbb4f, 0x2, 0x1, 0x5, 0x1b2, 0xbc, 0x2, 0x2, 0x44bd, 0x2, 0x5, 0x3, 0x8, 0x57e, 0x3, 0x5c5, 0x7, 0x10000, 0x9, 0x1, 0x5, 0x1, 0xc9f, 0x8, 0xd, 0x7, 0x6, 0x34, 0x400, 0x2, 0x0, 0x3, 0x4, 0x9, 0x9, 0xb7, 0xfffffffb, 0x7fffffff, 0x401, 0x6, 0x0, 0xb, 0x5, 0xfffffffa, 0x6, 0xf8d, 0xfffff907, 0x5d54156, 0x6, 0x2, 0x40, 0x101, 0x3, 0x1, 0x10001, 0xd141, 0x9, 0x2, 0x2, 0x8, 0x5, 0x9, 0x7, 0xb2, 0x50a6c46e, 0x3, 0x10001, 0x5, 0x1, 0x816, 0x6, 0xbdf2, 0x5, 0x2, 0x5, 0x8, 0x9, 0x8, 0xffffffff, 0x6, 0x484, 0xa24, 0xffffffa1, 0x4a, 0x3, 0x5, 0x7fffffff, 0x1, 0x7, 0x6, 0x1, 0x80000000, 0x3, 0x3, 0x9, 0x854, 0x3ff, 0x56, 0x3, 0x1, 0xf, 0xfd0, 0x7, 0x40, 0x4fb, 0x8, 0x5, 0x80, 0xb36, 0x1, 0x3, 0x5, 0x2, 0x4, 0x8, 0xffffffff, 0x2, 0x4, 0x9, 0xb, 0xccf1, 0x4902, 0x6, 0x7, 0x4, 0x7a, 0x7, 0xfffffffa, 0x8e1, 0x0, 0x0, 0x2aeb00d5, 0xfff, 0x8, 0x9, 0x9ec, 0x8, 0x2, 0x1, 0x0, 0x1, 0x7, 0x1, 0x8, 0x101, 0x0, 0x1, 0x1, 0x4, 0x1000000, 0x10000, 0xffff, 0x5, 0xffffffff, 0x6, 0x4, 0x0, 0x3, 0x3, 0x4, 0x0, 0x9, 0x400, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 1.069808697s ago: executing program 3 (id=3601): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000400)={[{@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@fmask={'fmask', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@errors_continue}, {}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1.045366174s ago: executing program 5 (id=3602): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000041, &(0x7f00000002c0)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x5a4, &(0x7f00000003c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000002f40)=""/4079, 0x7c4) 1.026649815s ago: executing program 6 (id=3603): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000480)=0xff) 920.85152ms ago: executing program 2 (id=3604): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c000400"], 0x78}}, 0x0) 834.821242ms ago: executing program 0 (id=3605): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 738.156419ms ago: executing program 6 (id=3606): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004"], 0x51) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 678.412332ms ago: executing program 2 (id=3607): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) userfaultfd(0x801) 391.288442ms ago: executing program 5 (id=3608): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x28, 0x801, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) gettid() sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f646500"/37], 0x60}, 0x1, 0x0, 0x0, 0x4000480}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000100), 0x5005) shutdown(0xffffffffffffffff, 0x32ce970513f32900) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d350887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d3036cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x1006) 347.205941ms ago: executing program 2 (id=3609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) 336.308303ms ago: executing program 3 (id=3610): r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000040), 0x0, 0x1ff, &(0x7f0000000080), 0x8) syz_open_procfs(0x0, &(0x7f0000001380)='comm\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) io_uring_setup(0x9, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)) timerfd_create(0x0, 0x0) read$FUSE(r4, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x2, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000001f00)={0x3}) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x10001, 0x5, r6}) r7 = socket(0x1e, 0x4, 0x0) recvfrom(r7, 0x0, 0x0, 0x6667b9fe4a5fca3, 0x0, 0x0) 152.934073ms ago: executing program 2 (id=3611): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x800010, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x47c, &(0x7f0000000640)="$eJzs3EtsG0UfAPD/bl5NH1/ylfJoaSFQEBWPpEkf9MAFBBIHkJDgUMQpJGlV6jaoCRKtKigcyhFV4o44InFH4gQXBBwQEle4o0pV1UsLJ6O1d1PHsRMndusU/37SOjO768z8PTv2eMZ2AD1rLLtJIrZHxB8RMVLNLj9hrPrn1o2LM3/fuDiTRLn85vWkct7NGxdnilOL+22rZsrliKEsOdSg3MvvREyXSnPn8vzE4pn3JxbOX3ju1Jnpk3Mn585OHTt2+NC+waNTR9qKL83/ZnHd3PPR/N7dr7595fWZ41fe/fmbrL7b8+O1cWxIFm2dseqjW+/R7ObJtgrbVH7NbnbU7Ej6m588fhcqROv6IiJrroFK/x+JvhheOjYSr3za1coBd1S5XC43en3OXSoD/2FJdLsGQHcUL/TZ+99iu0tDj03h2ovVN0BZ3LfyrXqkf2nuYKDu/W0njUXE8Uv/fJlt0Yl5CACANXyfjX+ebTT+S+OBmvP+l6+hjEbE/yNiZ0TcFxG7IuL+iMq5D0bEQ+ssv36FZOX4J726ocBalI3/XsjXtpaP/4rRX4z25bkdlfgHkhOnSnMH88fkQAwMZfnJVcr44eXfPy/SW+qO1Y7/si0rvxgL5vW42l83QTc7vTjdbtyFa59E7OlvFH8SxTJOEhG7I2LPBss49fTXe5sdWzv+VayyztSq8lcRT1Xb/1Isi/92UyVN1ycnnz86dWRiS5TmDk4UV8VKv/x2+Y1m5bcVfwdk7b+14fW/tAo8mmyJWDh/4XRlvXZh/WVc/vOzmj69bHU5iz/9NmLd1/9g8lYlPZjv+3B6cfHcZMRg8trK/VO371vki/Oz+A/sb9z/d9bU+OGIyC7ifRHxSL6Im7XdYxHxeETsXyX+n1564r1mx1a0/3AR/yqz8h2UxT+7VvtHbfuvP9F3+sfvWo6/YfsfrqQO5Htaef5rtYLtPHYAAABwr0grn4FP0vGldJqOj1c/w78rtqal+YXFZ07Mf3B2tvpZ+dEYSIuZrpGa+dDJfG64yE/V5Q/l88Zf9A1X8uMz86XZbgcPPW5bk/6f+auv27UD7rgOrKMB9yj9H3qX/g+9S/+H3qX/Q+9q1P8/7kI9gLvP6z/0Lv0fepf+D71L/4ee1PS78WlbX/nvcqL47YQ2/s/17kfRdmL4ThYRafcDXCtR/IbPZqnPhhL97VzGrSSGGh7q4pMSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAB/0bAAD//9cM3tg=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 20.750746ms ago: executing program 2 (id=3612): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=3613): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) kernel console output (not intermixed with test programs): 245.175522][ T31] usb 1-1: USB disconnect, device number 17 [ 1245.196756][T11801] EXT4-fs error (device loop9): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1245.208182][T11801] EXT4-fs error (device loop9): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1245.226166][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1245.276200][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1245.278437][ T31] quatech2 1-1:0.51: device disconnected [ 1245.310123][ T5742] usb 6-1: Using ep0 maxpacket: 32 [ 1245.339318][ T5742] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1245.354282][ T5742] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 1245.354313][ T5742] usb 6-1: config 0 has no interface number 1 [ 1245.356534][ T5742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.356561][ T5742] usb 6-1: Product: syz [ 1245.356578][ T5742] usb 6-1: Manufacturer: syz [ 1245.356602][ T5742] usb 6-1: SerialNumber: syz [ 1245.438777][ T5742] usb 6-1: config 0 descriptor?? [ 1245.628234][T14950] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.681041][ T5742] viperboard 6-1:0.61: version 0.00 found at bus 006 address 038 [ 1245.727747][ T5742] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1245.727784][ T5742] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1245.771514][ T5742] viperboard 6-1:0.0: version 0.00 found at bus 006 address 038 [ 1245.793176][ T5742] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1245.793207][ T5742] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1246.012505][ T5871] usb 6-1: USB disconnect, device number 38 [ 1246.184284][ T5837] usb 3-1: USB disconnect, device number 36 [ 1246.305816][T10015] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.465155][T16777] tipc: Enabling of bearer rejected, failed to enable media [ 1246.827118][T10015] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.135803][T10015] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.436206][T10015] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.467595][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1247.483187][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1247.484943][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1247.487392][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1247.489540][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1248.003007][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2668'. [ 1248.003035][T16820] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2668'. [ 1248.354841][T10015] bridge_slave_1: left allmulticast mode [ 1248.354872][T10015] bridge_slave_1: left promiscuous mode [ 1248.355098][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.393846][T10015] bridge_slave_0: left allmulticast mode [ 1248.393875][T10015] bridge_slave_0: left promiscuous mode [ 1248.397152][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.440186][ T31] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1248.612985][ T31] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1248.614207][ T31] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1248.614234][ T31] usb 6-1: config 0 has no interface number 0 [ 1248.616369][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.616396][ T31] usb 6-1: Product: syz [ 1248.616414][ T31] usb 6-1: Manufacturer: syz [ 1248.616431][ T31] usb 6-1: SerialNumber: syz [ 1248.619968][ T31] usb 6-1: config 0 descriptor?? [ 1248.682183][ T31] usb 6-1: selecting invalid altsetting 1 [ 1248.683607][ T31] dvb_ttusb_budget: ttusb_init_controller: error [ 1248.683622][ T31] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1248.752943][ T2261] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1248.948458][ T2261] usb 1-1: Using ep0 maxpacket: 8 [ 1249.103616][ T2261] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1249.166904][T16842] xt_hashlimit: size too large, truncated to 1048576 [ 1249.194023][ T2261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.194057][ T2261] usb 1-1: Product: syz [ 1249.194075][ T2261] usb 1-1: Manufacturer: syz [ 1249.194092][ T2261] usb 1-1: SerialNumber: syz [ 1249.198704][ T2261] usb 1-1: config 0 descriptor?? [ 1249.208623][ T2261] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1249.208671][ T2261] pctv452e: pctv452e_power_ctrl: 1 [ 1249.208671][ T2261] [ 1249.208718][ T2261] usb 1-1: selecting invalid altsetting 3 [ 1249.208735][ T2261] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1249.208735][ T2261] [ 1249.208790][ T2261] dvb-usb: bulk message failed: -22 (5/0) [ 1249.243776][ T2261] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1249.249709][ T2261] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1249.249764][ T2261] usb 1-1: media controller created [ 1249.291845][ T2261] dvb-usb: bulk message failed: -22 (8/0) [ 1249.291869][ T2261] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1249.291955][ T2261] dvb-usb: MAC address reading failed. [ 1249.439831][ T31] DVB: Unable to find symbol stv0299_attach() [ 1249.483285][ T2261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1249.550255][ T52] Bluetooth: hci3: command tx timeout [ 1249.698487][ T31] DVB: Unable to find symbol tda8083_attach() [ 1249.698506][ T31] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1249.718293][ T31] usb 6-1: USB disconnect, device number 39 [ 1249.920985][T14482] udevd[14482]: setting owner of /dev/bus/usb/006/039 to uid=0, gid=0 failed: No such file or directory [ 1250.137788][ T2261] DVB: Unable to find symbol stb0899_attach() [ 1250.137807][ T2261] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1250.402710][T10015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.406011][ T2261] rc_core: IR keymap rc-tt-1500 not found [ 1250.406030][ T2261] Registered IR keymap rc-empty [ 1250.408052][ T2261] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1250.442064][ T2261] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input29 [ 1250.452495][ T25] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1250.470897][T10015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.474001][ T2261] dvb-usb: schedule remote query interval to 100 msecs. [ 1250.474023][ T2261] pctv452e: pctv452e_power_ctrl: 0 [ 1250.474023][ T2261] [ 1250.474038][ T2261] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1250.477963][T10015] bond0 (unregistering): Released all slaves [ 1250.479686][ T2261] usb 1-1: USB disconnect, device number 18 [ 1250.604349][ T25] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1250.626794][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1250.626829][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1250.636114][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.636144][ T25] usb 6-1: Product: syz [ 1250.636162][ T25] usb 6-1: Manufacturer: syz [ 1250.636179][ T25] usb 6-1: SerialNumber: syz [ 1250.752964][ T2261] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1250.837184][T10015] tipc: Disabling bearer [ 1250.856990][T10015] tipc: Left network mode [ 1250.986485][T16803] lo speed is unknown, defaulting to 1000 [ 1251.029966][T10015] IPVS: stopping master sync thread 16021 ... [ 1251.206095][ C1] usb 6-1: check_urb_status: overflow actual length is 128 [ 1251.206135][ C1] usb 6-1: arpc in-urb error -75 (dropped) [ 1251.412920][ T25] usb 6-1: failed to set cport flags for port 0 [ 1251.412964][ T25] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 1251.544608][ T25] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1251.585984][ T25] usb 6-1: USB disconnect, device number 40 [ 1251.630415][ T52] Bluetooth: hci3: command tx timeout [ 1251.631992][T16888] netlink: Setting conntrack mark requires 'commit' flag. [ 1251.632023][T16888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1252.013231][T10015] hsr_slave_0: left promiscuous mode [ 1252.039630][T10015] hsr_slave_1: left promiscuous mode [ 1252.049140][T10015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.049164][T10015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.071994][T10015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.072020][T10015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.138670][T10015] veth1_macvtap: left promiscuous mode [ 1252.138711][T10015] veth0_macvtap: left promiscuous mode [ 1252.138822][T10015] veth1_vlan: left promiscuous mode [ 1252.138914][T10015] veth0_vlan: left promiscuous mode [ 1252.259791][T16907] FAULT_INJECTION: forcing a failure. [ 1252.259791][T16907] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1252.259835][T16907] CPU: 1 UID: 0 PID: 16907 Comm: syz.2.2694 Tainted: G L syzkaller #0 PREEMPT(full) [ 1252.259869][T16907] Tainted: [L]=SOFTLOCKUP [ 1252.259879][T16907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1252.259895][T16907] Call Trace: [ 1252.259906][T16907] [ 1252.259917][T16907] dump_stack_lvl+0xe8/0x150 [ 1252.259960][T16907] should_fail_ex+0x410/0x560 [ 1252.259999][T16907] get_futex_key+0x1b4/0x1580 [ 1252.260035][T16907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.260076][T16907] ? __pfx_get_futex_key+0x10/0x10 [ 1252.260109][T16907] ? ioctx_add_table+0x13d/0x4c0 [ 1252.260136][T16907] ? ioctx_alloc+0x4a9/0x830 [ 1252.260160][T16907] ? __se_sys_io_setup+0x7b/0x1d0 [ 1252.260198][T16907] ? do_syscall_64+0x166/0x520 [ 1252.260225][T16907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.260265][T16907] futex_wake+0x119/0x5f0 [ 1252.260306][T16907] ? __lock_acquire+0x747/0x2de0 [ 1252.260336][T16907] ? __pfx_futex_wake+0x10/0x10 [ 1252.260382][T16907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.260411][T16907] ? __lock_acquire+0x747/0x2de0 [ 1252.260446][T16907] do_futex+0x458/0x4e0 [ 1252.260486][T16907] ? __pfx_do_futex+0x10/0x10 [ 1252.260516][T16907] ? __mutex_unlock_slowpath+0x731/0x900 [ 1252.260557][T16907] __se_sys_futex+0x3a8/0x450 [ 1252.260595][T16907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.260628][T16907] ? __pfx___se_sys_futex+0x10/0x10 [ 1252.260660][T16907] ? percpu_ref_put+0x1e/0x230 [ 1252.260687][T16907] ? percpu_ref_put+0x1e/0x230 [ 1252.260720][T16907] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.260750][T16907] ? __x64_sys_futex+0x21/0xf0 [ 1252.260787][T16907] do_syscall_64+0x166/0x520 [ 1252.260813][T16907] ? trace_irq_disable+0x3b/0x140 [ 1252.260840][T16907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.260873][T16907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.260900][T16907] RIP: 0033:0x7fbf72b9e159 [ 1252.260923][T16907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.260944][T16907] RSP: 002b:00007fbf73ad90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1252.260972][T16907] RAX: ffffffffffffffda RBX: 00007fbf72e25fa8 RCX: 00007fbf72b9e159 [ 1252.260991][T16907] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbf72e25fac [ 1252.261009][T16907] RBP: 00007fbf72e25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1252.261028][T16907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1252.261044][T16907] R13: 00007fbf72e26038 R14: 00007ffe8dc005a0 R15: 00007ffe8dc00688 [ 1252.261088][T16907] [ 1253.380176][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2701'. [ 1253.380204][T16925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2701'. [ 1253.710333][ T52] Bluetooth: hci3: command tx timeout [ 1253.794496][T10015] team0 (unregistering): Port device team_slave_1 removed [ 1253.841226][T10015] team0 (unregistering): Port device team_slave_0 removed [ 1254.125089][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1255.339414][T16953] xt_hashlimit: size too large, truncated to 1048576 [ 1256.544441][T16962] lo speed is unknown, defaulting to 1000 [ 1256.576423][ T52] Bluetooth: hci3: command tx timeout [ 1256.755202][T16952] loop5: detected capacity change from 0 to 4096 [ 1257.040253][ T30] audit: type=1800 audit(1789072037.782:431): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2709" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 1258.116601][T16803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.118148][T16803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.118320][T16803] bridge_slave_0: entered allmulticast mode [ 1258.128050][T16803] bridge_slave_0: entered promiscuous mode [ 1258.145642][T16803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.145752][T16803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.145889][T16803] bridge_slave_1: entered allmulticast mode [ 1258.173380][T16803] bridge_slave_1: entered promiscuous mode [ 1258.377802][T16803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.400056][T16803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.560174][ T25] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1258.609565][T16803] team0: Port device team_slave_0 added [ 1258.627637][T16803] team0: Port device team_slave_1 added [ 1258.710891][ T25] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1258.714425][ T25] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1258.714454][ T25] usb 3-1: Product: syz [ 1258.714472][ T25] usb 3-1: Manufacturer: syz [ 1258.714491][ T25] usb 3-1: SerialNumber: syz [ 1258.762690][ T25] usb 3-1: config 0 descriptor?? [ 1258.806332][T16980] loop0: detected capacity change from 0 to 32768 [ 1258.840744][T16980] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1258.876246][T16803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.876266][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.876299][T16803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.958914][T16980] XFS (loop0): Ending clean mount [ 1258.968543][T16803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.968561][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.968593][T16803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.981912][T17010] FAULT_INJECTION: forcing a failure. [ 1258.981912][T17010] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.981949][T17010] CPU: 1 UID: 0 PID: 17010 Comm: syz.5.2723 Tainted: G L syzkaller #0 PREEMPT(full) [ 1258.981986][T17010] Tainted: [L]=SOFTLOCKUP [ 1258.981996][T17010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1258.982012][T17010] Call Trace: [ 1258.982023][T17010] [ 1258.982033][T17010] dump_stack_lvl+0xe8/0x150 [ 1258.982075][T17010] should_fail_ex+0x410/0x560 [ 1258.982115][T17010] should_failslab+0xa8/0x100 [ 1258.982151][T17010] __kmalloc_noprof+0xfe/0x720 [ 1258.982175][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1258.982208][T17010] ? ioctx_add_table+0x13d/0x4c0 [ 1258.982235][T17010] ? ioctx_add_table+0x13d/0x4c0 [ 1258.982271][T17010] ioctx_add_table+0x13d/0x4c0 [ 1258.982301][T17010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1258.982336][T17010] ioctx_alloc+0x4a9/0x830 [ 1258.982370][T17010] __se_sys_io_setup+0x7b/0x1d0 [ 1258.982412][T17010] do_syscall_64+0x166/0x520 [ 1258.982440][T17010] ? trace_irq_disable+0x3b/0x140 [ 1258.982466][T17010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.982499][T17010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.982525][T17010] RIP: 0033:0x7f9cda59e159 [ 1258.982549][T17010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.982570][T17010] RSP: 002b:00007f9cdb456028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1258.982597][T17010] RAX: ffffffffffffffda RBX: 00007f9cda825fa0 RCX: 00007f9cda59e159 [ 1258.982616][T17010] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 1258.982633][T17010] RBP: 00007f9cda63503b R08: 0000000000000000 R09: 0000000000000000 [ 1258.982649][T17010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1258.982665][T17010] R13: 00007f9cda826038 R14: 00007f9cda825fa0 R15: 00007ffc48b1feb8 [ 1258.982705][T17010] [ 1259.046941][T16980] XFS (loop0): Quotacheck needed: Please wait. [ 1259.203072][ T25] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1259.350919][T16980] XFS (loop0): Quotacheck: Done. [ 1259.395260][T16803] hsr_slave_0: entered promiscuous mode [ 1259.402916][ T25] peak_usb 3-1:0.0 can0: sending command failure: -8 [ 1259.403000][ T25] peak_usb 3-1:0.0 can0: sending command failure: -8 [ 1259.403093][ T25] peak_usb 3-1:0.0 can0: sending command failure: -8 [ 1259.404224][T16803] hsr_slave_1: entered promiscuous mode [ 1259.408515][T16803] debugfs: 'hsr0' already exists in 'hsr' [ 1259.408536][T16803] Cannot create hsr debugfs directory [ 1260.752515][ T5621] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1261.001849][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1261.018082][T17033] lo speed is unknown, defaulting to 1000 [ 1261.116888][ T25] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -8 [ 1261.144272][ T25] usb 3-1: USB disconnect, device number 37 [ 1261.511244][T17042] bridge0: port 3(bond1) entered blocking state [ 1261.511461][T17042] bridge0: port 3(bond1) entered disabled state [ 1261.512914][T17042] bond1: entered allmulticast mode [ 1261.519314][T17042] bond1: entered promiscuous mode [ 1262.533242][T17054] FAULT_INJECTION: forcing a failure. [ 1262.533242][T17054] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1262.533376][T17054] CPU: 0 UID: 0 PID: 17054 Comm: syz.2.2736 Tainted: G L syzkaller #0 PREEMPT(full) [ 1262.533413][T17054] Tainted: [L]=SOFTLOCKUP [ 1262.533425][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1262.533440][T17054] Call Trace: [ 1262.533452][T17054] [ 1262.533463][T17054] dump_stack_lvl+0xe8/0x150 [ 1262.533508][T17054] should_fail_ex+0x410/0x560 [ 1262.533544][T17054] get_futex_key+0x1b4/0x1580 [ 1262.533580][T17054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1262.533621][T17054] ? __pfx_get_futex_key+0x10/0x10 [ 1262.533651][T17054] ? ioctx_add_table+0x13d/0x4c0 [ 1262.533678][T17054] ? ioctx_alloc+0x4a9/0x830 [ 1262.533703][T17054] ? __se_sys_io_setup+0x7b/0x1d0 [ 1262.533741][T17054] ? do_syscall_64+0x166/0x520 [ 1262.533770][T17054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.533811][T17054] futex_wake+0x119/0x5f0 [ 1262.533853][T17054] ? __lock_acquire+0x747/0x2de0 [ 1262.533883][T17054] ? __pfx_futex_wake+0x10/0x10 [ 1262.533931][T17054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1262.533962][T17054] ? __lock_acquire+0x747/0x2de0 [ 1262.533997][T17054] do_futex+0x458/0x4e0 [ 1262.534038][T17054] ? __pfx_do_futex+0x10/0x10 [ 1262.534069][T17054] ? __mutex_unlock_slowpath+0x731/0x900 [ 1262.534132][T17054] __se_sys_futex+0x3a8/0x450 [ 1262.534175][T17054] ? __pfx___se_sys_futex+0x10/0x10 [ 1262.534210][T17054] ? rcu_is_watching+0x16/0xb0 [ 1262.534249][T17054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1262.534280][T17054] ? __x64_sys_futex+0x21/0xf0 [ 1262.534318][T17054] do_syscall_64+0x166/0x520 [ 1262.534346][T17054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.534380][T17054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.534407][T17054] RIP: 0033:0x7fbf72b9e159 [ 1262.534431][T17054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.534454][T17054] RSP: 002b:00007fbf73ad90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1262.534482][T17054] RAX: ffffffffffffffda RBX: 00007fbf72e25fa8 RCX: 00007fbf72b9e159 [ 1262.534502][T17054] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbf72e25fac [ 1262.534520][T17054] RBP: 00007fbf72e25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1262.534539][T17054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1262.534556][T17054] R13: 00007fbf72e26038 R14: 00007ffe8dc005a0 R15: 00007ffe8dc00688 [ 1262.534596][T17054] [ 1265.717716][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1265.724503][T16803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1265.759614][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1265.768920][T16803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1265.795269][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1265.796340][T16803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1265.853265][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1265.860626][T16803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1265.927208][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1266.140798][ T5837] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1266.225726][T17136] loop5: detected capacity change from 0 to 128 [ 1266.277577][T17136] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1266.279883][T17136] ext4 filesystem being mounted at /531/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1266.304089][T17136] fscrypt (loop5, inode 12): Direct key flag not allowed with different contents and filenames modes [ 1266.321182][ T5837] usb 1-1: Using ep0 maxpacket: 16 [ 1266.327154][ T5837] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1266.338393][ T5837] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1266.338438][ T5837] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1266.338480][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.353460][ T5837] usb 1-1: config 0 descriptor?? [ 1266.386448][T16803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.503051][T16803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.517922][ T5611] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1266.582622][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.582735][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.675882][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.675999][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.797996][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2759'. [ 1266.864730][ T5837] magicmouse 0003:05AC:0269.000B: reserved main item tag 0xe [ 1266.864766][ T5837] magicmouse 0003:05AC:0269.000B: item fetching failed at offset 36/40 [ 1266.865604][ T5837] magicmouse 0003:05AC:0269.000B: magicmouse hid parse failed [ 1266.865710][ T5837] magicmouse 0003:05AC:0269.000B: probe with driver magicmouse failed with error -22 [ 1267.098126][ T25] usb 1-1: USB disconnect, device number 19 [ 1268.243563][T17180] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1268.253231][ T25] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1268.543686][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 1268.544078][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1268.693374][ T25] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1268.693409][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.693431][ T25] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1268.693495][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.712158][ T25] usb 3-1: config 0 descriptor?? [ 1268.777325][ T25] uvcvideo 3-1:0.0: Found UVC 9.00 device (046d:0825) [ 1269.628111][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1269.757644][ T25] uvcvideo 3-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1269.793823][ T25] uvcvideo 3-1:0.1: Failed to initialize the device (-71). [ 1269.794440][ T25] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -71 [ 1269.844662][ T25] usb 3-1: USB disconnect, device number 38 [ 1269.972279][T16803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1270.104614][T16803] veth0_vlan: entered promiscuous mode [ 1270.138083][T16803] veth1_vlan: entered promiscuous mode [ 1270.174249][T16803] veth0_macvtap: entered promiscuous mode [ 1270.199588][T17218] loop0: detected capacity change from 0 to 164 [ 1270.213353][T16803] veth1_macvtap: entered promiscuous mode [ 1270.249499][T17219] rnbd_client L127: Can't parse path ip:1: -22 [ 1270.263778][T16803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.300982][T16803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.340886][ T5872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.453516][T10015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.482412][ T1170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.496639][ T5872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.659971][ T5872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.660089][ T5872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.732476][ T5872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.732502][ T5872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.393355][ T25] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1271.541320][ T25] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1271.545472][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.545498][ T25] usb 6-1: config 0 has no interfaces? [ 1271.550770][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.550797][ T25] usb 6-1: Product: syz [ 1271.550814][ T25] usb 6-1: Manufacturer: syz [ 1271.550830][ T25] usb 6-1: SerialNumber: syz [ 1271.592261][ T25] usb 6-1: config 0 descriptor?? [ 1271.858508][ T31] usb 6-1: USB disconnect, device number 41 [ 1271.969132][T17273] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2794'. [ 1271.969396][T17273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.969700][T17273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.994262][T17273] bridge0: entered promiscuous mode [ 1272.647462][T17292] netlink: 'syz.8.2802': attribute type 12 has an invalid length. [ 1272.647488][T17292] netlink: 'syz.8.2802': attribute type 29 has an invalid length. [ 1272.647505][T17292] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2802'. [ 1273.011734][ T5837] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1273.167569][ T5837] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1273.168680][ T5837] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.168729][ T5837] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1273.168755][ T5837] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1273.168782][ T5837] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1273.168829][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.560186][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1273.661682][ T5837] gud 4-1:1.0: No supported pixel formats found [ 1273.661717][ T5837] gud 4-1:1.0: probe with driver gud failed with error -22 [ 1273.741187][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 1273.743779][T17336] netlink: 'syz.5.2815': attribute type 12 has an invalid length. [ 1273.963144][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1273.964092][ T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1274.211587][ T31] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 1274.211912][ T31] usb 1-1: config 127 has no interface number 0 [ 1274.213383][ T31] usb 1-1: config 127 interface 124 has no altsetting 0 [ 1274.243897][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.243927][ T31] usb 1-1: Product: syz [ 1274.243945][ T31] usb 1-1: Manufacturer: syz [ 1274.243963][ T31] usb 1-1: SerialNumber: syz [ 1274.608984][ T5871] usb 4-1: USB disconnect, device number 2 [ 1275.168055][ T31] usb 1-1: reset high-speed USB device number 20 using dummy_hcd [ 1275.358472][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1275.510085][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2825'. [ 1275.600315][ T31] usb 1-1: failed to restore interface 124 altsetting 11 (error=-71) [ 1275.628564][ T31] usb 1-1: USB disconnect, device number 20 [ 1275.662901][T17378] fuse: fd is not a fuse device [ 1275.738503][T17371] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.111010][T17371] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.641651][T17371] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.650865][ T5871] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1276.671526][T17400] netlink: 'syz.2.2833': attribute type 12 has an invalid length. [ 1276.857828][ T5871] usb 1-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 1276.872800][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1276.872838][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1276.921765][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.922230][ T5871] usb 1-1: Product: syz [ 1276.922249][ T5871] usb 1-1: Manufacturer: syz [ 1276.922267][ T5871] usb 1-1: SerialNumber: syz [ 1277.232997][T17371] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.324294][ T5871] kaweth 1-1:1.0: Firmware present in device. [ 1277.478776][ T5871] kaweth 1-1:1.0: Statistics collection: 0 [ 1277.478797][ T5871] kaweth 1-1:1.0: Multicast filter limit: 0 [ 1277.478811][ T5871] kaweth 1-1:1.0: MTU: 0 [ 1277.478823][ T5871] kaweth 1-1:1.0: Read MAC address 00:00:00:00:00:00 [ 1277.525021][T17414] netlink: 'syz.8.2838': attribute type 12 has an invalid length. [ 1277.847574][T17422] macvlan2: entered promiscuous mode [ 1277.847603][T17422] bridge0: entered promiscuous mode [ 1277.910419][ T5871] kaweth 1-1:1.0: Error setting SOFS wait [ 1277.910654][ T5871] kaweth 1-1:1.0: probe with driver kaweth failed with error -5 [ 1277.938612][ T5871] usb 1-1: USB disconnect, device number 21 [ 1278.200252][T17429] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2843'. [ 1278.203695][ T1170] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.441213][T13633] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.441258][T13633] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.631104][T13633] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.335404][T17454] lo speed is unknown, defaulting to 1000 [ 1280.610753][ T2261] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1280.760963][ T2261] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1280.762032][ T2261] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.762067][ T2261] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.762109][ T2261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.815976][ T2261] usb 6-1: config 0 descriptor?? [ 1281.229876][T17482] loop3: detected capacity change from 0 to 32768 [ 1281.253790][T17482] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2857 (17482) [ 1281.256264][T17489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2859'. [ 1281.319979][T17482] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1281.320061][T17482] BTRFS info (device loop3): using crc32c checksum algorithm [ 1281.455274][ T2261] hid-led 0003:27B8:01ED.000C: probe with driver hid-led failed with error -71 [ 1281.488003][ T2261] usb 6-1: USB disconnect, device number 42 [ 1281.566938][T17482] BTRFS info (device loop3): enabling ssd optimizations [ 1281.566969][T17482] BTRFS info (device loop3): turning on flush-on-commit [ 1281.566990][T17482] BTRFS info (device loop3): enabling free space tree [ 1281.567011][T17482] BTRFS info (device loop3): enabling auto defrag [ 1281.567031][T17482] BTRFS info (device loop3): use lzo compression, level 1 [ 1281.567055][T17482] BTRFS info (device loop3): max_inline set to 0 [ 1281.851373][T16803] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1282.256476][T17529] fuse: fd is not a fuse device [ 1282.457043][T17535] 9p: Bad value for 'wfdno' [ 1283.449240][T17565] netlink: 'syz.5.2880': attribute type 29 has an invalid length. [ 1283.467037][T17565] netlink: 'syz.5.2880': attribute type 29 has an invalid length. [ 1283.481617][T17565] netlink: 'syz.5.2880': attribute type 29 has an invalid length. [ 1283.637766][T17572] netlink: 'syz.8.2882': attribute type 12 has an invalid length. [ 1284.050713][ T30] audit: type=1326 audit(1789072064.612:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.2.2884" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72b9e159 code=0x7ffc0000 [ 1284.050778][ T30] audit: type=1326 audit(1789072064.722:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.2.2884" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf72b9e159 code=0x7ffc0000 [ 1285.168224][T17610] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2894'. [ 1285.174557][T17612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2895'. [ 1285.409636][ T2261] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1285.581389][ T2261] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 1285.582645][ T2261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.582679][ T2261] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1285.582725][ T2261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.585977][ T2261] usb 1-1: config 0 descriptor?? [ 1285.770172][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1285.842844][T17613] netlink: 91 bytes leftover after parsing attributes in process `syz.0.2896'. [ 1285.851961][ T2261] usbhid 1-1:0.0: can't add hid device: -71 [ 1285.852074][ T2261] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1285.868368][ T2261] usb 1-1: USB disconnect, device number 22 [ 1285.920082][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 1285.920834][ T31] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1285.921981][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.927536][ T31] usb 4-1: config 0 descriptor?? [ 1286.184763][ T31] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1286.198651][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1286.211122][ T31] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1286.211196][ T31] usb 4-1: media controller created [ 1286.271701][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1286.387284][ T31] az6027: usb out operation failed. (-71) [ 1286.387797][ T31] az6027: usb out operation failed. (-71) [ 1286.387811][ T31] stb0899_attach: Driver disabled by Kconfig [ 1286.387824][ T31] az6027: no front-end attached [ 1286.387824][ T31] [ 1286.388198][ T31] az6027: usb out operation failed. (-71) [ 1286.388214][ T31] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1286.442002][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 1286.470524][ T31] dvb-usb: schedule remote query interval to 400 msecs. [ 1286.470548][ T31] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1286.475096][ T31] usb 4-1: USB disconnect, device number 3 [ 1286.975419][ T31] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1288.332840][T17698] loop3: detected capacity change from 0 to 8192 [ 1288.390070][ T30] audit: type=1800 audit(1789072069.132:434): pid=17698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2922" name="file2" dev="loop3" ino=1048823 res=0 errno=0 [ 1288.425836][T17661] loop5: detected capacity change from 0 to 32768 [ 1288.559032][T17709] loop0: detected capacity change from 0 to 8192 [ 1289.292671][T17661] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1289.471293][T17661] XFS (loop5): Ending clean mount [ 1289.487760][T17661] XFS (loop5): Quotacheck needed: Please wait. [ 1289.667771][ T5621] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 1289.667797][ T5621] FAT-fs (loop0): Filesystem has been set read-only [ 1289.890183][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1289.987187][T17661] XFS (loop5): Quotacheck: Done. [ 1290.043716][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 1290.044454][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1290.045516][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.045549][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.045575][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1290.045621][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.048763][ T25] usb 4-1: config 0 descriptor?? [ 1290.192963][ T5611] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1290.569480][ T25] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1290.784999][ T25] usb 4-1: USB disconnect, device number 4 [ 1290.889121][T17752] xt_hashlimit: max too large, truncated to 1048576 [ 1290.976436][T17749] fido_id[17749]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1291.181393][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2933'. [ 1291.181458][T17763] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2933'. [ 1293.746493][T17789] loop0: detected capacity change from 0 to 131072 [ 1293.760348][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2955'. [ 1293.760376][T17797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2955'. [ 1293.900163][T17789] F2FS-fs (loop0): invalid crc value [ 1294.088467][T17789] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1294.115191][T17789] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1295.074951][T17836] loop5: detected capacity change from 0 to 256 [ 1295.219206][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 1295.810890][ T5837] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1295.965955][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 1295.968436][ T5837] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1295.974051][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.974181][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1295.974213][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1295.974239][ T5837] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1295.974265][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1295.981901][ T5837] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1295.981931][ T5837] usb 4-1: Manufacturer: syz [ 1296.003388][ T5837] usb 4-1: config 0 descriptor?? [ 1297.171942][T17864] Can't find ip_set type hash:n [ 1297.193057][ T5837] rc_core: IR keymap rc-hauppauge not found [ 1297.193074][ T5837] Registered IR keymap rc-empty [ 1297.193811][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1297.211529][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1297.232417][ T5837] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1297.235136][ T5837] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 1297.298597][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1297.324115][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1297.340487][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1297.360672][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1297.382219][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1297.402648][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1297.421206][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1297.440667][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1297.460486][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1297.480720][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1297.514145][ T5837] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1297.514167][ T5837] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1297.564555][ T5837] usb 4-1: USB disconnect, device number 5 [ 1298.227453][T17857] loop5: detected capacity change from 0 to 40427 [ 1298.243285][T17857] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1298.243313][T17857] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1298.989103][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2986'. [ 1298.989124][T17911] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2986'. [ 1299.293554][T17857] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1299.515579][T17930] netlink: 'syz.2.2991': attribute type 12 has an invalid length. [ 1299.591315][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.591417][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.492432][T17932] Can't find ip_set type hash:n [ 1301.651005][T17970] loop3: detected capacity change from 0 to 256 [ 1302.033102][ T2261] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1302.092158][T17950] loop0: detected capacity change from 0 to 32768 [ 1302.096937][T17950] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2997 (17950) [ 1302.152960][T17950] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1302.152998][T17950] BTRFS info (device loop0): using sha256 checksum algorithm [ 1302.180554][ T2261] usb 6-1: Using ep0 maxpacket: 8 [ 1302.271153][ T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1302.336514][T17950] BTRFS info (device loop0): turning off barriers [ 1302.336546][T17950] BTRFS info (device loop0): enabling free space tree [ 1302.431050][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 1302.431797][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1302.432998][ T25] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1302.433024][ T25] usb 3-1: config 0 has no interface number 0 [ 1302.433077][ T25] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1302.433107][ T25] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1302.437067][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.437095][ T25] usb 3-1: Product: syz [ 1302.437112][ T25] usb 3-1: Manufacturer: syz [ 1302.437130][ T25] usb 3-1: SerialNumber: syz [ 1302.505933][ T2261] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1302.505988][ T2261] usb 6-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=32.e2 [ 1302.511317][ T2261] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1302.511358][ T2261] usb 6-1: can't read configurations, error -71 [ 1302.594776][ T25] usb 3-1: config 0 descriptor?? [ 1302.620538][T18010] netlink: 'syz.3.3010': attribute type 12 has an invalid length. [ 1303.381586][ T5621] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1303.703461][ T25] appletouch 3-1:0.85: Geyser mode initialized. [ 1303.710828][ T25] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input32 [ 1303.985636][ T25] usb 3-1: USB disconnect, device number 39 [ 1304.231340][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3013'. [ 1304.231379][T18035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3013'. [ 1305.212239][ T25] appletouch 3-1:0.85: input: appletouch disconnected [ 1305.467369][T18047] netlink: 'syz.6.3018': attribute type 12 has an invalid length. [ 1306.299380][T18070] loop3: detected capacity change from 0 to 7 [ 1306.343262][T14482] Buffer I/O error on dev loop3, logical block 0, async page read [ 1306.367858][T14482] Buffer I/O error on dev loop3, logical block 0, async page read [ 1306.368436][T14482] Buffer I/O error on dev loop3, logical block 0, async page read [ 1306.369001][T14482] Buffer I/O error on dev loop3, logical block 0, async page read [ 1306.398973][T14482] Buffer I/O error on dev loop3, logical block 0, async page read [ 1306.529494][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3027'. [ 1306.529521][T18067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3027'. [ 1306.830813][T11767] Bluetooth: hci3: link tx timeout [ 1306.830987][T11767] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1308.090272][ T30] audit: type=1807 audit(1789072088.832:435): func=FILE_CHECK res=0 [ 1308.099587][ T30] audit: type=1802 audit(1789072088.842:436): pid=18109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.3041" res=0 errno=0 [ 1308.136208][T18107] ima: policy update failed [ 1308.136386][ T30] audit: type=1802 audit(1789072088.882:437): pid=18107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3041" res=0 errno=0 [ 1308.356880][T18087] loop3: detected capacity change from 0 to 2048 [ 1308.419244][T18087] NILFS (loop3): invalid segment: Magic number mismatch [ 1308.419274][T18087] NILFS (loop3): trying rollback from an earlier position [ 1308.514184][T18087] NILFS (loop3): recovery complete [ 1308.738219][T18114] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1308.802731][T18066] loop0: detected capacity change from 0 to 32768 [ 1308.910468][T11767] Bluetooth: hci3: command 0x0406 tx timeout [ 1309.000780][T18066] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1309.059459][T18087] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 1309.062665][T18087] NILFS (loop3): nilfs_sufile_do_free: segment 5 is already clean [ 1309.062689][T18087] NILFS (loop3): nilfs_sufile_do_free: segment 5 is already clean [ 1309.062788][T18087] NILFS (loop3): nilfs_sufile_do_cancel_free: segment 5 must be clean [ 1309.063011][T18087] NILFS (loop3): nilfs_sufile_do_free: segment 5 is already clean [ 1309.974191][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3049'. [ 1309.974319][T18149] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3049'. [ 1310.003067][ T5837] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1310.022735][ T5621] ocfs2: Unmounting device (7,0) on (node local) [ 1310.223175][ T5837] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1310.224364][ T5837] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1310.224393][ T5837] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1310.231455][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.231483][ T5837] usb 3-1: Product: syz [ 1310.231501][ T5837] usb 3-1: Manufacturer: syz [ 1310.231548][ T5837] usb 3-1: SerialNumber: syz [ 1310.300782][T18154] netlink: 'syz.6.3055': attribute type 12 has an invalid length. [ 1310.630608][ T5837] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1310.672232][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1310.801662][ T5837] usb 3-1: USB disconnect, device number 40 [ 1310.821756][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1310.825928][ T25] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1310.848344][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.887878][ T25] usb 4-1: config 0 descriptor?? [ 1311.006551][ T5837] usblp0: removed [ 1311.126201][ T25] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1311.141797][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1311.143260][ T25] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1311.143310][ T25] usb 4-1: media controller created [ 1311.199533][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1311.350618][ T25] az6027: usb out operation failed. (-71) [ 1311.350991][ T25] az6027: usb out operation failed. (-71) [ 1311.351006][ T25] stb0899_attach: Driver disabled by Kconfig [ 1311.351017][ T25] az6027: no front-end attached [ 1311.351017][ T25] [ 1311.351373][ T25] az6027: usb out operation failed. (-71) [ 1311.351388][ T25] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1311.425499][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 1311.452200][ T25] dvb-usb: schedule remote query interval to 400 msecs. [ 1311.452225][ T25] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1311.519918][ T25] usb 4-1: USB disconnect, device number 6 [ 1311.676091][ T25] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1312.250163][ T5837] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1312.400079][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 1312.401525][ T5837] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1312.404708][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1312.404758][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.448966][ T5837] usb 1-1: config 0 descriptor?? [ 1312.558380][T18171] loop5: detected capacity change from 0 to 40427 [ 1312.571531][T18171] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 1312.571562][T18171] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1312.690637][ T5837] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1312.782479][T18171] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1312.812047][T18171] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1312.812077][T18171] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1312.911511][ T25] usb 1-1: USB disconnect, device number 23 [ 1313.176516][ T5611] syz-executor: attempt to access beyond end of device [ 1313.176516][ T5611] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1313.203112][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1313.203152][ T5611] Tainted: [L]=SOFTLOCKUP [ 1313.203162][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1313.203176][ T5611] Call Trace: [ 1313.203186][ T5611] [ 1313.203197][ T5611] dump_stack_lvl+0xe8/0x150 [ 1313.203238][ T5611] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1313.203279][ T5611] f2fs_write_end_bio+0x1211/0x16e0 [ 1313.203307][ T5611] ? blkg_put+0x22/0x240 [ 1313.203358][ T5611] __submit_merged_bio+0x258/0x6a0 [ 1313.203392][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.203422][ T5611] ? rcu_is_watching+0x16/0xb0 [ 1313.203460][ T5611] __submit_merged_write_cond+0x3c9/0x4e0 [ 1313.203506][ T5611] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1313.203558][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.203598][ T5611] f2fs_write_data_pages+0x2a27/0x36f0 [ 1313.203638][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.203674][ T5611] ? __lock_acquire+0x747/0x2de0 [ 1313.203738][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1313.203827][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.203857][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.203887][ T5611] ? __bfs+0x153/0x290 [ 1313.203913][ T5611] ? __pfx_hlock_conflict+0x10/0x10 [ 1313.203951][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.203994][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.204024][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.204054][ T5611] ? __lock_acquire+0x1511/0x2de0 [ 1313.204112][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1313.204155][ T5611] do_writepages+0x338/0x560 [ 1313.204184][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.204217][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.204253][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.204283][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 1313.204325][ T5611] filemap_fdatawrite+0x1e9/0x2f0 [ 1313.204358][ T5611] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1313.204430][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.204463][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.204501][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 1313.204544][ T5611] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1313.204589][ T5611] f2fs_write_checkpoint+0xa3d/0x2710 [ 1313.204619][ T5611] ? __lock_acquire+0x747/0x2de0 [ 1313.204690][ T5611] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1313.204715][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.204807][ T5611] kill_f2fs_super+0x2dd/0x700 [ 1313.204860][ T5611] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1313.204915][ T5611] ? call_rcu+0x64d/0x8b0 [ 1313.204947][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.204976][ T5611] ? lockdep_hardirqs_on+0x7b/0x110 [ 1313.205003][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.205049][ T5611] deactivate_locked_super+0xbc/0x110 [ 1313.205088][ T5611] cleanup_mnt+0x3d3/0x460 [ 1313.205121][ T5611] task_work_run+0x1d9/0x270 [ 1313.205155][ T5611] ? __pfx_task_work_run+0x10/0x10 [ 1313.205196][ T5611] exit_to_user_mode_loop+0x204/0x770 [ 1313.205224][ T5611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.205254][ T5611] ? rcu_is_watching+0x16/0xb0 [ 1313.205291][ T5611] do_syscall_64+0x328/0x520 [ 1313.205320][ T5611] ? trace_irq_disable+0x3b/0x140 [ 1313.205347][ T5611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.205382][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.205408][ T5611] RIP: 0033:0x7f9cda59f397 [ 1313.205432][ T5611] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1313.205454][ T5611] RSP: 002b:00007ffc48b1f128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1313.205482][ T5611] RAX: 0000000000000000 RBX: 00007f9cda63448b RCX: 00007f9cda59f397 [ 1313.205501][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc48b1f1e0 [ 1313.205518][ T5611] RBP: 00007ffc48b1f1e0 R08: 00007ffc48b201e0 R09: 00000000ffffffff [ 1313.205537][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc48b20270 [ 1313.205554][ T5611] R13: 00007f9cda63448b R14: 00000000001408da R15: 00007ffc48b202b0 [ 1313.205595][ T5611] [ 1313.219140][ T5611] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1314.067011][T18207] loop3: detected capacity change from 0 to 32768 [ 1314.112727][T18207] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1314.274435][T18207] XFS (loop3): Ending clean mount [ 1315.432857][T16803] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1315.482509][T18245] netlink: 'syz.8.3080': attribute type 12 has an invalid length. [ 1316.410460][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1316.500536][T16836] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1316.561117][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1316.562862][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1316.562887][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.562910][ T25] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1316.562934][ T25] usb 4-1: config 1 has no interface number 1 [ 1316.562978][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1316.563021][ T25] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x74, changing to 0x4 [ 1316.563051][ T25] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1316.565330][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.565358][ T25] usb 4-1: Product: syz [ 1316.565376][ T25] usb 4-1: Manufacturer: syz [ 1316.565394][ T25] usb 4-1: SerialNumber: syz [ 1316.570187][ T5837] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1316.662809][T16836] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1316.664559][T16836] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1316.664585][T16836] usb 1-1: config 1 has no interface number 0 [ 1316.664629][T16836] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1316.664675][T16836] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1316.664704][T16836] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.668200][T16836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.668227][T16836] usb 1-1: Product: syz [ 1316.668245][T16836] usb 1-1: Manufacturer: syz [ 1316.668263][T16836] usb 1-1: SerialNumber: syz [ 1316.690857][T18255] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1316.720246][ T5837] usb 6-1: Using ep0 maxpacket: 16 [ 1316.721032][ T5837] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1316.722422][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.722482][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1316.722508][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1316.722554][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.742177][ T5837] usb 6-1: config 0 descriptor?? [ 1316.901506][ T25] usb 4-1: Failed to set altset [ 1316.901562][ T25] usb 4-1: 0:2: cannot create sequencer device [ 1316.911442][T18255] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1316.944168][ T25] usb 4-1: Failed to set altset [ 1317.004421][ T25] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1317.020759][ T25] usb 4-1: USB disconnect, device number 7 [ 1317.115511][T14482] udevd[14482]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1317.173674][ T5837] hid_parser_main: 14 callbacks suppressed [ 1317.173708][ T5837] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1317.173736][ T5837] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 1317.193770][ T5837] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1317.193802][ T5837] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1317.193828][ T5837] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1317.193852][ T5837] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1317.193877][ T5837] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1317.193901][ T5837] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1317.193926][ T5837] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1317.193950][ T5837] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1317.193975][ T5837] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1317.292833][T16836] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1317.358089][T18278] bond0: (slave gtp0): refused to change device type [ 1317.409705][ T5837] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1317.440389][ T5837] usb 6-1: USB disconnect, device number 45 [ 1317.536775][T16836] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 1317.536808][T16836] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 1317.537442][T16836] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 1317.537466][T16836] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 1317.599871][T16836] usb 1-1: USB disconnect, device number 24 [ 1317.605616][T18282] fido_id[18282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1317.645363][T16836] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 1317.785802][T18287] loop3: detected capacity change from 0 to 4096 [ 1317.790973][ T2261] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1317.922572][T18291] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1317.941405][ T2261] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1317.946798][ T2261] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.946833][ T2261] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1317.946864][ T2261] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1317.946900][ T2261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.962705][ T2261] usb 3-1: config 0 descriptor?? [ 1318.035118][T16836] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1318.099392][T18294] loop5: detected capacity change from 0 to 1024 [ 1318.272090][T18294] hfsplus: invalid length 1280 has been corrected to 255 [ 1318.405433][T18296] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 1318.487494][ T2261] hid-multitouch 0003:0EEF:72C4.000F: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 1318.648529][ T5837] usb 3-1: USB disconnect, device number 41 [ 1318.854118][T18303] fido_id[18303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1319.348327][T18315] hub 8-0:1.0: USB hub found [ 1319.357380][T18315] hub 8-0:1.0: 1 port detected [ 1322.145823][T18307] lo speed is unknown, defaulting to 1000 [ 1324.146353][T18352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3120'. [ 1324.146382][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3120'. [ 1324.146411][T18352] netlink: 'syz.6.3120': attribute type 13 has an invalid length. [ 1324.285108][T18353] loop3: detected capacity change from 0 to 4096 [ 1324.302613][T18353] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1324.429252][T18353] ntfs3(loop3): ino=19, mi_enum_attr [ 1324.429278][T18353] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1324.832691][T18364] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3124'. [ 1326.733586][T18405] loop0: detected capacity change from 0 to 512 [ 1326.759431][T18405] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1326.759453][T18405] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1326.813434][T18405] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.3136: bad orphan inode 131083 [ 1326.813470][T18405] loop0: lost filesystem error report for type 5 error -117 [ 1326.847929][T18405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1327.011789][T18405] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.3136: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1327.040575][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1327.118576][T18416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'. [ 1327.118618][T18416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3139'. [ 1327.214457][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1327.291972][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.292104][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1327.292265][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.423601][ T10] usb 4-1: config 0 descriptor?? [ 1328.084867][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.145378][T18406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.148233][T18406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.171645][ T10] hid_parser_main: 12 callbacks suppressed [ 1328.171664][ T10] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 1328.171687][ T10] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 1328.171704][ T10] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 1328.171721][ T10] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 1328.171737][ T10] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 1328.171754][ T10] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 1328.171776][ T10] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 1328.171802][ T10] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 1328.171821][ T10] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 1328.171838][ T10] kye 0003:0458:0138.0010: unknown main item tag 0x0 [ 1328.172083][ T10] kye 0003:0458:0138.0010: unexpected long global item [ 1328.172632][ T10] kye 0003:0458:0138.0010: parse failed [ 1328.172686][ T10] kye 0003:0458:0138.0010: probe with driver kye failed with error -22 [ 1328.408657][T10539] usb 4-1: USB disconnect, device number 8 [ 1328.562470][T18433] loop5: detected capacity change from 0 to 256 [ 1328.620131][T18433] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 1328.620162][T18433] FAT-fs (loop5): Filesystem has been set read-only [ 1328.729114][T18401] lo speed is unknown, defaulting to 1000 [ 1330.000500][T18464] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3153'. [ 1330.368006][T18471] loop3: detected capacity change from 0 to 512 [ 1331.118084][T18457] loop5: detected capacity change from 0 to 32768 [ 1331.160677][T18457] (syz.5.3149,18457,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1331.184623][T18457] (syz.5.3149,18457,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1331.222612][ T25] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1331.293985][T18457] (syz.5.3149,18457,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1331.326598][T18457] JBD2: Ignoring recovery information on journal [ 1331.374063][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1331.387301][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.387328][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1331.387353][ T25] usb 3-1: config 1 has no interface number 0 [ 1331.387399][ T25] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.387429][ T25] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1331.387464][ T25] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1331.409693][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.409723][ T25] usb 3-1: Product: syz [ 1331.409741][ T25] usb 3-1: Manufacturer: syz [ 1331.409759][ T25] usb 3-1: SerialNumber: syz [ 1331.593513][T18457] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1331.941618][ T5611] ocfs2: Unmounting device (7,5) on (node local) [ 1332.354803][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1332.393959][ T25] cdc_ncm 3-1:1.1: bind() failure [ 1332.506423][ T25] usb 3-1: USB disconnect, device number 42 [ 1332.631344][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1332.786208][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1332.799481][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1332.800263][ T10] usb 1-1: config 0 has no interfaces? [ 1332.821552][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.821582][ T10] usb 1-1: Product: syz [ 1332.821599][ T10] usb 1-1: Manufacturer: syz [ 1332.821617][ T10] usb 1-1: SerialNumber: syz [ 1332.842781][ T10] usb 1-1: config 0 descriptor?? [ 1333.100370][ T10] usb 1-1: USB disconnect, device number 25 [ 1333.316557][T18534] loop5: detected capacity change from 0 to 8 [ 1333.332797][T18534] syz.5.3174: attempt to access beyond end of device [ 1333.332797][T18534] loop5: rw=8390656, sector=36028797018963960, nr_sectors = 16 limit=8 [ 1333.332885][T18534] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 1333.332945][T18534] unable to read xattr id index table [ 1333.386722][T18534] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3174'. [ 1333.520171][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1333.673884][ T10] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1333.679903][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1333.679937][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1333.680415][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1333.683868][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.683895][ T10] usb 3-1: Product: syz [ 1333.683913][ T10] usb 3-1: Manufacturer: syz [ 1333.683931][ T10] usb 3-1: SerialNumber: syz [ 1333.698655][ T10] usb 3-1: config 0 descriptor?? [ 1333.979337][T18505] loop3: detected capacity change from 0 to 40427 [ 1333.992986][T18505] F2FS-fs: heap/no_heap options were deprecated [ 1334.037083][T18505] F2FS-fs (loop3): build fault injection rate: 19 [ 1334.037111][T18505] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 1334.105195][T18505] F2FS-fs (loop3): invalid crc value [ 1334.228708][T18505] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 1334.449556][T18505] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 1334.629908][T18505] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1334.745135][T18505] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1335.968819][T18556] loop0: detected capacity change from 0 to 40427 [ 1335.998478][T18556] F2FS-fs (loop0): invalid crc value [ 1336.910750][T18556] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1336.961383][T18556] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 1336.961415][T18556] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1336.961444][T18556] F2FS-fs (loop0): Start checkpoint disabled! [ 1337.050855][T18556] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 1337.053681][T18556] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1337.142333][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3192'. [ 1337.142357][T18588] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3192'. [ 1338.457741][T10539] kernel read not supported for file /usbmon0 (pid: 10539 comm: kworker/1:3) [ 1339.008123][T18603] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3200'. [ 1339.062254][T18603] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3200'. [ 1340.355267][T18615] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1340.823484][T18628] netlink: 'syz.8.3209': attribute type 12 has an invalid length. [ 1341.611764][ T31] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1341.646181][ T30] audit: type=1400 audit(34097848.387:438): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=18645 comm="syz.0.3216" name="//o" offset=76 [ 1341.770884][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 1341.774059][ T31] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1341.775672][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.775722][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1341.775755][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1341.775780][ T31] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1341.775808][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1341.779048][ T31] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1341.779075][ T31] usb 6-1: Manufacturer: syz [ 1341.880752][ T31] usb 6-1: config 0 descriptor?? [ 1343.254755][T18657] loop0: detected capacity change from 0 to 131072 [ 1343.289936][T18657] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1343.290024][T18657] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1343.308536][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3220'. [ 1343.308557][T18655] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3220'. [ 1343.316939][T18657] F2FS-fs (loop0): invalid crc value [ 1343.427784][T18657] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1343.446266][T18657] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1343.446297][T18657] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1343.511372][ T31] rc_core: IR keymap rc-hauppauge not found [ 1343.511393][ T31] Registered IR keymap rc-empty [ 1343.511537][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1343.531673][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1343.561364][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1343.589899][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input36 [ 1343.608747][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1343.631067][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1343.650273][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1343.670942][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1343.690274][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1343.720239][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1343.740860][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1343.770502][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1343.792191][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1343.810133][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1343.837179][ T31] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1343.837239][ T31] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1343.897667][ T25] usb 6-1: USB disconnect, device number 46 [ 1344.578645][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3227'. [ 1344.578682][T18679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3227'. [ 1346.024275][T18690] xt_hashlimit: size too large, truncated to 1048576 [ 1346.653320][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3236'. [ 1346.653341][T18701] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3236'. [ 1347.280282][ T2261] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1347.431281][ T2261] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1347.433323][ T2261] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1347.433372][ T2261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.474890][ T2261] usb 6-1: config 0 descriptor?? [ 1347.477184][T18707] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1347.938357][ T2261] hid_parser_main: 70 callbacks suppressed [ 1347.938385][ T2261] uclogic 0003:5543:0064.0011: unknown main item tag 0x0 [ 1347.938414][ T2261] uclogic 0003:5543:0064.0011: unknown main item tag 0x0 [ 1347.938440][ T2261] uclogic 0003:5543:0064.0011: unknown main item tag 0x0 [ 1347.938585][ T2261] uclogic 0003:5543:0064.0011: unknown main item tag 0x0 [ 1347.938612][ T2261] uclogic 0003:5543:0064.0011: unknown main item tag 0x0 [ 1347.938637][ T2261] uclogic 0003:5543:0064.0011: unknown main item tag 0x0 [ 1347.938663][ T2261] uclogic 0003:5543:0064.0011: unknown main item tag 0x0 [ 1347.938688][ T2261] uclogic 0003:5543:0064.0011: unknown main item tag 0x0 [ 1347.938824][ T2261] uclogic 0003:5543:0064.0011: unknown main item tag 0x0 [ 1347.938849][ T2261] uclogic 0003:5543:0064.0011: unknown main item tag 0x0 [ 1347.982505][ T2261] uclogic 0003:5543:0064.0011: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.5-1/input0 [ 1348.212623][ T2261] usb 6-1: USB disconnect, device number 47 [ 1348.434350][T18737] loop0: detected capacity change from 0 to 1024 [ 1348.452260][T18737] EXT4-fs: Ignoring removed orlov option [ 1348.503054][T18737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1348.699440][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.694342][T18770] netlink: 'syz.8.3265': attribute type 12 has an invalid length. [ 1350.229537][T18758] loop5: detected capacity change from 0 to 32768 [ 1350.335284][T18765] loop3: detected capacity change from 0 to 40427 [ 1350.352487][T18765] F2FS-fs (loop3): Invalid log blocks per segment (1) [ 1350.352583][T18765] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1350.366500][T18765] F2FS-fs (loop3): invalid crc value [ 1350.718746][T18765] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1350.772754][T18765] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1350.772785][T18765] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1350.847134][T18780] f2fs_ckpt-7:3: attempt to access beyond end of device [ 1350.847134][T18780] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1350.889075][T18780] CPU: 1 UID: 0 PID: 18780 Comm: f2fs_ckpt-7:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.889118][T18780] Tainted: [L]=SOFTLOCKUP [ 1350.889128][T18780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1350.889143][T18780] Call Trace: [ 1350.889154][T18780] [ 1350.889164][T18780] dump_stack_lvl+0xe8/0x150 [ 1350.889198][T18780] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1350.889237][T18780] f2fs_write_end_bio+0x1211/0x16e0 [ 1350.889268][T18780] ? blkg_put+0x22/0x240 [ 1350.889321][T18780] __submit_merged_bio+0x258/0x6a0 [ 1350.889353][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.889378][T18780] ? rcu_is_watching+0x16/0xb0 [ 1350.889406][T18780] __submit_merged_write_cond+0x3c9/0x4e0 [ 1350.889452][T18780] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1350.889504][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.889544][T18780] f2fs_write_data_pages+0x2a27/0x36f0 [ 1350.889574][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.889596][T18780] ? __lock_acquire+0x747/0x2de0 [ 1350.889660][T18780] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1350.889714][T18780] ? arch_stack_walk+0x11b/0x150 [ 1350.889771][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.889793][T18780] ? add_lock_to_list+0xc7/0x100 [ 1350.889827][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.889860][T18780] ? __lock_acquire+0x1511/0x2de0 [ 1350.889917][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.889943][T18780] ? do_raw_spin_lock+0x12b/0x2f0 [ 1350.889980][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.890016][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.890045][T18780] ? do_raw_spin_unlock+0xf5/0x200 [ 1350.890083][T18780] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1350.890125][T18780] do_writepages+0x338/0x560 [ 1350.890155][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.890185][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.890215][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.890239][T18780] ? do_raw_spin_unlock+0xf5/0x200 [ 1350.890281][T18780] filemap_fdatawrite+0x1e9/0x2f0 [ 1350.890314][T18780] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1350.890383][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.890409][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.890436][T18780] ? do_raw_spin_unlock+0xf5/0x200 [ 1350.890477][T18780] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1350.890521][T18780] f2fs_write_checkpoint+0xa3d/0x2710 [ 1350.890584][T18780] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1350.890636][T18780] ? __pfx_down_write+0x10/0x10 [ 1350.890670][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.890706][T18780] ? rcu_is_watching+0x16/0xb0 [ 1350.890741][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.890775][T18780] __checkpoint_and_complete_reqs+0x135/0x480 [ 1350.890807][T18780] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 1350.890846][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.890879][T18780] ? schedule+0x90/0x2b0 [ 1350.890931][T18780] issue_checkpoint_thread+0xd5/0x270 [ 1350.890956][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.890986][T18780] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 1350.891006][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.891030][T18780] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1350.891065][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.891096][T18780] ? __kthread_parkme+0x71/0x1f0 [ 1350.891135][T18780] ? __kthread_parkme+0x199/0x1f0 [ 1350.891176][T18780] kthread+0x38b/0x480 [ 1350.891196][T18780] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 1350.891216][T18780] ? __pfx_kthread+0x10/0x10 [ 1350.891243][T18780] ret_from_fork+0x514/0xb70 [ 1350.891272][T18780] ? __pfx_ret_from_fork+0x10/0x10 [ 1350.891314][T18780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1350.891342][T18780] ? __switch_to+0xc89/0x1420 [ 1350.891377][T18780] ? __pfx_kthread+0x10/0x10 [ 1350.891397][T18780] ret_from_fork_asm+0x1a/0x30 [ 1350.891450][T18780] [ 1350.908830][T18780] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1350.980444][T18792] syz.3.3263: attempt to access beyond end of device [ 1350.980444][T18792] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1351.009063][T18792] syz.3.3263: attempt to access beyond end of device [ 1351.009063][T18792] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1351.631614][T18803] netlink: 'syz.6.3279': attribute type 12 has an invalid length. [ 1351.996030][T18810] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3283'. [ 1352.006307][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3280'. [ 1352.006328][T18808] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3280'. [ 1353.582501][T18857] netlink: 'syz.5.3295': attribute type 12 has an invalid length. [ 1354.102974][T18862] loop3: detected capacity change from 0 to 256 [ 1354.141701][T18862] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 1354.507823][T18869] binder: 18867:18869 ioctl c0306201 200000000640 returned -22 [ 1354.608181][ T10] iguanair 3-1:0.0: failed to get version [ 1354.608940][ T10] iguanair 3-1:0.0: probe with driver iguanair failed with error -110 [ 1354.638787][ T10] usb 3-1: USB disconnect, device number 43 [ 1354.980686][ T10] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 1355.091202][T18887] netlink: 'syz.8.3306': attribute type 12 has an invalid length. [ 1355.199263][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1355.200976][ T10] usb 3-1: config 0 has no interfaces? [ 1355.201011][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.221719][ T10] usb 3-1: config 0 descriptor?? [ 1355.629825][ T31] usb 3-1: USB disconnect, device number 44 [ 1355.894074][T18908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3311'. [ 1355.894113][T18908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3311'. [ 1357.127991][T18924] netlink: 'syz.5.3316': attribute type 12 has an invalid length. [ 1357.902071][T18942] loop0: detected capacity change from 0 to 16 [ 1357.931791][T18942] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 1357.932094][T18942] erofs (device loop0): mounted with root inode @ nid 36. [ 1358.014485][T18942] erofs (device loop0): readahead error at folio 7 @ nid 36 [ 1358.014535][T18942] erofs (device loop0): unknown algorithm 5 @ pos 28160 for nid 36, please upgrade kernel [ 1358.014559][T18942] erofs (device loop0): readahead error at folio 6 @ nid 36 [ 1358.014596][T18942] erofs (device loop0): unknown algorithm 6 @ pos 24064 for nid 36, please upgrade kernel [ 1358.014620][T18942] erofs (device loop0): readahead error at folio 5 @ nid 36 [ 1358.014655][T18942] erofs (device loop0): unknown algorithm 5 @ pos 19968 for nid 36, please upgrade kernel [ 1358.014678][T18942] erofs (device loop0): readahead error at folio 4 @ nid 36 [ 1358.014720][T18942] erofs (device loop0): not enough plain data on disk @ la 15360 of nid 36 [ 1358.014741][T18942] erofs (device loop0): readahead error at folio 3 @ nid 36 [ 1358.014769][T18942] erofs (device loop0): unknown algorithm 5 @ pos 11776 for nid 36, please upgrade kernel [ 1358.014791][T18942] erofs (device loop0): readahead error at folio 2 @ nid 36 [ 1358.014823][T18942] erofs (device loop0): readahead error at folio 1 @ nid 36 [ 1358.014847][T18942] erofs (device loop0): readahead error at folio 0 @ nid 36 [ 1358.014883][T18942] erofs (device loop0): read error -117 @ 0 of nid 36 [ 1358.014905][T18942] erofs (device loop0): failed to readdir of logical block 0 of nid 36 [ 1358.042686][T18942] erofs (device loop0): read error -117 @ 0 of nid 36 [ 1358.042717][T18942] erofs (device loop0): failed to readdir of logical block 0 of nid 36 [ 1358.343297][T18949] FAULT_INJECTION: forcing a failure. [ 1358.343297][T18949] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.343339][T18949] CPU: 1 UID: 0 PID: 18949 Comm: syz.0.3327 Tainted: G L syzkaller #0 PREEMPT(full) [ 1358.343375][T18949] Tainted: [L]=SOFTLOCKUP [ 1358.343385][T18949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1358.343401][T18949] Call Trace: [ 1358.343412][T18949] [ 1358.343424][T18949] dump_stack_lvl+0xe8/0x150 [ 1358.343466][T18949] should_fail_ex+0x410/0x560 [ 1358.343501][T18949] should_failslab+0xa8/0x100 [ 1358.343536][T18949] __kmalloc_noprof+0xfe/0x720 [ 1358.343560][T18949] ? prepare_creds+0x30/0x820 [ 1358.343589][T18949] ? security_prepare_creds+0x52/0x360 [ 1358.343616][T18949] ? security_prepare_creds+0x52/0x360 [ 1358.343645][T18949] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1358.343690][T18949] security_prepare_creds+0x52/0x360 [ 1358.343721][T18949] prepare_creds+0x57d/0x820 [ 1358.343755][T18949] cap_task_prctl+0x25a/0xaa0 [ 1358.343787][T18949] security_task_prctl+0xf6/0x190 [ 1358.343827][T18949] __se_sys_prctl+0xbf/0x1910 [ 1358.343863][T18949] ? __pfx___se_sys_prctl+0x10/0x10 [ 1358.343889][T18949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.343927][T18949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.343961][T18949] ? __x64_sys_prctl+0x20/0xc0 [ 1358.343992][T18949] do_syscall_64+0x166/0x520 [ 1358.344020][T18949] ? trace_irq_disable+0x3b/0x140 [ 1358.344047][T18949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.344080][T18949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.344106][T18949] RIP: 0033:0x7f213b99e159 [ 1358.344129][T18949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.344150][T18949] RSP: 002b:00007f213c8b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1358.344177][T18949] RAX: ffffffffffffffda RBX: 00007f213bc25fa0 RCX: 00007f213b99e159 [ 1358.344197][T18949] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000018 [ 1358.344213][T18949] RBP: 00007f213ba3503b R08: 0000000000000000 R09: 0000000000000000 [ 1358.344231][T18949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1358.344247][T18949] R13: 00007f213bc26038 R14: 00007f213bc25fa0 R15: 00007fff6057c378 [ 1358.344288][T18949] [ 1359.252230][T18972] loop5: detected capacity change from 0 to 128 [ 1359.705921][T18972] FAT-fs (loop5): Directory bread(block 1048) failed [ 1359.705980][T18972] FAT-fs (loop5): Directory bread(block 1049) failed [ 1359.706098][T18972] FAT-fs (loop5): Directory bread(block 1050) failed [ 1359.706168][T18972] FAT-fs (loop5): Directory bread(block 1051) failed [ 1359.706283][T18972] FAT-fs (loop5): Directory bread(block 1052) failed [ 1359.706353][T18972] FAT-fs (loop5): Directory bread(block 1053) failed [ 1359.706475][T18972] FAT-fs (loop5): Directory bread(block 1054) failed [ 1359.706597][T18972] FAT-fs (loop5): Directory bread(block 1055) failed [ 1360.499568][T18972] FAT-fs (loop5): Directory bread(block 1048) failed [ 1360.499610][T18972] FAT-fs (loop5): Directory bread(block 1049) failed [ 1360.992869][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.992977][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.100777][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'. [ 1361.100815][T19000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3341'. [ 1361.544482][T19002] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3344'. [ 1361.545136][T19002] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3344'. [ 1362.698496][T19026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1363.103499][T19040] input: syz0 as /devices/virtual/input/input38 [ 1363.103540][T19040] input: failed to attach handler leds to device input38, error: -6 [ 1363.896907][T19058] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1364.001234][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3366'. [ 1364.001262][T19063] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3366'. [ 1364.459314][T19072] loop3: detected capacity change from 0 to 128 [ 1364.497558][T19072] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1364.711442][ T30] audit: type=1400 audit(34097871.457:439): apparmor="STATUS" operation="profile_load" info="not privileged for target profile" error=-13 profile="unconfined" pid=19079 comm="syz.0.3373" [ 1364.757986][T16803] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1364.888309][T19088] loop5: detected capacity change from 0 to 128 [ 1364.889320][T19088] msdos: Bad value for 'gid' [ 1364.889341][T19088] msdos: Bad value for 'gid' [ 1364.971550][T19088] type: 2229836882 invalid [ 1365.080283][ T2261] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1365.227707][T19101] loop5: detected capacity change from 0 to 1024 [ 1365.234325][T19101] EXT4-fs: Ignoring removed orlov option [ 1365.237448][T19101] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1365.251216][ T2261] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1365.252588][ T2261] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1365.252619][ T2261] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1365.252645][ T2261] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1365.257101][ T2261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.257128][ T2261] usb 3-1: Product: syz [ 1365.257146][ T2261] usb 3-1: Manufacturer: syz [ 1365.257164][ T2261] usb 3-1: SerialNumber: syz [ 1365.368739][T19100] loop3: detected capacity change from 0 to 8192 [ 1365.390647][T19083] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1367.002982][ T2261] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1367.003012][ T2261] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1367.003058][ T2261] usbserial_generic 3-1:1.0: generic converter detected [ 1367.007117][T19101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1367.013142][ T2261] usb 3-1: generic converter now attached to ttyUSB0 [ 1367.086720][T19106] lo speed is unknown, defaulting to 1000 [ 1367.173363][ T2261] usb 3-1: USB disconnect, device number 45 [ 1367.207122][T19101] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 1367.246531][ T2261] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1367.247415][ T2261] usbserial_generic 3-1:1.0: device disconnected [ 1367.426405][T16803] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 1367.426499][T16803] FAT-fs (loop3): Filesystem has been set read-only [ 1367.637292][ T5611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.916506][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3388'. [ 1367.916551][T19122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3388'. [ 1368.593318][T19121] loop3: detected capacity change from 0 to 4096 [ 1370.665108][T19153] lo speed is unknown, defaulting to 1000 [ 1371.257923][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 1371.258008][T19170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3406'. [ 1373.124515][T19175] loop0: detected capacity change from 0 to 128 [ 1373.156639][T19175] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1374.145045][ T5621] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1374.528943][T19188] loop0: detected capacity change from 0 to 2048 [ 1374.609429][T19188] Alternate GPT is invalid, using primary GPT. [ 1374.609517][T19188] loop0: p1 p2 p3 [ 1375.096960][T19197] Context (ID=0x1) not attached to queue pair (handle=0x500:0x2) [ 1375.560144][ T5743] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1375.703275][T19212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1375.717138][ T5743] usb 6-1: Using ep0 maxpacket: 32 [ 1375.717966][ T5743] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1375.719285][ T5743] usb 6-1: config 0 has no interfaces? [ 1375.747520][ T5743] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1375.747545][ T5743] usb 6-1: Product: syz [ 1375.747558][ T5743] usb 6-1: Manufacturer: syz [ 1375.747571][ T5743] usb 6-1: SerialNumber: syz [ 1375.778572][ T5743] usb 6-1: config 0 descriptor?? [ 1375.842864][T19217] loop3: detected capacity change from 0 to 256 [ 1375.851114][T19217] exfat: Deprecated parameter 'namecase' [ 1375.884184][T19217] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1375.990323][T19201] netlink: 'syz.5.3419': attribute type 6 has an invalid length. [ 1375.993838][ T5743] usb 6-1: USB disconnect, device number 48 [ 1376.406679][T19227] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1376.664606][T19231] loop3: detected capacity change from 0 to 256 [ 1376.669439][T19231] exfat: Deprecated parameter 'utf8' [ 1376.693759][T19231] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 1376.703794][T19230] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1377.023135][T19247] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1377.025871][T19237] could not allocate digest TFM handle  [ 1377.050284][T19247] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1377.056158][T19247] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1377.196784][T19254] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1377.230734][ T31] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 1377.287152][T19257] netlink: 'syz.2.3442': attribute type 10 has an invalid length. [ 1377.401841][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1377.401897][ T31] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 1377.403994][ T31] usb 4-1: config 8 has an invalid interface number: 109 but max is 0 [ 1377.404021][ T31] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.404044][ T31] usb 4-1: config 8 has no interface number 0 [ 1377.404087][ T31] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 1377.404119][ T31] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1377.404150][ T31] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1377.407050][ T31] usb 4-1: string descriptor 0 read error: -22 [ 1377.407192][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.443619][T19262] loop8: detected capacity change from 0 to 8 [ 1377.461675][T19262] Dev loop8: unable to read RDB block 8 [ 1377.461711][T19262] loop8: unable to read partition table [ 1377.461936][T19262] loop8: partition table beyond EOD, truncated [ 1377.461972][T19262] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1377.540453][ T31] metro_usb 4-1:8.109: Metrologic USB to Serial converter detected [ 1377.543599][ T31] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1377.622340][ T5743] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1377.773795][ T5743] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1377.776951][ T5743] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.777011][ T5743] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1377.780983][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.781010][ T5743] usb 6-1: Product: syz [ 1377.781028][ T5743] usb 6-1: Manufacturer: syz [ 1377.781046][ T5743] usb 6-1: SerialNumber: syz [ 1377.784459][T19245] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 1377.794149][ T5871] usb 4-1: USB disconnect, device number 9 [ 1377.822890][ T5871] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1377.823495][ T5871] metro_usb 4-1:8.109: device disconnected [ 1378.006973][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3448'. [ 1378.007009][T19269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3448'. [ 1378.691676][T19279] loop0: detected capacity change from 0 to 256 [ 1378.692874][T19279] exfat: Deprecated parameter 'utf8' [ 1378.784248][T19279] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1380.137779][T19284] lo speed is unknown, defaulting to 1000 [ 1380.465899][ T5743] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 1380.487655][ T5743] cdc_ncm 6-1:1.0: bind() failure [ 1380.521841][ T5743] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1380.521891][ T5743] cdc_ncm 6-1:1.1: bind() failure [ 1380.547818][ T5743] usb 6-1: USB disconnect, device number 49 [ 1380.818281][T19299] loop0: detected capacity change from 0 to 256 [ 1381.379595][T19302] loop0: detected capacity change from 0 to 4096 [ 1382.367327][T19304] loop3: detected capacity change from 0 to 4096 [ 1382.396117][T19306] loop5: detected capacity change from 0 to 131072 [ 1382.434218][T19306] F2FS-fs (loop5): invalid crc value [ 1382.536206][T19306] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1382.541892][T19306] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1382.985559][T19319] loop0: detected capacity change from 0 to 764 [ 1382.992718][T19318] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3462'. [ 1383.129047][T19319] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 1383.334981][T19328] xt_hashlimit: size too large, truncated to 1048576 [ 1383.540205][ T5871] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1383.691145][ T5871] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1383.692364][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.692388][ T5871] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1383.692428][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.695550][ T5871] usb 4-1: config 0 descriptor?? [ 1384.864557][T19337] lo speed is unknown, defaulting to 1000 [ 1384.997633][ T31] usb 4-1: USB disconnect, device number 10 [ 1385.440598][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1385.643149][ T31] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1385.644166][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.644235][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1385.646734][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.646759][ T31] usb 4-1: Product: syz [ 1385.646775][ T31] usb 4-1: Manufacturer: syz [ 1385.646798][ T31] usb 4-1: SerialNumber: syz [ 1385.765402][T19361] loop5: detected capacity change from 0 to 512 [ 1385.768561][T19361] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1385.796684][T19361] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.3467: bad orphan inode 131083 [ 1385.796717][T19361] loop5: lost filesystem error report for type 5 error -117 [ 1385.825456][T19361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1385.971391][ T5611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.077019][T19367] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1386.143460][T19367] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1386.194299][ T31] usb 4-1: cannot create comm data receiver. [ 1386.201581][ T31] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -2 [ 1386.302738][T19373] netlink: 'syz.6.3487': attribute type 12 has an invalid length. [ 1386.372983][ T31] usb 4-1: USB disconnect, device number 11 [ 1386.529198][T19378] loop6: detected capacity change from 0 to 7 [ 1386.571643][T19378] Dev loop6: unable to read RDB block 7 [ 1386.571683][T19378] loop6: unable to read partition table [ 1386.571903][T19378] loop6: partition table beyond EOD, truncated [ 1386.571941][T19378] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1386.707258][T19382] FAULT_INJECTION: forcing a failure. [ 1386.707258][T19382] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.707301][T19382] CPU: 0 UID: 0 PID: 19382 Comm: syz.0.3492 Tainted: G L syzkaller #0 PREEMPT(full) [ 1386.707334][T19382] Tainted: [L]=SOFTLOCKUP [ 1386.707345][T19382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1386.707360][T19382] Call Trace: [ 1386.707371][T19382] [ 1386.707382][T19382] dump_stack_lvl+0xe8/0x150 [ 1386.707425][T19382] should_fail_ex+0x410/0x560 [ 1386.707459][T19382] should_failslab+0xa8/0x100 [ 1386.707492][T19382] ? alloc_vfsmnt+0x23/0x410 [ 1386.707521][T19382] kmem_cache_alloc_noprof+0xa1/0x600 [ 1386.707561][T19382] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1386.707595][T19382] ? alloc_vfsmnt+0x23/0x410 [ 1386.707631][T19382] alloc_vfsmnt+0x23/0x410 [ 1386.707663][T19382] clone_mnt+0x4b/0x9b0 [ 1386.707700][T19382] open_detached_copy+0x229/0x540 [ 1386.707728][T19382] ? do_getname+0x151/0x250 [ 1386.707772][T19382] vfs_open_tree+0x35d/0x3d0 [ 1386.707803][T19382] ? __pfx_vfs_open_tree+0x10/0x10 [ 1386.707843][T19382] __x64_sys_open_tree+0x96/0x110 [ 1386.707881][T19382] do_syscall_64+0x166/0x520 [ 1386.707910][T19382] ? trace_irq_disable+0x3b/0x140 [ 1386.707938][T19382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.707972][T19382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.707998][T19382] RIP: 0033:0x7f213b99e159 [ 1386.708021][T19382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.708043][T19382] RSP: 002b:00007f213c8b9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 1386.708069][T19382] RAX: ffffffffffffffda RBX: 00007f213bc25fa0 RCX: 00007f213b99e159 [ 1386.708090][T19382] RDX: 0000000000000101 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1386.708109][T19382] RBP: 00007f213ba3503b R08: 0000000000000000 R09: 0000000000000000 [ 1386.708126][T19382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.708141][T19382] R13: 00007f213bc26038 R14: 00007f213bc25fa0 R15: 00007fff6057c378 [ 1386.708180][T19382] [ 1386.976260][T19386] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1388.195085][T19391] lo speed is unknown, defaulting to 1000 [ 1390.018172][T19415] netlink: 'syz.5.3502': attribute type 12 has an invalid length. [ 1390.286854][T19418] loop3: detected capacity change from 0 to 64 [ 1390.705003][T19421] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3483'. [ 1390.833301][ T30] audit: type=1326 audit(34097897.577:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19413 comm="syz.6.3504" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27c4d9e159 code=0x0 [ 1390.881908][T19423] loop3: detected capacity change from 0 to 1024 [ 1391.019056][T19423] hfsplus: found bad thread record in catalog [ 1391.028698][T19423] hfsplus: bad catalog folder thread [ 1391.167591][T10018] hfsplus: found bad thread record in catalog [ 1391.311044][ T5871] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1391.473887][ T5871] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1391.482503][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1391.482531][ T5871] usb 6-1: Product: syz [ 1391.482549][ T5871] usb 6-1: SerialNumber: syz [ 1391.493284][ T5871] usb 6-1: config 0 descriptor?? [ 1391.719817][ T5871] hso 6-1:0.0: Failed to find BULK eps [ 1391.878415][T19448] FAULT_INJECTION: forcing a failure. [ 1391.878415][T19448] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.878458][T19448] CPU: 1 UID: 0 PID: 19448 Comm: syz.2.3515 Tainted: G L syzkaller #0 PREEMPT(full) [ 1391.878494][T19448] Tainted: [L]=SOFTLOCKUP [ 1391.878505][T19448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1391.878521][T19448] Call Trace: [ 1391.878532][T19448] [ 1391.878544][T19448] dump_stack_lvl+0xe8/0x150 [ 1391.878587][T19448] should_fail_ex+0x410/0x560 [ 1391.878623][T19448] should_failslab+0xa8/0x100 [ 1391.878660][T19448] __kmalloc_cache_noprof+0xa3/0x600 [ 1391.878688][T19448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.878719][T19448] ? call_usermodehelper_setup+0x8e/0x270 [ 1391.878752][T19448] ? call_usermodehelper_setup+0x8e/0x270 [ 1391.878793][T19448] ? __request_module+0x2ec/0x630 [ 1391.878830][T19448] call_usermodehelper_setup+0x8e/0x270 [ 1391.878866][T19448] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1391.878904][T19448] __request_module+0x3ba/0x630 [ 1391.878938][T19448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.878976][T19448] ? __pfx___request_module+0x10/0x10 [ 1391.879013][T19448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.879043][T19448] ? lock_acquire+0x115/0x350 [ 1391.879075][T19448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.879119][T19448] inet_create+0x411/0xff0 [ 1391.879147][T19448] ? inet_create+0x9d/0xff0 [ 1391.879178][T19448] __sock_create+0x4b3/0x9d0 [ 1391.879216][T19448] __sys_socket+0xd6/0x1b0 [ 1391.879247][T19448] __x64_sys_socket+0x7a/0x90 [ 1391.879276][T19448] do_syscall_64+0x166/0x520 [ 1391.879304][T19448] ? trace_irq_disable+0x3b/0x140 [ 1391.879332][T19448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.879365][T19448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.879393][T19448] RIP: 0033:0x7fbf72b9e159 [ 1391.879417][T19448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.879439][T19448] RSP: 002b:00007fbf73ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1391.879467][T19448] RAX: ffffffffffffffda RBX: 00007fbf72e25fa0 RCX: 00007fbf72b9e159 [ 1391.879487][T19448] RDX: 0000000000000011 RSI: 0000000000000005 RDI: 0000000000000002 [ 1391.879503][T19448] RBP: 00007fbf72c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1391.879521][T19448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.879538][T19448] R13: 00007fbf72e26038 R14: 00007fbf72e25fa0 R15: 00007ffe8dc00688 [ 1391.879579][T19448] [ 1391.937484][ T5871] usb 6-1: USB disconnect, device number 50 [ 1392.488071][T19455] loop3: detected capacity change from 0 to 4096 [ 1392.629220][T19463] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3521'. [ 1392.717224][T19461] netlink: 'syz.2.3520': attribute type 12 has an invalid length. [ 1392.966737][T19455] ntfs3(loop3): Failed to load $Extend (-22). [ 1392.971326][T19455] ntfs3(loop3): Failed to initialize $Extend. [ 1393.255323][T19469] Cannot find add_set index 4 as target [ 1393.298006][T19470] FAULT_INJECTION: forcing a failure. [ 1393.298006][T19470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.298049][T19470] CPU: 1 UID: 0 PID: 19470 Comm: syz.5.3522 Tainted: G L syzkaller #0 PREEMPT(full) [ 1393.298083][T19470] Tainted: [L]=SOFTLOCKUP [ 1393.298094][T19470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1393.298109][T19470] Call Trace: [ 1393.298120][T19470] [ 1393.298132][T19470] dump_stack_lvl+0xe8/0x150 [ 1393.298174][T19470] should_fail_ex+0x410/0x560 [ 1393.298210][T19470] _copy_from_user+0x2d/0xb0 [ 1393.298244][T19470] core_sys_select+0x671/0xb40 [ 1393.298303][T19470] ? __pfx_core_sys_select+0x10/0x10 [ 1393.298364][T19470] ? __pfx_set_user_sigmask+0x10/0x10 [ 1393.298401][T19470] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1393.298442][T19470] __se_sys_pselect6+0x267/0x320 [ 1393.298483][T19470] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1393.298526][T19470] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.298556][T19470] ? __x64_sys_pselect6+0x21/0xf0 [ 1393.298592][T19470] do_syscall_64+0x166/0x520 [ 1393.298620][T19470] ? trace_irq_disable+0x3b/0x140 [ 1393.298647][T19470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.298680][T19470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.298707][T19470] RIP: 0033:0x7f9cda59e159 [ 1393.298730][T19470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.298751][T19470] RSP: 002b:00007f9cdb456028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1393.298778][T19470] RAX: ffffffffffffffda RBX: 00007f9cda825fa0 RCX: 00007f9cda59e159 [ 1393.298798][T19470] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000040 [ 1393.298817][T19470] RBP: 00007f9cda63503b R08: 0000200000000340 R09: 0000200000000400 [ 1393.298836][T19470] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1393.298853][T19470] R13: 00007f9cda826038 R14: 00007f9cda825fa0 R15: 00007ffc48b1feb8 [ 1393.298894][T19470] [ 1394.098380][T19492] FAULT_INJECTION: forcing a failure. [ 1394.098380][T19492] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.098423][T19492] CPU: 1 UID: 0 PID: 19492 Comm: syz.5.3533 Tainted: G L syzkaller #0 PREEMPT(full) [ 1394.098458][T19492] Tainted: [L]=SOFTLOCKUP [ 1394.098468][T19492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1394.098485][T19492] Call Trace: [ 1394.098495][T19492] [ 1394.098507][T19492] dump_stack_lvl+0xe8/0x150 [ 1394.098550][T19492] should_fail_ex+0x410/0x560 [ 1394.098584][T19492] should_failslab+0xa8/0x100 [ 1394.098615][T19492] ? dup_fd+0x56/0xaf0 [ 1394.098651][T19492] kmem_cache_alloc_noprof+0xa1/0x600 [ 1394.098692][T19492] ? dup_fd+0x56/0xaf0 [ 1394.098722][T19492] ? do_futex+0x3e7/0x4e0 [ 1394.098758][T19492] dup_fd+0x56/0xaf0 [ 1394.098789][T19492] ? __pfx_do_futex+0x10/0x10 [ 1394.098822][T19492] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1394.098861][T19492] __se_sys_close_range+0x1c1/0x900 [ 1394.098900][T19492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1394.098936][T19492] ? __pfx___se_sys_close_range+0x10/0x10 [ 1394.098985][T19492] do_syscall_64+0x166/0x520 [ 1394.099011][T19492] ? trace_irq_disable+0x3b/0x140 [ 1394.099037][T19492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.099068][T19492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.099094][T19492] RIP: 0033:0x7f9cda59e159 [ 1394.099116][T19492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.099136][T19492] RSP: 002b:00007f9cdb456028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1394.099162][T19492] RAX: ffffffffffffffda RBX: 00007f9cda825fa0 RCX: 00007f9cda59e159 [ 1394.099180][T19492] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 1394.099199][T19492] RBP: 00007f9cda63503b R08: 0000000000000000 R09: 0000000000000000 [ 1394.099215][T19492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1394.099231][T19492] R13: 00007f9cda826038 R14: 00007f9cda825fa0 R15: 00007ffc48b1feb8 [ 1394.099276][T19492] [ 1395.409826][T19501] netlink: 'syz.3.3537': attribute type 12 has an invalid length. [ 1397.033793][T19537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1397.158097][T19544] FAULT_INJECTION: forcing a failure. [ 1397.158097][T19544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1397.158140][T19544] CPU: 1 UID: 0 PID: 19544 Comm: syz.5.3550 Tainted: G L syzkaller #0 PREEMPT(full) [ 1397.158174][T19544] Tainted: [L]=SOFTLOCKUP [ 1397.158185][T19544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1397.158200][T19544] Call Trace: [ 1397.158210][T19544] [ 1397.158221][T19544] dump_stack_lvl+0xe8/0x150 [ 1397.158266][T19544] should_fail_ex+0x410/0x560 [ 1397.158311][T19544] set_fd_set+0x3a/0xa0 [ 1397.158344][T19544] core_sys_select+0x9f7/0xb40 [ 1397.158393][T19544] ? __pfx_core_sys_select+0x10/0x10 [ 1397.158457][T19544] ? __pfx_set_user_sigmask+0x10/0x10 [ 1397.158496][T19544] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1397.158536][T19544] __se_sys_pselect6+0x267/0x320 [ 1397.158575][T19544] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1397.158618][T19544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1397.158649][T19544] ? __x64_sys_pselect6+0x21/0xf0 [ 1397.158685][T19544] do_syscall_64+0x166/0x520 [ 1397.158712][T19544] ? trace_irq_disable+0x3b/0x140 [ 1397.158738][T19544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.158771][T19544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.158800][T19544] RIP: 0033:0x7f9cda59e159 [ 1397.158824][T19544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1397.158846][T19544] RSP: 002b:00007f9cdb456028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1397.158873][T19544] RAX: ffffffffffffffda RBX: 00007f9cda825fa0 RCX: 00007f9cda59e159 [ 1397.158898][T19544] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 1397.158914][T19544] RBP: 00007f9cda63503b R08: 0000200000000280 R09: 0000000000000000 [ 1397.158931][T19544] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 1397.158947][T19544] R13: 00007f9cda826038 R14: 00007f9cda825fa0 R15: 00007ffc48b1feb8 [ 1397.158984][T19544] [ 1397.452825][T19552] netlink: 'syz.6.3553': attribute type 12 has an invalid length. [ 1397.803604][T19562] netlink: 'syz.0.3557': attribute type 12 has an invalid length. [ 1398.322231][T19567] netlink: 'syz.5.3558': attribute type 12 has an invalid length. [ 1398.855482][T19569] 9p: Bad value for 'rfdno' [ 1399.752168][T19582] loop5: detected capacity change from 0 to 512 [ 1400.204613][T19599] netlink: 'syz.8.3573': attribute type 12 has an invalid length. [ 1400.375154][ T25] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1400.478032][T19609] netlink: 'syz.8.3577': attribute type 12 has an invalid length. [ 1400.522446][ T25] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1400.524467][ T25] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.524503][ T25] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1400.524534][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1400.524570][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.552865][ T25] usb 6-1: config 0 descriptor?? [ 1401.024593][ T25] hid (null): bogus close delimiter [ 1401.671240][ T25] hid_parser_main: 443 callbacks suppressed [ 1401.671276][ T25] hid-multitouch 0003:0EEF:72C4.0012: unknown main item tag 0x0 [ 1401.673128][ T25] hid-multitouch 0003:0EEF:72C4.0012: unknown main item tag 0x0 [ 1401.673158][ T25] hid-multitouch 0003:0EEF:72C4.0012: unknown main item tag 0x0 [ 1401.673188][ T25] hid-multitouch 0003:0EEF:72C4.0012: unknown main item tag 0x0 [ 1401.673214][ T25] hid-multitouch 0003:0EEF:72C4.0012: unknown main item tag 0x7 [ 1401.673241][ T25] hid-multitouch 0003:0EEF:72C4.0012: unknown main item tag 0x6 [ 1401.673288][ T25] hid-multitouch 0003:0EEF:72C4.0012: unknown main item tag 0x0 [ 1401.673314][ T25] hid-multitouch 0003:0EEF:72C4.0012: unknown main item tag 0x0 [ 1401.673340][ T25] hid-multitouch 0003:0EEF:72C4.0012: unknown main item tag 0x0 [ 1401.673366][ T25] hid-multitouch 0003:0EEF:72C4.0012: unknown main item tag 0x0 [ 1401.673391][ T25] hid-multitouch 0003:0EEF:72C4.0012: bogus close delimiter [ 1401.673409][ T25] hid-multitouch 0003:0EEF:72C4.0012: item 0 1 2 10 parsing failed [ 1401.674361][ T25] hid-multitouch 0003:0EEF:72C4.0012: probe with driver hid-multitouch failed with error -22 [ 1401.698056][ T25] usb 6-1: USB disconnect, device number 51 [ 1402.078540][T19638] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1402.088241][T19635] overlayfs: failed to clone upperpath [ 1402.219446][T19642] netlink: 'syz.8.3593': attribute type 12 has an invalid length. [ 1402.637684][T19665] loop3: detected capacity change from 0 to 256 [ 1402.646724][T19665] exfat: Deprecated parameter 'namecase' [ 1402.646794][T19665] exfat: Deprecated parameter 'namecase' [ 1402.660849][T19663] loop5: detected capacity change from 0 to 1024 [ 1402.662076][T19663] EXT4-fs: Ignoring removed oldalloc option [ 1402.662098][T19663] EXT4-fs: Ignoring removed orlov option [ 1402.710502][T19665] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1402.736733][T19663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 ro without journal. Quota mode: writeback. [ 1402.771480][T19663] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1402.961251][T19673] FAULT_INJECTION: forcing a failure. [ 1402.961251][T19673] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.961294][T19673] CPU: 0 UID: 0 PID: 19673 Comm: syz.2.3607 Tainted: G L syzkaller #0 PREEMPT(full) [ 1402.961329][T19673] Tainted: [L]=SOFTLOCKUP [ 1402.961340][T19673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1402.961356][T19673] Call Trace: [ 1402.961367][T19673] [ 1402.961378][T19673] dump_stack_lvl+0xe8/0x150 [ 1402.961421][T19673] should_fail_ex+0x410/0x560 [ 1402.961457][T19673] should_failslab+0xa8/0x100 [ 1402.961491][T19673] ? new_userfaultfd+0x88/0x3d0 [ 1402.961529][T19673] kmem_cache_alloc_noprof+0xa1/0x600 [ 1402.961573][T19673] ? new_userfaultfd+0x88/0x3d0 [ 1402.961618][T19673] new_userfaultfd+0x88/0x3d0 [ 1402.961664][T19673] __x64_sys_userfaultfd+0x81/0xa0 [ 1402.961702][T19673] do_syscall_64+0x166/0x520 [ 1402.961730][T19673] ? trace_irq_disable+0x3b/0x140 [ 1402.961757][T19673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.961797][T19673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.961824][T19673] RIP: 0033:0x7fbf72b9e159 [ 1402.961848][T19673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1402.961869][T19673] RSP: 002b:00007fbf73ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1402.961896][T19673] RAX: ffffffffffffffda RBX: 00007fbf72e25fa0 RCX: 00007fbf72b9e159 [ 1402.961916][T19673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 1402.961933][T19673] RBP: 00007fbf72c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1402.961949][T19673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1402.961966][T19673] R13: 00007fbf72e26038 R14: 00007fbf72e25fa0 R15: 00007ffe8dc00688 [ 1402.962006][T19673] [ 1402.984942][T19663] EXT4-fs error (device loop5): ext4_readdir:280: inode #12: block 80: comm syz.5.3602: path /: bad entry in directory: directory entry overrun - offset=296, inode=0, rec_len=1024, size=1024 fake=0 [ 1403.044108][T19663] overlayfs: failed to look up () for ino (-13) [ 1403.225760][ T5611] EXT4-fs error (device loop5): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /656/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 1403.254835][ T5611] EXT4-fs error (device loop5): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /656/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 1403.328969][ T5611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1403.629391][T16803] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 1403.641498][T16803] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1403.649937][T16803] CPU: 0 UID: 0 PID: 16803 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1403.661045][T16803] Tainted: [L]=SOFTLOCKUP [ 1403.665352][T16803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1403.675394][T16803] RIP: 0010:klist_remove+0x156/0x340 [ 1403.680681][T16803] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 ed 71 5c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ce 71 5c f6 49 8b 44 24 58 48 89 44 24 08 [ 1403.700289][T16803] RSP: 0018:ffffc9000b3c7880 EFLAGS: 00010212 [ 1403.706363][T16803] RAX: 000000000000000b RBX: ffff888057e45dc0 RCX: ffffffff9a9e2501 [ 1403.714325][T16803] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 1403.722285][T16803] RBP: ffffc9000b3c7980 R08: ffffffff905fa7e3 R09: 1ffffffff20bf4fc [ 1403.730247][T16803] R10: dffffc0000000000 R11: fffffbfff20bf4fd R12: 0000000000000000 [ 1403.738209][T16803] R13: 1ffff11009f26b8c R14: ffff88804f935c60 R15: dffffc0000000000 [ 1403.746170][T16803] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 1403.755088][T16803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1403.761659][T16803] CR2: 00007f9cda5aedc0 CR3: 000000002553a000 CR4: 0000000000350ef0 [ 1403.769621][T16803] Call Trace: [ 1403.772886][T16803] [ 1403.775806][T16803] ? __pfx_klist_remove+0x10/0x10 [ 1403.780826][T16803] ? kobject_move+0x5e2/0x720 [ 1403.785496][T16803] ? __pfx_kobject_move+0x10/0x10 [ 1403.790512][T16803] ? do_raw_spin_unlock+0xf5/0x200 [ 1403.795625][T16803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1403.801250][T16803] ? get_device_parent+0x366/0x3a0 [ 1403.806354][T16803] device_move+0x18e/0x720 [ 1403.810759][T16803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1403.816392][T16803] hci_conn_del_sysfs+0xb8/0x1a0 [ 1403.821331][T16803] hci_conn_del+0xc3d/0x1200 [ 1403.825917][T16803] hci_conn_hash_flush+0x189/0x260 [ 1403.831025][T16803] hci_dev_close_sync+0x7fc/0x10c0 [ 1403.836131][T16803] ? __pfx___mutex_lock+0x10/0x10 [ 1403.841152][T16803] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1403.846694][T16803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1403.852320][T16803] ? up_write+0x19d/0x4a0 [ 1403.856645][T16803] ? rcu_is_watching+0x16/0xb0 [ 1403.861452][T16803] hci_unregister_dev+0x232/0x5b0 [ 1403.866468][T16803] vhci_release+0x16d/0x1c0 [ 1403.870975][T16803] ? __pfx_vhci_release+0x10/0x10 [ 1403.875993][T16803] __fput+0x418/0xa50 [ 1403.879975][T16803] task_work_run+0x1d9/0x270 [ 1403.884563][T16803] ? __pfx_task_work_run+0x10/0x10 [ 1403.889665][T16803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1403.895288][T16803] ? kmem_cache_free+0x182/0x650 [ 1403.900216][T16803] ? put_net+0x191/0x260 [ 1403.904458][T16803] do_exit+0x73a/0x2360 [ 1403.908607][T16803] ? __pfx_do_exit+0x10/0x10 [ 1403.913179][T16803] ? do_raw_spin_lock+0x12b/0x2f0 [ 1403.918206][T16803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1403.923834][T16803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1403.929460][T16803] ? _raw_spin_unlock_irq+0x23/0x50 [ 1403.934662][T16803] do_group_exit+0x22d/0x2f0 [ 1403.939245][T16803] __x64_sys_exit_group+0x3f/0x40 [ 1403.944261][T16803] x64_sys_call+0x18c6/0x18d0 [ 1403.948942][T16803] do_syscall_64+0x166/0x520 [ 1403.953525][T16803] ? trace_irq_disable+0x3b/0x140 [ 1403.958541][T16803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.964623][T16803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.970504][T16803] RIP: 0033:0x7fe2d3d9e159 [ 1403.974906][T16803] Code: Unable to access opcode bytes at 0x7fe2d3d9e12f. [ 1403.981905][T16803] RSP: 002b:00007ffcd2eb4f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1403.990307][T16803] RAX: ffffffffffffffda RBX: 00007fe2d3e344b0 RCX: 00007fe2d3d9e159 [ 1403.998265][T16803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1404.006221][T16803] RBP: 0000000000000002 R08: 0000000000000000 R09: 00007fe2d3e3448b [ 1404.014178][T16803] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd2eb6210 [ 1404.022133][T16803] R13: 00007fe2d3e3448b R14: 0000000000156800 R15: 00007ffcd2eb72e0 [ 1404.030105][T16803] [ 1404.033110][T16803] Modules linked in: [ 1404.039084][T16803] ---[ end trace 0000000000000000 ]--- [ 1404.069221][T16803] RIP: 0010:klist_remove+0x156/0x340 [ 1404.069510][T16803] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 ed 71 5c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ce 71 5c f6 49 8b 44 24 58 48 89 44 24 08 [ 1404.069721][T16803] RSP: 0018:ffffc9000b3c7880 EFLAGS: 00010212 [ 1404.069744][T16803] RAX: 000000000000000b RBX: ffff888057e45dc0 RCX: ffffffff9a9e2501 [ 1404.069763][T16803] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 1404.069785][T16803] RBP: ffffc9000b3c7980 R08: ffffffff905fa7e3 R09: 1ffffffff20bf4fc [ 1404.069805][T16803] R10: dffffc0000000000 R11: fffffbfff20bf4fd R12: 0000000000000000 [ 1404.069823][T16803] R13: 1ffff11009f26b8c R14: ffff88804f935c60 R15: dffffc0000000000 [ 1404.069849][T16803] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 1404.154539][T16803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1404.154563][T16803] CR2: 00007f213bc27dac CR3: 000000007f0de000 CR4: 0000000000350ef0 [ 1404.154588][T16803] Kernel panic - not syncing: Fatal exception [ 1404.175401][T16803] Kernel Offset: disabled [ 1404.179714][T16803] Rebooting in 86400 seconds..